$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft File: dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json) Hash identifier: XD2Ve9i48Rj6U9L1G5PDmvUdPPHkV+bWtc//t5kiP8Y= Subject key identifier: 3E:3F:39:E5:EB:D2:BB:DE:5D:04:34:9D:98:19:9D:C3:63:0D:D6:4A Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft Manifest number: 0178 Signing time: Thu 03 Jul 2025 04:08:11 +0000 Manifest this update: Thu 03 Jul 2025 04:08:11 +0000 Manifest next update: Thu 10 Jul 2025 04:08:11 +0000 Files and hashes: 1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: K5qKgZv7CkfdlpkDVFzB5y00KRjkBhAPX+xPwvbcc2o=) 2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: 64T0QVyxSFq/Fdklobji66MEyYuHugmocsuY/nRlqQ0=) 3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: i/4qbq1olZ1yrHtpcck4H45nkVfaKLB8DIL2yG7lkLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Validity Not Before: Jul 3 04:08:11 2025 GMT Not After : Jul 10 04:08:11 2025 GMT Subject: CN=6866022b-3dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:6b:45:a1:dd:6e:03:61:42:3b:5c:dd:2a: 40:9a:3d:06:cf:02:d8:63:6e:32:c7:a9:39:4e:8f: f7:71:e2:7e:6c:0c:63:59:25:bf:11:40:3d:e5:f7: 8c:76:c0:df:fb:ed:a5:ea:a4:41:95:7b:1b:cb:b8: 8d:2e:8f:b4:01:d4:73:f2:b2:ba:90:75:a1:e2:58: 81:9f:db:19:3a:95:5a:a6:77:1c:35:e9:17:3b:b7: 07:19:34:6b:52:7c:6f:4b:28:27:0b:6f:15:12:88: f6:06:ef:7a:3e:17:cf:0c:52:28:09:40:5f:a2:a1: cf:67:91:ee:6a:6e:73:4f:8f:32:af:0d:fb:09:ba: d7:2c:c8:d9:80:67:21:95:92:31:9a:e4:1e:dd:e9: fd:62:64:91:01:7a:1d:4b:e5:8c:ed:d3:40:8b:09: 05:56:24:36:98:b2:ab:6e:cf:9d:54:42:69:a9:71: eb:7a:3d:ee:92:d5:62:23:3b:15:da:66:22:0a:97: d8:ef:6c:85:9c:c1:b1:45:4f:47:7a:42:f9:ef:2d: 75:44:ca:cc:54:ba:84:85:7e:d3:ed:fa:80:93:02: a1:68:2e:27:15:50:d9:ce:53:3e:01:db:b2:a8:3a: 6c:67:e8:9b:1e:aa:a2:67:4c:eb:0b:1b:4b:bf:86: 5d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3F:39:E5:EB:D2:BB:DE:5D:04:34:9D:98:19:9D:C3:63:0D:D6:4A X509v3 Authority Key Identifier: keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5b:13:5a:9b:cb:aa:d4:44:be:63:23:be:66:57:f4:d8:b2: d0:55:2e:1b:95:28:30:58:ef:19:5f:36:8d:c5:97:74:98:11: a5:fd:1d:1b:b9:a3:b4:b2:97:73:39:fa:1a:d4:fb:96:8a:02: e3:c1:76:12:9a:84:64:81:cc:86:2d:10:01:77:07:48:85:d6: 74:0e:34:5f:1c:41:a7:f6:08:a9:cb:42:6a:01:8b:ae:26:42: ed:ed:b0:f6:f5:52:65:0f:44:56:85:b4:15:f3:51:01:11:89: af:c6:8b:5c:cf:39:43:3e:90:6e:fe:94:9a:83:9e:18:45:21: 75:75:56:8c:12:bf:17:3d:84:e5:4e:21:fb:e5:5e:92:3e:8c: c5:20:a1:52:68:c9:b1:f4:19:d8:cf:d1:31:36:9c:b8:90:7a: a8:a2:80:8c:82:d2:00:23:c9:e9:b9:d9:90:93:68:9c:53:cd: ee:3f:ff:52:06:db:e4:a2:cc:3c:e2:cd:34:78:93:7d:1a:7a: c1:a9:cd:30:ee:33:da:8e:47:7c:27:34:91:e3:ea:16:50:aa: 0e:1e:ff:a2:60:f8:d0:41:6d:cd:d1:7b:4d:09:b9:57:bc:50: eb:32:19:af:24:66:0c:42:71:1e:6d:5e:9a:59:26:8d:54:73: f9:f6:5e:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0 REM1NjRFRjUwHhcNMjUwNzAzMDQwODExWhcNMjUwNzEwMDQwODExWjAYMRYwFAYD VQQDEw02ODY2MDIyYi0zZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBBrRaHdbgNhQjtc3SpAmj0GzwLYY24yx6k5To/3ceJ+bAxjWSW/EUA95feM dsDf++2l6qRBlXsby7iNLo+0AdRz8rK6kHWh4liBn9sZOpVapnccNekXO7cHGTRr UnxvSygnC28VEoj2Bu96PhfPDFIoCUBfoqHPZ5Huam5zT48yrw37CbrXLMjZgGch lZIxmuQe3en9YmSRAXodS+WM7dNAiwkFViQ2mLKrbs+dVEJpqXHrej3uktViIzsV 2mYiCpfY72yFnMGxRU9HekL57y11RMrMVLqEhX7T7fqAkwKhaC4nFVDZzlM+Aduy qDpsZ+ibHqqiZ0zrCxtLv4ZdYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4/OeXr 0rveXQQ0nZgZncNjDdZKMB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3 NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTY0MS83RDAyODdFQTE3NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZa c1hzODdZTVdUdlJOeFdUdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaWxNam8uq1ES+YyO+Zlf02LLQVS4blSgwWO8ZXzaNxZd0mBGl/R0b uaO0spdzOfoa1PuWigLjwXYSmoRkgcyGLRABdwdIhdZ0DjRfHEGn9gipy0JqAYuu JkLt7bD29VJlD0RWhbQV81EBEYmvxotczzlDPpBu/pSag54YRSF1dVaMEr8XPYTl TiH75V6SPozFIKFSaMmx9BnYz9ExNpy4kHqoooCMgtIAI8npudmQk2icU83uP/9S Btvkosw84s00eJN9GnrBqc0w7jPajkd8JzSR4+oWUKoOHv+iYPjQQW3N0XtNCblX vFDrMhmvJGYMQnEebV6aWSaNVHP59l4H -----END CERTIFICATE-----Generated at Thu Jul 3 17:34:46 2025 by rpki-client