$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json) Hash identifier: R/hQOaKHtDwMkCck15RvdNyb0DEnoIzx9PW3wmkrcAM= Subject key identifier: 5E:29:64:2E:41:0D:5B:B5:7E:54:AB:D3:C2:39:81:FF:2C:6F:E3:73 Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft Manifest number: 0667 Signing time: Wed 02 Jul 2025 22:59:15 +0000 Manifest this update: Wed 02 Jul 2025 22:59:15 +0000 Manifest next update: Wed 09 Jul 2025 22:59:15 +0000 Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: hVo0YfT7ppmOIoCFcSuvlJsw8/OfLSz2ptajDKUOTBQ=) 2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: d5GPHUQ6PbzbALE1pusneP0He2eAPmJTteAnoAOf/Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Validity Not Before: Jul 2 22:59:15 2025 GMT Not After : Jul 9 22:59:15 2025 GMT Subject: CN=6865b9c3-5339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:5a:a3:84:af:52:fb:b2:27:83:3e:1c:03: 7d:e0:d7:a3:66:4d:09:9c:18:f1:02:6c:12:99:60: 35:4a:25:5c:98:34:0e:1f:17:3e:b9:93:60:33:12: 66:c2:ae:11:c3:ee:0a:e7:9a:41:10:99:c5:8a:cd: 1e:77:4a:91:5a:ed:34:15:1b:25:de:19:23:01:aa: 29:3e:b5:bd:a6:50:ee:70:0f:13:8a:ff:b0:80:b7: c8:be:2c:b6:2a:57:42:fb:e9:23:99:ec:d8:45:ae: ba:4f:e4:47:ee:d3:61:54:89:3d:ee:f0:ca:79:60: 6d:55:00:4e:a2:8b:8f:26:1a:73:35:de:80:4e:dd: 4a:b1:82:d1:2e:65:e6:90:aa:87:82:8a:d5:fa:49: 4f:c0:cb:8b:15:76:4c:f2:f1:c2:a1:c1:4a:25:b1: 7a:e6:2d:7e:96:3e:cd:e4:64:1c:28:00:eb:99:9b: ec:25:cf:11:96:9a:97:6e:7b:e3:b1:39:59:bf:2e: 12:03:fd:62:e4:48:4a:51:b9:14:08:7c:bd:63:d4: d8:17:41:7f:6c:91:b9:95:5d:97:70:cd:93:6d:f6: fc:2c:9f:72:60:c6:cd:b9:22:1d:5e:9e:66:12:8f: b4:8a:f9:c3:91:5c:5d:5a:63:8b:26:73:2a:22:aa: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:29:64:2E:41:0D:5B:B5:7E:54:AB:D3:C2:39:81:FF:2C:6F:E3:73 X509v3 Authority Key Identifier: keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a2:43:f7:04:30:c6:bc:68:9b:db:90:c1:06:a6:49:ef:ba: 63:38:a2:e9:dd:a1:ae:08:ab:07:6b:1d:fb:ae:42:e4:c0:74: cf:ab:f2:ce:08:2a:be:56:74:db:b5:82:0e:bf:0b:a7:00:64: 8a:07:14:36:a8:f2:0f:2e:74:60:c3:58:88:1c:5d:f8:15:72: ac:77:8a:8c:03:be:b3:90:9e:3a:dd:3f:72:ee:e6:f3:23:78: 45:2b:0a:3c:77:96:58:1b:5d:ca:f1:b0:3c:b7:58:67:57:7d: 06:2a:ef:60:02:fe:f3:a6:aa:a4:6c:32:49:3f:2a:05:86:e6: 61:c0:e6:1e:c3:b4:08:26:d7:7e:71:c5:13:14:40:dd:59:b6: 0e:51:59:86:4b:4a:4c:24:2e:73:db:8b:e9:8b:42:0b:10:50: 2d:1f:c1:81:dd:c0:d8:b1:43:04:f9:54:35:3c:45:f6:d3:3a: 33:dd:94:e9:5e:ed:72:37:a3:44:05:14:d5:01:90:c7:1a:21: d3:b4:30:f0:0f:60:20:64:b4:91:2f:63:3d:67:10:43:53:83: b1:a6:bb:fb:59:89:7c:41:87:c9:99:3d:51:ca:12:b2:1b:56: 31:a0:bd:c2:17:ce:83:37:7b:09:1a:2b:17:a9:28:97:9d:09: f8:5e:3a:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4 MURBMkI1QTEwHhcNMjUwNzAyMjI1OTE1WhcNMjUwNzA5MjI1OTE1WjAYMRYwFAYD VQQDEw02ODY1YjljMy01MzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPtao4SvUvuyJ4M+HAN94NejZk0JnBjxAmwSmWA1SiVcmDQOHxc+uZNgMxJm wq4Rw+4K55pBEJnFis0ed0qRWu00FRsl3hkjAaopPrW9plDucA8Tiv+wgLfIviy2 KldC++kjmezYRa66T+RH7tNhVIk97vDKeWBtVQBOoouPJhpzNd6ATt1KsYLRLmXm kKqHgorV+klPwMuLFXZM8vHCocFKJbF65i1+lj7N5GQcKADrmZvsJc8RlpqXbnvj sTlZvy4SA/1i5EhKUbkUCHy9Y9TYF0F/bJG5lV2XcM2Tbfb8LJ9yYMbNuSIdXp5m Eo+0ivnDkVxdWmOLJnMqIqopaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4pZC5B DVu1flSr08I5gf8sb+NzMB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4 Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+okP3BDDGvGib25DBBqZJ77pjOKLp3aGuCKsHax37rkLkwHTPq/LO CCq+VnTbtYIOvwunAGSKBxQ2qPIPLnRgw1iIHF34FXKsd4qMA76zkJ463T9y7ubz I3hFKwo8d5ZYG13K8bA8t1hnV30GKu9gAv7zpqqkbDJJPyoFhuZhwOYew7QIJtd+ ccUTFEDdWbYOUVmGS0pMJC5z24vpi0ILEFAtH8GB3cDYsUME+VQ1PEX20zoz3ZTp Xu1yN6NEBRTVAZDHGiHTtDDwD2AgZLSRL2M9ZxBDU4Oxprv7WYl8QYfJmT1RyhKy G1YxoL3CF86DN3sJGisXqSiXnQn4Xjpa -----END CERTIFICATE-----Generated at Fri Jul 4 23:20:35 2025 by rpki-client