$ rpki-client -vvf rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft File: v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft (raw, json) Hash identifier: AkgjPpuOCxlLyqvkd4aVLE7IMQI1WQhD3e3VEw+CbY8= Subject key identifier: 00:D4:A3:2E:DB:C4:EB:30:E8:6A:FF:D0:A9:18:84:7B:0D:D8:7A:95 Authority key identifier: BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF Certificate issuer: /CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Certificate serial: 3507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft Manifest number: 34D4 Signing time: Fri 18 Jul 2025 14:15:59 +0000 Manifest this update: Fri 18 Jul 2025 14:15:58 +0000 Manifest next update: Fri 25 Jul 2025 14:15:58 +0000 Files and hashes: 1: v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl (hash: pGfXVjnDwAYQGtmx6smrfPfXOX3F0su/xAwDq30vZ/c=) 2: 13773D180C8111EB9BD25070C4F9AE02.roa (hash: EcHgJTBJZVSZcmyoGTsJf6lDzdXZarLLw4Yz9Tt75wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13575 (0x3507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91401C4, serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Validity Not Before: Jul 18 14:15:58 2025 GMT Not After : Jul 25 14:15:58 2025 GMT Subject: CN=687a571e-fd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f3:fb:42:9e:0f:87:49:7a:09:ec:c7:6d:8d: a5:76:96:a8:ee:f8:38:aa:ab:66:97:69:84:c8:3c: 5b:91:80:06:10:8c:5c:15:d1:38:c1:73:e0:24:a7: 9d:34:da:1f:12:7c:8f:40:42:b0:d7:fa:2e:fb:61: 2b:6f:51:ef:94:34:e5:70:c7:35:73:b0:fc:97:e0: 74:d2:d1:96:00:1c:b8:4c:52:bd:26:54:f0:48:1d: 7f:5d:f4:c1:95:4f:b7:5d:f3:0d:98:f0:26:1b:2c: 37:f9:bc:65:2a:47:ed:fd:c4:98:5d:35:c8:d0:e6: ef:a9:ae:97:20:99:bd:c6:98:8f:3a:45:3d:81:1f: 1d:0c:64:04:fc:f5:f5:e3:84:19:e2:8e:62:d3:25: 9f:5d:90:63:10:5a:83:7e:32:ee:cd:45:4c:35:98: ba:b0:8d:51:3b:ba:4e:68:40:0a:59:55:41:31:7a: 53:de:4e:d8:a7:aa:cf:10:06:cf:ae:6a:94:01:c1: c1:1e:03:27:73:0e:05:ae:d0:8a:b6:f2:56:be:a8: 8f:97:0c:35:a0:ca:58:86:4d:bc:79:dc:12:e7:3d: af:fa:d9:a4:7d:40:97:bd:28:f0:6a:29:d9:e4:5b: fc:bd:f0:d2:26:fd:85:bc:ac:a4:fb:0d:52:d6:ec: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D4:A3:2E:DB:C4:EB:30:E8:6A:FF:D0:A9:18:84:7B:0D:D8:7A:95 X509v3 Authority Key Identifier: keyid:BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:94:0d:cb:18:1a:47:38:87:bc:9d:69:a8:a3:8c:b8:bc:b9: 0b:3c:83:30:cd:0d:a1:7e:fb:c2:4e:52:50:20:fa:4f:1f:bc: 7d:71:d9:13:87:20:4b:81:8f:fd:16:9b:fc:16:81:cb:a2:9e: e3:16:b5:bd:b4:26:4d:e2:b3:90:e5:8d:7f:55:3a:68:9d:b0: 7a:d5:0e:3a:7c:d4:be:ec:ec:bd:17:89:de:ce:be:24:93:94: 81:71:e0:0c:3d:25:5d:d4:0d:40:29:0e:ec:3a:34:3d:98:0c: 4c:a3:f1:3d:5f:6f:c9:46:39:71:86:f6:3e:e2:3c:c1:fb:de: 3c:ad:52:23:32:28:fc:27:47:9e:f7:22:b1:5d:5a:82:26:15: ef:95:50:15:7a:12:8b:94:68:a4:24:7d:71:00:93:b8:a0:10: 83:2a:d4:99:17:81:2c:26:a5:2e:3c:3c:ef:51:3b:26:19:93: 2b:9a:78:6e:5a:c6:7f:f0:88:f9:61:65:02:4d:5c:19:f5:95: 86:4d:23:1e:8b:6c:b1:d7:a8:43:7d:77:32:00:d2:7b:60:8d: 7a:80:10:96:2c:12:ca:57:f6:57:64:f5:3f:f8:14:a6:30:3f: ff:15:2b:cc:55:c7:c4:33:bf:50:a3:3e:bd:48:35:1c:fa:ef: 5f:ab:c8:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAxQzQxMTAvBgNVBAUTKEJGN0JDQUYxOTA5QzEwQkNGRUEwRDhFN0Q0NUQ4MjU0 RjI2OUM2QkYwHhcNMjUwNzE4MTQxNTU4WhcNMjUwNzI1MTQxNTU4WjAYMRYwFAYD VQQDEw02ODdhNTcxZS1mZDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/P7Qp4Ph0l6CezHbY2ldpao7vg4qqtml2mEyDxbkYAGEIxcFdE4wXPgJKed NNofEnyPQEKw1/ou+2Erb1HvlDTlcMc1c7D8l+B00tGWABy4TFK9JlTwSB1/XfTB lU+3XfMNmPAmGyw3+bxlKkft/cSYXTXI0Obvqa6XIJm9xpiPOkU9gR8dDGQE/PX1 44QZ4o5i0yWfXZBjEFqDfjLuzUVMNZi6sI1RO7pOaEAKWVVBMXpT3k7Yp6rPEAbP rmqUAcHBHgMncw4FrtCKtvJWvqiPlww1oMpYhk28edwS5z2v+tmkfUCXvSjwainZ 5Fv8vfDSJv2FvKyk+w1S1uwRGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADUoy7b xOsw6Gr/0KkYhHsN2HqVMB8GA1UdIwQYMBaAFL97yvGQnBC8/qDY59RdglTyaca/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDFDNC8yQjJCM0M5RTFE NjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VMei1vTmpuMUYyQ1ZQSnB4 cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Yzdks4WkNjRUx6LW9Oam4xRjJDVlBKcHhyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDFDNC8yQjJCM0M5RTFENjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VM ei1vTmpuMUYyQ1ZQSnB4cjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDlA3LGBpHOIe8nWmoo4y4vLkLPIMwzQ2hfvvCTlJQIPpPH7x9cdkT hyBLgY/9Fpv8FoHLop7jFrW9tCZN4rOQ5Y1/VTponbB61Q46fNS+7Oy9F4nezr4k k5SBceAMPSVd1A1AKQ7sOjQ9mAxMo/E9X2/JRjlxhvY+4jzB+948rVIjMij8J0ee 9yKxXVqCJhXvlVAVehKLlGikJH1xAJO4oBCDKtSZF4EsJqUuPDzvUTsmGZMrmnhu WsZ/8Ij5YWUCTVwZ9ZWGTSMei2yx16hDfXcyANJ7YI16gBCWLBLKV/ZXZPU/+BSm MD//FSvMVcfEM79Qoz69SDUc+u9fq8iC -----END CERTIFICATE-----Generated at Sun Jul 20 03:19:54 2025 by rpki-client