$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json) Hash identifier: jNg9zaiYRpaBUcnsmZNfJhal3pmN9hA0JAt5HIGmeqA= Subject key identifier: 40:C7:F8:1F:5F:F1:B8:D0:A0:B7:45:94:E3:DC:B6:9A:48:C4:4A:CF Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft Manifest number: 0271 Signing time: Mon 21 Jul 2025 02:11:19 +0000 Manifest this update: Mon 21 Jul 2025 02:11:19 +0000 Manifest next update: Mon 28 Jul 2025 02:11:19 +0000 Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: I5xcUQ3sdrqjspNvybNfDFSnpHCcwP5Y6URrsp3+/Ww=) 2: 0F1BFF983C6411F08247312EC4F9AE02.roa (hash: 8qUuDVndIDg2NrEC8AKM8tdD0/103K09L9Yt7oBaFMM=) 3: E309B1883C9711EF88C2B284C4F9AE02.roa (hash: w51TUZ9aKXo3NJmk6dhABfqfugO3+EeHqPsN7Ek6pSc=) 4: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: QqcsybSo4IYcyiaXsqo+jWTeq4K18MPbnynQPtbdI+c=) 5: 6E41DE08310A11F0AC8DF544C4F9AE02.roa (hash: 1rvs0GBAuHrNAHdvsK+LkWPhncBagdhoXnnxzRRg5HA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Validity Not Before: Jul 21 02:11:19 2025 GMT Not After : Jul 28 02:11:19 2025 GMT Subject: CN=687da1c7-2366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:c0:b1:bf:ee:87:80:f6:f0:a2:a7:2d:eb: d1:14:51:4c:2d:00:92:00:31:13:09:95:8e:f5:67: 7e:b6:9d:d2:fe:26:ac:44:15:bd:94:3c:7e:6a:98: a8:fe:80:a7:90:d7:68:12:1b:c8:94:96:5c:d2:3b: cd:e4:38:5c:85:51:0b:b2:af:e4:84:ad:57:91:db: c1:38:56:a2:1f:d9:a1:cd:aa:67:cb:10:70:4b:17: e5:83:93:5a:16:8c:bb:a0:e0:a6:e6:f8:25:63:37: 71:2d:84:e8:e9:af:05:9a:03:f4:48:96:ba:40:43: 3d:cd:6d:0c:db:ff:c4:10:fc:ca:0c:f5:85:b4:19: d8:0d:3c:f9:9a:e8:5f:ec:18:a4:3a:71:c1:62:db: 2e:a2:03:6e:e3:c7:05:37:77:1a:d1:12:d1:13:57: e3:49:62:0d:cc:1d:83:36:03:98:9b:41:8e:96:89: d7:f4:5b:33:6b:a6:38:0c:02:e8:60:7d:52:f0:80: be:11:29:f8:94:f6:a1:33:e4:65:9c:ed:f3:e6:60: a5:da:f1:d9:59:3f:20:61:70:76:84:21:7a:ba:13: 01:fd:9a:95:b8:df:4e:53:fb:2a:59:dd:42:96:77: 07:16:67:36:ae:2a:da:4e:58:33:4e:3d:80:b2:54: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C7:F8:1F:5F:F1:B8:D0:A0:B7:45:94:E3:DC:B6:9A:48:C4:4A:CF X509v3 Authority Key Identifier: keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:57:5c:ba:f2:65:b2:98:25:ef:83:51:1e:ac:20:44:57:fd: e6:74:96:dd:fa:35:9f:fa:0e:fe:81:bd:9b:cd:58:3c:70:19: 69:7a:a9:38:cb:39:30:ec:50:79:47:3f:86:12:d4:4d:ec:98: f9:17:5c:da:af:ec:69:f0:94:3d:2a:66:3b:65:0b:43:4c:af: e1:36:17:60:d2:26:d5:86:0e:45:d9:63:00:3b:4b:ca:a3:ec: 82:03:01:f3:ca:23:73:e5:5e:f9:87:06:df:41:4d:bb:bd:60: 93:8f:48:fb:ae:88:dd:16:57:bd:e1:48:7b:56:74:6b:d3:57: 45:a3:20:33:fa:8d:16:99:f1:1a:05:01:ac:19:b0:d9:08:8c: c6:2c:5a:c1:cb:27:ba:92:39:ef:9b:c3:03:ec:a2:23:55:19: ad:f3:9e:85:4e:0f:6d:2f:a4:52:a5:62:a2:0f:6a:f6:72:b2: 72:3c:15:78:16:cf:85:1c:24:a5:56:8f:f6:aa:03:c5:c0:fc: f5:3d:d0:0d:ec:7b:d9:b6:8f:03:6a:42:47:9d:ef:f6:c1:1a: 13:3c:76:7e:f0:d0:02:1f:ae:9d:8a:a3:a9:a8:b1:d9:25:82: ef:b0:15:6d:d5:e7:b0:eb:16:20:47:a0:ad:90:fa:f6:32:d8: a3:77:7c:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkExMTAvBgNVBAUTKEIwNjdDNkJCNzBERjBEQzA0Q0U3N0Y3QzhENzY3MDZB NDlGNkNCODUwHhcNMjUwNzIxMDIxMTE5WhcNMjUwNzI4MDIxMTE5WjAYMRYwFAYD VQQDEw02ODdkYTFjNy0yMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjLAsb/uh4D28KKnLevRFFFMLQCSADETCZWO9Wd+tp3S/iasRBW9lDx+apio /oCnkNdoEhvIlJZc0jvN5DhchVELsq/khK1XkdvBOFaiH9mhzapnyxBwSxflg5Na Foy7oOCm5vglYzdxLYTo6a8FmgP0SJa6QEM9zW0M2//EEPzKDPWFtBnYDTz5muhf 7BikOnHBYtsuogNu48cFN3ca0RLRE1fjSWINzB2DNgOYm0GOlonX9Fsza6Y4DALo YH1S8IC+ESn4lPahM+RlnO3z5mCl2vHZWT8gYXB2hCF6uhMB/ZqVuN9OU/sqWd1C lncHFmc2riraTlgzTj2AslSOzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDH+B9f 8bjQoLdFlOPctppIxErPMB8GA1UdIwQYMBaAFLBnxrtw3w3ATOd/fI12cGpJ9suF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2QS9FQzA5QUE0QTMw N0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRjQk01Mzk4alhad2FrbjJ5 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHZkd1M0RmRGNCTTUzOThqWFp3YWtuMnk0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2QS9FQzA5QUE0QTMwN0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRj Qk01Mzk4alhad2FrbjJ5NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaV1y68mWymCXvg1EerCBEV/3mdJbd+jWf+g7+gb2bzVg8cBlpeqk4 yzkw7FB5Rz+GEtRN7Jj5F1zar+xp8JQ9KmY7ZQtDTK/hNhdg0ibVhg5F2WMAO0vK o+yCAwHzyiNz5V75hwbfQU27vWCTj0j7rojdFle94Uh7VnRr01dFoyAz+o0WmfEa BQGsGbDZCIzGLFrByye6kjnvm8MD7KIjVRmt856FTg9tL6RSpWKiD2r2crJyPBV4 Fs+FHCSlVo/2qgPFwPz1PdAN7HvZto8DakJHne/2wRoTPHZ+8NACH66diqOpqLHZ JYLvsBVt1eew6xYgR6CtkPr2Mtijd3x3 -----END CERTIFICATE-----Generated at Wed Jul 23 02:29:32 2025 by rpki-client