$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: Zn8jSfGsS7R211hCFivB09VEqky8cMp5UO9dOf8iz7U= Subject key identifier: 1B:0E:B0:B9:CB:6C:D8:1D:D7:43:D9:D1:AE:CC:E7:DC:EE:22:4E:BD Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: F0 Signing time: Sun 29 Jun 2025 04:22:21 +0000 Manifest this update: Sun 29 Jun 2025 04:22:20 +0000 Manifest next update: Sun 06 Jul 2025 04:22:20 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: VbJ7VAH6HPvySdiCcBcFKdCmcm3HxtK9ITXSkd5sq2Y=) 2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: RkusyxzR0xrFJ6VFvMv+nvMkxMfB3sdBezjBg1WbNLo=) 3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: vTspr7D2Mh9Ado1Qi+7w7sbqMv4hKB0CPd1WNZ4I3co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: Jun 29 04:22:20 2025 GMT Not After : Jul 6 04:22:20 2025 GMT Subject: CN=6860bf7c-408a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fe:5f:37:00:52:af:d4:df:ad:e9:42:50:ce: 67:46:78:ac:e6:07:c0:a1:30:44:b9:4e:38:c5:0c: 29:7c:e6:4b:16:ec:8f:cb:89:f5:0a:dc:00:57:e5: 11:79:ae:69:fb:8b:ab:3b:42:e2:60:47:c9:51:f2: 62:3e:bd:78:28:52:e7:54:77:9e:82:a9:cf:0e:e6: 68:c3:7c:85:93:b9:b5:74:09:16:e4:1e:92:ca:2d: 29:ac:85:92:0f:f0:e6:d3:0a:d0:76:e9:1b:81:cd: 90:83:3b:9e:29:fc:f1:32:fb:ea:9b:cd:95:b2:c3: 7f:0b:65:7b:87:58:fe:87:30:62:ca:56:e4:88:16: 08:49:aa:ee:a6:bb:ec:3b:91:14:ad:c4:0c:4f:6f: a9:57:a8:ab:67:7e:9a:40:45:1c:0b:de:f5:74:da: 11:e7:e0:ce:4d:21:bf:d1:1b:7e:be:a8:48:86:e4: 4e:7b:a2:f5:78:66:e8:19:70:7e:92:24:80:10:b0: 5f:27:fe:80:18:66:1c:c6:09:36:45:10:b2:ea:1c: fc:dd:95:9e:8c:71:f0:40:0e:62:e4:ed:dd:cf:b7: 43:cc:4e:99:75:55:ec:bf:21:48:1b:69:50:8a:a3: 2d:45:1b:e3:cc:e6:cd:98:35:a5:e6:a8:f9:7f:78: 96:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0E:B0:B9:CB:6C:D8:1D:D7:43:D9:D1:AE:CC:E7:DC:EE:22:4E:BD X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:72:da:bf:7d:1b:6c:b2:d0:7c:7a:aa:5e:ab:9e:a2:73:b9: d8:06:7f:87:99:38:d3:eb:23:22:41:4b:d7:a3:8e:33:ce:b6: af:03:83:c8:23:4a:96:74:88:51:3f:68:d2:94:69:f5:c0:b5: 93:f1:da:c5:ef:7c:09:7b:ba:37:4c:d8:56:f1:9b:0c:7a:67: ba:db:5d:de:85:20:97:77:6e:81:22:8f:ba:54:89:af:af:d0: 48:d2:b6:99:0c:c0:1f:51:21:43:ca:cb:fd:b0:6e:7d:9d:5c: a5:5c:c6:12:35:e8:80:05:d4:42:50:68:59:5c:b8:37:73:e6: 52:f7:c9:33:68:8b:43:26:af:c1:e0:d4:f4:17:31:fd:fc:11: 42:a4:67:98:8c:e5:b0:00:7c:ba:d0:fe:13:66:50:a0:e6:16: c6:3a:00:e9:5e:f8:0c:e2:2b:d5:de:24:1e:41:fd:95:c5:40: 73:f7:5c:e2:14:9c:f8:d2:c4:52:bd:a7:85:3c:de:70:bb:4d: e8:9a:f8:52:9c:49:ed:c7:5d:69:4e:2e:14:c4:45:7f:1f:27: 9c:bd:df:f9:df:36:93:fa:32:71:d8:54:c9:35:ed:2e:65:42: 27:b4:6e:dc:d0:02:c8:03:ad:02:0d:c2:f8:e0:31:3f:44:4d: 85:81:37:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBMjQxMTAvBgNVBAUTKDQ3MTBFNERFNjQxNUM0OEU4QjUzMUI1OUNENDdBNDFD RDc5MzQ1NUUwHhcNMjUwNjI5MDQyMjIwWhcNMjUwNzA2MDQyMjIwWjAYMRYwFAYD VQQDEw02ODYwYmY3Yy00MDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2f5fNwBSr9TfrelCUM5nRnis5gfAoTBEuU44xQwpfOZLFuyPy4n1CtwAV+UR ea5p+4urO0LiYEfJUfJiPr14KFLnVHeegqnPDuZow3yFk7m1dAkW5B6Syi0prIWS D/Dm0wrQdukbgc2QgzueKfzxMvvqm82VssN/C2V7h1j+hzBiylbkiBYISaruprvs O5EUrcQMT2+pV6irZ36aQEUcC971dNoR5+DOTSG/0Rt+vqhIhuROe6L1eGboGXB+ kiSAELBfJ/6AGGYcxgk2RRCy6hz83ZWejHHwQA5i5O3dz7dDzE6ZdVXsvyFIG2lQ iqMtRRvjzObNmDWl5qj5f3iWnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsOsLnL bNgd10PZ0a7M59zuIk69MB8GA1UdIwQYMBaAFEcQ5N5kFcSOi1MbWc1HpBzXk0Ve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUEyNC85Mzk4NENGMkU2 NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJNkxVeHRaelVla0hOZVRS VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJ NkxVeHRaelVla0hOZVRSVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtctq/fRtsstB8eqpeq56ic7nYBn+HmTjT6yMiQUvXo44zzravA4PI I0qWdIhRP2jSlGn1wLWT8drF73wJe7o3TNhW8ZsMeme6213ehSCXd26BIo+6VImv r9BI0raZDMAfUSFDysv9sG59nVylXMYSNeiABdRCUGhZXLg3c+ZS98kzaItDJq/B 4NT0FzH9/BFCpGeYjOWwAHy60P4TZlCg5hbGOgDpXvgM4ivV3iQeQf2VxUBz91zi FJz40sRSvaeFPN5wu03omvhSnEntx11pTi4UxEV/Hyecvd/53zaT+jJx2FTJNe0u ZUIntG7c0ALIA60CDcL44DE/RE2FgTcE -----END CERTIFICATE-----Generated at Mon Jun 30 22:17:06 2025 by rpki-client