$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json) Hash identifier: qornSlpEG2dkba+MHzkqT/rq7hKqIZv6YZ4xI3S782o= Subject key identifier: 59:3E:4B:01:A3:05:FD:F3:7A:DC:5C:C8:FD:CB:66:C6:91:B9:F6:1B Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft Manifest number: 0167 Signing time: Thu 03 Jul 2025 04:00:38 +0000 Manifest this update: Thu 03 Jul 2025 04:00:38 +0000 Manifest next update: Thu 10 Jul 2025 04:00:38 +0000 Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: nwA8j/NRSKTXm5exXvwi97tqz2zwBlnOhf4iTr9SdPM=) 2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: +03LMs4GrIEKMr4AUS8THT/+aKHBZJZQJL5qDyXGi38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: Jul 3 04:00:38 2025 GMT Not After : Jul 10 04:00:38 2025 GMT Subject: CN=68660066-77eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:ff:ed:7b:86:52:01:c3:14:b9:22:a5:84: 0b:aa:25:b8:57:90:3e:ad:be:78:43:de:a5:51:4d: aa:fd:a5:25:ba:04:13:f0:bf:37:be:90:28:57:71: 7e:3f:53:49:bf:41:f5:b6:f2:d8:0f:26:7e:ff:0f: ae:6d:fc:59:18:87:a9:ce:0a:d3:6b:8a:a8:1e:d9: 3e:ea:72:ce:69:e5:b0:e8:5f:81:7b:04:f4:f1:1c: 50:72:55:a8:da:f2:e5:9b:f1:a6:be:47:11:81:54: d3:b2:8c:f0:99:63:93:c0:a4:7a:a7:d9:10:1c:5e: c8:ee:b7:c9:42:78:2e:1e:ff:99:1d:8e:90:b0:1e: 25:09:22:23:f8:0c:60:55:35:1e:28:03:7e:c8:92: 59:29:bf:61:7a:4c:ca:45:e4:13:6d:ae:03:5a:d9: d7:1b:21:83:49:14:f4:3e:34:b2:c6:1a:6e:95:af: fa:d7:d5:c6:ed:65:a4:3e:a2:41:13:ec:5e:bd:35: 14:be:11:1a:2d:2e:06:1f:b7:6b:76:80:fb:b1:c1: f5:29:04:5c:31:42:ab:13:ca:0a:cd:bc:70:b6:af: cd:63:6e:46:b8:0c:98:16:c0:55:90:be:1d:2b:4a: 8d:93:48:93:98:76:2d:d2:8b:26:a2:49:56:64:18: c7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3E:4B:01:A3:05:FD:F3:7A:DC:5C:C8:FD:CB:66:C6:91:B9:F6:1B X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c1:03:32:57:10:60:fe:34:47:3e:36:8e:a8:b4:8e:57:8c: e0:83:17:38:c9:a5:01:03:c7:ee:b8:6b:07:5b:6f:a0:61:3c: a0:82:65:95:a2:f4:38:61:f1:db:81:53:ed:49:a5:aa:58:8a: 94:fc:ca:fb:fc:34:3f:f0:dd:83:6a:3f:de:34:95:c5:36:f8: ec:98:16:04:ff:c2:3a:64:1b:60:7d:91:f0:e8:c1:18:c5:04: 4f:9a:3a:ad:c6:ab:46:7e:86:55:9a:75:b7:5c:a8:69:c2:d1: af:76:bd:a4:4e:77:68:f2:f9:53:99:13:61:1b:6c:31:7d:b2: f7:64:0f:39:55:ac:ff:53:42:8b:49:10:de:0d:78:68:fb:34: e7:e6:1d:f9:80:37:70:8d:9e:31:ec:07:db:5d:d3:b9:3f:f4: 3a:83:d4:a9:d6:61:e6:d8:12:33:75:a7:b3:33:72:3f:4b:4c: 5f:f4:02:d7:dd:09:7f:8d:2a:c2:a2:6e:0b:c8:e1:17:a5:fd: 68:98:18:68:1e:a0:ca:7c:33:8c:11:1a:f9:4d:23:e1:a3:c8: eb:28:d7:b6:a0:6c:8a:48:32:d5:be:9c:b9:e0:4f:82:18:6b: 9e:a4:94:83:6e:7d:1f:32:9d:d2:6b:d7:05:13:c0:4b:3a:06: 4a:ed:60:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4 MURBNEIzMUMwHhcNMjUwNzAzMDQwMDM4WhcNMjUwNzEwMDQwMDM4WjAYMRYwFAYD VQQDEw02ODY2MDA2Ni03N2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAz/7XuGUgHDFLkipYQLqiW4V5A+rb54Q96lUU2q/aUlugQT8L83vpAoV3F+ P1NJv0H1tvLYDyZ+/w+ubfxZGIepzgrTa4qoHtk+6nLOaeWw6F+BewT08RxQclWo 2vLlm/GmvkcRgVTTsozwmWOTwKR6p9kQHF7I7rfJQnguHv+ZHY6QsB4lCSIj+Axg VTUeKAN+yJJZKb9hekzKReQTba4DWtnXGyGDSRT0PjSyxhpula/619XG7WWkPqJB E+xevTUUvhEaLS4GH7drdoD7scH1KQRcMUKrE8oKzbxwtq/NY25GuAyYFsBVkL4d K0qNk0iTmHYt0osmoklWZBjHnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFk+SwGj Bf3zetxcyP3LZsaRufYbMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq M2E1amRsWlBqVmFCMmtzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcwQMyVxBg/jRHPjaOqLSOV4zggxc4yaUBA8fuuGsHW2+gYTyggmWV ovQ4YfHbgVPtSaWqWIqU/Mr7/DQ/8N2Daj/eNJXFNvjsmBYE/8I6ZBtgfZHw6MEY xQRPmjqtxqtGfoZVmnW3XKhpwtGvdr2kTndo8vlTmRNhG2wxfbL3ZA85Vaz/U0KL SRDeDXho+zTn5h35gDdwjZ4x7AfbXdO5P/Q6g9Sp1mHm2BIzdaezM3I/S0xf9ALX 3Ql/jSrCom4LyOEXpf1omBhoHqDKfDOMERr5TSPho8jrKNe2oGyKSDLVvpy54E+C GGuepJSDbn0fMp3Sa9cFE8BLOgZK7WB+ -----END CERTIFICATE-----Generated at Thu Jul 3 15:07:23 2025 by rpki-client