$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft File: o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json) Hash identifier: UMjXwiahf9XF3/5TWX9O/HUsJkjCkC/ud+VFYLOHMaY= Subject key identifier: A8:F8:D3:A3:A4:3F:71:1A:D0:99:42:C2:90:4E:CF:26:A4:69:34:B2 Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 Certificate issuer: /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft Manifest number: 48 Signing time: Thu 03 Jul 2025 07:35:30 +0000 Manifest this update: Thu 03 Jul 2025 07:35:30 +0000 Manifest next update: Thu 10 Jul 2025 07:35:29 +0000 Files and hashes: 1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: 5OmTO5JNv+WrMawUbN937DzZkKEZgEPj6LWZFOGRePU=) 2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: MTqILFa0C+24gi6qk+nzk7lo5NR6f5WiYqHQ/SbCX2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Validity Not Before: Jul 3 07:35:30 2025 GMT Not After : Jul 10 07:35:29 2025 GMT Subject: CN=686632c2-2283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:b4:fd:98:80:5b:55:71:c7:b8:47:2f:cc: 87:cb:ca:cf:2d:e3:9b:7a:ce:b0:97:4e:f8:fe:a6: ec:35:cb:9a:d5:b2:81:49:33:b3:07:ff:e0:11:20: 63:b9:f3:ee:4b:7c:02:af:fe:46:f5:f8:29:8c:a9: d9:40:f2:a9:20:3e:97:3a:bb:ba:10:09:9d:cb:59: 6c:5f:ad:20:d7:9b:8a:e3:8d:21:1a:aa:7c:0c:72: 45:df:05:df:ba:39:9c:4b:3d:98:13:03:c3:c8:21: 04:99:76:ad:a8:e7:85:0f:8a:f1:ab:68:38:be:fa: 4a:c7:54:22:9d:1e:ee:f3:69:c4:77:bf:cc:1d:1d: 24:ad:b9:83:28:bd:f9:87:45:71:22:8c:26:07:a4: ef:57:11:1d:81:6e:fa:04:89:d7:f6:9a:0e:41:2b: 34:24:85:0e:f3:ab:33:6a:95:ae:e5:98:a6:50:72: 5c:08:e5:da:81:f7:4c:26:df:d0:31:b7:f7:39:8f: 1c:a2:86:d9:9d:3b:c5:e6:5c:cb:08:6a:a8:fa:2a: bf:e6:10:a6:2d:b6:5f:97:84:2b:a8:7c:fd:90:58: 76:d7:6a:25:c0:09:51:96:f6:ca:ce:c6:07:80:4c: 68:41:8a:31:7c:06:0d:8e:19:a0:bd:d8:c7:7e:f9: b1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F8:D3:A3:A4:3F:71:1A:D0:99:42:C2:90:4E:CF:26:A4:69:34:B2 X509v3 Authority Key Identifier: keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b0:0f:86:7b:e4:53:b9:e7:41:8c:4f:a6:f0:b8:d8:d4:2b: 98:9d:50:18:ca:2e:ee:f9:a9:f0:eb:dc:38:c4:fb:40:86:28: 3b:01:3f:9b:ba:18:96:03:c9:43:fc:f4:ee:1a:70:a4:43:76: ac:67:81:36:ae:22:9f:8d:8f:7e:74:86:d5:02:41:2a:5c:60: 8b:bf:08:90:e2:89:e7:f4:1c:22:86:a4:77:13:d2:31:3c:cb: 3d:46:ef:0a:f7:67:95:c5:2e:b7:ed:ed:40:a8:74:5e:88:9a: a7:1e:6e:30:b1:fa:38:c9:10:f7:8e:58:71:68:1f:48:80:97: c6:f8:2d:68:73:01:06:c6:47:55:99:c6:44:55:ed:a6:4b:8b: 3b:c2:ef:86:b8:f6:b9:dc:e4:05:63:c0:bf:b5:d3:08:f7:c1: 41:bc:a1:dd:4e:26:fd:36:1e:50:f9:84:a3:6a:ae:e5:8c:eb: e6:50:47:53:cc:e2:01:81:9b:4c:df:3a:7b:7e:6d:c2:32:65: 6d:63:72:14:f0:0c:67:1c:72:66:45:3e:29:06:e1:e2:22:06: c2:05:47:3e:61:75:d9:21:c8:cd:79:ba:b6:32:cb:74:e2:95: f6:11:28:16:dd:f9:4a:a2:c4:1a:03:1a:27:68:41:82:d9:d4: 04:53:85:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUYzQjExMC8GA1UEBRMoQTM4RDQ4N0JENUQ5QThBODk0ODAyNzRGRTZGN0MwNjFD NjI0QkNDMDAeFw0yNTA3MDMwNzM1MzBaFw0yNTA3MTAwNzM1MjlaMBgxFjAUBgNV BAMTDTY4NjYzMmMyLTIyODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo7bT9mIBbVXHHuEcvzIfLys8t45t6zrCXTvj+puw1y5rVsoFJM7MH/+ARIGO5 8+5LfAKv/kb1+CmMqdlA8qkgPpc6u7oQCZ3LWWxfrSDXm4rjjSEaqnwMckXfBd+6 OZxLPZgTA8PIIQSZdq2o54UPivGraDi++krHVCKdHu7zacR3v8wdHSStuYMovfmH RXEijCYHpO9XER2BbvoEidf2mg5BKzQkhQ7zqzNqla7lmKZQclwI5dqB90wm39Ax t/c5jxyihtmdO8XmXMsIaqj6Kr/mEKYttl+XhCuofP2QWHbXaiXACVGW9srOxgeA TGhBijF8Bg2OGaC92Md++bEZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqPjTo6Q/ cRrQmULCkE7PJqRpNLIwHwYDVR0jBBgwFoAUo41Ie9XZqKiUgCdP5vfAYcYkvMAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFRjNCL0FDNzYyMjAwRTlD NjExRUY5RkExNzcxMUM0RjlBRTAyL280MUllOVhacUtpVWdDZFA1dmZBWWNZa3ZN QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzQxSWU5WFpxS2lVZ0NkUDV2ZkFZY1lrdk1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF RjNCL0FDNzYyMjAwRTlDNjExRUY5RkExNzcxMUM0RjlBRTAyL280MUllOVhacUtp VWdDZFA1dmZBWWNZa3ZNQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAWwD4Z75FO550GMT6bwuNjUK5idUBjKLu75qfDr3DjE+0CGKDsBP5u6 GJYDyUP89O4acKRDdqxngTauIp+Nj350htUCQSpcYIu/CJDiief0HCKGpHcT0jE8 yz1G7wr3Z5XFLrft7UCodF6ImqcebjCx+jjJEPeOWHFoH0iAl8b4LWhzAQbGR1WZ xkRV7aZLizvC74a49rnc5AVjwL+10wj3wUG8od1OJv02HlD5hKNqruWM6+ZQR1PM 4gGBm0zfOnt+bcIyZW1jchTwDGcccmZFPikG4eIiBsIFRz5hddkhyM15urYyy3Ti lfYRKBbd+UqixBoDGidoQYLZ1ARThWI= -----END CERTIFICATE-----Generated at Thu Jul 3 14:19:23 2025 by rpki-client