$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json) Hash identifier: JaEXDZ7YF9TKJPC8o0cRotv8NDyH/d9r6cSOGFYS6bg= Subject key identifier: AC:65:3F:01:2E:42:23:B6:86:F7:71:FC:AB:47:D4:3B:86:72:9F:99 Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft Manifest number: 03D9 Signing time: Wed 23 Jul 2025 01:02:50 +0000 Manifest this update: Wed 23 Jul 2025 01:02:49 +0000 Manifest next update: Wed 30 Jul 2025 01:02:49 +0000 Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: IuLfRFXgOur084ImTG8vru51i5ZQglCwNwq6XZDlPIM=) 2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: 9DfUOxvFR13SpwnP9dE6JJ+qwtWuEZ4XB8tC3ndW1gI=) 3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: dBKzmRV5kLqxEgnT/9vEMvol4LmNVdPd79i3sVZVmJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Validity Not Before: Jul 23 01:02:49 2025 GMT Not After : Jul 30 01:02:49 2025 GMT Subject: CN=688034b9-0e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:71:e1:fc:b9:45:e0:f1:89:28:df:28:5b:02: 8f:64:c2:47:a6:31:19:b3:6b:a6:cf:cb:6f:6a:0e: 37:0c:31:fe:4a:64:48:48:25:9d:a2:ec:fa:63:fd: 03:d8:13:c6:3d:ce:7e:05:5e:9d:b9:07:1a:0d:d2: e5:02:18:ef:74:69:ec:b2:cd:19:bd:4d:65:a6:7a: eb:8a:8c:a1:ec:41:5d:77:7b:d7:93:d2:cc:ce:b5: 2d:5f:10:6c:db:98:20:b2:01:8c:23:7e:83:ef:ab: e3:90:ae:e8:46:d6:18:4b:e8:de:19:45:ce:fb:e7: 42:04:2f:c9:4e:8e:90:df:1f:07:c1:78:ef:d1:07: 4c:0a:dd:66:94:8c:ed:ba:14:e9:78:1c:2b:d5:dd: ad:2f:b1:0c:5e:99:1d:29:9d:9e:9c:05:19:e0:38: d7:5c:0e:1f:f0:4a:0f:70:04:39:9c:85:22:b0:f3: e1:21:b0:8e:41:f7:0d:5e:0a:f1:4e:b3:0d:79:77: a4:1c:f3:b5:12:00:67:d0:ea:e4:5b:40:fd:3b:00: 9d:1d:5c:26:d3:f9:67:37:d1:5b:22:98:29:b0:7d: 1b:fc:5a:00:53:21:24:cb:e5:cd:62:84:e9:43:61: 83:00:40:e6:eb:1b:2f:a4:40:f5:b6:e4:c1:75:53: 7a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:65:3F:01:2E:42:23:B6:86:F7:71:FC:AB:47:D4:3B:86:72:9F:99 X509v3 Authority Key Identifier: keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f3:ca:ac:ad:49:fe:38:53:13:ca:86:d1:97:18:bf:c6:2a:78: 61:b8:0a:9c:56:71:2f:84:b0:aa:2a:cd:a8:07:fe:79:2e:fa: 3c:d5:92:08:d9:f8:16:13:af:bb:58:28:d9:2f:dd:cf:2e:1c: 96:32:cb:58:0d:ab:0e:04:bb:2f:2a:25:02:ae:40:64:05:94: e1:ac:bf:da:24:7e:ce:26:d4:19:ed:72:81:bc:8a:41:ef:60: c4:ed:27:00:65:11:d0:f9:37:09:ea:b8:6d:76:1c:7c:00:54: 7c:3a:1b:36:62:01:36:e9:4f:f3:8d:93:c2:08:f1:fe:45:83: ea:77:dd:70:6a:b0:b4:c6:d2:77:a3:df:24:c9:fe:bf:84:0e: c4:dc:c9:2b:18:59:2e:ed:48:21:db:43:9a:26:6b:8b:ef:42: da:05:d7:e7:97:25:82:62:40:b9:dc:e3:c5:2e:06:db:48:1c: 09:ab:65:42:8f:9d:1a:e0:8a:63:04:bd:a9:69:2b:d2:cd:ee: 61:c5:75:cb:d6:b8:ef:9c:3a:f0:a0:cb:76:0b:bb:bf:2a:ed: 60:d7:43:50:d6:f3:52:1c:72:b3:ea:5e:00:6b:66:0d:b7:fc: 3e:ad:30:4c:0f:7d:d5:04:2d:fa:12:3f:05:fb:ca:50:8b:b7: 2e:0d:e9:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU1NjcxMTAvBgNVBAUTKEZCNEFCNUE5QTREQzM3QkJENjVFNjFFNDJBNDI1NkNG OTUxQjhDNzMwHhcNMjUwNzIzMDEwMjQ5WhcNMjUwNzMwMDEwMjQ5WjAYMRYwFAYD VQQDEw02ODgwMzRiOS0wZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XHh/LlF4PGJKN8oWwKPZMJHpjEZs2umz8tvag43DDH+SmRISCWdouz6Y/0D 2BPGPc5+BV6duQcaDdLlAhjvdGnsss0ZvU1lpnrrioyh7EFdd3vXk9LMzrUtXxBs 25ggsgGMI36D76vjkK7oRtYYS+jeGUXO++dCBC/JTo6Q3x8HwXjv0QdMCt1mlIzt uhTpeBwr1d2tL7EMXpkdKZ2enAUZ4DjXXA4f8EoPcAQ5nIUisPPhIbCOQfcNXgrx TrMNeXekHPO1EgBn0OrkW0D9OwCdHVwm0/lnN9FbIpgpsH0b/FoAUyEky+XNYoTp Q2GDAEDm6xsvpED1tuTBdVN6PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxlPwEu QiO2hvdx/KtH1DuGcp+ZMB8GA1UdIwQYMBaAFPtKtamk3De71l5h5CpCVs+VG4xz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTU2Ny9FNjc5OTRERThG RjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043dldYbUhrS2tKV3o1VWJq SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wcTFxYVRjTjd2V1htSGtLa0pXejVVYmpITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTU2Ny9FNjc5OTRERThGRjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043 dldYbUhrS2tKV3o1VWJqSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDzyqytSf44UxPKhtGXGL/GKnhhuAqcVnEvhLCqKs2oB/55Lvo81ZII 2fgWE6+7WCjZL93PLhyWMstYDasOBLsvKiUCrkBkBZThrL/aJH7OJtQZ7XKBvIpB 72DE7ScAZRHQ+TcJ6rhtdhx8AFR8Ohs2YgE26U/zjZPCCPH+RYPqd91warC0xtJ3 o98kyf6/hA7E3MkrGFku7Ugh20OaJmuL70LaBdfnlyWCYkC53OPFLgbbSBwJq2VC j50a4IpjBL2paSvSze5hxXXL1rjvnDrwoMt2C7u/Ku1g10NQ1vNSHHKz6l4Aa2YN t/w+rTBMD33VBC36Ej8F+8pQi7cuDen4 -----END CERTIFICATE-----Generated at Wed Jul 23 06:38:25 2025 by rpki-client