$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft File: d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json) Hash identifier: gB7SnPnKwU9Eg+ag3U9c9mcPZZTAfN1C5evB6U4xHqU= Subject key identifier: 42:F4:AB:FF:64:E7:8A:79:C6:65:5A:16:83:04:9A:9D:50:9B:2E:20 Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 Certificate issuer: /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft Manifest number: 03F6 Signing time: Thu 03 Jul 2025 00:50:12 +0000 Manifest this update: Thu 03 Jul 2025 00:50:11 +0000 Manifest next update: Thu 10 Jul 2025 00:50:11 +0000 Files and hashes: 1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: Ii/SHxT6mrsTUc4/kw/wiV3FCh6HwJSU41o0lqLHLpo=) 2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: gxyFLyvg9iXUzDVt1BFdSUDwgh1JJfmLmwnyPeOCm3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9EAC, serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Validity Not Before: Jul 3 00:50:11 2025 GMT Not After : Jul 10 00:50:11 2025 GMT Subject: CN=6865d3c3-bfa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:ff:bb:56:b0:f6:3a:84:e9:cd:d1:58:5c: f9:8b:70:34:84:31:a2:25:8f:3b:f1:b5:32:8a:b9: 08:30:6e:f7:8c:d2:e5:1b:97:9e:19:e9:e9:50:aa: 30:e4:fa:15:ff:7e:de:74:d7:f5:df:92:a6:6b:ab: 97:11:53:26:5b:77:23:fe:e2:34:bb:d7:93:2a:a1: 0c:9e:27:15:a6:ef:08:12:14:64:69:6d:a1:ba:fe: 4e:f5:07:a2:68:87:4e:0c:30:34:40:bf:c5:2a:48: e9:f8:e0:64:1b:2d:cc:7c:9d:6f:aa:72:a9:22:e9: 42:45:29:ee:4e:f0:bf:c5:c0:da:c1:60:7f:73:cb: 68:20:7d:5c:15:4d:1a:2d:4d:30:18:18:f9:66:8c: 15:05:d2:a3:9d:70:79:86:f5:08:56:c2:f1:18:13: 42:97:fb:2f:bd:33:55:94:47:7a:fd:38:d6:98:e4: bd:78:12:31:ce:35:9c:20:f2:9d:d3:2e:00:35:f0: ca:e7:e9:12:49:84:96:4b:3d:ef:1e:8e:8d:0d:64: f9:37:16:95:10:4f:52:13:a8:fc:ad:ff:59:fb:d0: 3d:61:e9:cf:ce:32:5b:31:ad:0e:05:6f:92:93:29: dd:f6:e3:d4:c8:da:fb:c4:ce:9a:70:1a:98:81:1b: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F4:AB:FF:64:E7:8A:79:C6:65:5A:16:83:04:9A:9D:50:9B:2E:20 X509v3 Authority Key Identifier: keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:39:ca:f2:f9:53:95:2c:da:9c:4c:34:28:48:fd:ca:f4:7f: 62:eb:d8:0a:cd:f4:a7:d3:5f:00:81:89:01:aa:de:55:d0:9c: cc:92:ab:0a:a6:8c:08:a9:e0:34:be:f8:68:ce:23:7e:4a:c0: 7e:44:33:6e:e6:20:c8:9a:5d:98:79:03:15:a4:2b:2e:26:94: 70:39:ac:a1:69:11:19:ed:d7:db:7b:1e:95:53:bd:86:96:bc: 30:70:f3:94:c4:6e:48:4a:35:4c:53:71:18:89:b0:50:01:a8: 97:cb:da:bc:21:c2:9b:0a:85:76:da:a1:89:6b:05:10:c8:0b: 27:6a:d6:cc:1d:29:50:fc:92:f6:c9:88:ca:e3:09:76:f6:82: 82:58:e7:b2:60:a6:55:4e:5d:3b:7d:74:ae:e2:64:23:2c:1b: 00:72:06:28:1d:73:13:9b:46:bd:ed:9b:bb:66:54:4f:fe:e3: 15:ef:65:14:4c:8c:b0:f9:a1:f5:ed:93:46:c8:82:37:9b:49: 0a:8a:f3:9d:ec:7e:86:82:fd:f0:fb:3b:8b:ca:b3:63:a9:5a: 57:19:d7:9c:10:be:89:45:38:2c:45:cf:ba:f8:cc:38:88:f2: a5:98:ac:29:36:6d:bd:0b:9a:01:7b:6f:99:3e:51:f6:0b:98: b4:4a:fb:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFQUMxMTAvBgNVBAUTKDc3QjREODM4QjdEMjI5RkQxQzc0RDU1ODJDNzM1RTkx QjU2N0I1RTIwHhcNMjUwNzAzMDA1MDExWhcNMjUwNzEwMDA1MDExWjAYMRYwFAYD VQQDEw02ODY1ZDNjMy1iZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ3/u1aw9jqE6c3RWFz5i3A0hDGiJY878bUyirkIMG73jNLlG5eeGenpUKow 5PoV/37edNf135Kma6uXEVMmW3cj/uI0u9eTKqEMnicVpu8IEhRkaW2huv5O9Qei aIdODDA0QL/FKkjp+OBkGy3MfJ1vqnKpIulCRSnuTvC/xcDawWB/c8toIH1cFU0a LU0wGBj5ZowVBdKjnXB5hvUIVsLxGBNCl/svvTNVlEd6/TjWmOS9eBIxzjWcIPKd 0y4ANfDK5+kSSYSWSz3vHo6NDWT5NxaVEE9SE6j8rf9Z+9A9YenPzjJbMa0OBW+S kynd9uPUyNr7xM6acBqYgRvccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEL0q/9k 54p5xmVaFoMEmp1Qmy4gMB8GA1UdIwQYMBaAFHe02Di30in9HHTVWCxzXpG1Z7Xi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUVBQy81RDQ1MEZBRTdG NDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tmMGNkTlZZTEhOZWtiVm50 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q3VFlPTGZTS2YwY2ROVllMSE5la2JWbnRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUVBQy81RDQ1MEZBRTdGNDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tm MGNkTlZZTEhOZWtiVm50ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIOcry+VOVLNqcTDQoSP3K9H9i69gKzfSn018AgYkBqt5V0JzMkqsK powIqeA0vvhoziN+SsB+RDNu5iDIml2YeQMVpCsuJpRwOayhaREZ7dfbex6VU72G lrwwcPOUxG5ISjVMU3EYibBQAaiXy9q8IcKbCoV22qGJawUQyAsnatbMHSlQ/JL2 yYjK4wl29oKCWOeyYKZVTl07fXSu4mQjLBsAcgYoHXMTm0a97Zu7ZlRP/uMV72UU TIyw+aH17ZNGyII3m0kKivOd7H6Ggv3w+zuLyrNjqVpXGdecEL6JRTgsRc+6+Mw4 iPKlmKwpNm29C5oBe2+ZPlH2C5i0Svvn -----END CERTIFICATE-----Generated at Thu Jul 3 03:50:27 2025 by rpki-client