$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json) Hash identifier: Vqe32fVUMyR9gmrc0T2FYRNwM+8oNFg29kFPLmGxDS4= Subject key identifier: 99:3E:D1:3D:45:D6:AD:7F:53:D4:4E:AC:D1:F3:30:52:F2:75:B0:06 Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft Manifest number: 0154 Signing time: Sat 19 Jul 2025 04:28:28 +0000 Manifest this update: Sat 19 Jul 2025 04:28:27 +0000 Manifest next update: Sat 26 Jul 2025 04:28:27 +0000 Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: 50HoTfO0YWpiJDFwbeYFDFFyhRaHxArUrAOLzfSuNWY=) 2: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: J8+lxSFWmAdItoP7AGJ9n1czEhUKmEFacTRv8zqHb88=) 3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: mZ/f/kYNljSI/Y1NgwFenBb3960hqwOok7c22vWxduM=) 4: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: LjDyklpsY4tER3qyvIF/MVWeA44K8qWvTHC+14bUFS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Validity Not Before: Jul 19 04:28:27 2025 GMT Not After : Jul 26 04:28:27 2025 GMT Subject: CN=687b1eeb-4d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f1:b2:5d:f1:b1:bf:4b:ed:6e:7b:a2:03:91: 97:68:c0:fa:76:40:46:e7:82:4d:bf:d5:ee:89:bb: b2:5b:f1:25:c0:4f:bc:9c:e2:1b:bb:ba:a5:9a:f2: 58:8b:2c:31:c0:9a:9a:ca:c5:88:a5:9b:ad:ef:78: ef:8c:63:25:ea:7d:f5:09:1c:9d:ac:23:af:78:b4: ed:9d:d9:cd:42:6e:f0:86:d9:39:87:b6:35:b6:b6: d3:49:40:6f:d9:e4:6a:b9:ce:45:0b:ce:39:c3:69: 88:89:21:bf:aa:4b:5e:54:5f:7a:c3:1f:83:cd:53: 5a:c8:f4:6b:51:73:09:92:d5:c9:1a:9b:59:1f:ed: e9:8c:06:b6:0d:fe:1e:58:46:01:c7:02:ba:e2:f7: 42:28:49:3f:18:25:d6:35:2b:17:32:84:18:35:6c: 98:2c:e6:aa:d1:61:f8:5f:58:b2:6b:c2:3e:6b:bf: bf:13:2a:b4:ad:7e:b3:91:9d:0f:e0:98:15:bc:88: 1d:53:f9:92:13:ba:84:25:1d:30:82:27:87:be:f2: 04:25:f4:83:e3:5d:03:7a:10:97:cc:b2:9a:bc:96: 20:8e:26:6f:67:a3:6b:b8:22:d4:e9:26:a2:8f:07: 38:7d:75:98:b7:3e:fa:af:8a:2f:20:d0:5d:e2:4e: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3E:D1:3D:45:D6:AD:7F:53:D4:4E:AC:D1:F3:30:52:F2:75:B0:06 X509v3 Authority Key Identifier: keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:15:cd:e5:a4:5a:35:d1:e5:db:79:9f:be:b4:61:26:03:73: a6:b8:5f:13:be:aa:54:70:c7:09:6d:41:e1:a0:ba:86:0d:bc: 6e:19:0a:9c:f2:f8:d6:03:b9:c8:c4:a1:5d:bf:31:b6:9e:c3: 7d:02:9c:30:bf:f6:e7:58:e8:e6:0e:f7:44:15:cc:9f:b6:96: ed:52:ca:77:ed:80:9a:36:61:b2:c1:72:81:d3:99:fa:9c:ca: 89:dc:5c:e5:95:08:70:85:3a:14:d2:78:31:ea:b9:9f:e3:f1: f7:90:9c:be:21:1c:cf:37:72:91:c0:9e:a2:9c:a8:43:24:bd: 95:9f:9e:66:fa:06:d6:b1:64:63:0f:09:e1:a0:16:cc:07:d5: 93:26:cb:24:a7:98:68:9f:c7:43:28:56:fa:db:d5:85:63:2a: 2d:3b:54:70:67:25:16:ef:49:73:d1:75:7a:0e:5c:f9:cc:d8: 41:c4:9c:85:14:47:74:16:fe:d7:bb:57:0d:12:cb:05:c8:50: 39:df:91:66:64:10:66:b1:08:e9:31:88:7f:77:2e:8e:5c:ff: f7:12:b5:d9:7e:e0:93:9c:7f:bc:16:52:8a:dc:a9:e4:a1:07: c6:44:61:c8:c5:ef:be:56:1f:86:98:35:5a:b6:9e:9f:c9:60: d3:95:4d:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3RTkxMTAvBgNVBAUTKERGNTE0NzBCMTVFOEMxNDFBRjJGQTg0NkEyOEMwM0Iz ODU5MUJBQjQwHhcNMjUwNzE5MDQyODI3WhcNMjUwNzI2MDQyODI3WjAYMRYwFAYD VQQDEw02ODdiMWVlYi00ZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvGyXfGxv0vtbnuiA5GXaMD6dkBG54JNv9XuibuyW/ElwE+8nOIbu7qlmvJY iywxwJqaysWIpZut73jvjGMl6n31CRydrCOveLTtndnNQm7whtk5h7Y1trbTSUBv 2eRquc5FC845w2mIiSG/qkteVF96wx+DzVNayPRrUXMJktXJGptZH+3pjAa2Df4e WEYBxwK64vdCKEk/GCXWNSsXMoQYNWyYLOaq0WH4X1iya8I+a7+/Eyq0rX6zkZ0P 4JgVvIgdU/mSE7qEJR0wgieHvvIEJfSD410DehCXzLKavJYgjiZvZ6NruCLU6Sai jwc4fXWYtz76r4ovINBd4k6sJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJk+0T1F 1q1/U9ROrNHzMFLydbAGMB8GA1UdIwQYMBaAFN9RRwsV6MFBry+oRqKMA7OFkbq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FOTlFN0Y1MjZF MkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dVR3ZMNmhHb293RHM0V1J1 clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxRkhDeFhvd1VHdkw2aEdvb3dEczRXUnVyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdFOS9FOTlFN0Y1MjZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dV R3ZMNmhHb293RHM0V1J1clEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKFc3lpFo10eXbeZ++tGEmA3OmuF8TvqpUcMcJbUHhoLqGDbxuGQqc 8vjWA7nIxKFdvzG2nsN9Apwwv/bnWOjmDvdEFcyftpbtUsp37YCaNmGywXKB05n6 nMqJ3FzllQhwhToU0ngx6rmf4/H3kJy+IRzPN3KRwJ6inKhDJL2Vn55m+gbWsWRj DwnhoBbMB9WTJsskp5hon8dDKFb629WFYyotO1RwZyUW70lz0XV6Dlz5zNhBxJyF FEd0Fv7Xu1cNEssFyFA535FmZBBmsQjpMYh/dy6OXP/3ErXZfuCTnH+8FlKK3Knk oQfGRGHIxe++Vh+GmDVatp6fyWDTlU1V -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:31 2025 by rpki-client