$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: 9U4o0Wk3q8uIfsWt9A7/d3dDgVS3hxpV8bXyGtkjHo0= Subject key identifier: 46:EA:CC:AC:CB:62:D2:0D:62:03:0A:6F:D5:22:36:28:71:FF:0C:55 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0CCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0CBA Signing time: Fri 18 Jul 2025 18:20:33 +0000 Manifest this update: Fri 18 Jul 2025 18:20:32 +0000 Manifest next update: Fri 25 Jul 2025 18:20:32 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: kHorbTxreHAn9bJJz7Q/Ndn2pXaeKbLlAv6NtlKZzYo=) 2: 7A89B302E7E511EFA8BD237AC4F9AE02.roa (hash: 3cZWclJtX3V6aTw+zOu2W0FHd/b2ev4flaWcS3tJ/J0=) 3: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: KypfxpsYSUZAZe6pLsx6D3j38tcpQYPu6XyVBPdIPY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Jul 18 18:20:32 2025 GMT Not After : Jul 25 18:20:32 2025 GMT Subject: CN=687a9070-662e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:37:c9:05:d3:ef:41:a2:40:44:10:14:a6:f4: a6:8d:c9:ad:13:2f:8f:17:9d:dd:51:17:54:a5:5a: 79:81:96:a7:54:e1:0f:00:8b:d6:dc:58:d6:65:ac: 93:fd:6c:56:97:e1:89:32:eb:8c:6d:af:90:e9:0d: 2b:86:d0:e5:b0:ac:89:cf:51:49:f7:1c:fc:17:0c: 01:fd:39:4d:a8:be:53:a7:e7:d4:6e:e9:fe:e7:39: 4d:ad:da:24:c3:15:6c:71:9e:f8:6e:7f:89:ae:74: c6:1f:e6:45:1e:9c:31:d4:e6:dd:22:ac:d9:22:b9: a8:29:06:72:58:7d:06:57:39:0e:dd:93:1b:8c:21: 53:c5:e7:57:f0:83:dd:9f:d3:d3:5a:a3:26:8c:cc: 31:4a:2b:c2:10:5d:49:df:98:79:61:35:74:92:af: 9e:e1:3f:cb:85:4c:50:cd:5a:85:de:2f:a9:2f:d5: 5d:73:82:48:75:b4:34:eb:04:08:52:d9:d7:41:c7: 7f:64:71:a9:1b:e3:8e:9d:e6:5d:70:be:49:19:bf: 3e:13:5f:66:ff:c9:e1:03:08:be:1a:d7:d8:16:1e: 82:b4:ab:72:e5:c9:1a:9d:0e:42:f0:4e:74:2e:b0: e8:1c:e5:2e:39:30:bf:9f:fe:cf:9d:2f:e3:ed:fc: 64:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EA:CC:AC:CB:62:D2:0D:62:03:0A:6F:D5:22:36:28:71:FF:0C:55 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f1:0e:90:df:8e:20:32:26:c5:79:54:cd:0a:81:df:49:6a: 4e:a5:c2:3b:bf:a1:11:85:92:e4:7d:ef:3d:4b:63:3e:db:76: 56:2a:ba:64:59:0d:c2:1a:a7:8f:23:5d:7b:6e:b7:66:77:76: c8:87:68:38:62:1f:c6:b3:b2:56:16:51:f1:06:aa:8f:81:7c: 5b:c6:47:b6:58:1f:4e:c9:93:c0:97:08:58:1d:6e:3d:91:06: f5:f5:9b:c8:67:f7:54:a9:97:d5:ea:8f:c4:b9:52:e1:34:14: 0a:b8:ff:18:49:86:69:03:32:55:9f:58:09:8f:96:2b:1e:df: 6d:2f:bb:c0:76:48:44:b3:a0:07:04:fc:10:1a:cf:a4:a7:02: f8:9e:e8:65:fa:43:98:37:58:84:f2:08:4b:c7:48:b2:8e:3e: aa:51:c7:b4:c7:c4:75:1c:ce:08:14:7f:d9:a4:fd:d8:93:c4: c3:5a:db:43:d9:d6:f4:40:c8:cf:d6:86:cc:95:d1:50:e3:46: ba:ee:3a:44:71:9e:eb:c1:58:4e:d9:88:d9:9f:f7:7d:fd:5b: 11:8e:c0:ca:b5:2e:e6:e0:f0:be:40:54:6e:2d:94:6d:1e:82: 52:fa:3e:6c:51:92:e0:c5:67:a9:f0:cb:2f:dd:ee:1d:16:bb: 92:e9:7e:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwNzE4MTgyMDMyWhcNMjUwNzI1MTgyMDMyWjAYMRYwFAYD VQQDEw02ODdhOTA3MC02NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zfJBdPvQaJARBAUpvSmjcmtEy+PF53dURdUpVp5gZanVOEPAIvW3FjWZayT /WxWl+GJMuuMba+Q6Q0rhtDlsKyJz1FJ9xz8FwwB/TlNqL5Tp+fUbun+5zlNrdok wxVscZ74bn+JrnTGH+ZFHpwx1ObdIqzZIrmoKQZyWH0GVzkO3ZMbjCFTxedX8IPd n9PTWqMmjMwxSivCEF1J35h5YTV0kq+e4T/LhUxQzVqF3i+pL9Vdc4JIdbQ06wQI UtnXQcd/ZHGpG+OOneZdcL5JGb8+E19m/8nhAwi+GtfYFh6CtKty5ckanQ5C8E50 LrDoHOUuOTC/n/7PnS/j7fxkcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbqzKzL YtINYgMKb9UiNihx/wxVMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh8Q6Q344gMibFeVTNCoHfSWpOpcI7v6ERhZLkfe89S2M+23ZWKrpk WQ3CGqePI117brdmd3bIh2g4Yh/Gs7JWFlHxBqqPgXxbxke2WB9OyZPAlwhYHW49 kQb19ZvIZ/dUqZfV6o/EuVLhNBQKuP8YSYZpAzJVn1gJj5YrHt9tL7vAdkhEs6AH BPwQGs+kpwL4nuhl+kOYN1iE8ghLx0iyjj6qUce0x8R1HM4IFH/ZpP3Yk8TDWttD 2db0QMjP1obMldFQ40a67jpEcZ7rwVhO2YjZn/d9/VsRjsDKtS7m4PC+QFRuLZRt HoJS+j5sUZLgxWep8Msv3e4dFruS6X42 -----END CERTIFICATE-----Generated at Sun Jul 20 19:07:53 2025 by rpki-client