$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: 4C3tqr62LgllO/5OXpmDVdKYDneaHmCRtCi+8rmjTPE= Subject key identifier: 0B:2A:28:64:C0:96:F9:7C:53:22:E4:77:D5:4B:CA:A9:24:AA:CC:3C Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 036C Signing time: Tue 01 Jul 2025 01:35:42 +0000 Manifest this update: Tue 01 Jul 2025 01:35:41 +0000 Manifest next update: Tue 08 Jul 2025 01:35:41 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: um/RA2nESWUlA3f+n3Y1Qdz8b4yZIDBWy8QOcqRlrl8=) 2: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 8dEWz6BA19noWs2zWuUBCRCZchx4qTK4G3VWLV+hIMw=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: 8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=) 4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: KstFse9DL+Lpk2UJhsRfTukB1/IV52HFgYreP0UKdGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Jul 1 01:35:41 2025 GMT Not After : Jul 8 01:35:41 2025 GMT Subject: CN=68633b6d-3609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:41:fb:bd:49:c8:f0:4e:bb:f6:2c:0e:96:30: a1:c1:73:da:3f:64:da:3f:cc:66:46:6d:24:5b:c0: fb:b9:36:38:d5:2c:0e:6e:f0:54:b7:41:9f:1f:75: 40:eb:a1:ba:d9:15:61:29:89:38:21:47:5b:5e:3d: 79:73:95:ec:b3:9c:c5:6d:a1:42:dd:e2:4d:b9:61: a6:23:e6:2f:1f:01:ca:24:76:d7:aa:e7:2c:1d:0e: 75:63:96:f1:ff:7d:97:f2:e5:f2:07:81:14:82:a1: 94:bc:65:82:50:39:96:f5:69:55:b6:e6:c0:b9:9f: a0:fd:d4:49:1a:90:61:1d:72:aa:57:b1:5d:16:80: 93:8e:a2:11:44:ae:d1:8a:47:c2:0e:e4:30:46:94: dd:0f:c2:85:9d:75:9c:cc:f0:76:9d:3f:e7:cc:b2: 8e:d9:59:92:9f:c8:90:dd:a8:96:34:21:d5:18:1a: 10:da:15:4d:8d:34:f9:64:60:83:1c:ba:a7:17:60: d9:f9:10:6d:3d:e0:09:97:09:f9:4f:1f:95:cf:1e: 12:bf:14:ab:ad:b8:4d:98:11:fd:13:ab:51:a5:67: b5:37:a4:71:bf:61:ac:6d:4b:70:ea:21:3b:b8:d9: f0:e0:c6:82:d4:18:b4:ec:04:93:c7:2b:b5:e1:55: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2A:28:64:C0:96:F9:7C:53:22:E4:77:D5:4B:CA:A9:24:AA:CC:3C X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:02:cf:08:6a:7d:dc:28:01:47:17:32:16:a9:32:f5:d4:d7: 65:18:db:6f:62:1b:9c:e0:ef:f9:99:7a:3f:56:fa:20:15:44: 31:07:29:54:f4:6f:0a:48:c8:52:94:09:d1:29:ae:4f:40:3b: 36:8e:51:17:3d:dd:e8:a6:78:52:12:ed:af:99:ba:95:10:83: 38:b6:17:23:4d:f3:97:29:8e:2e:05:12:2f:26:8e:27:9f:e0: 76:f4:3a:79:cd:02:0d:df:69:ee:d3:f9:89:a2:75:46:3a:b2: 45:a0:34:78:35:cb:99:ba:26:93:4d:0b:24:f6:50:a6:5f:e0: a9:88:bc:8a:93:88:f0:9b:2e:a3:d5:ba:f8:a6:c8:d8:e4:96: 73:69:fa:09:cf:c6:1f:73:27:b0:0c:16:3d:6a:35:90:9b:67: b6:7b:f2:f7:0e:77:99:92:a5:4f:9d:42:56:12:09:e5:ef:4e: d7:50:46:3f:7d:52:24:a9:c1:7d:6a:ed:03:03:7b:33:e7:b5: 42:be:22:a2:5e:29:c7:94:50:04:e1:8d:b6:da:60:f4:c2:d5: ca:d9:49:ba:99:8f:b6:69:94:83:66:9f:34:24:08:99:5f:25: 35:e6:93:51:7c:12:d8:93:0a:9f:6b:b7:d0:a0:ba:8b:37:07: e0:73:64:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjUwNzAxMDEzNTQxWhcNMjUwNzA4MDEzNTQxWjAYMRYwFAYD VQQDEw02ODYzM2I2ZC0zNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EH7vUnI8E679iwOljChwXPaP2TaP8xmRm0kW8D7uTY41SwObvBUt0GfH3VA 66G62RVhKYk4IUdbXj15c5Xss5zFbaFC3eJNuWGmI+YvHwHKJHbXqucsHQ51Y5bx /32X8uXyB4EUgqGUvGWCUDmW9WlVtubAuZ+g/dRJGpBhHXKqV7FdFoCTjqIRRK7R ikfCDuQwRpTdD8KFnXWczPB2nT/nzLKO2VmSn8iQ3aiWNCHVGBoQ2hVNjTT5ZGCD HLqnF2DZ+RBtPeAJlwn5Tx+Vzx4SvxSrrbhNmBH9E6tRpWe1N6Rxv2GsbUtw6iE7 uNnw4MaC1Bi07ASTxyu14VVZ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsqKGTA lvl8UyLkd9VLyqkkqsw8MB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXAs8Ian3cKAFHFzIWqTL11NdlGNtvYhuc4O/5mXo/VvogFUQxBylU 9G8KSMhSlAnRKa5PQDs2jlEXPd3opnhSEu2vmbqVEIM4thcjTfOXKY4uBRIvJo4n n+B29Dp5zQIN32nu0/mJonVGOrJFoDR4NcuZuiaTTQsk9lCmX+CpiLyKk4jwmy6j 1br4psjY5JZzafoJz8YfcyewDBY9ajWQm2e2e/L3DneZkqVPnUJWEgnl707XUEY/ fVIkqcF9au0DA3sz57VCviKiXinHlFAE4Y222mD0wtXK2Um6mY+2aZSDZp80JAiZ XyU15pNRfBLYkwqfa7fQoLqLNwfgc2QC -----END CERTIFICATE-----Generated at Wed Jul 2 05:45:31 2025 by rpki-client