$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: DY5tqQmlUvyH6RdoJsNjbziGxjG4DNKr/XsGi0VYnmE= Subject key identifier: FA:4F:64:02:9E:4C:3A:36:F2:6C:1E:5C:53:54:2B:94:5A:64:F7:65 Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 055F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 0515 Signing time: Tue 01 Jul 2025 00:15:29 +0000 Manifest this update: Tue 01 Jul 2025 00:15:29 +0000 Manifest next update: Tue 08 Jul 2025 00:15:29 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: Nj84McK/Bz8uC7dD4gCoPgCUHr0br58Tr0xvbrqQr1M=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Jul 1 00:15:29 2025 GMT Not After : Jul 8 00:15:29 2025 GMT Subject: CN=686328a1-b947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2a:bf:4f:a5:d6:78:01:73:5d:73:6d:7a:6d: 18:48:ee:35:66:89:ae:76:5d:43:f1:77:d9:3c:93: 9c:9c:08:91:fa:b4:72:71:ce:b1:94:41:ae:5a:9e: 66:e8:cb:2d:49:0a:05:ac:4c:3f:5e:54:92:7a:e3: 9d:6b:7a:42:62:d1:52:5c:bc:71:5b:b5:ed:f9:ed: 08:3c:fd:8d:5b:a5:d8:60:e2:a7:10:ea:be:3e:7b: 36:fe:63:b1:93:fd:99:12:ca:7b:34:fb:72:97:3c: 36:b9:da:9f:69:dd:5f:fa:48:6d:85:43:c5:16:b2: 67:75:3f:5d:60:ea:1c:d7:b9:f0:45:de:07:bc:85: 58:ce:81:86:1d:7f:9b:98:29:5d:87:53:5b:98:f8: dd:15:18:4b:35:c4:92:20:ef:fb:89:a8:58:c4:0b: b7:2c:39:11:57:e9:94:1a:5e:e7:78:40:08:9b:33: 59:fb:bb:19:09:d9:3d:1b:de:e1:f9:3b:3c:c5:2f: 6d:e2:a0:04:3a:8e:6a:8c:f2:f8:7a:c0:8b:b6:3e: f6:ed:df:18:4f:98:83:b8:51:39:0d:81:45:52:75: 98:a9:22:7c:2a:2c:3a:be:fc:14:14:de:f5:c7:b1: 12:41:90:76:b6:7f:5e:bb:b3:d0:79:e9:70:5c:d1: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4F:64:02:9E:4C:3A:36:F2:6C:1E:5C:53:54:2B:94:5A:64:F7:65 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:f3:c2:bf:08:23:4a:02:27:33:02:43:35:e3:16:8f:53:70: 0d:9c:86:e7:54:42:af:8c:80:b3:16:1f:da:e8:8b:74:47:bb: 3f:6d:b9:9a:3a:0e:a6:b8:dc:46:c6:b1:c7:24:e5:75:5e:a4: f5:2f:cf:e9:a2:e0:e7:a4:f6:a8:81:6e:e6:7b:22:cc:0c:50: a6:d9:4f:7e:d4:3e:86:10:dd:8f:71:76:a7:f4:7a:26:20:3d: 70:ad:48:42:94:a1:87:34:6a:56:73:49:df:fe:dd:09:59:2c: e3:2c:a7:ab:ba:14:b2:5b:2f:ed:12:86:9c:98:e5:0e:66:27: 3e:53:16:df:7b:37:d5:b5:33:c6:6d:a8:79:b7:17:c5:83:b9: 48:8c:e3:a8:9f:3d:f3:66:ac:99:89:b1:f0:32:68:1a:6e:9f: 57:32:15:92:dc:de:44:30:d0:be:f9:d1:a4:77:e2:ac:98:dc: 62:cf:49:0b:e2:7a:91:ad:8b:ef:02:8a:b9:ff:0e:71:45:e6: 9c:58:1d:6e:c9:0b:42:2b:e4:f1:35:5b:a5:8e:5b:ce:4a:0e: 11:21:13:74:d9:c2:97:20:1e:f3:93:03:35:44:57:3b:b1:df: 8f:0f:95:ab:c3:b4:2b:4f:d8:79:f4:b4:b6:36:be:8a:cb:fd: 96:23:31:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUwNzAxMDAxNTI5WhcNMjUwNzA4MDAxNTI5WjAYMRYwFAYD VQQDEw02ODYzMjhhMS1iOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iq/T6XWeAFzXXNtem0YSO41Zomudl1D8XfZPJOcnAiR+rRycc6xlEGuWp5m 6MstSQoFrEw/XlSSeuOda3pCYtFSXLxxW7Xt+e0IPP2NW6XYYOKnEOq+Pns2/mOx k/2ZEsp7NPtylzw2udqfad1f+khthUPFFrJndT9dYOoc17nwRd4HvIVYzoGGHX+b mCldh1NbmPjdFRhLNcSSIO/7iahYxAu3LDkRV+mUGl7neEAImzNZ+7sZCdk9G97h +Ts8xS9t4qAEOo5qjPL4esCLtj727d8YT5iDuFE5DYFFUnWYqSJ8Kiw6vvwUFN71 x7ESQZB2tn9eu7PQeelwXNFnVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpPZAKe TDo28mweXFNUK5RaZPdlMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr88K/CCNKAiczAkM14xaPU3ANnIbnVEKvjICzFh/a6It0R7s/bbma Og6muNxGxrHHJOV1XqT1L8/pouDnpPaogW7meyLMDFCm2U9+1D6GEN2PcXan9Hom ID1wrUhClKGHNGpWc0nf/t0JWSzjLKeruhSyWy/tEoacmOUOZic+UxbfezfVtTPG bah5txfFg7lIjOOonz3zZqyZibHwMmgabp9XMhWS3N5EMNC++dGkd+KsmNxiz0kL 4nqRrYvvAoq5/w5xReacWB1uyQtCK+TxNVuljlvOSg4RIRN02cKXIB7zkwM1RFc7 sd+PD5Wrw7QrT9h59LS2Nr6Ky/2WIzEz -----END CERTIFICATE-----Generated at Wed Jul 2 19:38:25 2025 by rpki-client