$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: OvEcni2vvhhOF8gK0XIVvDklRJL4I9ktzspw+DD/T6w= Subject key identifier: AF:F4:C0:79:51:FA:4C:A0:DF:BC:B0:AC:87:8E:77:B1:8B:6C:4D:D3 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: BC Signing time: Tue 01 Jul 2025 06:35:08 +0000 Manifest this update: Tue 01 Jul 2025 06:35:07 +0000 Manifest next update: Tue 08 Jul 2025 06:35:07 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: dw4ArxZhfwrbWAmeX1EAjBmpFRxHVIUGm8VQ8dlJm/8=) 2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: pQpO0/PUmsk8Ne8Tm6dn6viR4Yd/Q34ajbz6wbYS9Zc=) 3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: sO/FcuusJDef8Jgb3m4tmdQe6il72ChJ0DAhA0al1Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Jul 1 06:35:07 2025 GMT Not After : Jul 8 06:35:07 2025 GMT Subject: CN=6863819c-93b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:e6:de:8a:bb:9a:88:4b:c0:03:df:e6:42: b9:81:10:b7:92:4f:24:e4:4a:25:b6:d5:7e:85:24: b5:5d:04:c6:20:fe:3e:27:b4:71:c8:0a:5e:51:2d: 86:92:ef:60:9d:f1:a8:ab:b7:96:a8:40:cc:39:6b: 4d:f9:d1:4f:ca:05:c9:52:21:60:07:49:79:2f:41: d6:7f:04:0c:0f:d5:a5:a5:55:89:0e:e3:c1:17:4d: e4:30:bc:bc:a3:2e:a0:4f:51:03:fb:12:48:25:35: f4:ff:7d:33:5a:ef:4f:26:99:6c:34:52:1f:ed:31: 8d:ca:ed:37:41:95:a5:c8:0d:74:be:16:c1:bd:c0: b7:20:35:e3:b2:50:8a:08:d3:f9:93:00:21:66:3f: d0:d2:66:a3:64:42:f5:b1:ca:a0:bf:ef:8e:90:99: 63:23:85:1c:83:4d:93:3a:4a:c5:7b:75:ff:01:f1: 30:7a:a8:c4:6e:7d:49:58:51:4c:88:a0:5c:f5:a2: 15:af:45:34:74:32:ee:d2:c6:61:0a:43:d0:61:b0: 03:78:de:db:b4:a7:63:c8:8a:2a:0f:d1:22:5e:db: 1f:1f:91:80:0e:c1:91:df:72:ae:82:e7:69:b1:fe: 46:b2:8b:65:39:59:0f:2e:e9:ee:a9:bb:4c:ac:02: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F4:C0:79:51:FA:4C:A0:DF:BC:B0:AC:87:8E:77:B1:8B:6C:4D:D3 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:fc:9a:e6:88:50:bd:3e:02:14:0e:41:d8:88:1e:d8:31:43: 94:6c:6c:cb:95:37:52:0f:ad:bd:4e:32:41:0e:66:b5:29:c5: 48:48:71:fe:96:f6:e0:b4:1e:28:37:f2:08:49:a5:b7:90:94: 4a:f0:b1:2a:30:f3:20:97:18:bb:1e:a3:13:19:78:a9:34:59: f4:09:46:72:71:3e:46:f4:1a:98:29:aa:43:5b:22:a9:94:2d: af:e0:a0:4a:0b:ce:f1:7c:5e:a5:df:d0:de:e2:fc:cf:0f:e5: f1:00:74:92:6c:9d:14:94:2b:0e:59:98:f9:8b:61:3e:86:f1: 29:d5:3a:c7:48:8a:f0:a9:aa:99:70:98:76:7c:ff:99:cf:cb: 03:e4:23:e5:fc:26:fe:bc:f2:54:1f:7a:62:9a:9c:2f:a6:62: ab:81:3d:6a:8e:84:b3:3a:02:96:c3:64:1b:41:72:82:40:1d: 2d:a2:01:ae:9f:49:24:26:fe:90:12:21:14:57:a4:fd:fe:b7: e4:2c:b9:9f:2b:ae:e9:e6:21:05:7f:fc:eb:e7:73:ee:26:35: ff:5e:71:f0:5f:10:52:ea:2e:7e:23:2f:a2:63:51:fe:ba:10: 66:59:72:ea:2b:71:b8:e8:e6:78:da:e1:ca:dd:76:44:f9:00: 18:4d:8e:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjUwNzAxMDYzNTA3WhcNMjUwNzA4MDYzNTA3WjAYMRYwFAYD VQQDEw02ODYzODE5Yy05M2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ/m3oq7mohLwAPf5kK5gRC3kk8k5EolttV+hSS1XQTGIP4+J7RxyApeUS2G ku9gnfGoq7eWqEDMOWtN+dFPygXJUiFgB0l5L0HWfwQMD9WlpVWJDuPBF03kMLy8 oy6gT1ED+xJIJTX0/30zWu9PJplsNFIf7TGNyu03QZWlyA10vhbBvcC3IDXjslCK CNP5kwAhZj/Q0majZEL1scqgv++OkJljI4Ucg02TOkrFe3X/AfEweqjEbn1JWFFM iKBc9aIVr0U0dDLu0sZhCkPQYbADeN7btKdjyIoqD9EiXtsfH5GADsGR33Kugudp sf5GsotlOVkPLunuqbtMrALqxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/0wHlR +kyg37ywrIeOd7GLbE3TMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ/JrmiFC9PgIUDkHYiB7YMUOUbGzLlTdSD629TjJBDma1KcVISHH+ lvbgtB4oN/IISaW3kJRK8LEqMPMglxi7HqMTGXipNFn0CUZycT5G9BqYKapDWyKp lC2v4KBKC87xfF6l39De4vzPD+XxAHSSbJ0UlCsOWZj5i2E+hvEp1TrHSIrwqaqZ cJh2fP+Zz8sD5CPl/Cb+vPJUH3pimpwvpmKrgT1qjoSzOgKWw2QbQXKCQB0togGu n0kkJv6QEiEUV6T9/rfkLLmfK67p5iEFf/zr53PuJjX/XnHwXxBS6i5+Iy+iY1H+ uhBmWXLqK3G46OZ42uHK3XZE+QAYTY6y -----END CERTIFICATE-----Generated at Wed Jul 2 11:34:32 2025 by rpki-client