$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: LOdeWCMoSalc22RISELnP6N1qCk1UJMVX6RNxy/y1Ts= Subject key identifier: E6:7F:CF:C5:89:D8:39:5E:1E:65:49:16:40:B2:08:3E:5E:15:07:ED Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 045C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 0434 Signing time: Tue 01 Jul 2025 00:56:16 +0000 Manifest this update: Tue 01 Jul 2025 00:56:15 +0000 Manifest next update: Tue 08 Jul 2025 00:56:15 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: 1Zs8w/2Lv+fb6fwqxlCtoe9OK1h/kQrpOjDIoqyTmp0=) 2: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: S448nKM+pkzyKAVAq+QLZ6c2Rwj7lMGOSqjzi17yKYo=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: +Y2vKS8CZ7xVCXV7DmrOc6o0OVVkIHves16LK2wsX2I=) 4: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: Nm0NB5K/NvPqifGuFp/i7DvZfN/unt+xIyxa1mf1Ru8=) 5: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: m7hFb23btwRa7iUoc5sSfQwuK6EzzQbsJrT19RdsUzA=) 6: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: wFyDTsNGRzgAv8mhqHHalbGpjw+H79Gqqrm8IklHVfE=) 7: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: Aqyl2hhEx5BpBctkE5rWM8Kv0ZDOqQAIfUrt5yWaYks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1116 (0x45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Jul 1 00:56:15 2025 GMT Not After : Jul 8 00:56:15 2025 GMT Subject: CN=68633230-c1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:75:b7:da:09:cb:08:5c:3a:28:59:59:16: 8c:59:b8:1c:07:3b:1d:c0:4c:a3:f7:56:3f:06:80: 00:32:9d:28:2b:4a:ae:2d:6e:3e:28:ea:0a:62:f9: 0b:77:db:d5:0f:c1:81:41:aa:af:d3:c3:70:d6:9b: ce:89:b7:69:74:c4:be:1e:a7:19:2e:7c:96:90:1c: ad:b5:1a:b7:e2:e5:5f:e9:57:d9:83:01:21:10:6b: c8:b6:d1:77:44:00:9b:17:00:b1:14:75:b0:16:61: b2:b3:11:3c:84:99:6f:96:35:09:b3:70:82:5a:4b: 71:cc:7c:0f:9f:31:1a:3d:37:b1:2b:cb:c7:1e:ad: c2:bb:d5:41:86:31:cc:b7:95:86:86:07:32:be:ee: 62:1d:f7:82:ca:0c:d0:a5:cb:24:80:3e:3a:6c:f7: fb:b5:2a:44:41:f2:64:0b:df:7c:a7:a7:de:d1:cd: 4f:10:22:91:4b:3a:7d:34:d3:54:be:df:81:b5:36: 35:14:ae:34:66:81:8c:15:f2:be:a7:a3:8e:58:57: 84:67:a7:74:b2:1b:39:ee:f9:b7:c1:63:00:db:10: 60:a7:b2:ec:27:76:70:a2:c5:c2:0f:e0:c1:4c:18: 2f:e9:8a:30:e7:02:67:32:d7:0e:e7:e0:b9:25:63: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7F:CF:C5:89:D8:39:5E:1E:65:49:16:40:B2:08:3E:5E:15:07:ED X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b3:76:9d:e5:4a:fd:ee:b1:55:c2:56:3f:88:fd:f6:5c:c2: 78:0c:67:62:e8:05:b5:fa:78:00:4a:a9:fa:67:24:70:6f:10: ba:12:90:7f:7b:4f:03:a6:22:df:46:7a:78:24:c7:cc:9f:f0: e8:24:3a:c4:48:2f:5e:c0:84:9a:56:6d:f4:2d:19:a9:cc:02: 9d:6b:99:22:af:3c:19:60:e6:97:63:06:d5:37:d1:e5:f6:d0: 58:a4:90:ec:a8:40:4f:4a:3f:13:28:7f:ce:a0:d3:4b:af:01: 9d:b7:25:d9:14:cd:aa:be:e9:1c:1d:07:5f:5e:05:62:d6:17: 16:e0:25:d5:3c:e0:86:93:c6:80:33:2b:33:f5:a7:05:8a:f6: 65:50:f8:a8:3c:96:68:01:67:3e:54:10:b5:67:d5:27:2b:ab: a5:19:a6:4d:b0:1c:75:fa:1a:d3:cb:28:dd:41:c5:68:36:24: 33:84:6d:c5:06:65:33:32:0e:7b:cd:1f:4f:27:a4:41:97:ac: d5:71:bf:38:43:fd:f8:8c:bf:7d:53:fd:28:fb:e5:dd:9e:4d: a5:88:50:28:2a:72:e9:45:db:b3:f3:24:52:6e:7f:3b:69:6e: ac:be:d9:d6:e0:8b:b0:90:a6:78:20:24:3e:24:a2:61:d1:70: d4:e9:93:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjUwNzAxMDA1NjE1WhcNMjUwNzA4MDA1NjE1WjAYMRYwFAYD VQQDEw02ODYzMzIzMC1jMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXx1t9oJywhcOihZWRaMWbgcBzsdwEyj91Y/BoAAMp0oK0quLW4+KOoKYvkL d9vVD8GBQaqv08Nw1pvOibdpdMS+HqcZLnyWkByttRq34uVf6VfZgwEhEGvIttF3 RACbFwCxFHWwFmGysxE8hJlvljUJs3CCWktxzHwPnzEaPTexK8vHHq3Cu9VBhjHM t5WGhgcyvu5iHfeCygzQpcskgD46bPf7tSpEQfJkC998p6fe0c1PECKRSzp9NNNU vt+BtTY1FK40ZoGMFfK+p6OOWFeEZ6d0shs57vm3wWMA2xBgp7LsJ3ZwosXCD+DB TBgv6Yow5wJnMtcO5+C5JWOeMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZ/z8WJ 2DleHmVJFkCyCD5eFQftMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAs3ad5Ur97rFVwlY/iP32XMJ4DGdi6AW1+ngASqn6ZyRwbxC6EpB/ e08DpiLfRnp4JMfMn/DoJDrESC9ewISaVm30LRmpzAKda5kirzwZYOaXYwbVN9Hl 9tBYpJDsqEBPSj8TKH/OoNNLrwGdtyXZFM2qvukcHQdfXgVi1hcW4CXVPOCGk8aA Mysz9acFivZlUPioPJZoAWc+VBC1Z9UnK6ulGaZNsBx1+hrTyyjdQcVoNiQzhG3F BmUzMg57zR9PJ6RBl6zVcb84Q/34jL99U/0o++Xdnk2liFAoKnLpRduz8yRSbn87 aW6svtnW4IuwkKZ4ICQ+JKJh0XDU6ZMY -----END CERTIFICATE-----Generated at Wed Jul 2 20:41:53 2025 by rpki-client