$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: 21pbI5ggIRXPO9DmFk9/vksnCW952uiTatrw9InHGUA= Subject key identifier: 29:0C:E9:4B:26:83:B7:8C:3A:00:EC:08:56:D9:47:13:EB:F3:EE:88 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 36 Signing time: Mon 21 Jul 2025 07:49:25 +0000 Manifest this update: Mon 21 Jul 2025 07:49:25 +0000 Manifest next update: Mon 28 Jul 2025 07:49:25 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: nslEBtIKKzELA42XNELfb39Z2+HP5wJMK5Bur9Y/yL0=) 2: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: ZL0Aa2llI8aydVHlIy2x+gVqsBcKLbop2xFjrlC+Qtw=) 3: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Jul 21 07:49:25 2025 GMT Not After : Jul 28 07:49:25 2025 GMT Subject: CN=687df105-9380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:a0:c4:85:2e:7e:50:e7:e4:4c:41:dc:1e: 66:cc:8c:45:09:4a:0c:73:f1:72:36:9d:24:ed:d9: aa:c8:6e:e1:d7:a1:40:dc:60:46:14:97:55:53:1b: 69:b4:7e:32:70:58:f6:c9:fc:09:25:b5:82:52:af: bc:1b:6c:60:6c:f3:59:c4:11:d4:27:13:58:a4:8f: 1a:9e:bf:98:a7:bb:16:df:32:37:92:fd:55:df:de: 97:33:5f:76:5e:7b:f4:ef:06:6b:9a:cc:59:75:38: 2b:07:43:28:06:dd:83:19:ac:66:62:7e:15:cc:89: 9a:86:55:50:8e:57:cc:61:ed:2f:dd:b9:e6:22:10: 6e:d4:ca:93:11:10:3e:2b:60:b4:33:f3:6c:42:84: c1:a9:d0:9e:ee:d5:fb:35:1e:e9:0c:62:44:ef:e4: 16:cb:c5:a8:19:af:96:a7:84:c3:b2:36:cc:36:fd: 26:50:53:81:ea:4b:72:63:f6:4e:02:bb:5e:ec:3d: 09:df:27:85:17:de:a1:a0:06:4d:69:75:4b:b9:0e: 1a:d4:8a:6a:6a:89:2c:1a:43:59:19:8d:63:08:d0: 8d:45:51:88:a5:4a:f2:0d:81:7b:77:f7:c2:62:44: 00:68:71:34:8e:58:27:5a:7f:c6:ae:83:30:cf:a4: f6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0C:E9:4B:26:83:B7:8C:3A:00:EC:08:56:D9:47:13:EB:F3:EE:88 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:88:e9:b7:b2:16:db:39:6b:21:53:a5:2d:db:a4:ce:73:73: 2d:c7:ef:68:85:27:a7:ae:93:7c:60:27:a6:9b:a8:98:ae:e8: df:d3:f9:a1:63:1a:30:e6:64:1d:be:0f:73:94:54:4e:98:2b: 2a:c8:aa:94:f9:6a:3f:1b:65:ab:7c:ad:a5:35:6b:00:65:14: e1:f1:4a:cc:ec:19:cc:4a:5a:e5:9c:81:52:d3:01:a7:6e:c4: 35:2b:84:8a:c3:ea:d7:8a:f5:d4:5b:69:93:e3:48:05:ab:dc: 1e:e1:99:eb:b9:96:83:fe:9e:d9:64:d2:eb:9f:ef:f4:ae:cc: d3:0e:ff:a2:b8:1e:5d:73:69:82:e6:6b:85:7f:7a:5f:37:96: 49:28:f5:cb:f7:b8:34:f6:68:75:92:50:e6:83:d6:2b:9e:cf: f2:45:ae:78:80:ea:3e:ca:64:99:15:09:d8:24:71:4b:b2:8f: 5b:7d:1c:78:81:94:9a:50:ea:cb:86:f5:d4:c9:23:67:75:61: de:73:92:15:59:d2:c4:28:85:cc:0c:84:f8:ba:a5:9a:f6:d9: 62:da:56:8c:0c:0f:e4:c9:42:04:28:21:f8:41:a5:93:1e:17: 3e:dc:fc:6b:cb:55:72:a8:90:1d:aa:76:f2:5b:1e:f2:88:ef: 26:9a:7d:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTA3MjEwNzQ5MjVaFw0yNTA3MjgwNzQ5MjVaMBgxFjAUBgNV BAMTDTY4N2RmMTA1LTkzODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvDKDEhS5+UOfkTEHcHmbMjEUJSgxz8XI2nSTt2arIbuHXoUDcYEYUl1VTG2m0 fjJwWPbJ/AkltYJSr7wbbGBs81nEEdQnE1ikjxqev5inuxbfMjeS/VXf3pczX3Ze e/TvBmuazFl1OCsHQygG3YMZrGZifhXMiZqGVVCOV8xh7S/dueYiEG7UypMRED4r YLQz82xChMGp0J7u1fs1HukMYkTv5BbLxagZr5anhMOyNsw2/SZQU4HqS3Jj9k4C u17sPQnfJ4UX3qGgBk1pdUu5DhrUimpqiSwaQ1kZjWMI0I1FUYilSvINgXt398Ji RABocTSOWCdaf8augzDPpPbpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKQzpSyaD t4w6AOwIVtlHE+vz7ogwHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6I6beyFts5ayFTpS3bpM5zcy3H72iFJ6euk3xgJ6abqJiu6N/T+aFj GjDmZB2+D3OUVE6YKyrIqpT5aj8bZat8raU1awBlFOHxSszsGcxKWuWcgVLTAadu xDUrhIrD6teK9dRbaZPjSAWr3B7hmeu5loP+ntlk0uuf7/SuzNMO/6K4Hl1zaYLm a4V/el83lkko9cv3uDT2aHWSUOaD1iuez/JFrniA6j7KZJkVCdgkcUuyj1t9HHiB lJpQ6suG9dTJI2d1Yd5zkhVZ0sQohcwMhPi6pZr22WLaVowMD+TJQgQoIfhBpZMe Fz7c/GvLVXKokB2qdvJbHvKI7yaafac= -----END CERTIFICATE-----Generated at Mon Jul 21 12:45:57 2025 by rpki-client