$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json) Hash identifier: NNK4fIshPZMrLMzj/LU94HsatiwPeRdlZu/f+qJUg4A= Subject key identifier: CF:31:E8:CC:31:39:A7:12:D1:61:18:86:E8:7B:0E:E7:72:62:C5:48 Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft Manifest number: EA Signing time: Tue 01 Jul 2025 05:54:51 +0000 Manifest this update: Tue 01 Jul 2025 05:54:50 +0000 Manifest next update: Tue 08 Jul 2025 05:54:50 +0000 Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: bbb81e6gaqOZZbhu39w3fVlm+bcdOtxZ2VQ06UGbxG0=) 2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: dK1RlQyJjeiwzuMRZD6/CsndMyibK0XoFCLqDbss32s=) 3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: GMXU4PxSO88RcbBqzb2gyEchtqA2OVDVG15sHhZwd7g=) 4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: UOVpPqyzylpvUS4PFJS4QPq1eALE7pHfj83Afvy+ymM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: Jul 1 05:54:50 2025 GMT Not After : Jul 8 05:54:50 2025 GMT Subject: CN=6863782b-67cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8a:b0:fa:ca:26:4f:3c:b0:87:b8:1d:6c:47: a3:76:fd:5d:21:a8:64:0f:ac:1e:18:49:9c:47:f4: 0c:db:b8:58:d4:a2:ff:ab:02:63:22:32:ea:ba:50: ff:68:ce:2a:9b:02:9d:05:48:d5:57:12:0c:db:b8: dd:c8:21:bb:e1:ae:93:b8:e8:42:4e:9b:63:e0:6a: 15:d0:57:dc:48:d2:61:e8:5d:55:b5:b8:4c:16:2b: 82:e1:4b:0f:d6:1f:83:1d:8e:91:a9:f1:35:b7:30: 4b:86:6e:a2:55:95:fa:1d:75:07:f6:22:3c:07:79: 43:ac:fd:2b:80:a9:6d:10:30:29:80:45:dc:ce:cd: 42:84:30:a1:31:ec:9a:b8:ad:05:cc:c6:63:6f:bb: 63:33:0a:7f:68:95:0f:9e:2a:e1:92:a2:b3:64:63: 76:71:d7:d2:1f:e8:1c:14:1b:00:ef:3d:58:7c:4a: f0:9d:82:d2:8b:6f:61:91:9c:6c:3a:a6:7d:bd:37: b9:f6:3c:69:be:a4:fc:97:ff:a2:5f:4a:49:36:3a: 77:d6:25:92:31:8c:ac:7d:40:a1:f1:fe:3f:6b:6f: 3e:aa:ca:65:18:b3:d4:4a:95:e2:ac:3e:fc:49:51: d8:2d:a8:d6:76:de:57:e4:13:d5:d3:db:aa:63:b7: b3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:31:E8:CC:31:39:A7:12:D1:61:18:86:E8:7B:0E:E7:72:62:C5:48 X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:81:18:92:6e:ad:4d:1e:ae:be:45:13:c4:72:cd:3d:b0:93: 02:07:0b:7f:cb:4b:d2:9b:2b:4c:ff:f6:5a:c4:20:3f:98:dc: f5:ec:a6:a5:bf:04:3d:67:31:b5:08:41:0d:f8:81:31:3d:7c: 12:51:8d:e7:35:fd:ed:08:92:cf:e6:3f:9d:8d:a8:b9:9c:50: b4:00:8d:f6:f6:b7:ea:e1:64:b8:58:9d:9a:7b:be:b0:a0:d0: 68:df:f9:0c:73:3c:f1:69:21:63:51:50:c5:15:7c:5c:bb:76: 99:ec:0e:cc:07:bf:96:e3:2e:56:74:47:c2:e2:d6:8d:b4:8d: 05:40:74:ae:e3:ec:e4:02:a7:8f:5e:0c:00:e6:b2:de:fb:27: 83:5e:6a:ef:8a:04:f7:79:a4:65:10:94:aa:c5:73:67:61:c4: 1d:d0:70:92:33:57:55:a7:c4:f3:26:f4:25:0b:74:a3:dc:9a: e8:3f:5a:6e:8d:a5:5c:09:e1:46:c9:65:bd:1f:fc:cf:6f:21: 8e:83:e5:6d:43:e4:fb:22:10:e1:b2:94:53:3c:00:eb:7c:a5: d8:2e:0f:8f:14:d7:70:71:53:fb:dc:ee:35:c9:ab:18:b0:42: 25:55:9b:b2:46:de:47:d7:86:ca:2f:18:30:ee:d9:43:3a:a7: 87:c5:6a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC RkNBQ0RDOTgwHhcNMjUwNzAxMDU1NDUwWhcNMjUwNzA4MDU1NDUwWjAYMRYwFAYD VQQDEw02ODYzNzgyYi02N2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA84qw+somTzywh7gdbEejdv1dIahkD6weGEmcR/QM27hY1KL/qwJjIjLqulD/ aM4qmwKdBUjVVxIM27jdyCG74a6TuOhCTptj4GoV0FfcSNJh6F1VtbhMFiuC4UsP 1h+DHY6RqfE1tzBLhm6iVZX6HXUH9iI8B3lDrP0rgKltEDApgEXczs1ChDChMeya uK0FzMZjb7tjMwp/aJUPnirhkqKzZGN2cdfSH+gcFBsA7z1YfErwnYLSi29hkZxs OqZ9vTe59jxpvqT8l/+iX0pJNjp31iWSMYysfUCh8f4/a28+qsplGLPUSpXirD78 SVHYLajWdt5X5BPV09uqY7ezxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8x6Mwx OacS0WEYhuh7DudyYsVIMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK bVdRM0hLN2lZZy1feXMzSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxgRiSbq1NHq6+RRPEcs09sJMCBwt/y0vSmytM//ZaxCA/mNz17Kal vwQ9ZzG1CEEN+IExPXwSUY3nNf3tCJLP5j+djai5nFC0AI329rfq4WS4WJ2ae76w oNBo3/kMczzxaSFjUVDFFXxcu3aZ7A7MB7+W4y5WdEfC4taNtI0FQHSu4+zkAqeP XgwA5rLe+yeDXmrvigT3eaRlEJSqxXNnYcQd0HCSM1dVp8TzJvQlC3Sj3JroP1pu jaVcCeFGyWW9H/zPbyGOg+VtQ+T7IhDhspRTPADrfKXYLg+PFNdwcVP73O41yasY sEIlVZuyRt5H14bKLxgw7tlDOqeHxWqA -----END CERTIFICATE-----Generated at Thu Jul 3 00:46:51 2025 by rpki-client