$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json) Hash identifier: SCRiPbGnK2j6a0ch2xwkU62QDr/wYcU3VojxhYNz1LU= Subject key identifier: EE:9E:3A:12:F7:DB:9F:72:9A:1B:BE:26:49:71:E7:6B:4A:59:02:4C Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft Manifest number: 06ED Signing time: Wed 02 Jul 2025 22:14:14 +0000 Manifest this update: Wed 02 Jul 2025 22:14:14 +0000 Manifest next update: Wed 09 Jul 2025 22:14:14 +0000 Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: XLhhzYLnaZkP7z8BHf7HOuZquCKlgFrEURiYror4USE=) 2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=) 3: 56617572537F11EB9C970658C4F9AE02.roa (hash: xS7amPwlmGL+CP12HQjnbonilF649h5RUnRZcUUg8FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Validity Not Before: Jul 2 22:14:14 2025 GMT Not After : Jul 9 22:14:14 2025 GMT Subject: CN=6865af36-c9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:a7:87:4d:fb:9c:aa:49:65:83:6e:84:69: 51:c5:3d:a3:fd:80:60:1c:1e:df:92:9c:9b:06:32: 85:e8:d8:93:8d:82:88:a1:19:eb:74:de:98:cd:e0: a2:e5:9a:22:ad:c5:6e:c5:78:94:17:f5:f6:2d:2a: be:c5:c7:0c:6e:2b:d8:c3:b6:7f:f0:e0:13:67:b3: 09:b5:2b:a2:3d:d1:3d:3d:35:81:a2:a9:d2:30:0a: 31:06:aa:2b:0c:0b:e5:53:55:5d:e4:33:f3:f3:e2: db:80:09:df:8f:d7:1b:b1:28:c6:a7:25:a7:23:d9: 93:e3:16:4d:85:d6:96:5a:55:5f:2c:ef:6e:63:16: ce:39:ff:42:9c:89:e2:d3:c9:43:59:3d:e1:12:d6: d7:be:7f:28:68:07:d5:b6:0d:92:ce:5d:06:98:84: cf:09:16:8e:4d:a6:22:71:64:30:4b:cb:49:91:38: d1:0c:af:e5:bf:29:b1:ec:25:13:94:51:32:d2:8b: c3:b9:7f:73:9c:57:ee:ec:fa:00:d9:d4:c5:71:98: 55:10:19:30:8c:13:6b:83:32:3f:95:e1:04:ba:72: db:48:f8:0e:3d:21:0f:43:24:ea:c3:f9:2d:41:84: 21:cd:78:ae:3e:d1:e9:30:55:c5:59:d9:52:99:8d: 9e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9E:3A:12:F7:DB:9F:72:9A:1B:BE:26:49:71:E7:6B:4A:59:02:4C X509v3 Authority Key Identifier: keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6e:49:d6:6f:f6:5d:d2:ab:86:84:23:5b:fa:5e:b8:ed:4c: 5a:aa:7f:2b:df:bf:4c:93:23:ba:e4:2b:12:87:1d:db:97:b6: 87:b8:d9:38:ee:6c:8b:e7:c5:8d:dc:83:e6:ec:b2:09:3f:c6: e8:c3:2d:88:31:d4:df:46:89:eb:ae:26:3b:8b:be:32:29:8f: 10:6d:76:9f:c3:d5:44:67:35:c0:2c:a6:41:ff:c8:39:7a:ce: f2:c1:5c:ea:91:55:9f:76:dd:1a:22:7e:d6:0c:54:1f:3f:40: 67:94:64:df:3a:d3:5f:03:2d:fa:30:1a:54:6b:45:5b:88:e7: 04:c1:b0:02:a0:90:69:48:92:e7:c2:4e:d8:1e:dd:29:f1:d6: 76:f0:16:a6:6e:3e:70:ce:0f:15:25:e2:3a:2f:54:ac:08:8f: 79:22:e5:81:42:bf:e7:fd:6c:2e:8e:89:ac:bb:b0:86:b4:29: f5:bf:2e:fd:ec:c3:18:61:7f:39:09:2e:e8:d1:8a:07:2f:bc: c0:51:46:6c:ed:e0:67:6c:87:65:8c:8f:ff:c8:e0:6e:f7:73: fe:0a:43:4c:95:d2:4f:5d:64:4e:8a:7e:6c:f1:7e:38:bd:25: 1a:61:8a:91:44:a7:62:7c:62:d7:b9:a4:8d:b3:ad:b8:4c:1c: de:d2:f0:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD OUM3OTNCMUUwHhcNMjUwNzAyMjIxNDE0WhcNMjUwNzA5MjIxNDE0WjAYMRYwFAYD VQQDEw02ODY1YWYzNi1jOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRSnh037nKpJZYNuhGlRxT2j/YBgHB7fkpybBjKF6NiTjYKIoRnrdN6YzeCi 5ZoircVuxXiUF/X2LSq+xccMbivYw7Z/8OATZ7MJtSuiPdE9PTWBoqnSMAoxBqor DAvlU1Vd5DPz8+LbgAnfj9cbsSjGpyWnI9mT4xZNhdaWWlVfLO9uYxbOOf9CnIni 08lDWT3hEtbXvn8oaAfVtg2Szl0GmITPCRaOTaYicWQwS8tJkTjRDK/lvymx7CUT lFEy0ovDuX9znFfu7PoA2dTFcZhVEBkwjBNrgzI/leEEunLbSPgOPSEPQyTqw/kt QYQhzXiuPtHpMFXFWdlSmY2e8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6eOhL3 259ymhu+Jklx52tKWQJMMB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm SjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCbknWb/Zd0quGhCNb+l647Uxaqn8r379MkyO65CsShx3bl7aHuNk4 7myL58WN3IPm7LIJP8bowy2IMdTfRonrriY7i74yKY8QbXafw9VEZzXALKZB/8g5 es7ywVzqkVWfdt0aIn7WDFQfP0BnlGTfOtNfAy36MBpUa0VbiOcEwbACoJBpSJLn wk7YHt0p8dZ28Bambj5wzg8VJeI6L1SsCI95IuWBQr/n/Wwujomsu7CGtCn1vy79 7MMYYX85CS7o0YoHL7zAUUZs7eBnbIdljI//yOBu93P+CkNMldJPXWROin5s8X44 vSUaYYqRRKdifGLXuaSNs624TBze0vA9 -----END CERTIFICATE-----Generated at Fri Jul 4 23:13:42 2025 by rpki-client