$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json) Hash identifier: S6bs7qC6yGCLsNeLp6DtqQ1WsHSuVV+ImGZuO5hUAj8= Subject key identifier: B8:BE:C6:54:DB:C5:46:FA:CF:1A:04:58:17:4F:F5:6A:6F:38:7F:E9 Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Certificate serial: 031A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft Manifest number: 0316 Signing time: Thu 03 Jul 2025 01:33:56 +0000 Manifest this update: Thu 03 Jul 2025 01:33:56 +0000 Manifest next update: Thu 10 Jul 2025 01:33:56 +0000 Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: 6H3aHaToupnin9Pr9GmEwCo6rxQw0IYOV4E2ndYfFyg=) 2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: 7bYPkVMZrrnunuEV97KsBcLOn5jOLNiIR6VQXBJQwkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 794 (0x31a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Validity Not Before: Jul 3 01:33:56 2025 GMT Not After : Jul 10 01:33:56 2025 GMT Subject: CN=6865de04-6bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:6d:9f:58:1d:4c:08:4d:e3:5f:a5:ca:bd: 2b:c3:95:5f:98:4d:be:b0:37:68:5d:7e:de:76:a0: 87:f2:83:22:00:f6:ac:cc:09:f3:04:30:33:be:26: 9f:d4:da:94:61:15:28:24:c4:da:02:d7:54:7d:60: c1:e2:3a:ab:64:f1:c5:3e:e6:6a:0e:68:60:86:9e: 99:34:ce:2a:19:99:23:50:ac:7d:f5:c1:46:4b:a4: dc:e5:9d:55:ea:e0:b2:5d:c0:c0:2a:33:c7:fb:93: 58:1e:0c:59:af:1a:cc:c6:9c:fd:cc:0e:dc:91:b5: 9b:d2:94:07:49:e4:64:ec:70:2d:84:6d:07:1d:d0: 93:d3:3b:94:86:e7:be:7e:22:5c:eb:92:8d:b7:1d: c2:b4:b9:ce:cc:38:31:85:0b:1b:c1:cb:e6:b3:f3: 0d:dc:8e:a1:29:e9:02:91:c7:67:b5:e8:57:78:9d: 21:7b:8b:7a:06:8c:39:a0:3a:f0:f4:de:21:fd:32: 69:2d:bd:fa:2e:a0:b0:47:c2:7d:ac:c7:59:e0:20: 53:ec:e9:0c:cb:d6:f5:57:04:bc:38:91:89:d7:35: b1:3f:48:d6:dc:2f:da:41:e4:e1:fc:d9:fa:8e:1c: d3:79:d7:43:1e:02:ad:de:8c:6f:82:51:73:fc:55: 38:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BE:C6:54:DB:C5:46:FA:CF:1A:04:58:17:4F:F5:6A:6F:38:7F:E9 X509v3 Authority Key Identifier: keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c9:15:a6:bc:43:63:9f:66:02:a3:d7:fb:53:3f:7c:42:a0: 22:bc:db:71:73:f4:7e:c9:a6:a2:e9:40:62:60:e7:4e:10:6c: 1d:98:d3:a3:88:00:1b:50:10:58:4f:8f:bc:a9:99:ba:1e:97: 30:b2:47:6b:cd:1d:dd:d7:19:ca:d3:57:a2:11:51:51:da:4b: 31:e2:9f:50:07:e5:69:d9:01:fb:a5:e8:d6:67:df:fd:81:dc: 2a:f1:a2:0b:ea:81:4c:e0:19:1c:29:b1:81:c4:fd:53:1f:57: 39:5e:c3:1d:f7:10:d6:ba:8b:15:d0:fe:da:05:d2:ec:76:fb: 5f:04:dd:bd:c2:57:a6:e6:b4:a8:1d:9c:59:86:84:e0:41:31: 08:08:5e:83:45:1e:45:b7:7f:2b:cf:f0:af:5d:9c:8c:3f:a1: bb:19:ab:7f:c4:85:5f:fe:94:5e:c5:ca:01:d1:45:7d:da:b3: 63:1e:3d:9a:4a:e3:8e:4a:6e:5f:b0:0d:3d:a2:c6:43:1b:87: 94:72:05:09:c4:53:de:0c:6f:5d:68:22:84:e9:a5:29:49:8c: 56:93:05:4d:43:a6:62:bb:ab:58:79:0f:67:f7:e3:50:ed:a3: 72:4c:68:b3:f7:34:a2:e7:5f:53:b1:39:f4:49:9e:22:0a:42: ce:f9:99:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5 QThGMTUzNUQwHhcNMjUwNzAzMDEzMzU2WhcNMjUwNzEwMDEzMzU2WjAYMRYwFAYD VQQDEw02ODY1ZGUwNC02YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBBtn1gdTAhN41+lyr0rw5VfmE2+sDdoXX7edqCH8oMiAPaszAnzBDAzviaf 1NqUYRUoJMTaAtdUfWDB4jqrZPHFPuZqDmhghp6ZNM4qGZkjUKx99cFGS6Tc5Z1V 6uCyXcDAKjPH+5NYHgxZrxrMxpz9zA7ckbWb0pQHSeRk7HAthG0HHdCT0zuUhue+ fiJc65KNtx3CtLnOzDgxhQsbwcvms/MN3I6hKekCkcdntehXeJ0he4t6Bow5oDrw 9N4h/TJpLb36LqCwR8J9rMdZ4CBT7OkMy9b1VwS8OJGJ1zWxP0jW3C/aQeTh/Nn6 jhzTeddDHgKt3oxvglFz/FU48QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi+xlTb xUb6zxoEWBdP9WpvOH/pMB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1 QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w Z2tDai02T3Z2WlNhanhVMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgyRWmvENjn2YCo9f7Uz98QqAivNtxc/R+yaai6UBiYOdOEGwdmNOj iAAbUBBYT4+8qZm6HpcwskdrzR3d1xnK01eiEVFR2ksx4p9QB+Vp2QH7pejWZ9/9 gdwq8aIL6oFM4BkcKbGBxP1TH1c5XsMd9xDWuosV0P7aBdLsdvtfBN29wlem5rSo HZxZhoTgQTEICF6DRR5Ft38rz/CvXZyMP6G7Gat/xIVf/pRexcoB0UV92rNjHj2a SuOOSm5fsA09osZDG4eUcgUJxFPeDG9daCKE6aUpSYxWkwVNQ6Ziu6tYeQ9n9+NQ 7aNyTGiz9zSi519TsTn0SZ4iCkLO+Zk4 -----END CERTIFICATE-----Generated at Thu Jul 3 09:28:06 2025 by rpki-client