$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json) Hash identifier: LL4askDBQ7Mo064JnZwO/2ysCe1N3PmVIeLjtIjZKMw= Subject key identifier: 68:56:65:6C:80:0D:A6:25:46:75:8E:5C:03:F9:6E:B3:45:C8:C8:FF Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Certificate serial: 113C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft Manifest number: 1125 Signing time: Wed 02 Jul 2025 17:29:00 +0000 Manifest this update: Wed 02 Jul 2025 17:29:00 +0000 Manifest next update: Wed 09 Jul 2025 17:29:00 +0000 Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: 8zIBa4Xd/FluDgbzWnGcVe6JT+tb6Lz35SLi7A9jnYE=) 2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: YvhnTG1A1W5kz0Vch4cPsIzgbILMaDioP1ySIyj5aeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4412 (0x113c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Validity Not Before: Jul 2 17:29:00 2025 GMT Not After : Jul 9 17:29:00 2025 GMT Subject: CN=68656c5c-0452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:cb:d2:2b:d4:11:3f:4e:d9:e3:ae:12:68: 89:e5:09:c7:10:b4:08:32:cc:12:d3:0f:45:c3:38: bf:ba:a4:6f:42:81:ac:ad:f7:78:75:87:4f:fa:92: c6:ae:2b:1f:77:ac:2a:42:5b:d7:74:17:5b:c2:1d: a7:7b:32:5e:d3:25:93:32:09:49:33:c8:ce:56:2f: 2a:fc:a5:8a:5c:e2:3e:a0:69:bf:c2:62:1b:83:62: 04:1c:ba:de:09:30:32:88:aa:1f:f1:d1:80:41:11: a9:00:75:20:ae:cf:34:9c:26:d8:79:0f:f0:38:ed: db:3d:43:fc:63:dc:44:b8:9b:b0:5f:24:27:9e:09: e9:52:4c:39:40:e2:fc:47:17:3d:22:82:b8:d3:b3: 1d:cd:c4:01:a6:e2:cd:8f:8a:bf:34:51:9d:7f:18: 9f:0b:d3:3a:13:f7:7b:1c:dd:ce:24:8a:94:8b:66: 5a:98:bc:a5:55:3d:a2:41:37:81:4e:83:97:32:f3: aa:44:f7:a1:29:9e:e3:6a:a2:90:e5:ce:1a:c8:de: ff:0c:db:ff:02:5b:7f:45:b5:eb:27:e1:24:51:fb: f7:c7:47:dd:5b:92:e3:34:8e:28:4e:04:d4:ef:1d: 0b:c2:ce:02:e0:5c:4c:63:ce:8e:a5:68:44:15:14: 59:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:56:65:6C:80:0D:A6:25:46:75:8E:5C:03:F9:6E:B3:45:C8:C8:FF X509v3 Authority Key Identifier: keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c9:3c:dd:71:8a:c5:8f:28:ec:61:53:75:3b:a7:16:76:c8: 42:ef:87:cb:44:93:d2:f9:7d:5f:78:64:a0:8e:00:d1:54:9e: e0:1d:a6:2e:ea:f0:54:f5:2c:2f:93:43:a2:f8:33:d0:71:35: d5:0f:0c:9f:29:19:af:7c:5a:3f:96:d6:52:6e:ec:08:18:c0: d3:72:73:44:ef:93:0d:84:a8:49:e1:e4:e5:a8:16:30:7c:db: 8e:0c:88:c1:5b:d0:fb:d2:2e:3d:3d:a4:71:4a:b0:50:bd:d1: fb:16:92:71:0c:01:b3:8d:80:63:34:96:d7:e1:35:c3:48:c9: e6:1b:e4:46:c2:c8:47:b8:e1:d5:dd:ed:38:f3:95:c7:b1:1c: 08:a0:bf:63:40:de:56:fb:fe:a6:af:3d:c0:0f:77:40:e0:19: 14:c5:c4:05:47:88:ad:4e:3c:73:77:e6:01:82:d8:a2:40:ee: 7b:59:2a:82:41:4c:f2:9e:5f:b1:a7:b8:a2:64:5d:7d:e0:d7: 08:7f:5d:ef:59:9a:d7:ef:c5:4a:75:10:ae:9a:a0:61:b0:f5: d4:db:44:43:41:30:42:ed:66:f1:3e:d0:7d:34:5e:95:36:4f: d8:2b:75:5e:1e:d8:99:12:5f:c4:49:2b:ce:9c:2f:98:e8:d4: 61:6f:af:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzQxMTAvBgNVBAUTKEUzRDNCNDc4ODI3M0NFNDU5MjlCMDk5ODNBQkY2NEI1 RDQ0RDFGMDgwHhcNMjUwNzAyMTcyOTAwWhcNMjUwNzA5MTcyOTAwWjAYMRYwFAYD VQQDEw02ODY1NmM1Yy0wNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7jL0ivUET9O2eOuEmiJ5QnHELQIMswS0w9Fwzi/uqRvQoGsrfd4dYdP+pLG risfd6wqQlvXdBdbwh2nezJe0yWTMglJM8jOVi8q/KWKXOI+oGm/wmIbg2IEHLre CTAyiKof8dGAQRGpAHUgrs80nCbYeQ/wOO3bPUP8Y9xEuJuwXyQnngnpUkw5QOL8 Rxc9IoK407MdzcQBpuLNj4q/NFGdfxifC9M6E/d7HN3OJIqUi2ZamLylVT2iQTeB ToOXMvOqRPehKZ7jaqKQ5c4ayN7/DNv/Alt/RbXrJ+EkUfv3x0fdW5LjNI4oTgTU 7x0Lws4C4FxMY86OpWhEFRRZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhWZWyA DaYlRnWOXAP5brNFyMj/MB8GA1UdIwQYMBaAFOPTtHiCc85FkpsJmDq/ZLXUTR8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzNC8xMzI3QTczRTE3 MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenprV1Ntd21ZT3I5a3RkUk5I d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ5TzBlSUp6emtXU213bVlPcjlrdGRSTkh3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzNC8xMzI3QTczRTE3MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenpr V1Ntd21ZT3I5a3RkUk5Id2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqyTzdcYrFjyjsYVN1O6cWdshC74fLRJPS+X1feGSgjgDRVJ7gHaYu 6vBU9Swvk0Oi+DPQcTXVDwyfKRmvfFo/ltZSbuwIGMDTcnNE75MNhKhJ4eTlqBYw fNuODIjBW9D70i49PaRxSrBQvdH7FpJxDAGzjYBjNJbX4TXDSMnmG+RGwshHuOHV 3e0485XHsRwIoL9jQN5W+/6mrz3AD3dA4BkUxcQFR4itTjxzd+YBgtiiQO57WSqC QUzynl+xp7iiZF194NcIf13vWZrX78VKdRCumqBhsPXU20RDQTBC7WbxPtB9NF6V Nk/YK3VeHtiZEl/ESSvOnC+Y6NRhb6+O -----END CERTIFICATE-----Generated at Thu Jul 3 11:27:55 2025 by rpki-client