$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft File: 906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json) Hash identifier: yMaFgetWKLx2ogy+aCui4uUxIaRLu2O3/Rg4xVCe0Wg= Subject key identifier: EA:06:84:03:12:DD:2B:BF:56:1C:70:AB:8D:A8:AE:C9:2B:AB:33:D5 Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft Manifest number: 01AF Signing time: Sat 19 Jul 2025 03:24:08 +0000 Manifest this update: Sat 19 Jul 2025 03:24:08 +0000 Manifest next update: Sat 26 Jul 2025 03:24:08 +0000 Files and hashes: 1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: O0lweah3Yx7WaJKJhlqW5leuidVeW+KP7yBLq+HyBxk=) 2: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: gLkgMGp52FpOKp1gigsy7o/szzqT6RmtB38EXx+UWeM=) 3: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (hash: Osxjf+sQheLzTs1l6e5kACmrRT/9y2CBdjlI5qtBWLI=) 4: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (hash: P2QsrILj+XHKTHzfzBj8a8ezg5UMFN7g36qC5yV1Z+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Validity Not Before: Jul 19 03:24:08 2025 GMT Not After : Jul 26 03:24:08 2025 GMT Subject: CN=687b0fd8-eeb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:ac:47:ac:e2:0d:62:5d:58:57:23:d0:10: f8:ea:e9:1a:9d:ca:c9:46:e6:f7:31:36:5e:f8:04: 24:64:42:da:46:cd:54:4c:6b:87:0f:d4:cd:b9:09: 19:dc:9d:91:42:c3:df:aa:56:40:b1:40:24:6c:84: ec:5e:41:91:8f:c3:83:d9:94:ce:6f:ab:1f:ab:0f: d9:0f:71:6f:31:87:15:ed:13:7e:3d:14:96:c5:49: 7a:b6:88:7f:fc:89:6f:1a:82:32:51:e7:9a:84:0b: 5f:80:88:8f:36:22:ae:90:15:02:81:de:f1:0d:0c: 0b:1b:b9:01:cc:09:82:75:86:80:4e:26:83:9c:0f: 80:f1:be:23:c7:be:23:32:56:ea:d7:e4:71:1b:b2: b9:ea:20:20:c9:d0:b4:fe:57:49:70:0f:98:e4:bc: 5d:d3:4e:52:d3:59:17:8c:d1:6c:aa:b0:3a:8d:d0: 39:c1:df:be:58:45:47:43:31:57:8f:f7:37:fd:b1: 03:9b:9b:78:cb:ef:01:28:15:fa:38:54:7b:a3:6e: e9:13:2b:99:74:bb:bc:16:14:a6:c3:fc:48:98:91: d8:f2:03:a6:a2:a0:76:a6:df:fb:c8:1c:2d:ba:d2: bc:c9:88:21:06:4e:67:b5:8f:be:1c:62:ec:81:e5: 62:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:06:84:03:12:DD:2B:BF:56:1C:70:AB:8D:A8:AE:C9:2B:AB:33:D5 X509v3 Authority Key Identifier: keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:31:ea:ec:b2:95:b7:20:7e:4e:ba:ac:79:e4:4c:c7:9f:c9: ce:99:2a:3b:42:ee:c8:89:b1:d7:f0:65:8a:e1:5b:a7:50:ef: 70:b5:74:3a:a2:fb:76:75:e5:43:a3:41:4f:67:b0:19:17:bf: 2d:0c:bc:52:a6:25:b1:a9:44:71:b9:eb:61:25:c1:f5:26:38: fe:6a:f4:89:4d:df:33:17:14:d5:18:fd:f0:c4:47:b7:2c:c1: e3:a1:2b:28:55:d0:e4:f1:26:c6:9d:12:73:80:0c:78:67:2d: 36:e1:32:23:90:cb:c3:67:76:cd:b9:a5:21:90:43:c4:f8:35: 7b:ee:dd:0f:8a:66:06:bf:3b:f5:c4:d8:4a:ae:52:9f:a4:54: 67:5a:cb:15:9f:e3:e8:68:ae:53:0b:09:5f:59:fc:aa:26:97: 02:dd:c3:4c:eb:2e:90:13:35:fc:52:f0:a4:0e:c9:60:f9:b9: d3:6f:f3:ff:0b:ae:77:c5:ec:3f:4b:f8:0a:32:21:3d:43:ac: b2:49:24:02:67:e4:b6:4d:2f:65:0f:97:43:05:e8:ba:22:ba: 5b:06:08:a4:90:01:3e:08:de:41:ad:e8:9a:ba:79:3e:ee:ae: d8:1f:cd:cb:43:75:24:c2:be:0e:97:8c:cf:de:1a:6e:ed:9d: 23:97:9a:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAzMjkxMTAvBgNVBAUTKEY3NEU5NkNBOUVFOTM2MDc0NTY0MjkyOTYwRkJDMUY5 Q0YzNDg1NEQwHhcNMjUwNzE5MDMyNDA4WhcNMjUwNzI2MDMyNDA4WjAYMRYwFAYD VQQDEw02ODdiMGZkOC1lZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrWsR6ziDWJdWFcj0BD46ukancrJRub3MTZe+AQkZELaRs1UTGuHD9TNuQkZ 3J2RQsPfqlZAsUAkbITsXkGRj8OD2ZTOb6sfqw/ZD3FvMYcV7RN+PRSWxUl6toh/ /IlvGoIyUeeahAtfgIiPNiKukBUCgd7xDQwLG7kBzAmCdYaATiaDnA+A8b4jx74j Mlbq1+RxG7K56iAgydC0/ldJcA+Y5Lxd005S01kXjNFsqrA6jdA5wd++WEVHQzFX j/c3/bEDm5t4y+8BKBX6OFR7o27pEyuZdLu8FhSmw/xImJHY8gOmoqB2pt/7yBwt utK8yYghBk5ntY++HGLsgeViRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoGhAMS 3Su/Vhxwq42orskrqzPVMB8GA1UdIwQYMBaAFPdOlsqe6TYHRWQpKWD7wfnPNIVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDMyOS80NUQ2RUZGQ0Qz OUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5nZEZaQ2twWVB2Qi1jODBo VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwNld5cDdwTmdkRlpDa3BZUHZCLWM4MGhVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDMyOS80NUQ2RUZGQ0QzOUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5n ZEZaQ2twWVB2Qi1jODBoVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9MersspW3IH5Ouqx55EzHn8nOmSo7Qu7IibHX8GWK4VunUO9wtXQ6 ovt2deVDo0FPZ7AZF78tDLxSpiWxqURxuethJcH1Jjj+avSJTd8zFxTVGP3wxEe3 LMHjoSsoVdDk8SbGnRJzgAx4Zy024TIjkMvDZ3bNuaUhkEPE+DV77t0PimYGvzv1 xNhKrlKfpFRnWssVn+PoaK5TCwlfWfyqJpcC3cNM6y6QEzX8UvCkDslg+bnTb/P/ C653xew/S/gKMiE9Q6yySSQCZ+S2TS9lD5dDBei6IrpbBgikkAE+CN5Breiaunk+ 7q7YH83LQ3Ukwr4Ol4zP3hpu7Z0jl5ov -----END CERTIFICATE-----Generated at Sun Jul 20 15:00:11 2025 by rpki-client