$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json) Hash identifier: KdEd1ddgohXzEAlESHYZ+N0Y1VTkOPpbEsLo5/l7cVc= Subject key identifier: ED:81:EE:2F:96:35:56:4F:A4:18:34:6E:52:A2:0F:ED:E4:7F:5D:FF Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft Manifest number: 01C0 Signing time: Sat 19 Jul 2025 03:41:00 +0000 Manifest this update: Sat 19 Jul 2025 03:41:00 +0000 Manifest next update: Sat 26 Jul 2025 03:41:00 +0000 Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: 7pvILanCatvk01yvKs1OGL7y/u0Xvfcjvv/LhGEeQO4=) 2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: q2jyIpsgOSZMDylILKfsOrMIus5pnrAFZdrI/kJzgvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: Jul 19 03:41:00 2025 GMT Not After : Jul 26 03:41:00 2025 GMT Subject: CN=687b13cc-11da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:be:b9:84:33:7c:67:16:94:ac:23:51:a4: 1d:05:5b:b1:78:86:a3:2f:83:94:e6:58:4a:32:d2: d6:72:34:80:eb:b5:d8:60:9b:40:b3:3c:fe:3e:2e: 12:23:03:0a:ad:db:8b:a6:a0:69:31:8b:20:3a:05: 72:16:93:4f:2d:4d:03:78:d5:5b:9e:47:ea:e9:c9: 75:c1:c4:4d:48:a5:37:7d:89:2a:a5:f7:8d:44:59: df:35:e8:3b:01:e6:27:07:cc:b0:9b:29:ef:7e:e2: fc:cd:44:b2:0a:56:f2:4d:e1:b0:be:f9:1d:c1:38: 79:c8:7b:28:5b:a2:f8:69:0b:c2:01:2e:fc:6d:42: 92:9b:ec:02:6b:28:3b:79:bc:92:df:f1:33:2d:3e: c8:8a:3d:a9:e6:2f:52:70:b2:b6:81:1b:0b:1c:21: f7:57:dc:bd:05:c1:f8:a4:ee:89:89:38:87:f1:6a: 9b:0f:d8:1a:b7:3f:12:3e:45:07:75:57:ce:5b:d2: 32:a6:38:0b:65:2b:49:6a:ff:36:f7:0f:4a:ad:7c: 25:4c:a2:9e:8b:c2:b6:6d:b4:3c:9e:c4:43:0c:95: 06:70:b4:c6:b5:d8:7e:c8:e2:ca:b9:51:c7:f6:0e: af:ad:cf:35:a5:d5:c1:12:a7:02:40:d6:d4:7e:a8: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:81:EE:2F:96:35:56:4F:A4:18:34:6E:52:A2:0F:ED:E4:7F:5D:FF X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:2d:85:cc:84:1b:fb:c7:41:db:cc:62:1e:70:52:35:05:2a: d0:17:57:97:a6:5f:33:d7:80:3b:e2:02:c7:f8:6a:e7:69:97: 84:14:8b:bb:eb:a3:8d:97:aa:97:3f:c9:1f:be:eb:d8:9b:25: ea:e4:ae:cf:ac:11:28:8b:fa:90:d0:8c:4d:b2:81:4a:af:89: 86:e9:09:63:bd:cc:c5:7e:c1:fe:18:06:cc:6c:85:12:03:10: c6:a7:a5:09:c5:ec:8e:6a:ae:21:45:a6:29:97:67:b8:b6:72: 7f:22:99:a8:5f:68:b2:6e:92:1d:03:9f:86:4d:4d:0a:e6:9c: 5e:6e:01:cf:c3:a7:92:04:0d:dc:45:08:60:c2:c9:94:04:24: 77:ae:fc:99:ff:51:7f:a7:dd:fb:26:e9:f0:4b:75:4d:2c:c1: be:48:b3:7a:e2:ff:2f:27:99:93:e4:23:a9:3d:19:4c:ad:eb: 7e:b3:28:85:03:1f:9c:d4:ef:06:69:8b:c4:3c:f6:29:d8:ca: 59:72:fb:2b:68:ed:c9:0d:ca:2e:80:e4:bc:f5:f9:52:fc:42: a7:d3:b0:aa:49:91:53:27:f6:8a:31:80:dc:3d:27:bc:0e:47: 9e:34:9e:bc:45:03:4d:5e:7e:12:d2:7c:91:99:ec:ce:4b:3f: e6:29:d7:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0QzIxMTAvBgNVBAUTKERDMjNBNjlFQTFFRkMxQTM3OTQ5MkMxM0U5QUMxNDdD NDlGNUFEMDQwHhcNMjUwNzE5MDM0MTAwWhcNMjUwNzI2MDM0MTAwWjAYMRYwFAYD VQQDEw02ODdiMTNjYy0xMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviS+uYQzfGcWlKwjUaQdBVuxeIajL4OU5lhKMtLWcjSA67XYYJtAszz+Pi4S IwMKrduLpqBpMYsgOgVyFpNPLU0DeNVbnkfq6cl1wcRNSKU3fYkqpfeNRFnfNeg7 AeYnB8ywmynvfuL8zUSyClbyTeGwvvkdwTh5yHsoW6L4aQvCAS78bUKSm+wCayg7 ebyS3/EzLT7Iij2p5i9ScLK2gRsLHCH3V9y9BcH4pO6JiTiH8WqbD9gatz8SPkUH dVfOW9IypjgLZStJav829w9KrXwlTKKei8K2bbQ8nsRDDJUGcLTGtdh+yOLKuVHH 9g6vrc81pdXBEqcCQNbUfqjtdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2B7i+W NVZPpBg0blKiD+3kf13/MB8GA1UdIwQYMBaAFNwjpp6h78GjeUksE+msFHxJ9a0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjRDMi9CMTdFOTVENjAz NzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndhTjVTU3dUNmF3VWZFbjFy UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndh TjVTU3dUNmF3VWZFbjFyUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlLYXMhBv7x0HbzGIecFI1BSrQF1eXpl8z14A74gLH+GrnaZeEFIu7 66ONl6qXP8kfvuvYmyXq5K7PrBEoi/qQ0IxNsoFKr4mG6QljvczFfsH+GAbMbIUS AxDGp6UJxeyOaq4hRaYpl2e4tnJ/IpmoX2iybpIdA5+GTU0K5pxebgHPw6eSBA3c RQhgwsmUBCR3rvyZ/1F/p937JunwS3VNLMG+SLN64v8vJ5mT5COpPRlMret+syiF Ax+c1O8GaYvEPPYp2MpZcvsraO3JDcougOS89flS/EKn07CqSZFTJ/aKMYDcPSe8 DkeeNJ68RQNNXn4S0nyRmezOSz/mKddc -----END CERTIFICATE-----Generated at Sun Jul 20 06:39:36 2025 by rpki-client