$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft File: pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json) Hash identifier: uX4640pCarht5BmLAo3Z48NdFB6A7+HWvH9oGphI/Fo= Subject key identifier: 65:69:1D:6B:5B:EC:96:20:79:0F:0B:77:C2:D1:BE:48:A5:1C:61:BA Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 Certificate issuer: /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft Manifest number: 066F Signing time: Sat 28 Jun 2025 22:01:15 +0000 Manifest this update: Sat 28 Jun 2025 22:01:15 +0000 Manifest next update: Sat 05 Jul 2025 22:01:15 +0000 Files and hashes: 1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: bWCAID7r0sGyO9XDWVoF7YFcftQCFX/OlexnnD4ei1I=) 2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: pKScxQMxg1WdvXI6uB4aKpZXfYDWDJw+VDC0QK45Pf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Validity Not Before: Jun 28 22:01:15 2025 GMT Not After : Jul 5 22:01:15 2025 GMT Subject: CN=6860662b-86cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ca:64:31:87:15:a3:4f:05:3b:2e:9c:37:77: 30:b8:3d:69:5a:18:1a:22:67:fd:69:c9:f2:f7:6f: 76:f5:ab:11:81:ca:cf:18:3d:ac:a5:f8:6f:61:19: 7e:36:7c:69:44:1c:cb:95:6d:d9:34:5a:f1:c7:f9: ff:ed:9b:50:41:a0:19:f3:95:6a:33:26:fd:ce:1a: b5:45:16:be:8a:9f:c0:6e:c5:3c:62:19:0d:49:0d: c7:2a:ab:d5:86:9c:8c:5a:e8:f0:c6:b7:02:aa:99: 0f:49:f6:c5:10:96:fc:a5:47:59:99:74:1b:48:29: a6:c3:8e:44:00:c7:12:22:33:3a:41:98:cb:bd:6c: 8a:29:b9:06:4a:67:8c:49:2a:96:1a:cd:60:6f:4b: 74:88:a2:66:c1:cc:23:cd:a0:fa:50:f0:7b:99:1e: ff:99:35:bf:2c:ea:50:59:a0:d2:7e:09:ac:69:92: db:c7:41:65:66:d1:cb:e7:4f:fd:3b:9a:b8:65:ba: 56:a4:e2:94:24:20:b9:42:82:53:a9:7b:66:6f:02: f5:64:18:b9:c7:f3:32:af:1c:40:31:37:bf:4b:03: 19:31:3d:37:80:44:22:25:cd:97:30:b5:10:33:c6: 94:20:0e:67:4b:2d:74:65:41:6f:cd:ab:62:a7:3d: a5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:69:1D:6B:5B:EC:96:20:79:0F:0B:77:C2:D1:BE:48:A5:1C:61:BA X509v3 Authority Key Identifier: keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:7e:53:92:04:87:ab:89:db:a1:ec:88:96:ea:90:e7:be:11: 84:a5:5c:78:ac:68:c0:b0:ec:0d:d3:7f:d0:33:44:33:85:47: 03:fa:de:6c:15:55:1c:cd:0d:60:4a:c1:0e:06:0b:7d:2a:e8: 91:06:01:d7:73:a4:fb:bc:a4:c2:fb:e5:68:63:ad:f0:f0:d7: da:8c:8b:db:c6:e8:b8:d3:32:82:df:02:11:5e:a2:ca:85:e9: a5:75:d7:50:84:db:df:b9:2e:df:7d:ed:64:1b:ed:34:2b:0b: 2f:6b:49:71:fd:dc:38:0a:b5:ed:7b:18:a7:b4:fa:d2:95:d1: 24:c1:fc:12:31:b9:b2:81:c5:b0:5b:c6:45:f0:a7:80:bf:29: c9:54:86:15:6f:24:0a:59:b6:f2:e0:c3:7d:bd:5d:28:71:42: 76:db:da:df:d8:23:58:5e:96:d2:2b:d9:20:35:1a:3e:bd:93: da:6a:db:e5:ef:12:81:d4:f8:e9:4e:90:2d:85:f4:17:c3:ac: a7:25:d6:da:2d:39:d5:28:73:7c:8a:51:bc:56:ef:c4:18:96: b9:f6:2e:e9:b2:24:65:b1:5d:48:4a:46:3a:48:2c:2a:1e:a1: b3:42:a5:54:84:97:91:69:c9:1e:a4:b4:12:7f:05:a1:4d:82: 64:c6:b4:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFFRDIxMTAvBgNVBAUTKEE0OEE5MzlCNjdEQjIyQkFGNzdFMDA3QjIxREYzQjc0 NUI2MjgzOTAwHhcNMjUwNjI4MjIwMTE1WhcNMjUwNzA1MjIwMTE1WjAYMRYwFAYD VQQDEw02ODYwNjYyYi04NmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MpkMYcVo08FOy6cN3cwuD1pWhgaImf9acny92929asRgcrPGD2spfhvYRl+ NnxpRBzLlW3ZNFrxx/n/7ZtQQaAZ85VqMyb9zhq1RRa+ip/AbsU8YhkNSQ3HKqvV hpyMWujwxrcCqpkPSfbFEJb8pUdZmXQbSCmmw45EAMcSIjM6QZjLvWyKKbkGSmeM SSqWGs1gb0t0iKJmwcwjzaD6UPB7mR7/mTW/LOpQWaDSfgmsaZLbx0FlZtHL50/9 O5q4ZbpWpOKUJCC5QoJTqXtmbwL1ZBi5x/MyrxxAMTe/SwMZMT03gEQiJc2XMLUQ M8aUIA5nSy10ZUFvzatipz2lYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVpHWtb 7JYgeQ8Ld8LRvkilHGG6MB8GA1UdIwQYMBaAFKSKk5tn2yK6934AeyHfO3RbYoOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUVEMi8zRkU4REU2Qzgy QkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYklycjNmZ0I3SWQ4N2RGdGln NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJcVRtMmZiSXJyM2ZnQjdJZDg3ZEZ0aWc1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUVEMi8zRkU4REU2QzgyQkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYkly cjNmZ0I3SWQ4N2RGdGlnNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASflOSBIeriduh7IiW6pDnvhGEpVx4rGjAsOwN03/QM0QzhUcD+t5s FVUczQ1gSsEOBgt9KuiRBgHXc6T7vKTC++VoY63w8NfajIvbxui40zKC3wIRXqLK hemldddQhNvfuS7ffe1kG+00Kwsva0lx/dw4CrXtexintPrSldEkwfwSMbmygcWw W8ZF8KeAvynJVIYVbyQKWbby4MN9vV0ocUJ229rf2CNYXpbSK9kgNRo+vZPaatvl 7xKB1PjpTpAthfQXw6ynJdbaLTnVKHN8ilG8Vu/EGJa59i7psiRlsV1ISkY6SCwq HqGzQqVUhJeRackepLQSfwWhTYJkxrRV -----END CERTIFICATE-----Generated at Mon Jun 30 22:31:55 2025 by rpki-client