$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json) Hash identifier: ZlSXGoLzsGYmuDxg3XkGq2BGaXzr/FEsKxyd5/bMmw8= Subject key identifier: B9:62:D3:08:5B:94:ED:72:48:0F:77:30:20:FB:96:AE:EC:22:85:20 Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft Manifest number: 0C75 Signing time: Wed 02 Jul 2025 18:31:05 +0000 Manifest this update: Wed 02 Jul 2025 18:31:04 +0000 Manifest next update: Wed 09 Jul 2025 18:31:04 +0000 Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: l7SzJsa3cCgQUrqr2bJ3FXshZHP7SdvUBaQmI4NBwZA=) 2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 3at8OHhr3TWPa09hDLUXiFFjg44cS/0xW9KQOVKngqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Validity Not Before: Jul 2 18:31:04 2025 GMT Not After : Jul 9 18:31:04 2025 GMT Subject: CN=68657ae8-1d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:a6:19:28:b0:30:fa:40:36:93:99:5c:33: 84:e9:c6:6b:fb:ff:12:4c:d1:b3:7c:59:b5:c1:0d: 21:ee:8e:eb:26:67:52:fa:de:2d:9d:c9:e7:d2:a2: 8a:d4:59:6b:54:e0:22:91:eb:92:da:eb:96:1f:ac: 4c:ac:bc:c6:36:b9:c9:16:20:4b:b5:3e:c8:80:07: 5e:9b:77:37:44:c4:c9:b9:b2:4b:af:3f:5a:24:2b: ec:c4:9a:bf:4d:ca:fe:3a:49:ad:a8:96:49:90:52: fc:06:ad:b9:fa:f5:be:da:d8:da:f9:e1:71:99:ec: a8:b0:f3:be:35:88:7a:63:0d:b0:74:f5:40:0f:09: 3b:28:9f:2e:26:f5:61:b9:79:7f:c5:6c:6a:2a:9f: bc:5f:d6:54:7b:db:c9:a1:3e:e3:34:be:86:2c:fb: 08:e6:e5:07:3c:91:32:74:ff:ea:4b:4f:37:63:fb: 4e:7f:e0:95:14:98:02:a2:8e:80:2c:db:56:02:36: 87:28:e1:cc:23:04:d3:8b:4c:5e:14:2c:eb:03:f1: 76:4e:3a:b0:14:9d:90:48:6d:5f:bf:4c:6c:f3:4a: 65:e7:8b:f0:78:2c:70:a3:18:8f:73:a1:96:5d:66: e5:ab:73:e0:eb:b2:20:62:9e:dc:42:a9:f2:09:02: dc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:62:D3:08:5B:94:ED:72:48:0F:77:30:20:FB:96:AE:EC:22:85:20 X509v3 Authority Key Identifier: keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:88:42:fc:7d:8a:cf:58:ea:09:77:d5:42:a0:ba:a9:2b:6b: 5b:74:18:2a:ec:9c:2c:c6:ef:69:e7:60:4c:99:9b:d9:50:04: b0:44:54:49:c1:05:ee:47:e2:ae:03:9e:cd:1d:ca:c0:f1:35: 6d:9e:a5:48:f0:1a:f0:c1:e7:69:df:51:cd:99:94:ad:4d:06: 73:ca:3d:88:16:d8:a4:92:84:3d:66:41:5d:0c:4f:0a:23:d8: 8c:ce:86:de:80:9a:3c:60:21:bc:13:2b:08:17:63:34:f0:22: 20:ac:d0:f4:ea:bd:82:00:77:a6:7b:64:c2:71:89:92:25:d0: f6:00:b8:3c:02:b9:49:b4:93:0d:db:91:65:a0:bd:4f:de:62: 6d:04:41:8f:a4:16:95:97:c0:96:0d:60:6b:cb:4b:19:cb:5c: 58:a0:b9:61:a1:b6:23:c7:5f:40:46:61:06:09:73:86:9f:3e: bd:f9:1e:89:e4:c5:1d:f4:c9:d4:84:72:05:50:8a:f6:d0:9d: c9:e0:32:dd:7c:b0:47:6e:34:bf:a7:99:d0:15:b5:bc:25:09: 27:75:99:c2:8a:95:07:1b:9f:d3:7a:4a:62:22:a3:18:34:cd: c1:8f:ed:4f:c4:b0:e8:72:df:46:a9:a4:ef:0c:d8:11:bd:45: 62:4e:8d:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx NjA5RTg5ODcwHhcNMjUwNzAyMTgzMTA0WhcNMjUwNzA5MTgzMTA0WjAYMRYwFAYD VQQDEw02ODY1N2FlOC0xZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFumGSiwMPpANpOZXDOE6cZr+/8STNGzfFm1wQ0h7o7rJmdS+t4tncnn0qKK 1FlrVOAikeuS2uuWH6xMrLzGNrnJFiBLtT7IgAdem3c3RMTJubJLrz9aJCvsxJq/ Tcr+OkmtqJZJkFL8Bq25+vW+2tja+eFxmeyosPO+NYh6Yw2wdPVADwk7KJ8uJvVh uXl/xWxqKp+8X9ZUe9vJoT7jNL6GLPsI5uUHPJEydP/qS083Y/tOf+CVFJgCoo6A LNtWAjaHKOHMIwTTi0xeFCzrA/F2TjqwFJ2QSG1fv0xs80pl54vweCxwoxiPc6GW XWblq3Pg67IgYp7cQqnyCQLcCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLli0whb lO1ySA93MCD7lq7sIoUgMB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7iEL8fYrPWOoJd9VCoLqpK2tbdBgq7Jwsxu9p52BMmZvZUASwRFRJ wQXuR+KuA57NHcrA8TVtnqVI8Brwwedp31HNmZStTQZzyj2IFtikkoQ9ZkFdDE8K I9iMzobegJo8YCG8EysIF2M08CIgrND06r2CAHeme2TCcYmSJdD2ALg8ArlJtJMN 25FloL1P3mJtBEGPpBaVl8CWDWBry0sZy1xYoLlhobYjx19ARmEGCXOGnz69+R6J 5MUd9MnUhHIFUIr20J3J4DLdfLBHbjS/p5nQFbW8JQkndZnCipUHG5/TekpiIqMY NM3Bj+1PxLDoct9GqaTvDNgRvUViTo1H -----END CERTIFICATE-----Generated at Wed Jul 2 21:51:31 2025 by rpki-client