$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json) Hash identifier: 0jOqX2wD+3PxM/3BX3CdbyAQlUQ90CkwTLY4AusVkxk= Subject key identifier: 6C:4E:50:38:32:8D:B1:73:9C:20:A0:AF:78:90:92:7F:9B:93:CD:5E Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft Manifest number: A0 Signing time: Mon 21 Jul 2025 06:25:48 +0000 Manifest this update: Mon 21 Jul 2025 06:25:48 +0000 Manifest next update: Mon 28 Jul 2025 06:25:48 +0000 Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: GIKaeadX767deJdXkkimdls2QoWkFXKHgqBSMiH4As4=) 2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: AxDsA8rt+K98y/uEnY4JUiHZ0XXqFDNJTlI0IgqxxqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Validity Not Before: Jul 21 06:25:48 2025 GMT Not After : Jul 28 06:25:48 2025 GMT Subject: CN=687ddd6c-f7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:85:89:f8:8c:12:24:8f:89:f0:4f:f6:95: 5c:a7:51:5e:50:de:4e:ce:d7:57:91:ac:3f:28:30: ab:c8:58:58:d7:76:c4:13:6d:ab:03:27:28:8f:43: 38:3d:86:53:69:17:fe:15:d7:36:08:cd:8f:89:b1: 78:e1:70:75:45:50:73:8b:a6:8d:dc:d1:be:9d:91: 89:63:a4:0f:4b:4d:44:e6:42:7e:81:b4:6e:14:cc: 57:a8:45:76:59:c0:5e:5f:e6:25:bb:ac:70:6b:c1: e3:d9:48:66:41:83:7f:90:d1:a8:42:fd:51:08:3c: bb:e1:08:a7:41:cd:38:26:02:64:2e:e6:23:2b:16: 03:aa:71:10:3c:73:2b:be:21:75:47:49:cb:f6:af: f6:58:57:ec:40:96:42:ac:51:2d:24:49:be:bf:af: 49:40:b1:e4:4c:9f:a5:96:43:3d:f0:c3:10:d2:11: a3:79:20:e9:a7:5b:5d:32:4b:4d:d6:4d:52:75:42: 17:bc:25:d5:67:89:f8:f6:8e:62:44:8a:d7:a4:7a: 55:98:ff:b4:e4:e9:d6:12:a0:4d:a8:02:cd:a5:58: 62:9a:4f:c4:c5:ea:98:50:82:9c:ed:5f:0e:b5:15: de:b8:02:96:56:64:58:71:59:ae:d1:70:59:d1:79: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4E:50:38:32:8D:B1:73:9C:20:A0:AF:78:90:92:7F:9B:93:CD:5E X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:d0:5c:64:ef:9c:a9:8a:51:06:2d:5b:ba:bc:52:99:c5:fd: 38:d1:74:ac:47:89:71:6a:df:93:f6:38:14:9f:f6:11:14:05: 96:a5:3e:31:48:80:76:67:b1:41:93:a1:7d:d3:a3:79:cc:dd: aa:b1:13:63:8b:28:d8:a9:42:cb:45:b7:a5:14:bc:89:4d:cf: fe:61:3f:5d:0c:a6:0c:79:7e:ee:0d:34:17:4d:3c:a6:81:27: 30:f2:c6:f9:65:1a:cc:7f:22:37:7a:2d:c4:6f:1e:9f:cd:ff: 4c:f4:9e:de:ed:2b:60:7a:10:d7:83:d9:73:9c:8c:9a:42:b0: a5:9f:bb:84:9b:a7:8f:62:b1:bd:00:a2:40:24:1e:67:e0:db: 68:4e:e6:97:8f:61:dc:f2:1c:ce:5a:a7:2b:30:64:b2:05:be: 2c:e8:89:fc:f0:2b:ef:4b:08:67:0d:48:65:af:22:ce:f9:0e: eb:83:9e:d0:f1:27:45:77:64:e2:1e:c4:5f:81:c6:9d:2f:bc: 94:f0:0a:fb:26:b6:b3:ed:ac:e0:38:c6:92:87:16:e9:d1:96: b9:d3:e2:cd:20:08:1e:fb:83:e8:10:d9:bd:76:91:d0:76:7c: df:1b:86:ac:db:1f:cc:57:6f:6e:3d:a0:c4:a0:bd:b4:f9:1f: 0b:b7:2a:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy NjBCQTk5MEUwHhcNMjUwNzIxMDYyNTQ4WhcNMjUwNzI4MDYyNTQ4WjAYMRYwFAYD VQQDEw02ODdkZGQ2Yy1mN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwo6FifiMEiSPifBP9pVcp1FeUN5OztdXkaw/KDCryFhY13bEE22rAycoj0M4 PYZTaRf+Fdc2CM2PibF44XB1RVBzi6aN3NG+nZGJY6QPS01E5kJ+gbRuFMxXqEV2 WcBeX+Ylu6xwa8Hj2UhmQYN/kNGoQv1RCDy74QinQc04JgJkLuYjKxYDqnEQPHMr viF1R0nL9q/2WFfsQJZCrFEtJEm+v69JQLHkTJ+llkM98MMQ0hGjeSDpp1tdMktN 1k1SdUIXvCXVZ4n49o5iRIrXpHpVmP+05OnWEqBNqALNpVhimk/ExeqYUIKc7V8O tRXeuAKWVmRYcVmu0XBZ0XlPfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxOUDgy jbFznCCgr3iQkn+bk81eMB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkE1Qi81ODAwNEFBQTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlL NjVhamhsVmd1ZkltQzZtUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS0Fxk75ypilEGLVu6vFKZxf040XSsR4lxat+T9jgUn/YRFAWWpT4x SIB2Z7FBk6F906N5zN2qsRNjiyjYqULLRbelFLyJTc/+YT9dDKYMeX7uDTQXTTym gScw8sb5ZRrMfyI3ei3Ebx6fzf9M9J7e7StgehDXg9lznIyaQrCln7uEm6ePYrG9 AKJAJB5n4NtoTuaXj2Hc8hzOWqcrMGSyBb4s6In88CvvSwhnDUhlryLO+Q7rg57Q 8SdFd2TiHsRfgcadL7yU8Ar7Jraz7azgOMaShxbp0Za50+LNIAge+4PoENm9dpHQ dnzfG4as2x/MV29uPaDEoL20+R8LtyoQ -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:00 2025 by rpki-client