$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft File: 3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json) Hash identifier: oET4J9WXx/dBfspJXVkUYZ8KvSwt8SdO59tp0QoIg14= Subject key identifier: 7E:4C:8A:34:68:3D:13:AF:7F:1F:B2:AA:2C:A1:A4:3C:B1:81:5C:C6 Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 Certificate issuer: /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft Manifest number: 55 Signing time: Sat 19 Jul 2025 07:28:54 +0000 Manifest this update: Sat 19 Jul 2025 07:28:54 +0000 Manifest next update: Sat 26 Jul 2025 07:28:54 +0000 Files and hashes: 1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: tMPbVZqGAcUDKUWKmLeP3ESzxvFw2XfO8YUD2Tp1R4M=) 2: 3958EEC642BB11F0B449BB81C4F9AE02.roa (hash: SygYrtM3v/MPPC9qe7TYDUy1/kulSQDEnXRN8vMuKwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Validity Not Before: Jul 19 07:28:54 2025 GMT Not After : Jul 26 07:28:54 2025 GMT Subject: CN=687b4936-cf28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:81:1c:bc:33:7a:e0:85:94:7b:eb:83:4c: 5c:5f:f7:83:30:10:e5:1f:a6:a1:7d:8b:54:57:90: d8:b6:31:74:49:90:7f:9c:78:8c:3b:66:9d:66:5c: 24:85:5b:31:ca:08:1d:91:5e:f3:3f:18:6a:bc:20: e1:0a:70:3a:39:6e:57:d3:2a:42:f1:e8:24:e7:e2: 2f:be:34:aa:6f:9a:30:f3:fd:24:d2:20:1c:d8:ab: bb:a4:5d:7a:f7:c9:34:54:6f:8a:bd:ae:79:38:16: 5a:c7:cd:5f:f7:74:94:bd:7a:42:a0:2e:dc:11:ec: c4:30:79:6a:c0:d7:c0:5c:f1:22:c2:3e:bd:a8:d3: 0f:58:9c:a8:ba:95:81:b3:61:bb:9e:a5:e0:9f:64: 5b:bf:86:ba:84:88:9a:cd:c6:f2:41:cd:13:e7:c0: 74:3c:22:dc:88:00:24:5d:6f:e3:18:36:65:d1:dd: aa:3e:96:b7:33:40:52:cd:ce:82:81:3f:01:ff:4b: 0f:08:de:03:bd:bb:81:42:23:42:22:55:2e:58:8d: 87:17:fd:48:af:5c:e1:5e:13:a0:6c:10:ed:a8:30: 12:75:ae:5d:93:4c:cf:9a:74:3a:5c:8a:8d:b0:15: ea:ec:f4:f3:dd:3f:c6:aa:99:38:36:52:e5:a1:47: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4C:8A:34:68:3D:13:AF:7F:1F:B2:AA:2C:A1:A4:3C:B1:81:5C:C6 X509v3 Authority Key Identifier: keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:c8:48:75:29:b6:9a:8e:19:85:3b:95:ad:ca:1d:45:d3:51: 52:1e:9b:ac:9b:cf:46:61:76:22:33:b8:b8:62:9d:94:f3:ae: 38:32:ad:64:69:d5:30:57:8c:2a:00:ad:b7:95:8b:b1:e6:62: f1:f7:97:b4:04:4e:a6:91:43:70:d0:73:2b:9a:2d:e3:e7:f3: 57:47:40:db:0a:0d:ef:e4:05:e5:15:6d:b5:34:69:1a:c0:3b: 9c:6a:d9:63:ba:bb:7d:94:a4:9c:06:85:75:d4:a6:f1:70:bf: 79:6a:11:b2:f4:d5:fd:06:28:93:11:64:d2:5f:70:f4:d4:f4: 09:b6:2a:9f:bb:5b:7d:45:c2:40:e5:3c:da:7f:85:1e:fe:79: 1d:86:f7:3b:ec:79:dc:b8:47:50:ef:87:00:e2:12:67:d1:a3: 90:92:40:ce:6d:dc:a9:5e:a4:3a:dd:b5:b8:a0:53:37:f9:30: 57:63:dc:9c:33:bb:18:8e:e5:25:14:0d:4d:e2:19:08:82:09: d4:4a:64:3c:df:f1:88:5d:62:01:51:9c:ec:01:b2:8b:93:37: 42:ce:70:42:a0:f3:b2:e7:5b:3e:e7:c5:62:8d:1b:52:cf:2b: 35:fe:7a:da:48:c0:8d:b5:13:11:0e:13:14:c4:bb:8f:9a:ce: 74:a2:a8:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzI3MzExMC8GA1UEBRMoRERBNDlGNDFGNjE4QTU1RjlDQTdDRkM1NUJBRUE3QjYx NkQ5NTc2MjAeFw0yNTA3MTkwNzI4NTRaFw0yNTA3MjYwNzI4NTRaMBgxFjAUBgNV BAMTDTY4N2I0OTM2LWNmMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMBoEcvDN64IWUe+uDTFxf94MwEOUfpqF9i1RXkNi2MXRJkH+ceIw7Zp1mXCSF WzHKCB2RXvM/GGq8IOEKcDo5blfTKkLx6CTn4i++NKpvmjDz/STSIBzYq7ukXXr3 yTRUb4q9rnk4FlrHzV/3dJS9ekKgLtwR7MQweWrA18Bc8SLCPr2o0w9YnKi6lYGz YbuepeCfZFu/hrqEiJrNxvJBzRPnwHQ8ItyIACRdb+MYNmXR3ao+lrczQFLNzoKB PwH/Sw8I3gO9u4FCI0IiVS5YjYcX/UivXOFeE6BsEO2oMBJ1rl2TTM+adDpcio2w Fers9PPdP8aqmTg2UuWhR+iBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfkyKNGg9 E69/H7KqLKGkPLGBXMYwHwYDVR0jBBgwFoAU3aSfQfYYpV+cp8/FW66nthbZV2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MjczL0ZDNTA1MDBFRTc3 MTExRUY5REZCREQ1MEM0RjlBRTAyLzNhU2ZRZllZcFYtY3A4X0ZXNjZudGhiWlYy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2FTZlFmWVlwVi1jcDhfRlc2Nm50aGJaVjJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 MjczL0ZDNTA1MDBFRTc3MTExRUY5REZCREQ1MEM0RjlBRTAyLzNhU2ZRZllZcFYt Y3A4X0ZXNjZudGhiWlYySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOPISHUptpqOGYU7la3KHUXTUVIem6ybz0ZhdiIzuLhinZTzrjgyrWRp 1TBXjCoArbeVi7HmYvH3l7QETqaRQ3DQcyuaLePn81dHQNsKDe/kBeUVbbU0aRrA O5xq2WO6u32UpJwGhXXUpvFwv3lqEbL01f0GKJMRZNJfcPTU9Am2Kp+7W31FwkDl PNp/hR7+eR2G9zvsedy4R1DvhwDiEmfRo5CSQM5t3KlepDrdtbigUzf5MFdj3Jwz uxiO5SUUDU3iGQiCCdRKZDzf8YhdYgFRnOwBsouTN0LOcEKg87LnWz7nxWKNG1LP KzX+etpIwI21ExEOExTEu4+aznSiqCI= -----END CERTIFICATE-----Generated at Sun Jul 20 03:37:06 2025 by rpki-client