$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft File: s40rj01btqU-m0GSYQSBpdiBZUY.mft (raw, json) Hash identifier: hnBtnByLUVxkavSNu9S/IrwGS1jqWqEAkmkIoUllRYk= Subject key identifier: 11:D7:C9:26:DD:D0:6C:5B:D2:E7:17:B4:A4:5B:1A:5A:75:6D:87:A0 Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46 Certificate issuer: /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546 Certificate serial: 0AF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft Manifest number: 0AE9 Signing time: Wed 02 Jul 2025 19:37:14 +0000 Manifest this update: Wed 02 Jul 2025 19:37:14 +0000 Manifest next update: Wed 09 Jul 2025 19:37:14 +0000 Files and hashes: 1: s40rj01btqU-m0GSYQSBpdiBZUY.crl (hash: uneXWYHOtOmQkT73zB3B2Dk4MN5CtDqcsbRcLFg5zOE=) 2: 1E1E9122565411EBA14ED510C4F9AE02.roa (hash: j/OpYEtDuYk8PfhysOsvn+uhuepZ3xGdAVnmL79tUAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546 Validity Not Before: Jul 2 19:37:14 2025 GMT Not After : Jul 9 19:37:14 2025 GMT Subject: CN=68658a6a-271d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:d7:91:78:ba:e5:21:d0:40:d6:68:d7:a7: b5:d5:c0:99:fa:5e:98:8a:51:26:7f:0a:06:c5:b2: 34:26:42:9d:af:89:9a:43:e3:ff:3a:b0:46:e9:f4: 62:21:b9:e3:ee:a4:8c:50:c9:88:eb:8a:45:19:8f: d2:08:f9:45:98:58:e8:48:a8:dd:5e:38:fa:48:04: f8:38:28:90:cd:03:d7:b9:3f:a6:59:0a:3e:8c:2e: b4:07:6d:87:ec:4d:b8:90:0c:53:77:f5:4e:5a:1c: 9d:c9:20:b6:9e:62:0c:87:37:35:a2:d3:40:0b:5d: ab:38:2b:ab:f5:b5:67:2c:32:a9:61:9e:2f:43:b1: 14:1a:35:56:fd:a3:75:91:ca:0d:36:f9:03:e4:3d: 1e:4f:e5:c0:a9:ad:41:71:2a:e1:34:38:40:3c:61: 5e:e8:8d:5b:17:35:b1:9d:f9:5f:a3:5e:b0:12:4d: 72:da:c5:f0:87:f1:d2:75:57:40:ac:1f:75:63:d6: 37:cc:a3:f9:19:da:67:1d:67:2e:04:59:40:ef:98: ed:d0:2f:0d:c6:de:96:93:a7:29:20:be:50:a5:e7: 80:3a:6e:b4:a1:a3:7a:c1:2c:ab:8c:f2:4a:07:1e: a7:a6:9f:49:fc:5d:b7:0e:e4:d8:98:d9:70:fb:27: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D7:C9:26:DD:D0:6C:5B:D2:E7:17:B4:A4:5B:1A:5A:75:6D:87:A0 X509v3 Authority Key Identifier: keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:7a:85:bf:14:b4:9c:77:a5:cf:ed:a8:3c:a2:0a:c0:c4:4c: 2d:db:b3:52:d0:0c:57:1d:96:ed:6b:99:fc:b6:e6:13:9b:c4: 09:16:16:89:28:ef:ac:57:a2:ad:02:f0:6c:17:db:a7:30:d0: 14:e2:06:e2:77:7e:8f:df:1e:c3:c0:fb:1e:51:91:a8:9d:70: 8b:19:84:e1:cb:2e:4e:ac:76:f7:ae:3b:4d:b4:6b:5c:e4:37: 03:7c:4d:38:6c:9d:6a:ae:0f:d9:a6:cc:51:15:92:77:1e:95: 3f:e9:05:a8:cd:13:3d:f7:d7:44:6e:07:fd:15:b7:55:aa:5a: c0:4c:82:ec:fd:4f:7a:75:bf:3c:43:01:92:68:cc:14:4f:7e: 96:03:27:53:e3:34:32:4c:e3:83:dd:35:74:99:18:37:9d:a1: 44:53:fe:7f:fc:fc:96:29:52:19:d4:1e:4d:46:b2:2c:6d:fe: 83:ef:8f:dc:06:b8:df:32:ac:07:fa:d0:26:0f:27:7c:cd:d9: ea:52:0d:25:bd:7f:a8:62:cd:a2:90:5e:6a:cb:1e:bf:d7:29: 51:f8:2e:bb:90:e1:19:f6:c6:81:fa:4f:35:b4:1e:c6:f1:7d: 32:d1:eb:24:49:88:c2:a1:99:4a:1e:a8:a0:44:f0:f2:a4:59: a3:dc:28:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyQUQxMTAvBgNVBAUTKEIzOEQyQjhGNEQ1QkI2QTUzRTlCNDE5MjYxMDQ4MUE1 RDg4MTY1NDYwHhcNMjUwNzAyMTkzNzE0WhcNMjUwNzA5MTkzNzE0WjAYMRYwFAYD VQQDEw02ODY1OGE2YS0yNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SLXkXi65SHQQNZo16e11cCZ+l6YilEmfwoGxbI0JkKdr4maQ+P/OrBG6fRi Ibnj7qSMUMmI64pFGY/SCPlFmFjoSKjdXjj6SAT4OCiQzQPXuT+mWQo+jC60B22H 7E24kAxTd/VOWhydySC2nmIMhzc1otNAC12rOCur9bVnLDKpYZ4vQ7EUGjVW/aN1 kcoNNvkD5D0eT+XAqa1BcSrhNDhAPGFe6I1bFzWxnflfo16wEk1y2sXwh/HSdVdA rB91Y9Y3zKP5GdpnHWcuBFlA75jt0C8Nxt6Wk6cpIL5QpeeAOm60oaN6wSyrjPJK Bx6npp9J/F23DuTYmNlw+ydjIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHXySbd 0Gxb0ucXtKRbGlp1bYegMB8GA1UdIwQYMBaAFLONK49NW7alPptBkmEEgaXYgWVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTJBRC8zOERBQTA2QzRC MjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRxVS1tMEdTWVFTQnBkaUJa VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M0MHJqMDFidHFVLW0wR1NZUVNCcGRpQlpVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTJBRC8zOERBQTA2QzRCMjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRx VS1tMEdTWVFTQnBkaUJaVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCleoW/FLScd6XP7ag8ogrAxEwt27NS0AxXHZbta5n8tuYTm8QJFhaJ KO+sV6KtAvBsF9unMNAU4gbid36P3x7DwPseUZGonXCLGYThyy5OrHb3rjtNtGtc 5DcDfE04bJ1qrg/ZpsxRFZJ3HpU/6QWozRM999dEbgf9FbdVqlrATILs/U96db88 QwGSaMwUT36WAydT4zQyTOOD3TV0mRg3naFEU/5//PyWKVIZ1B5NRrIsbf6D74/c BrjfMqwH+tAmDyd8zdnqUg0lvX+oYs2ikF5qyx6/1ylR+C67kOEZ9saB+k81tB7G 8X0y0eskSYjCoZlKHqigRPDypFmj3Ci3 -----END CERTIFICATE-----Generated at Thu Jul 3 07:11:08 2025 by rpki-client