$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json) Hash identifier: tUTsl5G6uRVWe0x1KHqYVVX+Ci/BHWZW2O7dP9Zs6WI= Subject key identifier: 7F:E7:BB:E5:91:CA:BA:EE:4C:0A:85:60:3A:CA:84:E6:7A:F8:8B:50 Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft Manifest number: 014A Signing time: Sun 29 Jun 2025 03:29:46 +0000 Manifest this update: Sun 29 Jun 2025 03:29:46 +0000 Manifest next update: Sun 06 Jul 2025 03:29:46 +0000 Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: nJpeCiSS33xrBKmxlkOwmJbkhtW+VU+JlRVCw5Lq5nI=) 2: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: J8+lxSFWmAdItoP7AGJ9n1czEhUKmEFacTRv8zqHb88=) 3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: mZ/f/kYNljSI/Y1NgwFenBb3960hqwOok7c22vWxduM=) 4: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: LjDyklpsY4tER3qyvIF/MVWeA44K8qWvTHC+14bUFS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Validity Not Before: Jun 29 03:29:46 2025 GMT Not After : Jul 6 03:29:46 2025 GMT Subject: CN=6860b32a-9156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:92:89:d7:f9:6b:1f:a0:4f:f6:2c:c7:40:a2: ad:4d:82:3b:93:27:ba:da:04:b8:29:f9:3f:2b:78: 1d:85:d7:a1:5d:2e:86:e8:00:58:d5:17:50:ba:b1: 87:e5:4f:4e:1e:a9:cf:65:6f:b4:d7:1f:54:38:7c: 3b:53:68:ef:56:88:3e:b5:5f:9b:82:78:37:f4:b6: 6a:51:af:49:96:4d:08:6d:ce:be:c4:d0:d7:78:a6: 6f:08:0b:c2:83:17:33:6c:ac:2d:14:a4:85:e8:cf: 48:9a:1c:fd:ea:2a:f6:de:8d:91:55:8d:b1:36:ae: d9:cc:4a:07:fa:d0:57:89:7a:00:0f:db:41:de:0a: 65:21:c7:2b:80:43:e8:b0:f4:1a:00:86:38:f3:0e: ea:9b:3e:cc:e9:e8:39:9a:da:9b:e1:f7:36:96:26: d2:86:50:3e:33:3e:8e:04:2c:bc:32:de:f6:62:4e: 5d:4e:81:b5:17:f7:e1:21:0d:79:69:d0:38:c9:f7: c3:18:a3:c9:35:ee:22:a2:c9:c0:98:1b:11:86:4d: a0:c0:da:32:fb:38:b7:0c:bc:b2:10:07:86:27:8f: bf:61:bb:2f:ee:8c:f9:9f:2b:df:92:05:b4:fa:97: 0a:66:6b:64:9b:f0:31:c5:07:07:fc:86:6f:8b:a2: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E7:BB:E5:91:CA:BA:EE:4C:0A:85:60:3A:CA:84:E6:7A:F8:8B:50 X509v3 Authority Key Identifier: keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:05:20:3b:07:0f:0d:9a:7d:c4:11:84:ed:a4:13:c8:aa:92: 06:eb:fb:07:2f:42:c3:2f:29:b3:15:58:c3:1e:ee:6c:66:be: 68:f3:19:e1:03:16:38:81:dd:3b:b2:c9:92:0c:05:23:c1:58: 56:fb:d3:32:32:a3:f9:dd:94:8c:8e:00:7d:c0:9a:01:c9:3e: 09:f3:9d:96:cf:ab:ec:d3:1c:4c:88:48:4f:60:df:4a:1f:a5: da:7a:21:79:3d:ef:2e:f9:f5:46:21:02:cb:1b:2a:0e:30:88: 71:00:20:27:f2:23:5d:9e:c6:90:71:2b:b4:a2:9c:f6:66:a0: 30:b1:f5:14:d4:a4:eb:9e:63:fc:f1:bb:21:a7:31:be:84:be: c7:33:b5:73:87:30:06:7c:cc:dc:fd:c2:e2:8f:c8:3c:01:84: 6e:b6:ba:0b:82:93:91:ee:5a:4f:56:1e:d2:71:dc:76:d1:1f: 5d:84:02:60:d4:80:ce:91:29:6f:96:ad:71:e1:5e:77:0d:75: 47:82:f7:57:bf:d7:0c:fe:0b:d0:7c:09:23:c5:c3:fe:6d:06: 6e:ac:5e:3c:d1:f3:66:1c:ef:e9:53:e1:3e:1a:61:c2:59:f0: df:1a:b5:4c:7d:49:00:4d:db:4a:ef:49:46:47:87:45:6e:50: 4d:9e:dd:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3RTkxMTAvBgNVBAUTKERGNTE0NzBCMTVFOEMxNDFBRjJGQTg0NkEyOEMwM0Iz ODU5MUJBQjQwHhcNMjUwNjI5MDMyOTQ2WhcNMjUwNzA2MDMyOTQ2WjAYMRYwFAYD VQQDEw02ODYwYjMyYS05MTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA95KJ1/lrH6BP9izHQKKtTYI7kye62gS4Kfk/K3gdhdehXS6G6ABY1RdQurGH 5U9OHqnPZW+01x9UOHw7U2jvVog+tV+bgng39LZqUa9Jlk0Ibc6+xNDXeKZvCAvC gxczbKwtFKSF6M9Imhz96ir23o2RVY2xNq7ZzEoH+tBXiXoAD9tB3gplIccrgEPo sPQaAIY48w7qmz7M6eg5mtqb4fc2libShlA+Mz6OBCy8Mt72Yk5dToG1F/fhIQ15 adA4yffDGKPJNe4iosnAmBsRhk2gwNoy+zi3DLyyEAeGJ4+/Ybsv7oz5nyvfkgW0 +pcKZmtkm/AxxQcH/IZvi6KJCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/nu+WR yrruTAqFYDrKhOZ6+ItQMB8GA1UdIwQYMBaAFN9RRwsV6MFBry+oRqKMA7OFkbq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FOTlFN0Y1MjZF MkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dVR3ZMNmhHb293RHM0V1J1 clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxRkhDeFhvd1VHdkw2aEdvb3dEczRXUnVyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdFOS9FOTlFN0Y1MjZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dV R3ZMNmhHb293RHM0V1J1clEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYBSA7Bw8Nmn3EEYTtpBPIqpIG6/sHL0LDLymzFVjDHu5sZr5o8xnh AxY4gd07ssmSDAUjwVhW+9MyMqP53ZSMjgB9wJoByT4J852Wz6vs0xxMiEhPYN9K H6XaeiF5Pe8u+fVGIQLLGyoOMIhxACAn8iNdnsaQcSu0opz2ZqAwsfUU1KTrnmP8 8bshpzG+hL7HM7VzhzAGfMzc/cLij8g8AYRutroLgpOR7lpPVh7Scdx20R9dhAJg 1IDOkSlvlq1x4V53DXVHgvdXv9cM/gvQfAkjxcP+bQZurF480fNmHO/pU+E+GmHC WfDfGrVMfUkATdtK70lGR4dFblBNnt2k -----END CERTIFICATE-----Generated at Mon Jun 30 13:45:11 2025 by rpki-client