$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft File: 0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json) Hash identifier: EIHr4iidjDRBiPyR49L+yKgND0iVz+QbqiuSmUH9Q2U= Subject key identifier: 19:26:19:8A:95:DB:E6:FD:3B:19:B0:D1:2E:0E:EB:E5:6E:42:DD:66 Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft Manifest number: 18 Signing time: Thu 03 Jul 2025 08:15:20 +0000 Manifest this update: Thu 03 Jul 2025 08:15:19 +0000 Manifest next update: Thu 10 Jul 2025 08:15:19 +0000 Files and hashes: 1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: Wa7XRzlWAJC3cl7zm5mrQ84QrhZ3ITixahBns0Zv/go=) 2: C3C056A636DD11F08C82E269C4F9AE02.roa (hash: HBKXI2AjuuTAqBzBKbi8y9q49xdsPFITyMYY5p5WuOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Validity Not Before: Jul 3 08:15:19 2025 GMT Not After : Jul 10 08:15:19 2025 GMT Subject: CN=68663c18-ccd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:c2:b2:f2:ba:06:12:58:07:0d:3a:24:9e: 82:a3:02:9b:55:b7:7d:88:86:aa:fa:ad:96:65:ba: 04:be:81:c5:3a:66:c9:9a:17:0d:b3:9f:4f:c0:03: 17:03:b9:34:a4:a8:e8:30:5c:16:43:da:b2:83:73: 5e:c8:3c:78:b2:48:57:ed:e2:a3:c2:e5:b5:d5:b9: 54:5b:15:63:d4:5d:8e:c3:1b:74:f3:de:85:04:c5: 90:86:65:68:7f:39:7e:01:44:5a:99:30:f7:2d:82: 83:bc:ff:f2:3d:7f:07:30:fb:94:99:61:29:1c:50: e3:84:89:d3:3f:29:d3:db:6b:07:27:93:9b:47:17: 67:25:e6:d2:1d:30:34:dd:d1:7c:eb:1f:7e:a1:8b: da:dd:1a:d8:6f:a6:ed:c5:ab:84:74:63:7f:df:d6: 67:74:e3:60:97:68:2c:fe:cb:d3:2b:6d:5d:df:1b: 96:ea:d1:32:6f:86:f5:f1:b4:d0:02:53:64:65:18: f2:f5:29:50:91:54:20:5e:68:05:2a:95:66:74:bd: f5:aa:6e:b5:e7:be:ac:df:60:c5:a5:28:40:93:11: c7:22:4d:cc:07:ff:1d:fa:25:01:a2:ea:b0:62:74: 21:76:7f:38:d0:8d:64:08:76:b6:47:75:c4:3a:d0: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:26:19:8A:95:DB:E6:FD:3B:19:B0:D1:2E:0E:EB:E5:6E:42:DD:66 X509v3 Authority Key Identifier: keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f3:97:8c:18:a7:07:fa:5d:55:17:88:4f:25:8c:c2:a9:c0: 55:fc:0b:ce:73:3b:af:15:d7:aa:15:22:12:8d:85:cd:01:30: 70:32:8e:0e:c5:b5:c0:26:b0:d2:7a:9e:1c:68:d1:a2:56:fa: fd:af:b0:74:76:57:39:a4:35:78:8d:01:2f:02:67:ca:91:8f: a9:51:57:fc:0c:b6:c3:0c:f3:05:5d:3b:05:0d:a8:fa:f9:6f: a6:d4:98:72:c4:79:e1:a4:f1:f0:2b:73:fa:01:a6:e0:2a:a8: 28:1e:81:df:7f:16:dd:80:8b:a3:05:43:2f:da:9d:14:a7:9a: c4:5a:d6:4c:2c:41:61:5d:f2:c1:2f:31:76:82:4a:b1:cf:7b: 77:55:75:4e:df:b1:c3:29:dd:3f:b8:4b:5f:e1:7c:a3:1a:8d: e0:52:07:aa:e2:9d:2a:d8:ef:27:88:2f:ec:ab:d7:b5:ba:e8: be:8e:45:e1:e8:8c:6b:82:d2:1a:d6:b1:72:f8:94:c5:30:57: 0e:dd:74:bd:54:67:31:f0:1c:06:c5:6a:f4:83:d6:b5:29:a5: fb:cb:94:c8:c7:ea:a9:6a:f4:3d:0c:f1:28:7c:4f:09:4f:0f: 50:a6:41:c8:1e:ee:17:87:7e:7d:2a:04:77:e4:37:c3:29:c0: 01:b4:1d:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkJBRjExMC8GA1UEBRMoRDIwNjZCNjE5MzRFNzdDRjI2N0E5RENDMzhCRjVERUUy MUYwN0JBMzAeFw0yNTA3MDMwODE1MTlaFw0yNTA3MTAwODE1MTlaMBgxFjAUBgNV BAMTDTY4NjYzYzE4LWNjZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAmMKy8roGElgHDToknoKjAptVt32Ihqr6rZZlugS+gcU6ZsmaFw2zn0/AAxcD uTSkqOgwXBZD2rKDc17IPHiySFft4qPC5bXVuVRbFWPUXY7DG3Tz3oUExZCGZWh/ OX4BRFqZMPctgoO8//I9fwcw+5SZYSkcUOOEidM/KdPbawcnk5tHF2cl5tIdMDTd 0XzrH36hi9rdGthvpu3Fq4R0Y3/f1md042CXaCz+y9MrbV3fG5bq0TJvhvXxtNAC U2RlGPL1KVCRVCBeaAUqlWZ0vfWqbrXnvqzfYMWlKECTEcciTcwH/x36JQGi6rBi dCF2fzjQjWQIdrZHdcQ60F2ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGSYZipXb 5v07GbDRLg7r5W5C3WYwHwYDVR0jBBgwFoAU0gZrYZNOd88mep3MOL9d7iHwe6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQkFGLzEwQzE5RDMwMzZE RDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4bWVwM01PTDlkN2lId2U2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGdacllaTk9kODhtZXAzTU9MOWQ3aUh3ZTZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QkFGLzEwQzE5RDMwMzZERDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4 bWVwM01PTDlkN2lId2U2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJTzl4wYpwf6XVUXiE8ljMKpwFX8C85zO68V16oVIhKNhc0BMHAyjg7F tcAmsNJ6nhxo0aJW+v2vsHR2VzmkNXiNAS8CZ8qRj6lRV/wMtsMM8wVdOwUNqPr5 b6bUmHLEeeGk8fArc/oBpuAqqCgegd9/Ft2Ai6MFQy/anRSnmsRa1kwsQWFd8sEv MXaCSrHPe3dVdU7fscMp3T+4S1/hfKMajeBSB6rinSrY7yeIL+yr17W66L6OReHo jGuC0hrWsXL4lMUwVw7ddL1UZzHwHAbFavSD1rUppfvLlMjH6qlq9D0M8Sh8TwlP D1CmQcge7heHfn0qBHfkN8MpwAG0HSM= -----END CERTIFICATE-----Generated at Fri Jul 4 02:10:10 2025 by rpki-client