$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json) Hash identifier: jzANZoHJb26my8x0P/uFwLtalOSG5KfHrdM5DmlG1AM= Subject key identifier: C4:D2:20:48:7C:28:DC:22:D3:55:26:B7:0F:55:77:D6:C3:C6:00:AF Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 1198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft Manifest number: 1192 Signing time: Fri 18 Jul 2025 17:22:15 +0000 Manifest this update: Fri 18 Jul 2025 17:22:14 +0000 Manifest next update: Fri 25 Jul 2025 17:22:14 +0000 Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: Y4VqF0vxhLLUWlpy04ugXZZi/paUi+RVq97smMUWXuk=) 2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: PSSQDCbjfGOv5hsREHHq3AE69qVBQBbQjxmYclshFuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4504 (0x1198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: Jul 18 17:22:14 2025 GMT Not After : Jul 25 17:22:14 2025 GMT Subject: CN=687a82c6-52ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:7a:42:da:24:43:3b:ed:75:89:b0:64:ba: 56:13:b9:bb:a3:d7:a9:81:bc:55:e3:79:73:bf:4e: 7f:79:3d:3b:c0:f9:28:1a:aa:9e:cc:78:bd:2e:f4: 5d:5a:e1:ec:b7:d4:f7:bb:79:bb:a5:84:1c:15:93: 64:8e:39:a8:1e:5b:96:20:63:8c:e4:3d:a7:c1:52: b6:78:b8:12:6a:84:98:5d:53:72:80:0b:78:d6:40: ec:ef:da:6d:a5:4d:da:0b:06:14:6e:b9:e5:c8:7a: be:15:7e:19:36:1c:ec:f6:96:13:e0:ae:98:99:6f: 6e:4d:ec:73:32:a8:65:04:ce:ed:7e:53:ae:34:80: 9c:f9:45:86:8e:6c:be:8e:c4:ef:55:8a:a4:81:7d: ea:72:88:2d:0b:26:fb:be:c4:d2:ff:be:7c:99:fb: 34:aa:be:cd:cb:1a:24:47:57:7e:93:0a:ea:42:ef: e2:0e:35:03:e6:6d:f4:d9:de:c5:bb:72:2f:84:e2: 28:f3:60:31:0c:e4:c6:81:6f:7c:5e:5f:5a:35:c7: 62:ac:c3:c5:75:5d:93:ee:02:e8:f8:2d:7b:e2:3e: c6:85:be:82:1f:8a:4a:c2:57:e3:a9:15:8a:ec:62: f0:95:72:15:e7:29:39:e0:c5:6c:86:47:af:a0:36: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D2:20:48:7C:28:DC:22:D3:55:26:B7:0F:55:77:D6:C3:C6:00:AF X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e2:c9:91:f7:8c:8c:a3:4c:06:e2:b1:1a:f6:35:4f:00:da: 65:d6:40:6f:15:bb:d1:63:79:63:7e:47:3e:0b:ca:ac:d8:3b: ef:d6:38:a7:10:b6:0d:2d:a8:ca:8d:42:a9:84:b1:fb:ff:63: 5c:65:b3:01:77:5d:be:17:b3:b9:e5:43:48:12:90:c6:32:74: ef:47:a2:e0:41:29:3c:53:c8:f7:7d:94:ba:c5:31:85:48:20: b3:95:a5:48:15:1e:14:07:80:7f:a7:c5:3d:06:e8:2c:0d:02: 71:b7:dd:8a:a8:55:2f:b2:d5:43:54:d1:ea:33:97:e0:fe:16: 13:e5:d7:33:3f:0f:aa:f6:25:76:f0:18:73:a7:9a:7a:a7:ab: 07:34:47:d9:68:4c:0a:0f:24:b0:36:86:b9:ad:cd:dd:ce:ea: 04:01:3d:bf:f3:19:b9:a4:0b:3b:5a:01:92:22:87:60:61:b7: 9b:ce:16:12:f8:4f:75:66:c0:23:fb:9e:93:cf:77:68:5a:3a: 30:40:32:3c:a9:03:55:87:4d:db:a6:df:d5:24:c8:d4:eb:c9: b5:17:23:af:f3:8c:4c:89:61:bb:3b:09:51:1d:26:36:8c:7e: 56:11:95:5c:e1:3d:3b:44:44:0a:82:72:f4:e6:51:ca:5c:75: a3:60:6b:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjUwNzE4MTcyMjE0WhcNMjUwNzI1MTcyMjE0WjAYMRYwFAYD VQQDEw02ODdhODJjNi01MmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynN6QtokQzvtdYmwZLpWE7m7o9epgbxV43lzv05/eT07wPkoGqqezHi9LvRd WuHst9T3u3m7pYQcFZNkjjmoHluWIGOM5D2nwVK2eLgSaoSYXVNygAt41kDs79pt pU3aCwYUbrnlyHq+FX4ZNhzs9pYT4K6YmW9uTexzMqhlBM7tflOuNICc+UWGjmy+ jsTvVYqkgX3qcogtCyb7vsTS/758mfs0qr7NyxokR1d+kwrqQu/iDjUD5m302d7F u3IvhOIo82AxDOTGgW98Xl9aNcdirMPFdV2T7gLo+C174j7Ghb6CH4pKwlfjqRWK 7GLwlXIV5yk54MVshkevoDZTEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTSIEh8 KNwi01Umtw9Vd9bDxgCvMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85 RFFxZW8tTjBON2tlUlVzalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb4smR94yMo0wG4rEa9jVPANpl1kBvFbvRY3ljfkc+C8qs2Dvv1jin ELYNLajKjUKphLH7/2NcZbMBd12+F7O55UNIEpDGMnTvR6LgQSk8U8j3fZS6xTGF SCCzlaVIFR4UB4B/p8U9BugsDQJxt92KqFUvstVDVNHqM5fg/hYT5dczPw+q9iV2 8Bhzp5p6p6sHNEfZaEwKDySwNoa5rc3dzuoEAT2/8xm5pAs7WgGSIodgYbebzhYS +E91ZsAj+56Tz3doWjowQDI8qQNVh03bpt/VJMjU68m1FyOv84xMiWG7OwlRHSY2 jH5WEZVc4T07REQKgnL05lHKXHWjYGs5 -----END CERTIFICATE-----Generated at Sun Jul 20 08:01:44 2025 by rpki-client