$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft File: acCJt6SOfabuTwH-xqmOCtL6gQs.mft (raw, json) Hash identifier: ChlCsxDQhAf+XOp25iSNnb29kgaP40QNzKO5s6lWMhI= Subject key identifier: A6:4D:B3:76:F6:57:CE:46:B4:38:88:8F:89:FF:53:FC:19:45:67:5C Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft Manifest number: 020D Signing time: Sat 19 Jul 2025 02:29:46 +0000 Manifest this update: Sat 19 Jul 2025 02:29:45 +0000 Manifest next update: Sat 26 Jul 2025 02:29:45 +0000 Files and hashes: 1: acCJt6SOfabuTwH-xqmOCtL6gQs.crl (hash: 4RcpGir7wlJFwghLuMvu733bxQFFl8UPNFE2hFRds6U=) 2: 350CDCB44ED611ED84336740C4F9AE02.roa (hash: Rl7cC9aD2+HUzvALoJy+W3POWuoH4LCYbv/U7VQpjNA=) 3: 4214E284606911EFBDF1A71AC4F9AE02.roa (hash: 6Nzq1WoXAkjRrieEemeMX09rMtSXxNTIJXhrfWNFeNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Validity Not Before: Jul 19 02:29:45 2025 GMT Not After : Jul 26 02:29:45 2025 GMT Subject: CN=687b0319-1dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:ec:f9:72:c9:2d:c3:f1:fa:4f:9d:bd:0f: d6:2d:d7:af:81:02:89:60:d3:cd:38:c5:3d:98:7d: 32:f8:bb:2a:af:d1:44:97:eb:ef:a6:6a:2d:06:38: 4f:71:50:4c:9a:78:19:29:59:25:81:44:e9:04:19: 0b:5d:b7:93:ac:e1:82:33:fc:c1:ca:29:e1:1e:20: 1b:ce:83:be:2a:f4:df:5c:e6:25:fa:66:e5:65:88: f0:46:6b:10:c2:2d:2e:f7:2a:14:f8:d9:fa:21:fe: bd:b1:f6:be:db:23:98:ba:29:45:8e:fb:7a:c8:17: 1d:5e:dc:71:de:86:5f:37:e9:17:24:de:06:a5:06: 79:4e:cc:b4:1b:ee:9d:0c:3e:d3:dc:48:16:5a:38: 4b:4e:bf:f4:ad:e5:9e:ba:3e:8e:ba:f4:4d:e0:eb: eb:a4:1a:86:5a:f2:76:02:9a:45:4e:b7:eb:fe:28: 3e:d0:d3:a5:5d:94:f7:92:8f:0b:20:17:51:21:30: fd:1f:70:fb:e7:1d:04:94:82:9b:b3:d2:aa:80:07: 17:30:8b:0a:8c:75:93:37:8d:25:ed:3b:ea:bc:79: 54:b9:b6:75:a7:d6:7e:08:02:82:59:46:d7:b0:73: 26:34:01:d7:3c:56:04:e6:32:b4:81:b6:c2:80:07: 23:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4D:B3:76:F6:57:CE:46:B4:38:88:8F:89:FF:53:FC:19:45:67:5C X509v3 Authority Key Identifier: keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d4:1e:15:5b:f8:52:4d:63:e0:e3:30:80:71:dc:52:58:89: 09:26:9d:85:4c:d5:31:1e:8f:1d:8f:37:a4:33:16:ae:3e:77: e5:5c:ba:59:e8:a1:13:e9:a0:49:82:fb:64:60:a0:d1:5d:7f: 27:8e:b2:78:d6:26:71:78:a8:f5:24:d7:86:a7:1a:45:e7:3e: 52:96:e0:4b:9d:3a:49:95:41:7a:19:f1:68:76:68:37:41:33: 39:45:41:74:6b:a7:4a:e5:89:2e:4c:66:93:8b:3e:e7:3c:f7: ed:20:62:cd:6c:b0:40:03:8e:c7:77:d2:cc:22:5f:40:f0:d2: 29:41:00:56:c2:e4:3f:26:1b:84:e0:c0:60:df:b3:02:52:ab: c9:b3:60:59:00:a1:1f:d2:7a:57:88:6c:df:e0:d3:f2:9b:fb: a6:c9:8f:73:ce:a4:ae:d6:79:78:a0:bf:dc:ae:11:95:5c:c4: 62:6e:96:56:72:9e:15:da:3d:a7:d2:d6:9d:30:1b:a0:88:56: 56:ab:f6:0f:9b:28:07:3f:09:51:f8:b7:20:4b:88:e3:fb:86: b0:ba:44:d6:31:03:b8:fc:8d:2e:0f:cf:9c:f4:94:24:46:0b: 9f:59:d6:7f:d9:f9:32:7b:21:38:cf:02:b0:cb:75:e5:16:5f: 6e:2b:74:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyRjQxMTAvBgNVBAUTKDY5QzA4OUI3QTQ4RTdEQTZFRTRGMDFGRUM2QTk4RTBB RDJGQTgxMEIwHhcNMjUwNzE5MDIyOTQ1WhcNMjUwNzI2MDIyOTQ1WjAYMRYwFAYD VQQDEw02ODdiMDMxOS0xZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfjs+XLJLcPx+k+dvQ/WLdevgQKJYNPNOMU9mH0y+Lsqr9FEl+vvpmotBjhP cVBMmngZKVklgUTpBBkLXbeTrOGCM/zByinhHiAbzoO+KvTfXOYl+mblZYjwRmsQ wi0u9yoU+Nn6If69sfa+2yOYuilFjvt6yBcdXtxx3oZfN+kXJN4GpQZ5Tsy0G+6d DD7T3EgWWjhLTr/0reWeuj6OuvRN4OvrpBqGWvJ2AppFTrfr/ig+0NOlXZT3ko8L IBdRITD9H3D75x0ElIKbs9KqgAcXMIsKjHWTN40l7TvqvHlUubZ1p9Z+CAKCWUbX sHMmNAHXPFYE5jK0gbbCgAcj6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZNs3b2 V85GtDiIj4n/U/wZRWdcMB8GA1UdIwQYMBaAFGnAibekjn2m7k8B/sapjgrS+oEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzJGNC9CNENBNzc5NjRE RTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2ZhYnVUd0gteHFtT0N0TDZn UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjQ0p0NlNPZmFidVR3SC14cW1PQ3RMNmdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzJGNC9CNENBNzc5NjRERTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2Zh YnVUd0gteHFtT0N0TDZnUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB31B4VW/hSTWPg4zCAcdxSWIkJJp2FTNUxHo8djzekMxauPnflXLpZ 6KET6aBJgvtkYKDRXX8njrJ41iZxeKj1JNeGpxpF5z5SluBLnTpJlUF6GfFodmg3 QTM5RUF0a6dK5YkuTGaTiz7nPPftIGLNbLBAA47Hd9LMIl9A8NIpQQBWwuQ/JhuE 4MBg37MCUqvJs2BZAKEf0npXiGzf4NPym/umyY9zzqSu1nl4oL/crhGVXMRibpZW cp4V2j2n0tadMBugiFZWq/YPmygHPwlR+LcgS4jj+4awukTWMQO4/I0uD8+c9JQk RgufWdZ/2fkyeyE4zwKwy3XlFl9uK3Tx -----END CERTIFICATE-----Generated at Sun Jul 20 07:49:44 2025 by rpki-client