$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json) Hash identifier: T3Koz761wosMSZFZQQZOC1BrslhkxqREtT10hb6lHU4= Subject key identifier: 39:FF:64:9A:A7:8F:45:55:3F:32:1A:2F:71:81:9C:C7:54:A3:9B:2A Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft Manifest number: 064C Signing time: Sat 28 Jun 2025 22:18:51 +0000 Manifest this update: Sat 28 Jun 2025 22:18:50 +0000 Manifest next update: Sat 05 Jul 2025 22:18:50 +0000 Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: XN356FEerFPxHrYTjy97A7QpcGzeQceQjG8PZIkSHHQ=) 2: 8B5C69BACD5211EBBF89483BC4F9AE02.roa (hash: 71fJuckCoKbzUc34v7gFsGAjPnIuO7itiiyZ85r0nVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Validity Not Before: Jun 28 22:18:50 2025 GMT Not After : Jul 5 22:18:50 2025 GMT Subject: CN=68606a4a-74d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fb:17:c5:64:2c:e8:6e:dd:64:ac:05:50:50: 1a:28:86:ce:54:ef:6c:18:66:6b:f8:77:13:d3:35: b9:47:22:6d:57:df:37:ad:f6:ac:a8:97:29:51:f1: d2:6d:59:b6:5f:e1:e9:39:78:0c:d4:51:b6:60:8d: 3f:d2:8a:60:00:f4:77:16:f9:df:5d:bf:11:4d:24: 98:9b:0d:57:e3:e6:96:b4:77:d7:1f:c3:a2:30:2a: 8c:28:c5:fd:da:a3:a4:70:e1:0d:91:ee:63:57:db: 0a:21:c7:80:d6:e0:c8:65:aa:04:f0:6b:7e:ca:40: 19:c1:a2:30:c5:89:9e:19:b7:a5:ed:aa:7e:1c:84: 2e:50:74:e4:d8:9c:d7:c9:02:a7:10:69:dd:9f:2c: fa:43:b1:bd:46:3a:9b:fc:84:c5:ec:75:9d:eb:37: 1a:96:33:c1:72:91:07:bd:0e:9b:92:68:d9:32:73: d9:00:55:ce:56:ed:9e:4b:19:84:5e:57:6c:51:5d: 2e:c0:96:ab:1a:09:e0:10:75:c4:62:e7:0f:47:a7: b0:aa:7a:1b:00:e3:fb:0b:98:6c:ba:91:1f:11:b5: d4:f0:1e:0e:0c:b1:f5:ac:51:2f:4c:eb:1b:77:3e: 32:22:b4:fd:48:6c:a9:4d:b5:9d:3f:60:5f:69:ed: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FF:64:9A:A7:8F:45:55:3F:32:1A:2F:71:81:9C:C7:54:A3:9B:2A X509v3 Authority Key Identifier: keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ea:1c:7c:e2:ad:cf:94:dd:bb:4d:1a:fc:a2:43:33:b9:17: 79:f2:83:94:6f:83:e5:1d:44:51:f7:4e:ff:ed:85:46:40:fd: fb:1e:0f:52:c6:1d:71:b9:15:33:a9:f7:c2:f7:78:ac:3e:01: 75:14:05:d6:f5:cd:09:64:ed:65:29:2f:e8:8e:58:82:04:bb: 15:6c:74:8c:c2:65:c0:95:8b:20:34:15:33:3a:c5:78:f7:a5: ed:cb:ec:b1:ba:db:b8:37:f2:46:42:4c:d3:36:fe:87:68:87: 39:2e:9e:7f:53:b9:43:c9:ef:89:ed:32:9f:af:df:ff:0e:cf: 3a:3e:34:bf:94:09:69:01:62:10:4f:48:5a:5c:4c:7e:66:32: 07:22:8e:2b:07:46:69:6c:c5:9c:cb:0a:c9:bc:a3:81:a1:b7: 23:d2:92:4e:64:c0:3b:68:d1:6f:19:4f:08:64:0f:ae:b9:2a: 4a:3c:2a:23:86:8d:a4:ad:99:76:86:9e:9e:92:67:d8:49:b1: 62:56:16:62:9b:e8:a8:01:51:df:b0:63:eb:03:16:82:d6:35: a7:c1:35:b4:7a:8c:d0:1f:54:8b:a0:fa:e3:67:de:49:f9:1a: 7c:77:29:a8:e6:4d:46:f4:6f:9a:95:48:91:5f:f5:a3:1d:07: 30:22:c0:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNENEQxMTAvBgNVBAUTKERGNDNDRjMxRjExQ0Q4RTY5RjFBNUI0NTFENDNGNjhC MTQ0NzZCNDcwHhcNMjUwNjI4MjIxODUwWhcNMjUwNzA1MjIxODUwWjAYMRYwFAYD VQQDEw02ODYwNmE0YS03NGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PsXxWQs6G7dZKwFUFAaKIbOVO9sGGZr+HcT0zW5RyJtV983rfasqJcpUfHS bVm2X+HpOXgM1FG2YI0/0opgAPR3FvnfXb8RTSSYmw1X4+aWtHfXH8OiMCqMKMX9 2qOkcOENke5jV9sKIceA1uDIZaoE8Gt+ykAZwaIwxYmeGbel7ap+HIQuUHTk2JzX yQKnEGndnyz6Q7G9Rjqb/ITF7HWd6zcaljPBcpEHvQ6bkmjZMnPZAFXOVu2eSxmE XldsUV0uwJarGgngEHXEYucPR6ewqnobAOP7C5hsupEfEbXU8B4ODLH1rFEvTOsb dz4yIrT9SGypTbWdP2Bfae0yxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn/ZJqn j0VVPzIaL3GBnMdUo5sqMB8GA1UdIwQYMBaAFN9DzzHxHNjmnxpbRR1D9osUR2tH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0Q0RC9FRDZBMTk5MjlB RTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJPYWZHbHRGSFVQMml4Ukhh MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwUFBNZkVjMk9hZkdsdEZIVVAyaXhSSGEwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0Q0RC9FRDZBMTk5MjlBRTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJP YWZHbHRGSFVQMml4UkhhMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl6hx84q3PlN27TRr8okMzuRd58oOUb4PlHURR907/7YVGQP37Hg9S xh1xuRUzqffC93isPgF1FAXW9c0JZO1lKS/ojliCBLsVbHSMwmXAlYsgNBUzOsV4 96Xty+yxutu4N/JGQkzTNv6HaIc5Lp5/U7lDye+J7TKfr9//Ds86PjS/lAlpAWIQ T0haXEx+ZjIHIo4rB0ZpbMWcywrJvKOBobcj0pJOZMA7aNFvGU8IZA+uuSpKPCoj ho2krZl2hp6ekmfYSbFiVhZim+ioAVHfsGPrAxaC1jWnwTW0eozQH1SLoPrjZ95J +Rp8dymo5k1G9G+alUiRX/WjHQcwIsBP -----END CERTIFICATE-----Generated at Sun Jun 29 12:32:46 2025 by rpki-client