$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: kF6UNqb0Pbxl6/irECvbrbmobblm5EqbXo8AusGFOMs= Subject key identifier: 8F:FF:7E:4E:1E:5E:CC:42:3E:95:93:95:3A:73:A6:66:80:A7:DC:5B Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 011B Signing time: Thu 03 Jul 2025 05:02:23 +0000 Manifest this update: Thu 03 Jul 2025 05:02:23 +0000 Manifest next update: Thu 10 Jul 2025 05:02:23 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: nuJ6YyQIm2bcYr1e2XVkR2YPshzW/TVSnOJPUoa10PA=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Jul 3 05:02:23 2025 GMT Not After : Jul 10 05:02:23 2025 GMT Subject: CN=68660edf-dab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:6e:d1:db:3b:de:84:46:8a:eb:69:3f:b3: b5:e3:9e:03:e8:b9:24:49:bb:ec:50:86:a9:c6:31: 97:02:fc:d1:fb:9e:2f:af:7a:39:95:cd:0c:13:c7: 01:a0:c2:c2:b9:e3:a8:fc:f2:92:e3:aa:4b:ff:6e: a4:cd:b9:f6:3c:ed:28:76:eb:a1:0f:13:97:28:a9: 64:c1:33:9d:80:d7:24:f1:46:19:54:80:45:9b:fc: 57:29:02:0b:30:58:a6:c9:85:df:09:fe:e9:d0:d7: a1:ad:5c:e0:b4:a7:43:c7:7c:21:b3:f8:ef:fd:fb: 7b:30:ed:0c:8a:61:78:10:83:cc:24:66:54:cf:74: 38:28:b7:44:70:11:10:7c:54:50:3c:5e:8f:b6:12: 35:f9:c7:39:3e:cc:80:b0:36:cc:39:da:3e:de:fc: a5:cd:78:dd:30:d6:50:da:8a:73:b1:c8:78:33:af: 73:82:93:75:fe:fb:83:ef:ba:ce:f1:e3:d4:27:af: 68:08:dc:2d:7f:26:96:0f:40:63:d9:5a:db:13:b1: 11:fb:87:7a:36:59:94:0a:c0:3b:b5:ea:fc:43:13: 7b:ba:13:5c:19:40:31:0c:38:00:7d:99:c1:df:16: 22:c5:39:63:83:49:e9:5a:64:4d:45:ca:61:71:68: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FF:7E:4E:1E:5E:CC:42:3E:95:93:95:3A:73:A6:66:80:A7:DC:5B X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:d5:44:f8:9b:03:66:f4:ab:86:93:9c:37:99:a9:fe:9f:da: 1e:24:1c:87:14:40:7f:c8:4a:61:81:78:14:7e:40:91:b9:10: 4e:ec:7d:43:bc:b7:e7:8b:7b:da:17:03:bb:29:b3:ef:1f:80: b5:0f:54:54:77:0d:fe:ea:5b:43:b4:15:d5:23:d4:d5:43:91: ab:54:06:24:05:27:5e:d3:02:bd:ef:c8:1f:54:bd:ae:f3:2e: c1:d5:d9:87:e3:7a:19:a5:e7:35:d5:f4:03:16:be:a5:c6:4d: fc:5c:e7:5d:77:59:08:93:61:07:d2:af:7f:ff:58:3a:42:46: 86:ba:10:db:29:21:63:dd:2c:19:74:3e:0c:76:56:a8:95:02: e2:a8:0f:9e:48:da:d1:44:f2:96:63:5e:2d:94:36:87:44:a0: bf:ec:0a:b5:3a:0c:a3:f0:1a:7a:3e:68:ad:ff:07:20:14:2d: 2b:ff:70:c1:6e:90:39:5c:ff:65:ec:90:f1:22:e8:2b:ff:7f: 62:96:a9:2f:6c:69:af:05:6c:ca:14:04:e5:84:78:13:ec:8a: f4:ed:89:9f:72:cc:ef:10:dd:06:e0:77:1e:e6:1f:05:cb:2d: f4:b0:1b:90:37:4f:9e:b5:69:b9:bb:63:5a:60:06:4c:8b:90: 49:7a:d6:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwNzAzMDUwMjIzWhcNMjUwNzEwMDUwMjIzWjAYMRYwFAYD VQQDEw02ODY2MGVkZi1kYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KZu0ds73oRGiutpP7O1454D6LkkSbvsUIapxjGXAvzR+54vr3o5lc0ME8cB oMLCueOo/PKS46pL/26kzbn2PO0oduuhDxOXKKlkwTOdgNck8UYZVIBFm/xXKQIL MFimyYXfCf7p0NehrVzgtKdDx3whs/jv/ft7MO0MimF4EIPMJGZUz3Q4KLdEcBEQ fFRQPF6PthI1+cc5PsyAsDbMOdo+3vylzXjdMNZQ2opzsch4M69zgpN1/vuD77rO 8ePUJ69oCNwtfyaWD0Bj2VrbE7ER+4d6NlmUCsA7ter8QxN7uhNcGUAxDDgAfZnB 3xYixTljg0npWmRNRcphcWhrswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI//fk4e XsxCPpWTlTpzpmaAp9xbMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT1UT4mwNm9KuGk5w3man+n9oeJByHFEB/yEphgXgUfkCRuRBO7H1D vLfni3vaFwO7KbPvH4C1D1RUdw3+6ltDtBXVI9TVQ5GrVAYkBSde0wK978gfVL2u 8y7B1dmH43oZpec11fQDFr6lxk38XOddd1kIk2EH0q9//1g6QkaGuhDbKSFj3SwZ dD4MdlaolQLiqA+eSNrRRPKWY14tlDaHRKC/7Aq1Ogyj8Bp6Pmit/wcgFC0r/3DB bpA5XP9l7JDxIugr/39ilqkvbGmvBWzKFATlhHgT7Ir07YmfcszvEN0G4Hce5h8F yy30sBuQN0+etWm5u2NaYAZMi5BJetbc -----END CERTIFICATE-----Generated at Thu Jul 3 17:37:47 2025 by rpki-client