$ rpki-client -vvf rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft File: 76QjuvW_0YkxbmUDHozq9aP_oUs.mft (raw, json) Hash identifier: vcT6TfjYetoHGZ5GBuA5luKK0YPyj968K2gQqq35xrs= Subject key identifier: E1:9C:F2:8D:E2:67:8F:E9:9F:03:A0:78:8F:F1:7B:90:4D:E1:5C:FA Authority key identifier: EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B Certificate issuer: /CN=A91F264C/serialNumber=EFA423BAF5BFD189316E65031E8CEAF5A3FFA14B Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft Manifest number: 3A Signing time: Sat 19 Jul 2025 07:50:18 +0000 Manifest this update: Sat 19 Jul 2025 07:50:17 +0000 Manifest next update: Sat 26 Jul 2025 07:50:17 +0000 Files and hashes: 1: 76QjuvW_0YkxbmUDHozq9aP_oUs.crl (hash: yfZwMpqzxfg0zN6LWu3HebuEMIXjKi4hDnzffEAa4kw=) 2: DB5AB9A0195A11F081485C3AC4F9AE02.roa (hash: JaGf75N3pf7IqU+djnr2Hy5ZxGye9c0JY8fFDo/3ks0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.crl rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F264C, serialNumber=EFA423BAF5BFD189316E65031E8CEAF5A3FFA14B Validity Not Before: Jul 19 07:50:17 2025 GMT Not After : Jul 26 07:50:17 2025 GMT Subject: CN=687b4e3a-c66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:18:63:87:28:30:9a:c7:0a:16:91:9d:1d: e3:c2:43:05:d4:13:43:5a:4b:de:a1:a2:73:ec:f9: d8:1a:7d:53:7e:52:71:81:16:83:1a:83:ed:04:bf: a7:08:69:34:bb:6d:c0:17:c0:90:6f:f9:06:62:fc: be:b9:69:da:b8:37:d2:d4:e4:15:53:57:78:44:3f: 12:79:89:03:57:ab:bb:2c:80:38:d7:05:da:4d:75: cf:4c:ed:1e:49:91:fb:c5:f6:34:26:23:0c:b3:7e: 0d:01:93:fb:90:ff:18:4e:5e:67:1a:03:57:b0:0f: 80:96:72:16:9b:bb:c9:06:1d:c5:6c:3e:21:c2:b1: 14:4b:eb:59:25:d8:c5:b4:51:bd:47:d9:4a:aa:ad: 9a:fd:1a:27:54:b2:31:e6:2c:1e:44:34:16:f2:06: 63:f3:83:74:fa:57:da:dc:39:76:46:d1:61:f2:b6: 86:f2:3e:02:48:41:31:1d:d3:9c:3d:30:dd:57:72: e0:96:b6:db:ce:c9:03:f7:ba:50:79:cd:9a:b3:c9: 6c:f7:bb:7f:79:2f:ed:84:7e:f2:2d:79:1e:a8:cc: 9d:1e:d8:77:38:57:41:01:c4:e2:90:3a:62:28:0f: cd:6b:26:9b:66:ee:08:39:2f:3f:9d:ba:11:62:21: 3e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9C:F2:8D:E2:67:8F:E9:9F:03:A0:78:8F:F1:7B:90:4D:E1:5C:FA X509v3 Authority Key Identifier: keyid:EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:17:69:c7:e8:89:4b:c6:3a:28:39:61:ec:eb:66:55:12:90: 4f:a4:66:11:75:39:33:26:3e:04:fd:59:e4:9c:90:9a:32:f3: 12:32:fc:77:2f:4a:f9:8f:a5:70:c3:db:0b:6b:c3:e4:dc:c0: 5a:6d:45:29:10:2f:83:0f:b6:1b:62:60:d2:18:f6:2d:62:a8: 37:69:db:09:00:d2:92:30:90:c7:a7:67:ec:17:53:73:e4:e6: 3b:55:e4:bb:f8:08:b8:0c:76:5b:50:29:74:d0:6c:7d:60:c7: c2:ef:b5:2c:26:fb:a2:0b:91:e3:a9:bc:6a:d5:f1:0d:6b:50: 34:b7:9b:a4:13:91:cc:2b:95:b1:be:d4:ea:bb:ec:65:29:f1: d4:e5:25:41:cc:90:3f:59:fa:9b:7b:3a:1f:eb:c1:cd:e5:2a: d5:09:35:e1:e3:4d:20:c4:55:b8:99:7e:b9:fd:50:83:e4:da: f0:3a:7c:c8:30:1a:a5:24:14:f4:2d:29:29:1b:a1:7e:03:5d: bd:d1:5d:7c:c3:e9:14:29:f6:5e:d2:b7:ec:42:8d:ae:46:ed: fb:4f:a8:47:5e:09:f2:0d:01:9c:d9:a8:36:ca:35:fe:92:5d: 58:31:c7:94:95:3f:a8:3c:9d:9e:c8:23:34:7b:43:bf:7c:6a: 00:81:23:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjY0QzExMC8GA1UEBRMoRUZBNDIzQkFGNUJGRDE4OTMxNkU2NTAzMUU4Q0VBRjVB M0ZGQTE0QjAeFw0yNTA3MTkwNzUwMTdaFw0yNTA3MjYwNzUwMTdaMBgxFjAUBgNV BAMTDTY4N2I0ZTNhLWM2NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmVRhjhygwmscKFpGdHePCQwXUE0NaS96honPs+dgafVN+UnGBFoMag+0Ev6cI aTS7bcAXwJBv+QZi/L65adq4N9LU5BVTV3hEPxJ5iQNXq7ssgDjXBdpNdc9M7R5J kfvF9jQmIwyzfg0Bk/uQ/xhOXmcaA1ewD4CWchabu8kGHcVsPiHCsRRL61kl2MW0 Ub1H2UqqrZr9GidUsjHmLB5ENBbyBmPzg3T6V9rcOXZG0WHytobyPgJIQTEd05w9 MN1XcuCWttvOyQP3ulB5zZqzyWz3u395L+2EfvIteR6ozJ0e2Hc4V0EBxOKQOmIo D81rJptm7gg5Lz+duhFiIT6vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4ZzyjeJn j+mfA6B4j/F7kE3hXPowHwYDVR0jBBgwFoAU76QjuvW/0YkxbmUDHozq9aP/oUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyNjRDLzI0MUFDN0JFMEUx ODExRjBCNjlCOEIzOEM0RjlBRTAyLzc2UWp1dldfMFlreGJtVURIb3pxOWFQX29V cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzZRanV2V18wWWt4Ym1VREhvenE5YVBfb1VzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy NjRDLzI0MUFDN0JFMEUxODExRjBCNjlCOEIzOEM0RjlBRTAyLzc2UWp1dldfMFlr eGJtVURIb3pxOWFQX29Vcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAMXacfoiUvGOig5YezrZlUSkE+kZhF1OTMmPgT9WeSckJoy8xIy/Hcv SvmPpXDD2wtrw+TcwFptRSkQL4MPthtiYNIY9i1iqDdp2wkA0pIwkMenZ+wXU3Pk 5jtV5Lv4CLgMdltQKXTQbH1gx8LvtSwm+6ILkeOpvGrV8Q1rUDS3m6QTkcwrlbG+ 1Oq77GUp8dTlJUHMkD9Z+pt7Oh/rwc3lKtUJNeHjTSDEVbiZfrn9UIPk2vA6fMgw GqUkFPQtKSkboX4DXb3RXXzD6RQp9l7St+xCja5G7ftPqEdeCfINAZzZqDbKNf6S XVgxx5SVP6g8nZ7IIzR7Q798agCBI6U= -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:01 2025 by rpki-client