$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft File: poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json) Hash identifier: qm+jxQkY2wNbLunJ0ZcndbVXGzsqudhjuqFJd2hJHoE= Subject key identifier: 2C:6F:E9:42:F4:50:E4:84:B6:89:7D:D7:20:DA:9D:F8:BC:5C:DE:33 Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E Certificate issuer: /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Certificate serial: 03C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft Manifest number: 03BC Signing time: Sat 19 Jul 2025 01:04:45 +0000 Manifest this update: Sat 19 Jul 2025 01:04:45 +0000 Manifest next update: Sat 26 Jul 2025 01:04:45 +0000 Files and hashes: 1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: IGQalTzMF/P5A2FEEa+P16rCbI3/KWyUxYtxMic65YE=) 2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: CW3j/kB0iIlMJ+3lrD5HV2LAKz9hUDzTZRZrWdpxIYA=) 3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: KwB5Za6c44Sp6WKsELOvklwRL+/LDv/rBqGOUWdpNrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 964 (0x3c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Validity Not Before: Jul 19 01:04:45 2025 GMT Not After : Jul 26 01:04:45 2025 GMT Subject: CN=687aef2d-c4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:27:c6:37:89:b6:cd:2c:05:cd:67:c7:3f: 1a:ef:6f:eb:03:d2:98:a7:3b:71:25:29:d9:7b:78: 05:10:a9:d9:be:08:18:f7:0a:48:cf:4a:ae:7f:92: 03:07:75:18:6d:57:32:86:0d:23:ed:75:75:72:40: 08:66:5d:ea:78:30:ec:40:9e:89:dc:a1:1f:28:59: ca:a0:25:3d:e1:a9:e0:6b:4c:6e:3c:7e:4e:48:aa: bb:67:75:46:4c:89:d9:a1:b0:b5:a5:be:6f:79:f4: 62:67:4f:3c:3c:7b:8d:9a:48:76:d9:cb:d2:3f:08: 6e:77:6f:a6:40:b6:7c:e0:ed:08:78:e9:73:6e:ca: 5c:d0:60:24:89:dc:37:fe:5e:2c:1d:65:4a:0f:0f: 86:5f:55:e4:3b:0c:a1:81:52:61:6d:92:51:ed:4d: 54:b9:d4:fc:e5:94:a6:19:0a:b8:a9:e3:1a:61:b0: 5d:a6:1e:31:bc:5c:2d:77:94:c4:77:65:26:45:14: 9a:d0:74:a2:1a:0f:b9:46:33:6f:23:7c:15:b4:5b: ea:7a:c9:ee:d9:0f:65:dd:4b:93:9f:b0:07:20:20: 92:54:a1:d5:67:eb:f2:74:2f:67:02:98:4a:d0:5f: 82:af:6b:58:a8:2a:85:21:70:5d:13:8b:bd:53:07: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6F:E9:42:F4:50:E4:84:B6:89:7D:D7:20:DA:9D:F8:BC:5C:DE:33 X509v3 Authority Key Identifier: keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:20:84:95:98:f5:74:07:ba:50:fc:91:06:b7:45:cb:2f:d0: cf:c6:bc:fe:19:1d:4b:45:30:66:9e:7c:61:6e:f7:20:23:f9: 21:e8:95:62:31:94:32:96:76:93:48:a2:ce:35:e0:cf:f8:1c: 3d:32:60:bd:ac:32:3c:c1:cf:1c:41:3e:c1:52:0c:75:27:a7: a9:59:a6:5b:c6:cf:86:10:34:2c:f5:e6:cc:82:21:92:b5:2e: 1b:88:fe:64:3e:1f:48:be:2b:a8:d2:78:eb:86:79:96:7e:77: 69:6d:e4:1d:f4:c7:c0:f3:ee:ee:ee:ad:2a:25:88:ed:8f:04: 35:17:d8:28:1e:aa:cf:de:17:ab:79:5f:5f:f5:86:35:d4:2a: 02:92:03:1b:a7:66:b6:86:7b:82:ce:c0:54:f7:47:54:07:54: 1d:e0:7f:65:9d:63:d5:a6:c4:06:e6:17:c4:a0:e8:68:0a:e2: 2a:39:67:be:c1:10:56:5c:c3:7d:f5:cb:0b:5d:46:6f:be:fa: b6:1e:65:e5:c3:75:b9:68:b1:aa:d6:16:93:57:66:df:fe:24: fd:75:b4:39:97:a7:4c:0f:75:26:b9:6f:2f:34:00:fb:90:61: cb:38:07:0c:67:3c:4d:3b:a3:9a:1d:1d:e1:f5:95:7d:cc:97: a0:60:65:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0RkY2RkEwQkJF NkNFQzJENEUwHhcNMjUwNzE5MDEwNDQ1WhcNMjUwNzI2MDEwNDQ1WjAYMRYwFAYD VQQDEw02ODdhZWYyZC1jNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw00nxjeJts0sBc1nxz8a72/rA9KYpztxJSnZe3gFEKnZvggY9wpIz0quf5ID B3UYbVcyhg0j7XV1ckAIZl3qeDDsQJ6J3KEfKFnKoCU94anga0xuPH5OSKq7Z3VG TInZobC1pb5vefRiZ088PHuNmkh22cvSPwhud2+mQLZ84O0IeOlzbspc0GAkidw3 /l4sHWVKDw+GX1XkOwyhgVJhbZJR7U1UudT85ZSmGQq4qeMaYbBdph4xvFwtd5TE d2UmRRSa0HSiGg+5RjNvI3wVtFvqesnu2Q9l3UuTn7AHICCSVKHVZ+vydC9nAphK 0F+Cr2tYqCqFIXBdE4u9UwcZ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxv6UL0 UOSEtol91yDanfi8XN4zMB8GA1UdIwQYMBaAFKaDYyVG8aEHhLwaT/b6C75s7C1O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU0Ny82MjZFMTA5NDk4 QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9RZUV2QnBQOXZvTHZtenNM VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvTmpKVWJ4b1FlRXZCcFA5dm9Mdm16c0xVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU0Ny82MjZFMTA5NDk4QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9R ZUV2QnBQOXZvTHZtenNMVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJIISVmPV0B7pQ/JEGt0XLL9DPxrz+GR1LRTBmnnxhbvcgI/kh6JVi MZQylnaTSKLONeDP+Bw9MmC9rDI8wc8cQT7BUgx1J6epWaZbxs+GEDQs9ebMgiGS tS4biP5kPh9Iviuo0njrhnmWfndpbeQd9MfA8+7u7q0qJYjtjwQ1F9goHqrP3her eV9f9YY11CoCkgMbp2a2hnuCzsBU90dUB1Qd4H9lnWPVpsQG5hfEoOhoCuIqOWe+ wRBWXMN99csLXUZvvvq2HmXlw3W5aLGq1haTV2bf/iT9dbQ5l6dMD3UmuW8vNAD7 kGHLOAcMZzxNO6OaHR3h9ZV9zJegYGUU -----END CERTIFICATE-----Generated at Sun Jul 20 19:03:13 2025 by rpki-client