$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft File: d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json) Hash identifier: C5pAemguzuApYAW+V+VEPkZOQXpwgA6NqSFvuV2qSWE= Subject key identifier: 74:33:FF:CE:E7:C3:BB:35:D7:82:8E:4F:EF:D6:0E:08:21:A6:7B:BB Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft Manifest number: 0224 Signing time: Tue 01 Jul 2025 02:38:32 +0000 Manifest this update: Tue 01 Jul 2025 02:38:31 +0000 Manifest next update: Tue 08 Jul 2025 02:38:31 +0000 Files and hashes: 1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: Y+Ihz3ZGi5KrbA8PxGBX0qQ/iXTkVL9xb54VCVAJ8n8=) 2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: dSvt8WCJ5sX7UlCP0MxYFfwdeu8sA3Ot5FCk8B7masI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Validity Not Before: Jul 1 02:38:31 2025 GMT Not After : Jul 8 02:38:31 2025 GMT Subject: CN=68634a28-3958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bb:af:6c:c9:77:1e:b6:ca:cf:52:16:e2:4c: 30:18:51:74:fb:e0:2c:45:50:8f:f3:6c:d7:f7:b0: b8:83:21:f9:8a:16:a5:3f:fb:b5:b5:ca:71:0b:f8: d9:e6:af:92:75:0b:4a:6d:c1:d0:04:c8:29:0c:ac: 28:fc:cf:b2:8b:68:d6:e6:45:a1:80:30:1d:68:6f: 09:ea:a5:11:58:bb:5b:ce:af:fc:89:92:3a:82:78: 7d:07:ce:52:49:b2:e3:e8:96:3b:c7:3f:8a:2a:a9: fe:a5:ec:90:56:bb:31:6f:1e:32:ee:ed:79:5b:81: 59:50:50:5f:11:0c:88:dc:03:6c:8b:98:e0:57:63: 47:70:7f:d7:c9:5b:79:99:7c:0b:42:11:6b:28:9b: 69:35:99:5a:21:8d:36:03:58:6e:67:91:89:fb:f0: 2d:ae:f6:16:05:a8:a8:50:1d:4c:76:c3:3b:cc:7f: 54:ec:a4:14:26:d9:bc:0b:6f:b7:77:47:93:da:42: 2b:38:ea:d2:36:b8:93:d4:45:35:41:06:da:18:2e: 63:69:d7:70:5d:21:77:80:59:3e:d1:dc:2e:27:4d: 4d:6c:c6:ac:74:27:59:d6:06:75:22:ea:1a:12:a9: eb:a8:d7:17:54:46:13:6d:a1:18:51:99:7a:78:56: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:33:FF:CE:E7:C3:BB:35:D7:82:8E:4F:EF:D6:0E:08:21:A6:7B:BB X509v3 Authority Key Identifier: keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:30:59:a6:1b:a4:1f:07:45:90:ab:fb:7a:84:1d:18:0c:f8: 69:35:9a:2e:2d:14:d5:fc:c9:84:ce:db:e7:e1:13:05:92:7d: 92:a2:97:78:02:10:d3:b4:2a:b1:a0:e6:28:9b:8a:e3:d1:07: df:5d:07:fb:3a:b3:34:ca:89:be:51:8f:1d:bc:47:89:91:a8: 4d:f7:2d:41:a4:50:1f:fb:e8:9f:01:d8:34:a8:3b:c8:89:fe: 34:d4:c8:9a:ee:4a:a0:91:b2:57:ea:2a:b6:b2:cd:30:30:b2: 18:50:95:ef:c0:98:5e:f8:86:d4:78:6a:b3:51:70:06:0e:80: de:06:de:09:38:4f:b1:b7:47:5d:16:6a:f1:57:a5:62:05:08: 4a:f8:fc:12:90:f1:3e:7b:c5:60:01:01:c7:97:e6:54:b6:74: 40:35:31:07:8a:29:be:50:e9:57:5d:c5:d5:e1:65:73:7b:78: 67:36:fd:f2:4d:d1:bf:fb:cf:c7:06:9a:24:c6:ac:57:fb:a3: 62:f6:e9:56:38:3e:d7:73:9f:17:64:1d:d6:87:27:fb:af:cc: c7:6e:ea:af:a0:66:de:b0:77:ff:60:8a:16:67:28:38:30:ba: 1b:e6:d1:49:60:e6:af:f3:78:ed:ad:90:d6:36:05:18:42:0a: 78:d4:f4:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFENjMxMTAvBgNVBAUTKDc3ODNCRERDRUMyREY5QjlGQ0ZCOEYxMDlCNzNENEY3 OTRBMTczODYwHhcNMjUwNzAxMDIzODMxWhcNMjUwNzA4MDIzODMxWjAYMRYwFAYD VQQDEw02ODYzNGEyOC0zOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27uvbMl3HrbKz1IW4kwwGFF0++AsRVCP82zX97C4gyH5ihalP/u1tcpxC/jZ 5q+SdQtKbcHQBMgpDKwo/M+yi2jW5kWhgDAdaG8J6qURWLtbzq/8iZI6gnh9B85S SbLj6JY7xz+KKqn+peyQVrsxbx4y7u15W4FZUFBfEQyI3ANsi5jgV2NHcH/XyVt5 mXwLQhFrKJtpNZlaIY02A1huZ5GJ+/AtrvYWBaioUB1MdsM7zH9U7KQUJtm8C2+3 d0eT2kIrOOrSNriT1EU1QQbaGC5jaddwXSF3gFk+0dwuJ01NbMasdCdZ1gZ1Iuoa EqnrqNcXVEYTbaEYUZl6eFbkbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQz/87n w7s114KOT+/WDgghpnu7MB8GA1UdIwQYMBaAFHeDvdzsLfm5/PuPEJtz1PeUoXOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ2My9ERDM2NDExODM0 NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1ibjgtNDhRbTNQVTk1U2hj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0TzkzT3d0LWJuOC00OFFtM1BVOTVTaGM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUQ2My9ERDM2NDExODM0NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1i bjgtNDhRbTNQVTk1U2hjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEMFmmG6QfB0WQq/t6hB0YDPhpNZouLRTV/MmEztvn4RMFkn2Sopd4 AhDTtCqxoOYom4rj0QffXQf7OrM0yom+UY8dvEeJkahN9y1BpFAf++ifAdg0qDvI if401Mia7kqgkbJX6iq2ss0wMLIYUJXvwJhe+IbUeGqzUXAGDoDeBt4JOE+xt0dd FmrxV6ViBQhK+PwSkPE+e8VgAQHHl+ZUtnRANTEHiim+UOlXXcXV4WVze3hnNv3y TdG/+8/HBpokxqxX+6Ni9ulWOD7Xc58XZB3Whyf7r8zHbuqvoGbesHf/YIoWZyg4 MLob5tFJYOav83jtrZDWNgUYQgp41PRf -----END CERTIFICATE-----Generated at Wed Jul 2 02:05:01 2025 by rpki-client