$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json) Hash identifier: bnNq4vEWQicFV7MUq5F3KB/9E+WNhhWmkySseitfpGk= Subject key identifier: 96:CC:47:73:79:5E:59:86:7C:B5:AD:DC:D0:4A:DD:62:0E:D4:9F:3F Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 0650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft Manifest number: 0634 Signing time: Sun 20 Jul 2025 22:57:44 +0000 Manifest this update: Sun 20 Jul 2025 22:57:44 +0000 Manifest next update: Sun 27 Jul 2025 22:57:44 +0000 Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: 9LehbUM8nsXpaAeW90RX4RfMA7q8QusHUoCYBG0RmYk=) 2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: tNDEmIxy5H25Y3zlO9rXFUC8hfA45BbpRsPK4rM8u7s=) 3: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: 9S57tdyd45wHLsInsTnI/GZly1K4hEDfcQJTNYuSOFQ=) 4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8=) 5: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: CGANdjpj39CJWyCZVGb4EKEpCCBaXu9btf2XqDDOLY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: Jul 20 22:57:44 2025 GMT Not After : Jul 27 22:57:44 2025 GMT Subject: CN=687d7468-d85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:13:8f:2a:4c:99:7e:e9:90:f9:f8:c1:9b: f7:86:70:bb:91:6b:23:b8:5c:03:47:16:5c:5e:d4: 99:d4:3b:5f:8d:f7:6e:1c:14:8b:c3:16:7d:b1:d7: ea:65:74:83:c2:24:d4:8c:db:53:22:7f:9f:11:53: 1a:2a:1e:1a:7a:69:6d:98:b8:62:1d:b7:25:89:f5: 6a:b1:8f:9e:bb:03:38:cb:15:69:bf:c7:4d:c4:6f: 66:2b:19:e6:6d:3e:fa:b2:15:c3:f3:ca:cf:dc:de: 13:4c:56:58:55:49:e6:fb:95:38:7a:85:99:26:e0: 52:3f:83:97:5f:32:75:43:b3:db:9c:0e:d3:28:01: ec:95:e6:8f:15:9b:91:23:bb:c4:f0:87:5c:4a:6a: 97:c1:23:ac:e8:d5:ca:99:bc:0c:d8:b6:87:ff:9e: 22:a7:1f:11:69:bf:3b:1c:a2:c2:a9:ce:19:48:aa: d2:42:3e:51:4b:26:db:43:19:09:f5:d8:0d:24:21: 5c:c4:84:bc:15:8b:6d:74:26:07:ac:04:bd:c7:11: b0:b2:68:6a:a4:b1:fb:0d:7a:80:53:3f:b0:c3:67: 18:cb:69:3c:bf:67:0a:bb:ea:02:36:69:e6:b7:76: 84:db:ae:6b:a9:4f:26:21:e5:62:b2:c2:b7:f1:22: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CC:47:73:79:5E:59:86:7C:B5:AD:DC:D0:4A:DD:62:0E:D4:9F:3F X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ea:bb:eb:48:b5:ee:c1:69:54:62:08:a7:59:7d:54:d1:2c: d4:cc:24:34:b5:f7:22:09:fb:eb:70:90:19:4b:db:1e:18:ba: f0:d6:5d:5b:d4:80:a2:4d:59:20:2c:f9:ba:7e:15:19:49:c1: f8:a6:9a:eb:60:8f:de:13:13:cd:7a:b0:d9:6d:f1:d9:e0:f8: ef:72:48:a5:56:69:fa:87:b1:f1:85:8e:ab:a8:b4:4f:7e:cc: 2b:7d:20:40:69:61:12:7a:c0:7e:d0:4d:15:7d:05:91:10:25: 28:5c:10:2e:3b:9c:d1:8f:d1:cd:8d:57:41:cc:38:03:a2:05: 10:25:f6:72:b0:10:da:92:6c:74:b2:ec:eb:98:44:a6:d0:09: 97:e3:8b:d0:1f:3e:f9:c3:08:75:e9:72:a2:86:4b:8e:c0:01: 31:ea:6b:db:57:c4:20:63:3a:f1:b0:93:19:13:7d:c3:b6:f2: 17:7a:d9:bf:f5:c7:a5:bc:1d:0a:46:ff:27:6c:bb:89:6a:f3: 4a:b2:f2:51:f0:7c:d5:3f:c6:bb:48:f8:cc:63:3f:e0:d7:74: 6c:85:5a:48:d8:5c:0c:29:4b:76:ca:fd:71:9e:30:0d:2e:3f: c4:07:28:35:49:da:4d:85:6e:a8:67:f3:0a:bf:6f:48:b4:c2: bc:d6:31:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjUwNzIwMjI1NzQ0WhcNMjUwNzI3MjI1NzQ0WjAYMRYwFAYD VQQDEw02ODdkNzQ2OC1kODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxMTjypMmX7pkPn4wZv3hnC7kWsjuFwDRxZcXtSZ1DtfjfduHBSLwxZ9sdfq ZXSDwiTUjNtTIn+fEVMaKh4aemltmLhiHbclifVqsY+euwM4yxVpv8dNxG9mKxnm bT76shXD88rP3N4TTFZYVUnm+5U4eoWZJuBSP4OXXzJ1Q7PbnA7TKAHsleaPFZuR I7vE8IdcSmqXwSOs6NXKmbwM2LaH/54ipx8Rab87HKLCqc4ZSKrSQj5RSybbQxkJ 9dgNJCFcxIS8FYttdCYHrAS9xxGwsmhqpLH7DXqAUz+ww2cYy2k8v2cKu+oCNmnm t3aE265rqU8mIeVissK38SK7NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbMR3N5 XlmGfLWt3NBK3WIO1J8/MB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp NUxmLVFMYS16djBYQmF6OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA26rvrSLXuwWlUYginWX1U0SzUzCQ0tfciCfvrcJAZS9seGLrw1l1b 1ICiTVkgLPm6fhUZScH4pprrYI/eExPNerDZbfHZ4PjvckilVmn6h7HxhY6rqLRP fswrfSBAaWESesB+0E0VfQWRECUoXBAuO5zRj9HNjVdBzDgDogUQJfZysBDakmx0 suzrmESm0AmX44vQHz75wwh16XKihkuOwAEx6mvbV8QgYzrxsJMZE33DtvIXetm/ 9celvB0KRv8nbLuJavNKsvJR8HzVP8a7SPjMYz/g13RshVpI2FwMKUt2yv1xnjAN Lj/EByg1SdpNhW6oZ/MKv29ItMK81jGG -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:37 2025 by rpki-client