$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft File: poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json) Hash identifier: x6KDC9XKxrlsLC0vYG+9sOy7LqiEvXs3Vm8GaP/qEQY= Subject key identifier: 97:EC:32:43:39:CA:FE:5B:5B:25:12:43:78:B3:37:07:27:16:84:BC Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E Certificate issuer: /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft Manifest number: 03B4 Signing time: Thu 03 Jul 2025 01:03:00 +0000 Manifest this update: Thu 03 Jul 2025 01:02:59 +0000 Manifest next update: Thu 10 Jul 2025 01:02:59 +0000 Files and hashes: 1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: 2QaglELvH/DKI95NBdOnUn6cVj+QDcC46LHAKnWqKLQ=) 2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: CW3j/kB0iIlMJ+3lrD5HV2LAKz9hUDzTZRZrWdpxIYA=) 3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: KwB5Za6c44Sp6WKsELOvklwRL+/LDv/rBqGOUWdpNrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Validity Not Before: Jul 3 01:02:59 2025 GMT Not After : Jul 10 01:02:59 2025 GMT Subject: CN=6865d6c4-17e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:6f:68:82:97:c8:1c:5e:52:3b:06:0d:df: a1:42:06:fa:eb:10:02:51:69:91:91:c0:33:c5:54: 91:25:c3:7d:9d:df:14:f5:35:82:19:c0:cc:2c:69: 83:41:95:e2:90:06:cc:3f:41:cb:2f:61:a9:6b:18: eb:b3:ab:6a:1a:d2:f7:44:2b:c9:c4:36:0c:a0:c0: e7:7b:52:f1:c8:20:95:d7:b0:52:73:00:37:b0:05: c2:05:8b:82:d4:82:68:e0:ac:0b:51:41:17:6c:4f: 5b:82:39:7e:70:be:d0:44:89:d8:fa:87:d2:44:f9: 2d:e3:71:ae:e0:fe:27:66:20:ba:85:c1:5e:6a:48: 04:a5:9b:88:c7:af:2a:7a:31:db:9a:8e:76:27:b6: 43:61:ed:6c:a9:81:f1:58:29:fa:15:33:15:7e:f7: d9:a6:f5:fd:a1:32:1d:7a:ae:f9:96:58:86:7c:6b: e4:df:26:1f:fd:fa:9e:2e:e3:ef:f6:58:1f:90:5f: 79:37:5f:22:cd:10:93:f8:f9:bd:de:e6:1b:d9:46: ea:e3:ae:31:77:7f:b3:f4:a7:7f:f1:03:c3:b4:12: ca:37:a8:14:ee:c9:bd:1a:18:18:ce:23:4a:42:72: 29:37:6b:86:66:09:fb:bc:99:d3:fb:b8:21:d3:1e: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EC:32:43:39:CA:FE:5B:5B:25:12:43:78:B3:37:07:27:16:84:BC X509v3 Authority Key Identifier: keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:a2:78:1d:5c:20:d1:27:42:b5:5e:64:ee:5b:d6:ed:75:f0: bb:d7:b5:80:1d:1f:82:67:67:18:e7:a6:f2:1c:51:6a:40:24: 8d:20:26:9d:de:fa:80:9f:32:73:83:7d:85:b7:d0:91:8d:7c: 87:a3:e7:fd:f8:4a:2a:e7:5c:fa:23:08:b0:34:4b:73:68:3e: 2b:3d:6c:30:d7:99:e7:58:f0:47:7e:57:a2:68:09:a2:8b:5c: 99:c0:2f:b0:6b:33:16:df:de:49:e7:4f:dc:90:79:ae:3c:16: f4:03:6f:7d:36:55:e6:5f:ba:f1:7a:13:39:da:2c:14:bd:cd: ff:57:76:09:36:cc:28:f4:06:bd:4b:75:7b:10:f3:8a:e4:54: cc:b9:a8:cd:0c:77:a1:a2:17:36:68:f4:62:bb:e4:e7:60:8d: 33:34:57:d2:4b:f3:6d:5b:36:a0:69:93:36:bc:a4:83:03:b9: 32:74:19:3e:47:81:fd:20:9b:07:db:9e:77:05:b3:76:68:5b: 5d:ef:a6:6b:6e:b5:f3:fb:99:65:3c:fd:27:ee:6e:73:f7:1e: f7:64:eb:e3:45:5d:ed:3e:53:2f:3f:cb:2f:28:90:cc:f8:c2: 0d:e2:39:d9:1a:e3:f7:41:f6:cd:bd:50:2b:33:51:44:b8:10: 26:3e:c4:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0RkY2RkEwQkJF NkNFQzJENEUwHhcNMjUwNzAzMDEwMjU5WhcNMjUwNzEwMDEwMjU5WjAYMRYwFAYD VQQDEw02ODY1ZDZjNC0xN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbxvaIKXyBxeUjsGDd+hQgb66xACUWmRkcAzxVSRJcN9nd8U9TWCGcDMLGmD QZXikAbMP0HLL2Gpaxjrs6tqGtL3RCvJxDYMoMDne1LxyCCV17BScwA3sAXCBYuC 1IJo4KwLUUEXbE9bgjl+cL7QRInY+ofSRPkt43Gu4P4nZiC6hcFeakgEpZuIx68q ejHbmo52J7ZDYe1sqYHxWCn6FTMVfvfZpvX9oTIdeq75lliGfGvk3yYf/fqeLuPv 9lgfkF95N18izRCT+Pm93uYb2Ubq464xd3+z9Kd/8QPDtBLKN6gU7sm9GhgYziNK QnIpN2uGZgn7vJnT+7gh0x63BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfsMkM5 yv5bWyUSQ3izNwcnFoS8MB8GA1UdIwQYMBaAFKaDYyVG8aEHhLwaT/b6C75s7C1O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU0Ny82MjZFMTA5NDk4 QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9RZUV2QnBQOXZvTHZtenNM VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvTmpKVWJ4b1FlRXZCcFA5dm9Mdm16c0xVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU0Ny82MjZFMTA5NDk4QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9R ZUV2QnBQOXZvTHZtenNMVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7ongdXCDRJ0K1XmTuW9btdfC717WAHR+CZ2cY56byHFFqQCSNICad 3vqAnzJzg32Ft9CRjXyHo+f9+Eoq51z6IwiwNEtzaD4rPWww15nnWPBHfleiaAmi i1yZwC+wazMW395J50/ckHmuPBb0A299NlXmX7rxehM52iwUvc3/V3YJNswo9Aa9 S3V7EPOK5FTMuajNDHehohc2aPRiu+TnYI0zNFfSS/NtWzagaZM2vKSDA7kydBk+ R4H9IJsH2553BbN2aFtd76ZrbrXz+5llPP0n7m5z9x73ZOvjRV3tPlMvP8svKJDM +MIN4jnZGuP3QfbNvVArM1FEuBAmPsSG -----END CERTIFICATE-----Generated at Thu Jul 3 09:40:54 2025 by rpki-client