$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: C2I61oNNwjbNC48ElOnXaRN9sRT3P+fVkruBAey3lbA= Subject key identifier: 71:E4:01:E5:BF:10:24:DF:51:26:1F:74:6B:4F:30:02:CC:36:70:9D Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 99 Signing time: Sat 19 Jul 2025 06:32:28 +0000 Manifest this update: Sat 19 Jul 2025 06:32:27 +0000 Manifest next update: Sat 26 Jul 2025 06:32:27 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: 683YDRyE4ee1+bfglruCt03ef9pRXIhjfEbLac6a/8w=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: Y94sd9E5GlcMt+lxymyuqjd3AEApdFlcMVQYEZaGYA0=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: jUEy/iUbesTw/bKzIqKbuM3aQtOsfpKNSiK5hvDoL0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Jul 19 06:32:27 2025 GMT Not After : Jul 26 06:32:27 2025 GMT Subject: CN=687b3bfc-d556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:b8:ca:be:f3:75:77:48:b7:0b:50:46:21: e9:6a:01:ae:6e:49:8f:25:0c:53:84:6b:c7:f8:6b: 3d:0b:fe:26:e5:72:50:ff:45:15:7a:9c:ea:2c:f5: 5c:e1:a8:01:da:ec:73:ce:04:a7:fe:c9:b3:44:35: f6:74:98:40:57:36:b7:4e:38:7c:ab:48:49:b4:36: 68:ce:c5:95:26:dc:39:7d:11:2c:7c:dd:40:fa:6b: c6:ef:6d:f4:16:c0:94:01:6d:4a:99:20:e9:ad:4b: ea:e3:df:c1:1a:72:25:3f:86:2a:b8:a2:ce:6f:6f: 0a:3c:89:32:c8:cc:3c:ca:c3:a5:79:ba:fa:7a:a5: 08:14:08:84:40:a7:f1:a8:d7:c6:cf:0c:cc:3f:ff: 8d:d8:4e:75:88:d4:2a:ee:ac:38:de:c4:61:3c:d3: f2:b7:1d:6c:fb:5a:c8:16:c0:db:65:4f:a3:2b:db: fb:b5:40:b9:87:2c:44:ca:45:fb:86:e2:03:88:57: e4:89:d3:1f:79:49:07:73:5a:f0:3f:b2:51:be:67: 85:4b:56:54:49:4e:05:17:08:05:50:99:e9:4b:7f: f8:c8:ba:81:89:cb:59:2b:c5:3b:15:4a:d4:bf:ff: 39:c2:c8:d3:e2:76:00:66:bb:4a:ca:10:59:3f:02: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E4:01:E5:BF:10:24:DF:51:26:1F:74:6B:4F:30:02:CC:36:70:9D X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:69:8c:aa:d9:c9:cf:b9:36:0f:93:d1:7e:d5:4c:6a:f1:ba: e0:0b:73:27:51:69:f2:95:ea:1a:68:f4:9d:63:a5:aa:1c:ac: 51:13:9d:ce:64:5e:93:24:c6:5e:4b:fe:ef:44:59:c0:5a:be: 00:cf:8e:8d:38:f4:48:28:c5:3b:ef:fd:e6:ca:08:e7:02:27: b4:fe:6d:78:79:6f:ee:ef:c0:d5:aa:42:1c:04:e7:05:df:5e: e7:1c:21:ad:21:1e:21:96:52:f7:fb:e3:a3:8d:b6:16:74:17: 78:9a:5f:4e:e4:31:1e:6c:6d:88:60:5e:db:89:0a:13:17:4d: 06:22:bf:9b:e8:1d:18:78:b2:41:e8:e7:2a:cc:4d:ae:1c:bc: f8:2d:db:1e:09:27:59:00:07:b2:a3:52:8f:96:9b:a5:c6:51: 6f:cc:55:70:b4:ee:b6:90:d7:f3:2e:ea:d2:46:ff:64:c7:b9: 30:fb:8b:9e:9c:bf:85:c1:cc:ce:95:db:3f:e0:83:0d:15:81: bd:32:e9:03:09:e7:27:ef:e7:d6:1c:6b:d2:73:b7:d3:ac:2b: 70:41:e7:cd:5b:2b:33:4c:98:91:3b:8b:a6:c7:78:9f:27:2c: 52:7b:32:94:16:be:5f:33:d4:0f:64:66:e0:8a:6c:e2:ae:8c: 10:85:25:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjUwNzE5MDYzMjI3WhcNMjUwNzI2MDYzMjI3WjAYMRYwFAYD VQQDEw02ODdiM2JmYy1kNTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuK4yr7zdXdItwtQRiHpagGubkmPJQxThGvH+Gs9C/4m5XJQ/0UVepzqLPVc 4agB2uxzzgSn/smzRDX2dJhAVza3Tjh8q0hJtDZozsWVJtw5fREsfN1A+mvG7230 FsCUAW1KmSDprUvq49/BGnIlP4YquKLOb28KPIkyyMw8ysOlebr6eqUIFAiEQKfx qNfGzwzMP/+N2E51iNQq7qw43sRhPNPytx1s+1rIFsDbZU+jK9v7tUC5hyxEykX7 huIDiFfkidMfeUkHc1rwP7JRvmeFS1ZUSU4FFwgFUJnpS3/4yLqBictZK8U7FUrU v/85wsjT4nYAZrtKyhBZPwKmAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHkAeW/ ECTfUSYfdGtPMALMNnCdMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHaYyq2cnPuTYPk9F+1Uxq8brgC3MnUWnyleoaaPSdY6WqHKxRE53O ZF6TJMZeS/7vRFnAWr4Az46NOPRIKMU77/3mygjnAie0/m14eW/u78DVqkIcBOcF 317nHCGtIR4hllL3++OjjbYWdBd4ml9O5DEebG2IYF7biQoTF00GIr+b6B0YeLJB 6OcqzE2uHLz4LdseCSdZAAeyo1KPlpulxlFvzFVwtO62kNfzLurSRv9kx7kw+4ue nL+FwczOlds/4IMNFYG9MukDCecn7+fWHGvSc7fTrCtwQefNWyszTJiRO4umx3if JyxSezKUFr5fM9QPZGbgimzirowQhSUQ -----END CERTIFICATE-----Generated at Sun Jul 20 07:55:33 2025 by rpki-client