$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: /LAKVKmuCfArwbtkWFxlldbA6BRVjr1sIFyzYp9qoVc= Subject key identifier: 25:58:93:FC:A6:BC:79:F9:68:A3:8E:BA:F7:89:09:98:A9:6A:3D:25 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 01F2 Signing time: Thu 03 Jul 2025 02:44:37 +0000 Manifest this update: Thu 03 Jul 2025 02:44:37 +0000 Manifest next update: Thu 10 Jul 2025 02:44:37 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: X+A/7bIbPfWxSMAQyGWxABOY06/GPXYTgSKog4fB520=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: dTUyCBlbO/pz+tuVT/tO+XLwXxn5j9PKDxmqVQaSeKk=) 3: CC863C00AAC011EF8A637D09C4F9AE02.roa (hash: 0d8EDj7p85g61PO4rxhm2YW85ofVuKXgCa1+1ENa/7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Jul 3 02:44:37 2025 GMT Not After : Jul 10 02:44:37 2025 GMT Subject: CN=6865ee95-4182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:e7:91:d7:9f:8f:10:da:14:3a:d5:bf:08: eb:78:55:de:65:13:bd:02:eb:96:6d:84:6c:46:38: 8a:4b:3b:14:17:c5:7a:98:1d:be:3e:81:06:1c:b3: b4:ce:95:c4:5d:72:48:70:2a:d1:45:cc:55:60:8d: de:06:fc:60:19:c8:2d:02:d7:99:22:8a:73:44:d9: b3:83:a0:37:b7:4a:df:52:92:66:92:c6:bd:cb:6f: e3:23:9c:88:c6:8f:55:c0:31:06:f4:33:5c:19:82: 9c:36:0b:03:81:66:24:ce:07:65:b6:a4:df:5e:ef: a3:b8:14:0a:ee:19:89:19:ab:d6:04:5b:09:be:88: f2:66:83:ba:db:95:5f:40:f1:db:4d:5f:5f:3d:2c: b1:c5:1d:80:3d:e1:b9:74:b6:5d:6f:05:3e:11:8e: 40:11:bb:7f:3b:ca:c1:a5:6d:5f:bf:a0:f9:ee:8b: 22:c7:b2:80:df:13:41:6c:20:9b:bd:06:c9:94:79: 19:50:b9:cd:1b:e0:d2:53:ca:ab:39:43:59:56:3f: 05:61:09:14:80:12:7f:7b:da:78:a4:61:be:ee:be: 78:5a:b4:e0:fe:f6:14:f1:ba:27:a5:19:6a:a8:5a: e4:45:d6:3d:21:fc:07:78:a9:d8:61:ce:91:0b:62: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:58:93:FC:A6:BC:79:F9:68:A3:8E:BA:F7:89:09:98:A9:6A:3D:25 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:dc:c2:f3:03:9f:f6:b7:a7:53:ca:49:a3:7f:60:5e:72:4c: 16:aa:08:b5:e9:37:36:ad:d7:a9:73:a7:66:e2:bc:38:68:74: aa:97:c1:b6:32:a2:f5:8d:b7:c2:f9:0b:3c:6c:dd:de:bf:3a: 8b:f8:88:b1:f7:e0:73:5e:f7:3b:2a:3b:cd:14:1b:a2:45:c3: 3c:3e:04:63:72:95:f0:7d:d8:8b:60:28:2d:f8:dd:ee:11:af: 91:de:0b:5d:ff:63:4a:4a:0c:16:4e:4f:ee:ce:d2:fb:d1:01: 7c:a0:9c:df:4a:f9:58:00:33:79:d1:15:85:09:74:c2:6a:da: 67:6b:69:52:ba:ed:d2:36:0c:d6:a5:ea:de:88:be:a1:f6:65: 7e:86:d1:28:41:35:04:0a:df:ee:a6:1e:c2:65:ac:9e:9e:00: 67:b2:65:66:31:0f:1e:f1:b1:f8:14:b2:ac:1b:5a:0b:49:b4: 38:9e:20:eb:3b:95:19:39:ca:1c:6f:b7:67:49:78:f9:a2:8b: 46:f2:ff:90:ef:bb:7c:1d:a8:8b:a7:af:68:19:3e:49:b9:e7: fa:49:69:2a:52:0a:df:e6:83:28:de:05:8d:c9:89:ea:5c:29: fb:15:67:7c:e0:9c:89:60:8f:44:25:c6:86:af:7d:1a:dc:ba: 5a:a4:df:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUwNzAzMDI0NDM3WhcNMjUwNzEwMDI0NDM3WjAYMRYwFAYD VQQDEw02ODY1ZWU5NS00MTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6/nkdefjxDaFDrVvwjreFXeZRO9AuuWbYRsRjiKSzsUF8V6mB2+PoEGHLO0 zpXEXXJIcCrRRcxVYI3eBvxgGcgtAteZIopzRNmzg6A3t0rfUpJmksa9y2/jI5yI xo9VwDEG9DNcGYKcNgsDgWYkzgdltqTfXu+juBQK7hmJGavWBFsJvojyZoO625Vf QPHbTV9fPSyxxR2APeG5dLZdbwU+EY5AEbt/O8rBpW1fv6D57osix7KA3xNBbCCb vQbJlHkZULnNG+DSU8qrOUNZVj8FYQkUgBJ/e9p4pGG+7r54WrTg/vYU8bonpRlq qFrkRdY9IfwHeKnYYc6RC2IjNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVYk/ym vHn5aKOOuveJCZipaj0lMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ3MLzA5/2t6dTykmjf2BeckwWqgi16Tc2rdepc6dm4rw4aHSql8G2 MqL1jbfC+Qs8bN3evzqL+Iix9+BzXvc7KjvNFBuiRcM8PgRjcpXwfdiLYCgt+N3u Ea+R3gtd/2NKSgwWTk/uztL70QF8oJzfSvlYADN50RWFCXTCatpna2lSuu3SNgzW pereiL6h9mV+htEoQTUECt/uph7CZayengBnsmVmMQ8e8bH4FLKsG1oLSbQ4niDr O5UZOcocb7dnSXj5ootG8v+Q77t8HaiLp69oGT5Juef6SWkqUgrf5oMo3gWNyYnq XCn7FWd84JyJYI9EJcaGr30a3LpapN8E -----END CERTIFICATE-----Generated at Thu Jul 3 11:39:55 2025 by rpki-client