$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: qIpYEpT6UwAM2E/piCATAnuHmPxsWWVVHDqxqdvwqJ8= Subject key identifier: 00:20:35:22:68:F6:20:79:84:F7:C2:67:1E:12:3C:CD:9C:69:04:19 Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: 7C Signing time: Thu 03 Jul 2025 07:01:19 +0000 Manifest this update: Thu 03 Jul 2025 07:01:19 +0000 Manifest next update: Thu 10 Jul 2025 07:01:19 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: hCVzhgReJTzwnAgkj8SYWdFLF6FLfeooW/5HGHYGgBY=) 2: 42F359D22DE211F0A991F83DC4F9AE02.roa (hash: GS7VGsIuP00slQDLOowlxynsnmpTUaLEp1HD+LKtTww=) 3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: ak2PMRQUjFtffexIQ55kAPaMfx+wqf8bsH7hFH3Plx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Jul 3 07:01:19 2025 GMT Not After : Jul 10 07:01:19 2025 GMT Subject: CN=68662abf-b974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9b:f8:91:51:65:f8:52:65:16:85:46:c5:97: 8a:4d:29:48:72:33:ee:b9:f5:1e:98:ca:11:33:bd: 34:1a:c3:0d:96:cb:ab:5e:88:2d:91:89:10:2f:a3: ef:b1:b5:d5:44:d1:7d:2b:73:9e:b4:76:cb:7a:94: be:59:20:cf:61:f5:99:b4:f2:b7:af:a4:3d:d6:37: db:45:64:f4:74:51:6b:a6:e1:37:24:7c:cf:c4:1b: a3:89:c1:4f:fe:cb:a0:4c:e7:44:fa:10:90:1f:e4: 90:35:c1:82:a5:e3:79:f4:76:a8:5a:d1:27:77:7b: 4a:c9:4a:ef:33:bb:40:70:fa:bd:a5:30:01:91:94: d7:d5:ba:6d:ee:f8:e6:97:64:cb:a7:66:63:90:51: 13:2b:36:08:7a:3b:b9:4c:24:c7:3f:31:da:51:22: 0a:43:72:92:39:61:67:56:18:2f:18:21:e4:36:74: 1b:f8:36:7d:10:68:ed:12:cf:b9:4a:e0:38:7a:29: e6:0e:af:c0:1e:2b:8f:b7:a1:32:e0:3f:5a:78:48: 8d:ac:c3:02:43:ea:c5:65:ab:27:1c:dd:f5:db:d6: a6:93:35:7c:34:40:d0:c6:9d:3e:ea:60:68:79:4a: d6:b6:81:11:d8:7d:22:e2:86:a9:e5:34:33:15:2e: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:20:35:22:68:F6:20:79:84:F7:C2:67:1E:12:3C:CD:9C:69:04:19 X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ba:ed:fd:82:c7:4d:c4:2a:be:d3:67:05:a1:38:e2:6b:10: f6:d6:dd:9d:09:bf:f6:7b:ac:0b:d4:1c:66:1a:2a:ff:73:05: 1b:b1:62:19:ea:eb:f4:d7:95:4f:ef:c9:df:39:87:06:f0:2f: 8c:fa:5e:22:61:74:e2:38:7a:1b:35:7d:de:4e:06:2e:25:31: c7:5e:2f:9c:4d:38:c6:11:8d:97:3b:2a:24:21:1e:46:aa:af: 7b:15:24:0e:be:fc:51:d5:57:1f:c8:a4:28:07:eb:6a:be:be: e4:1d:8e:0e:d2:a8:d8:35:9a:30:f1:9b:12:ca:cf:c4:73:64: e8:11:6f:39:51:a9:cb:53:08:8f:24:79:6c:a7:83:dd:ec:f8: f6:98:4a:88:dc:e1:39:d2:62:e9:0e:3b:45:88:3d:b3:5b:83: ed:ce:4e:b5:37:3a:90:41:5e:fa:8e:30:dc:85:5c:ac:81:e2: cd:91:b0:ae:13:08:ca:3f:0d:45:73:1a:4e:73:61:f7:3a:03: 02:4c:22:59:8c:5c:50:da:60:04:31:a4:ef:74:75:71:ed:9a: 41:a9:21:2b:1b:ac:08:5f:b2:89:e4:b3:95:81:5d:d0:3c:1c: 6b:28:54:75:7b:d2:be:c2:d8:dd:ae:6a:93:a5:48:e6:b9:96: 17:91:09:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKERGNUZFMjFCN0M5NTUyMTU5MzQ0NzE3OTREOEIwNzA2 NjNEMkIzNEUwHhcNMjUwNzAzMDcwMTE5WhcNMjUwNzEwMDcwMTE5WjAYMRYwFAYD VQQDEw02ODY2MmFiZi1iOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05v4kVFl+FJlFoVGxZeKTSlIcjPuufUemMoRM700GsMNlsurXogtkYkQL6Pv sbXVRNF9K3OetHbLepS+WSDPYfWZtPK3r6Q91jfbRWT0dFFrpuE3JHzPxBujicFP /sugTOdE+hCQH+SQNcGCpeN59HaoWtEnd3tKyUrvM7tAcPq9pTABkZTX1bpt7vjm l2TLp2ZjkFETKzYIeju5TCTHPzHaUSIKQ3KSOWFnVhgvGCHkNnQb+DZ9EGjtEs+5 SuA4einmDq/AHiuPt6Ey4D9aeEiNrMMCQ+rFZasnHN3129amkzV8NEDQxp0+6mBo eUrWtoER2H0i4oap5TQzFS5KDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAgNSJo 9iB5hPfCZx4SPM2caQQZMB8GA1UdIwQYMBaAFN9f4ht8lVIVk0RxeU2LBwZj0rNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84MDJBRTY0NkEy NzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVoV1RSSEY1VFlzSEJtUFNz MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3MwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVo V1RSSEY1VFlzSEJtUFNzMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9uu39gsdNxCq+02cFoTjiaxD21t2dCb/2e6wL1BxmGir/cwUbsWIZ 6uv015VP78nfOYcG8C+M+l4iYXTiOHobNX3eTgYuJTHHXi+cTTjGEY2XOyokIR5G qq97FSQOvvxR1VcfyKQoB+tqvr7kHY4O0qjYNZow8ZsSys/Ec2ToEW85UanLUwiP JHlsp4Pd7Pj2mEqI3OE50mLpDjtFiD2zW4Ptzk61NzqQQV76jjDchVysgeLNkbCu EwjKPw1FcxpOc2H3OgMCTCJZjFxQ2mAEMaTvdHVx7ZpBqSErG6wIX7KJ5LOVgV3Q PBxrKFR1e9K+wtjdrmqTpUjmuZYXkQn4 -----END CERTIFICATE-----Generated at Thu Jul 3 22:55:51 2025 by rpki-client