$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: 3lLjys/IR4jHiJgiSCcFJQDRIZQP6MGTSvnDHcHKl7Y= Subject key identifier: 48:22:03:51:04:03:3E:1F:F4:1B:56:D9:CA:4B:AC:C0:2C:89:CF:73 Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 34AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 34A8 Signing time: Tue 22 Jul 2025 14:32:55 +0000 Manifest this update: Tue 22 Jul 2025 14:32:54 +0000 Manifest next update: Tue 29 Jul 2025 14:32:54 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: oJ5aD5knV3ZXHQadxYdU/gGvjfALoJ73khU96BJIkuY=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 14:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Jul 22 14:32:54 2025 GMT Not After : Jul 29 14:32:54 2025 GMT Subject: CN=687fa116-bc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0e:2c:71:6a:13:8c:b6:64:60:ee:09:a2:28: 66:51:c9:fd:34:cb:11:55:8c:eb:4f:e5:c6:f5:c1: 5e:cb:7a:18:1c:6b:86:9b:aa:dc:7b:8c:f1:85:67: 98:29:f6:8e:d4:a9:83:d8:49:17:1f:af:6a:43:55: ec:2e:09:c8:7e:bd:91:65:0b:e0:7a:35:38:75:aa: 70:50:81:09:ba:14:c9:40:c9:fc:43:18:56:31:ca: 5d:f2:f1:ca:85:96:15:70:0e:4a:98:54:ee:ac:41: 2e:f0:94:e9:a0:12:aa:08:39:cd:f5:22:06:80:c7: cf:2f:64:36:f7:8e:b7:e8:69:df:2d:a4:46:b9:9d: 44:66:f7:01:bd:29:ed:7c:2d:aa:06:ef:62:3e:0c: a5:f3:e2:12:a4:e4:70:f8:e7:ab:19:30:b9:45:94: 03:5e:b2:e2:41:b5:e2:16:d0:3e:36:c0:e2:fa:28: d4:41:3f:96:2c:ca:2c:e4:d2:fd:b3:dc:07:b3:8a: f1:1c:70:bd:74:6f:a9:86:fd:47:b7:c6:8d:90:1f: c0:8d:f7:a5:a0:f6:4e:9d:52:ac:6a:57:6e:97:60: 7c:a8:e0:04:2c:30:02:66:b6:dc:db:c0:58:6c:41: 9b:77:44:3c:92:19:85:f3:e8:4c:1b:a7:04:dd:45: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:22:03:51:04:03:3E:1F:F4:1B:56:D9:CA:4B:AC:C0:2C:89:CF:73 X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b2:98:be:d1:b1:dc:dc:32:27:eb:c8:2e:f7:61:08:2b:17: 3b:f2:7a:f8:d9:26:5d:ce:bc:a1:77:e7:65:73:ab:4b:5c:5e: e7:ee:13:e1:95:44:6a:ee:33:21:76:62:7e:3d:d3:b3:31:17: 17:68:46:1f:c9:dd:e2:ae:d7:93:02:1c:f1:7c:ba:a3:59:43: 83:54:19:02:2f:10:f2:82:ad:cc:64:db:48:d3:27:20:e4:c4: ea:16:2d:c4:21:dc:d9:d2:7a:49:e8:2d:bb:89:72:85:01:fd: 3c:73:67:8b:78:e9:29:2c:16:2f:65:d9:09:ee:97:bd:b0:96: 87:99:d1:8d:7d:15:76:eb:cf:2f:1b:25:4b:db:e5:4e:97:f2: 98:a8:32:8e:9c:7a:87:5d:f8:0a:87:ad:c7:1d:10:38:fa:c4: f8:08:83:ea:e0:88:5a:04:e0:95:ce:64:ad:15:45:09:09:fb: ec:2a:f8:3f:46:d2:69:c8:ec:7e:7f:62:3c:b7:cb:52:9a:27: 6a:40:d8:8d:cd:24:33:38:e2:51:a5:7e:a8:a8:03:23:31:b6: d3:17:39:86:04:ca:6d:83:6d:11:c6:96:27:10:9b:af:6d:66: 8b:61:24:7a:c0:00:40:0e:9c:03:63:a7:b2:cf:dc:40:9b:27: 91:03:c9:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUwNzIyMTQzMjU0WhcNMjUwNzI5MTQzMjU0WjAYMRYwFAYD VQQDEw02ODdmYTExNi1iYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g4scWoTjLZkYO4JoihmUcn9NMsRVYzrT+XG9cFey3oYHGuGm6rce4zxhWeY KfaO1KmD2EkXH69qQ1XsLgnIfr2RZQvgejU4dapwUIEJuhTJQMn8QxhWMcpd8vHK hZYVcA5KmFTurEEu8JTpoBKqCDnN9SIGgMfPL2Q294636GnfLaRGuZ1EZvcBvSnt fC2qBu9iPgyl8+ISpORw+OerGTC5RZQDXrLiQbXiFtA+NsDi+ijUQT+WLMos5NL9 s9wHs4rxHHC9dG+phv1Ht8aNkB/AjfeloPZOnVKsaldul2B8qOAELDACZrbc28BY bEGbd0Q8khmF8+hMG6cE3UV5YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgiA1EE Az4f9BtW2cpLrMAsic9zMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBispi+0bHc3DIn68gu92EIKxc78nr42SZdzryhd+dlc6tLXF7n7hPh lURq7jMhdmJ+PdOzMRcXaEYfyd3irteTAhzxfLqjWUODVBkCLxDygq3MZNtI0ycg 5MTqFi3EIdzZ0npJ6C27iXKFAf08c2eLeOkpLBYvZdkJ7pe9sJaHmdGNfRV2688v GyVL2+VOl/KYqDKOnHqHXfgKh63HHRA4+sT4CIPq4IhaBOCVzmStFUUJCfvsKvg/ RtJpyOx+f2I8t8tSmidqQNiNzSQzOOJRpX6oqAMjMbbTFzmGBMptg20RxpYnEJuv bWaLYSR6wABADpwDY6eyz9xAmyeRA8mq -----END CERTIFICATE-----Generated at Thu Jul 24 08:44:05 2025 by rpki-client