$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: bRxpdtAeq0kZkP6H8X/CmIKHJzZL/64TCG0tacybUeo= Subject key identifier: F7:88:56:85:BB:70:67:FF:A7:9E:C4:A1:21:31:07:4F:A2:34:FA:24 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: A3 Signing time: Thu 03 Jul 2025 06:25:59 +0000 Manifest this update: Thu 03 Jul 2025 06:25:59 +0000 Manifest next update: Thu 10 Jul 2025 06:25:59 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: O2gBNGlCqCzzR51TefjON5uejUJG580RnNX31fzc5TU=) 2: 58CA0E62615111EFACF30C14C4F9AE02.roa (hash: n/H7m4JyEx7dcVifKMlTV7vtmvQ/Ig1JHl4d6IW0aVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Jul 3 06:25:59 2025 GMT Not After : Jul 10 06:25:59 2025 GMT Subject: CN=68662277-5839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fc:2f:ac:db:b9:73:d7:f4:5c:47:c0:28:15: 3c:34:75:2e:b0:d5:4e:44:c6:48:ee:cd:fa:a7:30: 9f:00:de:b7:e7:bb:63:df:ef:cc:ec:a5:57:cb:e3: 4b:6e:2d:26:1e:26:42:d7:6d:e1:20:49:82:74:e0: 50:6e:62:05:d4:f8:8f:82:34:d8:26:7e:84:36:a9: 34:a4:63:8b:a1:f5:f8:3a:48:cb:73:84:73:c7:b6: 8b:32:5c:74:93:ed:28:d9:c9:b4:c6:db:cc:65:77: cb:10:3e:9b:cf:53:8b:17:7f:27:ab:bc:4c:b3:90: e8:98:8b:f0:d0:dd:f8:f4:c6:bb:49:78:31:a8:13: 93:22:4b:03:41:5f:52:e0:b9:ab:d5:12:31:e5:11: 78:9b:a2:c0:71:59:a4:15:d5:c6:a3:88:e6:9b:11: 8b:7e:35:56:de:e5:76:51:8c:7e:01:f2:1c:a1:92: b4:0c:30:3c:69:9b:7d:71:59:3b:87:b1:ab:3e:ab: ca:05:3c:42:98:23:90:41:bf:ad:95:53:f7:17:2c: f3:8a:aa:81:22:a8:28:59:6d:02:7d:f9:42:c5:33: 7a:5f:5f:9e:76:7b:23:43:5d:d3:82:25:58:4a:e1: 6c:48:da:42:c9:69:ad:30:eb:dd:6b:1b:60:e7:21: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:88:56:85:BB:70:67:FF:A7:9E:C4:A1:21:31:07:4F:A2:34:FA:24 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:46:6e:97:c8:16:74:74:b8:db:a8:8b:af:0c:93:31:1c:fe: 1a:bc:d1:4c:04:90:31:c5:87:09:a9:95:99:0f:8d:b5:53:45: 66:4e:cc:c4:50:67:99:be:b2:78:b5:39:eb:99:f4:ae:1c:f2: 4d:36:3e:c1:89:b9:12:46:88:ef:a6:2d:6f:58:94:ca:7a:0c: 58:92:3a:f2:c5:9c:2b:ed:93:a2:fc:82:bf:18:5d:a6:86:24: 99:6f:e6:03:f4:17:e7:ea:58:a0:db:6d:e2:ab:76:f5:48:5c: e3:72:e3:02:62:ed:60:47:4c:9c:8e:cc:90:52:65:36:0c:e5: 14:7e:08:5b:e8:f2:d7:56:b8:50:86:b1:4f:ab:7c:1f:3f:bf: 56:cb:a6:dc:bd:49:df:94:5d:02:7e:12:d0:89:c5:f9:5d:49: e8:fa:4c:66:6e:3f:61:49:ef:03:82:b1:f5:ec:24:07:54:a9: f8:ef:66:02:04:f9:94:85:c2:6b:f6:84:24:3c:ab:d4:7a:79: e9:9e:63:11:45:64:9f:a6:0d:2b:4e:dc:e1:67:3a:7a:4d:56: e1:9e:87:7c:15:49:8e:31:ae:e2:78:db:01:0b:bf:88:d9:68: c9:df:36:d0:d3:db:2b:ac:b1:9c:4c:51:56:e8:f7:51:d4:22: ec:a0:c9:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUwNzAzMDYyNTU5WhcNMjUwNzEwMDYyNTU5WjAYMRYwFAYD VQQDEw02ODY2MjI3Ny01ODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vwvrNu5c9f0XEfAKBU8NHUusNVORMZI7s36pzCfAN6357tj3+/M7KVXy+NL bi0mHiZC123hIEmCdOBQbmIF1PiPgjTYJn6ENqk0pGOLofX4OkjLc4Rzx7aLMlx0 k+0o2cm0xtvMZXfLED6bz1OLF38nq7xMs5DomIvw0N349Ma7SXgxqBOTIksDQV9S 4Lmr1RIx5RF4m6LAcVmkFdXGo4jmmxGLfjVW3uV2UYx+AfIcoZK0DDA8aZt9cVk7 h7GrPqvKBTxCmCOQQb+tlVP3FyzziqqBIqgoWW0CfflCxTN6X1+ednsjQ13TgiVY SuFsSNpCyWmtMOvdaxtg5yHpHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeIVoW7 cGf/p57EoSExB0+iNPokMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbRm6XyBZ0dLjbqIuvDJMxHP4avNFMBJAxxYcJqZWZD421U0VmTszE UGeZvrJ4tTnrmfSuHPJNNj7BibkSRojvpi1vWJTKegxYkjryxZwr7ZOi/IK/GF2m hiSZb+YD9Bfn6lig223iq3b1SFzjcuMCYu1gR0ycjsyQUmU2DOUUfghb6PLXVrhQ hrFPq3wfP79Wy6bcvUnflF0CfhLQicX5XUno+kxmbj9hSe8DgrH17CQHVKn472YC BPmUhcJr9oQkPKvUennpnmMRRWSfpg0rTtzhZzp6TVbhnod8FUmOMa7ieNsBC7+I 2WjJ3zbQ09srrLGcTFFW6PdR1CLsoMmY -----END CERTIFICATE-----Generated at Thu Jul 3 23:28:01 2025 by rpki-client