$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json) Hash identifier: SNuy1vRCHphZkdNeEcPjNoMzKHL6qj4gc0CW27quPog= Subject key identifier: 41:21:D5:E0:94:08:4C:E5:45:90:73:88:A6:AE:CD:D8:3B:91:3E:F0 Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 34CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft Manifest number: 34AE Signing time: Tue 22 Jul 2025 14:24:14 +0000 Manifest this update: Tue 22 Jul 2025 14:24:14 +0000 Manifest next update: Tue 29 Jul 2025 14:24:14 +0000 Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: LoPmGnfx0cF4gzh7X4IgCQeYxNfOR+UsI2twn/Z55kQ=) 2: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: VGqKOKmiRQqT6yzNCTI4GsckVdo9EsIqZ8D30e0mo6o=) 3: C28E34620A2011EC8B517885C4F9AE02.roa (hash: WML6bSJiK9+KF/pEPMbVuQofZWsQq5X8goxfmm+ACQg=) 4: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: mmOf8E5cH5F9E51SwHybcc0hD3kIHBOrU1OwIH3yXaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 14:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13514 (0x34ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: Jul 22 14:24:14 2025 GMT Not After : Jul 29 14:24:14 2025 GMT Subject: CN=687f9f0e-b4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:80:1c:6d:b8:db:19:dd:23:a7:95:92:42: 0a:e5:f3:19:32:9e:39:28:56:40:9f:15:e7:67:04: 6a:88:35:df:36:36:f6:f8:da:f0:35:20:5d:8c:87: eb:68:13:d6:73:84:5b:65:97:e9:25:fc:4f:7c:2e: 00:ce:ee:6f:0c:8a:c2:d7:6e:bd:8d:a8:65:04:df: 08:f3:db:fe:8b:b7:d6:91:78:91:89:66:4a:2c:a4: 4b:63:33:f5:0e:2c:10:cc:ec:a5:0d:b2:3c:16:2a: 7a:8e:b6:cb:01:90:7a:84:66:d8:ff:83:53:96:90: bc:a2:7f:39:d2:7c:ab:93:5c:e5:65:f5:e4:28:4d: 89:84:eb:4b:41:5d:53:74:79:03:ea:79:4e:29:1b: 2d:c6:ee:91:c9:4a:55:11:8c:84:b3:77:7c:8d:9c: 7e:3f:e7:21:b6:db:bc:16:df:db:62:5c:1f:ac:de: a2:45:8b:08:35:4e:d4:b1:ad:a6:5d:d5:1f:41:64: 0d:78:d2:57:ab:f4:cc:2c:f2:33:45:27:7b:14:37: 27:16:11:e6:d4:b8:63:3c:ab:8a:3c:03:cf:1e:9c: 8b:a0:98:e9:f7:f4:6d:42:0c:01:0c:b6:53:4b:44: a9:2e:9d:91:95:89:b2:cb:cd:8b:2f:d2:b2:76:37: 28:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:21:D5:E0:94:08:4C:E5:45:90:73:88:A6:AE:CD:D8:3B:91:3E:F0 X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a9:df:41:89:e8:20:0e:6c:34:5e:ad:5b:47:a1:33:ea:02: d8:e2:4a:35:49:6a:d2:bf:cb:64:96:5b:67:8b:06:a8:4c:80: 70:33:0d:5f:84:9c:15:a7:1b:c1:d2:b7:4e:d6:f8:78:8c:72: 1f:7d:2a:17:61:7a:4e:90:00:69:1c:74:04:c1:9d:ed:03:86: a4:d7:26:36:32:aa:15:17:2e:07:1e:42:28:2c:57:87:c2:80: 05:99:42:f5:6b:2f:73:5c:e2:6b:e7:56:33:54:12:4f:e5:e8: f6:d1:2c:64:5f:7d:c9:d9:f8:ef:0c:40:1d:7c:cd:65:1a:a4: c8:fc:da:47:26:4d:4f:4e:21:d8:6a:2e:42:0d:10:73:05:4b: 55:e6:fc:c1:8c:7f:f5:d9:92:34:2c:0b:0e:82:39:a3:5a:26: 28:e9:46:91:bf:b2:aa:77:ba:25:f4:03:3d:ed:46:03:fd:9e: 2c:ce:f7:dc:23:aa:b5:99:90:39:72:00:e3:a4:1f:be:26:f8: 56:68:ee:a5:37:c1:b6:97:af:1f:f1:4e:96:08:9d:3f:49:9a: 1c:32:2a:a6:13:9c:40:a3:bb:97:bd:66:3f:31:cd:13:79:a7: 0e:e4:c6:95:73:53:d0:c2:4e:3f:71:19:5b:f7:53:70:a7:c9: 5f:58:ea:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjUwNzIyMTQyNDE0WhcNMjUwNzI5MTQyNDE0WjAYMRYwFAYD VQQDEw02ODdmOWYwZS1iNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjeAHG242xndI6eVkkIK5fMZMp45KFZAnxXnZwRqiDXfNjb2+NrwNSBdjIfr aBPWc4RbZZfpJfxPfC4Azu5vDIrC1269jahlBN8I89v+i7fWkXiRiWZKLKRLYzP1 DiwQzOylDbI8Fip6jrbLAZB6hGbY/4NTlpC8on850nyrk1zlZfXkKE2JhOtLQV1T dHkD6nlOKRstxu6RyUpVEYyEs3d8jZx+P+chttu8Ft/bYlwfrN6iRYsINU7Usa2m XdUfQWQNeNJXq/TMLPIzRSd7FDcnFhHm1LhjPKuKPAPPHpyLoJjp9/RtQgwBDLZT S0SpLp2RlYmyy82LL9KydjcodQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEh1eCU CEzlRZBziKauzdg7kT7wMB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjBBOS82QkE4MDYxQTFEODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVC TXQ2YWVIRVFpREZ0MWdWYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4qd9BieggDmw0Xq1bR6Ez6gLY4ko1SWrSv8tklltniwaoTIBwMw1f hJwVpxvB0rdO1vh4jHIffSoXYXpOkABpHHQEwZ3tA4ak1yY2MqoVFy4HHkIoLFeH woAFmUL1ay9zXOJr51YzVBJP5ej20SxkX33J2fjvDEAdfM1lGqTI/NpHJk1PTiHY ai5CDRBzBUtV5vzBjH/12ZI0LAsOgjmjWiYo6UaRv7Kqd7ol9AM97UYD/Z4szvfc I6q1mZA5cgDjpB++JvhWaO6lN8G2l68f8U6WCJ0/SZocMiqmE5xAo7uXvWY/Mc0T eacO5MaVc1PQwk4/cRlb91Nwp8lfWOqI -----END CERTIFICATE-----Generated at Thu Jul 24 08:19:08 2025 by rpki-client