$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json) Hash identifier: mvat269Cr2R3vIaWHrP/8qon+EJSng5WXaGcnUGNmWg= Subject key identifier: 2E:84:0E:48:ED:A1:1D:7D:7A:A7:88:BC:53:38:43:BD:E0:DD:2A:B2 Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Certificate serial: 0322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft Manifest number: 031E Signing time: Sat 19 Jul 2025 01:35:06 +0000 Manifest this update: Sat 19 Jul 2025 01:35:05 +0000 Manifest next update: Sat 26 Jul 2025 01:35:05 +0000 Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: zEAbCVhB/6aXYXe1N2WUJDHnM6sXwSsL/ya9oZAk18E=) 2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: 7bYPkVMZrrnunuEV97KsBcLOn5jOLNiIR6VQXBJQwkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 802 (0x322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Validity Not Before: Jul 19 01:35:05 2025 GMT Not After : Jul 26 01:35:05 2025 GMT Subject: CN=687af64a-0bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3d:55:77:6e:8d:56:34:58:43:4d:6e:97:98: 12:78:bb:ea:d9:1f:b3:51:05:6e:99:5f:65:80:13: 86:3a:b5:cb:ff:18:7a:54:21:2d:47:e5:10:7d:f8: 5f:fd:79:fe:a5:98:69:22:2f:2f:da:cc:00:36:8e: 8e:45:d3:43:28:4e:ef:9c:22:de:86:c5:1b:f4:b7: 84:1f:94:88:97:e6:b7:74:e5:95:ed:0f:02:3e:76: b7:36:41:59:b3:51:f9:9d:64:09:94:0b:cd:80:64: 4e:83:3d:f0:93:51:8e:ba:41:ca:de:61:8b:6f:58: de:ce:e4:e3:29:7e:61:54:8d:d8:6c:68:35:78:e6: 04:a7:77:29:82:03:e4:38:f4:c9:bb:6d:1c:83:42: 44:76:45:55:5a:84:e3:d8:dc:12:2e:a1:a9:1d:7a: 2d:f4:00:7d:91:d5:b8:4b:f8:8a:6d:94:f1:f4:52: 87:3e:67:9c:66:a3:7a:51:94:41:e6:f6:1b:a6:10: f8:3d:d8:b4:fa:52:e3:fd:5e:df:19:af:f3:65:12: c0:b5:f0:b8:e8:b3:14:9b:79:cb:39:bb:0f:e2:c5: e3:53:98:cb:74:e8:87:0d:7c:f1:0c:ef:2b:52:a9: 53:3b:9c:28:7f:c2:96:32:a2:e2:5b:5f:a5:31:a2: a0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:84:0E:48:ED:A1:1D:7D:7A:A7:88:BC:53:38:43:BD:E0:DD:2A:B2 X509v3 Authority Key Identifier: keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:5b:40:21:74:74:18:34:2d:e1:6c:52:41:9e:30:ca:99:0b: 9b:c4:6d:a9:60:2b:03:70:1b:ff:87:8a:5d:55:50:fa:67:9a: ce:a9:dc:9c:68:5f:55:d5:1d:f9:56:0c:85:9d:29:bd:8e:5c: 68:36:ac:e4:c2:b9:bf:29:34:51:90:b9:e6:77:be:39:ca:e8: 20:87:d9:fd:62:59:25:c4:47:4a:84:1c:2b:ae:50:06:91:5b: 68:7b:f1:3a:50:75:e7:6f:70:2b:6f:8c:85:08:3c:ce:70:a4: 23:97:1b:15:f1:a1:ca:b5:28:6a:cd:5b:5b:39:48:bc:6f:38: 3f:26:ad:88:9f:38:84:d0:f7:1a:ab:46:8a:7e:7a:d4:76:14: 29:b2:ea:a4:64:ca:e0:9e:21:98:2d:9b:2d:bb:9e:94:03:1a: 7e:5a:b8:de:fc:05:59:ab:44:92:17:90:19:e5:eb:ca:95:1e: 12:e4:88:ad:24:1a:b5:f4:30:45:06:14:e5:3d:8c:fe:3c:4d: 1b:52:11:78:2e:81:5d:cc:1c:47:67:ee:b9:41:c3:2f:f9:0f: 01:a9:db:dd:98:75:a8:4f:22:56:24:1e:12:69:76:0a:69:63: ea:d5:4d:2f:4c:8c:2e:1c:b4:ce:30:89:43:d8:c5:96:a1:6a: 1e:43:5f:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5 QThGMTUzNUQwHhcNMjUwNzE5MDEzNTA1WhcNMjUwNzI2MDEzNTA1WjAYMRYwFAYD VQQDEw02ODdhZjY0YS0wYmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1z1Vd26NVjRYQ01ul5gSeLvq2R+zUQVumV9lgBOGOrXL/xh6VCEtR+UQffhf /Xn+pZhpIi8v2swANo6ORdNDKE7vnCLehsUb9LeEH5SIl+a3dOWV7Q8CPna3NkFZ s1H5nWQJlAvNgGROgz3wk1GOukHK3mGLb1jezuTjKX5hVI3YbGg1eOYEp3cpggPk OPTJu20cg0JEdkVVWoTj2NwSLqGpHXot9AB9kdW4S/iKbZTx9FKHPmecZqN6UZRB 5vYbphD4Pdi0+lLj/V7fGa/zZRLAtfC46LMUm3nLObsP4sXjU5jLdOiHDXzxDO8r UqlTO5wof8KWMqLiW1+lMaKgzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6EDkjt oR19eqeIvFM4Q73g3SqyMB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1 QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w Z2tDai02T3Z2WlNhanhVMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoW0AhdHQYNC3hbFJBnjDKmQubxG2pYCsDcBv/h4pdVVD6Z5rOqdyc aF9V1R35VgyFnSm9jlxoNqzkwrm/KTRRkLnmd745yuggh9n9YlklxEdKhBwrrlAG kVtoe/E6UHXnb3Arb4yFCDzOcKQjlxsV8aHKtShqzVtbOUi8bzg/Jq2InziE0Pca q0aKfnrUdhQpsuqkZMrgniGYLZstu56UAxp+Wrje/AVZq0SSF5AZ5evKlR4S5Iit JBq19DBFBhTlPYz+PE0bUhF4LoFdzBxHZ+65QcMv+Q8BqdvdmHWoTyJWJB4SaXYK aWPq1U0vTIwuHLTOMIlD2MWWoWoeQ1+8 -----END CERTIFICATE-----Generated at Sun Jul 20 19:01:52 2025 by rpki-client