$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: wEJdWSDt3nAqNjoicX/jV4BX3PQeoeAwEmfgN2t6bvc= Subject key identifier: 34:FA:78:1F:F2:C1:01:2F:5C:24:55:FD:2F:E1:EB:F6:81:99:DC:5B Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 38 Signing time: Sat 19 Jul 2025 07:53:13 +0000 Manifest this update: Sat 19 Jul 2025 07:53:13 +0000 Manifest next update: Sat 26 Jul 2025 07:53:13 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: AdgnaDuuSi67ymCjdv9W8sOPIwinXamlSNYd0q80BYQ=) 2: F3CCB2C846A411F0909DA511C4F9AE02.roa (hash: WdytCQTC82Xj3l6x6W+Fu2cSc3JDJ2cKAkESsG1ZKic=) 3: 692243D640AA11F096F2746AC4F9AE02.roa (hash: rkd9k1u1dkPxEMEh5w+r9Bswb8IlB1n+y2yWKJIM8Tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Jul 19 07:53:13 2025 GMT Not After : Jul 26 07:53:13 2025 GMT Subject: CN=687b4ee9-06a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:57:5f:a5:51:2b:c9:73:7c:f8:ef:c0:82: c1:e9:e5:55:26:80:0e:99:55:b8:c3:64:76:ea:c9: 43:b3:95:f2:3c:00:a6:28:65:64:e5:b2:db:4b:69: 58:3c:ee:24:71:79:d9:e9:e0:2e:3c:aa:33:c2:19: 4c:11:22:8e:3d:25:ae:21:1d:51:83:fc:1d:0d:de: 63:fd:76:85:6b:48:93:30:c8:bf:83:3d:d3:b2:55: 72:b7:25:c8:66:54:a4:42:55:5f:7b:0b:8b:ea:74: 79:12:57:2d:dc:65:60:41:ee:72:16:28:2f:be:f9: 92:08:97:07:85:fb:77:fa:e3:3f:4c:69:c9:53:80: e5:0c:14:09:c5:e9:26:bc:d1:2c:e3:f3:e4:97:a2: 6d:ab:96:83:41:19:cd:26:b5:04:21:0b:43:ce:55: b1:1a:55:a3:02:45:ce:b0:83:17:2d:d5:c9:83:f3: 5d:25:25:68:6e:76:fb:40:34:7e:78:3e:5e:57:c4: 89:4f:23:60:9a:bb:4b:b4:51:54:d5:d5:d5:4d:5a: 1d:d5:e6:1f:64:eb:96:94:9a:f8:33:76:6b:af:45: 22:78:da:23:3f:6f:61:77:5d:2d:08:d4:93:b6:3a: dd:4f:fc:98:a8:ab:5f:03:bd:39:75:49:a8:7c:e9: 2d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FA:78:1F:F2:C1:01:2F:5C:24:55:FD:2F:E1:EB:F6:81:99:DC:5B X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:39:4f:cb:7c:6f:85:0f:b0:11:81:5a:8e:c3:91:6a:1d:88: 8e:d7:17:9e:c4:2d:b1:c8:a6:be:82:59:d8:a5:31:20:ce:8a: b5:b5:6a:20:04:4e:b0:e8:10:2d:88:6f:0d:c3:fc:32:53:f7: a2:fb:ec:2b:ac:bc:c5:4e:ff:20:54:4c:35:93:de:43:97:a7: 31:55:45:5f:46:57:7b:6d:9d:50:b6:cd:cb:dd:32:db:ae:9a: 4f:b0:52:f0:92:71:61:82:34:25:dc:ce:94:22:d9:81:57:36: d0:05:52:95:7f:17:fd:a5:27:12:9b:4b:d6:7c:6c:28:9f:66: d8:9a:5c:0c:71:0d:d4:3a:05:7e:00:2f:85:9b:12:64:4a:3a: ca:b0:6a:4c:13:61:60:fa:9f:fa:53:8e:09:f0:aa:a0:ce:7f: ab:95:e6:f7:67:5b:31:38:14:a8:0d:3b:da:3f:97:ac:a5:15: f9:3c:ea:4d:40:82:8b:fe:03:ee:3a:0c:13:1a:26:b4:a6:e7: d6:d5:ec:a8:6b:ec:1e:64:ee:ca:7d:38:58:d6:ab:90:97:98: 37:10:e1:09:31:c1:29:f7:d4:2f:1a:01:a6:54:b5:8e:07:b6: 71:03:f0:c1:0e:7d:71:e6:15:2b:9c:70:4d:a3:06:74:e3:f9: e7:50:fc:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTZGRjExMC8GA1UEBRMoREZDQThGREFBNUZFRjk0OEUwRUNGNkY5QzcwMzYzOUI1 NjUzOUQ5OTAeFw0yNTA3MTkwNzUzMTNaFw0yNTA3MjYwNzUzMTNaMBgxFjAUBgNV BAMTDTY4N2I0ZWU5LTA2YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC41ldfpVEryXN8+O/AgsHp5VUmgA6ZVbjDZHbqyUOzlfI8AKYoZWTlsttLaVg8 7iRxednp4C48qjPCGUwRIo49Ja4hHVGD/B0N3mP9doVrSJMwyL+DPdOyVXK3Jchm VKRCVV97C4vqdHkSVy3cZWBB7nIWKC+++ZIIlweF+3f64z9MaclTgOUMFAnF6Sa8 0Szj8+SXom2rloNBGc0mtQQhC0POVbEaVaMCRc6wgxct1cmD810lJWhudvtANH54 Pl5XxIlPI2Cau0u0UVTV1dVNWh3V5h9k65aUmvgzdmuvRSJ42iM/b2F3XS0I1JO2 Ot1P/Jioq18DvTl1Sah86S1VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNPp4H/LB AS9cJFX9L+Hr9oGZ3FswHwYDVR0jBBgwFoAU38qP2qX++Ujg7Pb5xwNjm1ZTnZkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxNkZGLzJEQTU1OTEyMTQx NjExRjBBODUyMzIxOUM0RjlBRTAyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5a ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzhxUDJxWC0tVWpnN1BiNXh3TmptMVpUblprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx NkZGLzJEQTU1OTEyMTQxNjExRjBBODUyMzIxOUM0RjlBRTAyLzM4cVAycVgtLVVq ZzdQYjV4d05qbTFaVG5aay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD05T8t8b4UPsBGBWo7DkWodiI7XF57ELbHIpr6CWdilMSDOirW1aiAE TrDoEC2Ibw3D/DJT96L77CusvMVO/yBUTDWT3kOXpzFVRV9GV3ttnVC2zcvdMtuu mk+wUvCScWGCNCXczpQi2YFXNtAFUpV/F/2lJxKbS9Z8bCifZtiaXAxxDdQ6BX4A L4WbEmRKOsqwakwTYWD6n/pTjgnwqqDOf6uV5vdnWzE4FKgNO9o/l6ylFfk86k1A gov+A+46DBMaJrSm59bV7Khr7B5k7sp9OFjWq5CXmDcQ4QkxwSn31C8aAaZUtY4H tnED8MEOfXHmFSuccE2jBnTj+edQ/MY= -----END CERTIFICATE-----Generated at Mon Jul 21 07:05:33 2025 by rpki-client