$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: Ktgqxfg7IX59jZb6f8KzeP/XsG5vZ6XM04L6lGBVDPI= Subject key identifier: 10:0B:CB:43:52:CD:6C:A0:56:87:5E:0F:DC:78:1A:3A:04:F5:D5:50 Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0BC8 Signing time: Fri 18 Jul 2025 19:05:55 +0000 Manifest this update: Fri 18 Jul 2025 19:05:54 +0000 Manifest next update: Fri 25 Jul 2025 19:05:54 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: 44QmWosYwxSQszUxskGAOH3kC0SXimOqMcPoE6oilfk=) 2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: Myi9k4IrBdVLRWD9OtQqLIwtmIphhX+YDXYJBcNy/bw=) 3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: MyUFtJY4lLof0Zwtdhx7AIg2aYopA1OEBl/K6VizYaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3032 (0xbd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: Jul 18 19:05:54 2025 GMT Not After : Jul 25 19:05:54 2025 GMT Subject: CN=687a9b12-6f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:ce:6a:eb:53:91:dd:db:46:80:7d:4a:4b: cc:61:4b:a6:c1:3d:43:f6:35:ac:f8:ce:07:ca:fa: 74:de:b9:22:b8:c8:c3:8d:fd:40:56:09:c9:87:fa: 85:2e:e5:69:2f:34:5a:43:49:0e:3e:ea:1a:22:cd: bc:88:51:65:e1:03:a7:d4:56:9d:eb:db:70:24:ac: e6:80:0f:26:ae:6a:4e:ee:d2:8b:11:a2:4e:a8:6c: e0:ec:01:fc:6f:94:14:c0:76:b9:6c:3c:e0:bf:e4: 1b:5c:89:a1:c4:af:6a:da:b0:b7:97:cb:c5:9b:a1: 94:be:e4:79:48:5f:31:e3:fe:40:26:37:d4:2b:9c: 46:46:a2:be:69:29:e4:aa:ca:a6:d0:67:fb:ed:aa: e7:ea:5a:08:9b:de:2d:bd:3e:1a:18:8d:31:59:04: 49:68:37:65:c4:07:53:01:5e:11:95:82:38:d6:dc: 75:cc:a0:2b:aa:cf:6e:53:c8:5b:cd:b5:43:9c:27: 8e:43:02:36:54:36:6f:73:2f:83:18:c1:05:be:02: 19:3a:8f:99:b3:f8:ba:d6:a5:f2:15:a0:11:2f:94: 8c:89:fc:d2:0e:61:a7:1d:fd:3f:fb:e7:bd:94:56: da:56:0d:d4:34:e3:4f:f2:07:85:14:68:b9:d7:78: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:CB:43:52:CD:6C:A0:56:87:5E:0F:DC:78:1A:3A:04:F5:D5:50 X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:74:fe:25:74:0f:a6:d6:ec:94:df:7b:0c:a7:0f:19:f1:67: 9b:38:1a:d3:6a:e8:b5:f6:84:e5:71:43:d6:18:73:a5:f5:f5: 99:15:3c:6f:75:4c:6a:65:6d:9d:4b:35:49:5a:6a:b3:b0:85: 3a:d5:d3:a6:24:0e:67:f0:f2:d2:ef:43:23:92:26:e9:36:1c: 07:ef:10:9d:d5:56:9c:81:a5:3d:f8:97:67:d7:e5:53:da:d9: ff:3d:9a:21:a3:e0:fb:12:c0:7e:df:40:d7:3d:de:75:68:94: 82:90:72:c3:2b:67:79:08:69:2d:c8:20:77:39:c0:de:fe:bb: 35:dc:ae:a8:3d:85:54:a9:56:99:d7:81:e8:1c:76:80:bc:e7: aa:62:eb:c5:d9:71:b7:b1:01:dd:a6:62:71:01:1b:8e:0c:ce: e0:5f:43:e3:74:0c:7c:a1:f0:0d:a6:2e:01:6c:02:02:68:10: aa:04:1b:3f:15:1c:2a:a8:04:32:e8:19:47:6e:71:98:d5:f8: e9:2b:1f:b9:80:c7:93:3d:11:96:45:09:e2:5a:f7:90:88:71: 14:bd:6e:af:30:c3:22:d1:fc:4f:b9:95:ac:59:6b:27:c3:05: b8:29:26:1b:5d:97:60:50:04:10:aa:d2:38:25:aa:8e:ac:d3: a0:0c:27:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjUwNzE4MTkwNTU0WhcNMjUwNzI1MTkwNTU0WjAYMRYwFAYD VQQDEw02ODdhOWIxMi02ZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/bOautTkd3bRoB9SkvMYUumwT1D9jWs+M4Hyvp03rkiuMjDjf1AVgnJh/qF LuVpLzRaQ0kOPuoaIs28iFFl4QOn1Fad69twJKzmgA8mrmpO7tKLEaJOqGzg7AH8 b5QUwHa5bDzgv+QbXImhxK9q2rC3l8vFm6GUvuR5SF8x4/5AJjfUK5xGRqK+aSnk qsqm0Gf77arn6loIm94tvT4aGI0xWQRJaDdlxAdTAV4RlYI41tx1zKArqs9uU8hb zbVDnCeOQwI2VDZvcy+DGMEFvgIZOo+Zs/i61qXyFaARL5SMifzSDmGnHf0/++e9 lFbaVg3UNONP8geFFGi513g3GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBALy0NS zWygVodeD9x4GjoE9dVQMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZdP4ldA+m1uyU33sMpw8Z8WebOBrTaui19oTlcUPWGHOl9fWZFTxv dUxqZW2dSzVJWmqzsIU61dOmJA5n8PLS70MjkibpNhwH7xCd1VacgaU9+Jdn1+VT 2tn/PZoho+D7EsB+30DXPd51aJSCkHLDK2d5CGktyCB3OcDe/rs13K6oPYVUqVaZ 14HoHHaAvOeqYuvF2XG3sQHdpmJxARuODM7gX0PjdAx8ofANpi4BbAICaBCqBBs/ FRwqqAQy6BlHbnGY1fjpKx+5gMeTPRGWRQniWveQiHEUvW6vMMMi0fxPuZWsWWsn wwW4KSYbXZdgUAQQqtI4JaqOrNOgDCcU -----END CERTIFICATE-----Generated at Sun Jul 20 11:56:20 2025 by rpki-client