$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: I079WheBUSIt0iU23XhHVt4YcsPy02yVM7de5Qg18Xc= Subject key identifier: 06:43:48:10:19:27:B4:AC:6F:47:5E:27:87:13:36:E2:A6:73:75:DA Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 11C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 11AC Signing time: Wed 02 Jul 2025 17:24:07 +0000 Manifest this update: Wed 02 Jul 2025 17:24:07 +0000 Manifest next update: Wed 09 Jul 2025 17:24:07 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: P5ueNLbovT3gBcH65c/pLjZweTKECx7k8/q54jbb8LQ=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4550 (0x11c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Jul 2 17:24:07 2025 GMT Not After : Jul 9 17:24:07 2025 GMT Subject: CN=68656b37-a77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:93:1c:73:f9:4b:5e:f1:76:7d:84:d4:80: 47:3a:9a:d1:1c:61:f9:9f:65:1c:4d:3d:3d:a5:b3: d8:a4:20:89:2e:06:00:b7:18:0e:ea:df:e2:1d:da: e3:91:33:7e:f4:eb:04:83:84:16:2d:2d:e7:0f:8a: 17:a9:80:6c:0d:ab:33:48:14:a9:15:ee:0f:86:7c: 12:42:26:8c:26:5c:32:4c:d0:b5:9b:ab:f3:fc:6a: dd:5d:01:38:8c:73:45:81:1b:1c:d0:ae:41:16:5d: 46:2a:90:54:0a:24:6b:09:6a:0c:59:3a:20:cc:4b: 4b:84:99:8e:52:d5:18:82:b0:d7:7e:e8:b1:93:b9: f6:a4:d9:55:96:b0:1a:29:ac:6f:ec:cf:e5:9d:82: fe:99:d5:13:9b:ad:a6:9c:91:de:63:17:f7:df:9d: 6c:c9:77:75:32:cb:63:05:7a:01:a7:cc:c7:02:68: 55:ff:40:fa:32:b2:9d:cb:f6:6e:2b:6e:a7:c4:2a: 27:9c:bf:d3:7b:96:a4:d3:6a:2c:53:f6:13:69:cd: 24:f0:7b:cc:67:77:fb:db:e6:e9:9a:27:dc:cf:3a: 75:3e:3d:3d:68:3c:c6:70:0a:d8:76:e4:7e:bd:96: ab:f7:69:94:fc:11:1f:d1:14:46:2a:1a:8d:12:ea: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:43:48:10:19:27:B4:AC:6F:47:5E:27:87:13:36:E2:A6:73:75:DA X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:8e:e9:04:83:ac:dc:db:a5:a8:13:89:35:f6:25:62:e4:73: 29:20:5d:1c:f0:13:b0:1c:5e:8f:bd:47:39:82:5f:5e:bf:c6: f9:ce:0b:64:d9:85:61:6a:07:03:f0:d0:0c:28:aa:8f:f2:63: 5f:4d:5a:26:8c:1e:50:d4:f0:2c:6c:24:06:00:03:8d:e3:c3: 97:5e:b1:03:4f:c8:a7:71:84:fc:3d:b4:81:cc:ec:54:c1:0e: 43:ed:a6:b5:c7:4f:04:ff:61:06:15:27:9b:37:22:04:cc:5a: 9d:ef:3a:46:b0:a5:7a:14:04:c3:36:d8:06:3f:de:c1:de:7d: e0:96:c0:0d:a6:40:06:6a:df:b0:84:bd:fa:c3:7d:5d:d8:e1: 80:ec:40:4a:5a:e0:72:b3:b2:eb:60:69:a5:1c:1e:54:e6:78: 5d:52:23:6d:d0:89:71:02:29:7f:17:72:47:ca:6c:e5:12:d6: 19:a5:e5:f4:06:fb:b5:51:45:82:8b:2f:80:c4:68:78:2f:5e: e5:7f:1e:c5:67:9e:41:4a:e1:eb:1f:b5:77:84:60:18:70:09: 62:d7:ed:b4:fe:3d:3a:cd:ee:e9:bd:db:0e:3d:e2:82:df:88: 89:cd:c1:88:11:1d:06:57:dd:63:db:28:b5:59:41:0c:21:aa: db:1d:51:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUwNzAyMTcyNDA3WhcNMjUwNzA5MTcyNDA3WjAYMRYwFAYD VQQDEw02ODY1NmIzNy1hNzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEyTHHP5S17xdn2E1IBHOprRHGH5n2UcTT09pbPYpCCJLgYAtxgO6t/iHdrj kTN+9OsEg4QWLS3nD4oXqYBsDaszSBSpFe4PhnwSQiaMJlwyTNC1m6vz/GrdXQE4 jHNFgRsc0K5BFl1GKpBUCiRrCWoMWTogzEtLhJmOUtUYgrDXfuixk7n2pNlVlrAa Kaxv7M/lnYL+mdUTm62mnJHeYxf3351syXd1MstjBXoBp8zHAmhV/0D6MrKdy/Zu K26nxConnL/Te5ak02osU/YTac0k8HvMZ3f72+bpmifczzp1Pj09aDzGcArYduR+ vZar92mU/BEf0RRGKhqNEupZjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZDSBAZ J7Ssb0deJ4cTNuKmc3XaMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChjukEg6zc26WoE4k19iVi5HMpIF0c8BOwHF6PvUc5gl9ev8b5zgtk 2YVhagcD8NAMKKqP8mNfTVomjB5Q1PAsbCQGAAON48OXXrEDT8incYT8PbSBzOxU wQ5D7aa1x08E/2EGFSebNyIEzFqd7zpGsKV6FATDNtgGP97B3n3glsANpkAGat+w hL36w31d2OGA7EBKWuBys7LrYGmlHB5U5nhdUiNt0IlxAil/F3JHymzlEtYZpeX0 Bvu1UUWCiy+AxGh4L17lfx7FZ55BSuHrH7V3hGAYcAli1+20/j06ze7pvdsOPeKC 34iJzcGIER0GV91j2yi1WUEMIarbHVFy -----END CERTIFICATE-----Generated at Thu Jul 3 14:31:12 2025 by rpki-client