$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft File: 9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json) Hash identifier: xvJO743t855U6f+E4tvU51OTJkmm8dkrB+sb3SDV5n4= Subject key identifier: B0:9C:73:5F:70:E1:C6:A3:04:6B:C2:B3:81:FD:C0:F9:48:A5:CB:CE Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft Manifest number: 1C Signing time: Tue 01 Jul 2025 08:42:07 +0000 Manifest this update: Tue 01 Jul 2025 08:42:07 +0000 Manifest next update: Tue 08 Jul 2025 08:42:07 +0000 Files and hashes: 1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: hHgjNdWlfVZcRr8j1CtXo8ynVEU1mlzjnbI5359pBs0=) 2: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: wYtQWk7ttHPhjt8DRgJvmS9ClmgD+cfxZKN75n4cmjU=) 3: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: GrE2T3QoH3KUCtrNxzC9H+t8cncgZrWD5zuytXWYaOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Validity Not Before: Jul 1 08:42:07 2025 GMT Not After : Jul 8 08:42:07 2025 GMT Subject: CN=68639f5f-b756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f3:39:58:29:ae:49:19:5d:43:ff:a3:26:1b: d3:21:46:05:62:1a:a3:51:d0:aa:1e:f2:fc:3a:47: cd:5d:42:ef:00:b6:99:31:6e:01:e9:06:2c:a2:9e: 96:83:f8:9b:66:a0:d4:be:01:e9:ec:df:19:de:86: 43:03:d6:46:ab:0f:6d:41:d2:81:49:c9:2e:73:29: c1:d2:d1:06:58:72:34:2c:1b:05:44:02:46:69:5c: 1b:c9:27:3c:6c:e0:50:a4:c5:9b:ee:6e:e1:86:a1: 78:c1:47:1f:df:ec:4a:a7:5c:93:9d:13:d1:28:a6: 65:2b:58:27:0a:92:a3:84:f0:27:30:2d:05:cd:43: ec:41:b9:81:d7:a2:71:87:3c:7c:29:51:32:be:b6: 02:ad:f4:bc:10:39:cf:63:bf:dc:d5:63:6e:b2:7e: 22:00:4c:d0:34:c3:a7:71:38:bd:48:2b:d1:64:53: ee:a1:4e:d9:42:4c:4a:8d:1a:72:36:e9:6e:f2:21: 3a:98:28:18:20:f0:06:18:d9:ba:b2:63:c7:db:85: 9c:2b:05:d5:76:5a:cf:e4:16:00:b4:fb:77:bb:98: 09:c6:6d:1f:f7:fd:7d:8f:a4:08:32:fe:8e:e7:f1: 8b:70:57:d3:79:71:a9:01:1b:bb:ea:3c:bd:1b:12: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9C:73:5F:70:E1:C6:A3:04:6B:C2:B3:81:FD:C0:F9:48:A5:CB:CE X509v3 Authority Key Identifier: keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b5:99:4d:e4:9b:3f:7f:cc:38:07:50:98:e1:48:84:1f:98: 83:8f:60:e4:4f:d9:bd:48:52:5f:61:63:5b:87:d7:07:b3:58: c1:a1:ad:88:bc:6b:23:09:41:98:dd:89:d7:18:3c:79:17:93: e1:3b:fa:68:33:29:ac:49:17:76:63:b3:d1:c8:e7:42:87:74: aa:b2:f4:f0:c8:78:92:c4:a4:4e:27:e0:95:95:32:9a:f8:7a: c9:94:97:17:84:39:8a:16:a9:48:e6:cd:cd:eb:dc:73:7e:b1: 37:ac:a6:69:cc:4e:0f:a6:82:90:a5:bd:70:7e:f6:7e:8c:fd: 7e:4f:c2:e7:d1:ef:88:46:ce:58:fe:19:94:e7:f4:04:21:89: da:8d:c0:46:a9:85:cd:b8:b4:16:b6:95:47:a7:b0:c4:a9:46: 4a:2d:c0:9e:1c:b2:4d:9e:12:b3:bc:5a:59:e5:00:63:7a:83: d2:eb:0c:29:79:12:34:4e:0a:b8:90:66:aa:53:b5:5a:43:39: 20:cd:20:2b:77:29:66:2e:78:62:9c:f4:42:92:e3:14:06:1d: 41:86:e9:c2:9c:8b:2e:de:ed:9c:2e:23:7e:45:66:78:cd:f8: 1e:70:ab:0c:f0:b0:4a:07:70:df:d4:25:9b:3e:e7:1a:a1:8d: 22:15:98:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTQ4MTExMC8GA1UEBRMoRjRCN0QwNDQzQjhDRkY5QjQwOThCQjhDRUNCRUQ4N0ZD RUE5QkFEMjAeFw0yNTA3MDEwODQyMDdaFw0yNTA3MDgwODQyMDdaMBgxFjAUBgNV BAMTDTY4NjM5ZjVmLWI3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd8zlYKa5JGV1D/6MmG9MhRgViGqNR0Koe8vw6R81dQu8AtpkxbgHpBiyinpaD +JtmoNS+Aens3xnehkMD1karD21B0oFJyS5zKcHS0QZYcjQsGwVEAkZpXBvJJzxs 4FCkxZvubuGGoXjBRx/f7EqnXJOdE9EopmUrWCcKkqOE8CcwLQXNQ+xBuYHXonGH PHwpUTK+tgKt9LwQOc9jv9zVY26yfiIATNA0w6dxOL1IK9FkU+6hTtlCTEqNGnI2 6W7yITqYKBgg8AYY2bqyY8fbhZwrBdV2Ws/kFgC0+3e7mAnGbR/3/X2PpAgy/o7n 8YtwV9N5cakBG7vqPL0bEtQRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsJxzX3Dh xqMEa8Kzgf3A+Uily84wHwYDVR0jBBgwFoAU9LfQRDuM/5tAmLuM7L7Yf86putIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1NDgxL0ExODU0REUwMkJE ODExRjBBQjYxNzMyMEM0RjlBRTAyLzlMZlFSRHVNXzV0QW1MdU03TDdZZjg2cHV0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUxmUVJEdU1fNXRBbUx1TTdMN1lmODZwdXRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 NDgxL0ExODU0REUwMkJEODExRjBBQjYxNzMyMEM0RjlBRTAyLzlMZlFSRHVNXzV0 QW1MdU03TDdZZjg2cHV0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALK1mU3kmz9/zDgHUJjhSIQfmIOPYORP2b1IUl9hY1uH1wezWMGhrYi8 ayMJQZjdidcYPHkXk+E7+mgzKaxJF3Zjs9HI50KHdKqy9PDIeJLEpE4n4JWVMpr4 esmUlxeEOYoWqUjmzc3r3HN+sTespmnMTg+mgpClvXB+9n6M/X5PwufR74hGzlj+ GZTn9AQhidqNwEaphc24tBa2lUensMSpRkotwJ4csk2eErO8WlnlAGN6g9LrDCl5 EjROCriQZqpTtVpDOSDNICt3KWYueGKc9EKS4xQGHUGG6cKciy7e7ZwuI35FZnjN +B5wqwzwsEoHcN/UJZs+5xqhjSIVmG0= -----END CERTIFICATE-----Generated at Thu Jul 3 07:58:14 2025 by rpki-client