$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: bWlKkbtGz6OP3T/fZ8z7KfmhyC6faS8kJCPDJLBe8/M= Subject key identifier: 73:6E:19:DD:AE:26:C8:89:B4:20:16:5D:60:F7:2D:B7:C4:9F:8B:21 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: FA Signing time: Sat 19 Jul 2025 05:21:52 +0000 Manifest this update: Sat 19 Jul 2025 05:21:51 +0000 Manifest next update: Sat 26 Jul 2025 05:21:51 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: cvVUvHdUBb/VCBz4h1NTqxfLuqeCm59qUzG+OSrTbgE=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: XRFVx29hjFc5pKNr7AkvLob3HQjLTaD9Ns3C1RRvN4w=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: elMINW9VmQY5nycCbQ/QKtRjE+I0nxMVlzRRTvQng4k=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: E3gtntzxmL6luEWEYnHzIxmyJjY7WSBf3VBE5/D496g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Jul 19 05:21:51 2025 GMT Not After : Jul 26 05:21:51 2025 GMT Subject: CN=687b2b70-e501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:37:ee:91:4c:f1:f1:d8:84:d4:f0:6c:d7:d3: 53:b9:a6:ce:81:6f:7b:f3:76:1e:8f:e4:bc:ff:4b: d7:a4:f5:9d:70:24:cb:42:2a:c6:31:2d:ac:25:31: 37:a2:0a:03:ca:6f:f6:84:8b:6f:cd:b9:01:0b:65: c2:81:b2:aa:50:99:e2:f1:c0:37:cf:c4:c6:e9:62: de:71:9a:e9:17:71:56:16:9f:e0:5e:64:a0:df:7a: 30:bd:39:2c:a7:40:89:2a:d3:7a:fb:f0:55:e9:1b: 0a:2a:df:4a:7c:35:94:1c:6e:bd:6d:3c:f1:ff:51: 92:c9:21:eb:4d:6d:23:20:ab:6e:1c:a1:46:11:ee: 08:7e:b4:49:28:cf:e4:b1:ba:30:12:f3:98:b3:ed: 1a:8c:da:cf:e4:59:0b:62:7e:ef:58:5c:8f:e5:90: a7:1b:9f:fc:26:81:aa:c7:17:a2:61:8d:cc:b7:e8: b6:7a:4e:97:7a:dd:a1:4d:26:7c:64:08:0d:93:a2: a8:6d:05:60:cb:79:dc:87:a3:1d:8c:20:bd:e7:f3: 45:99:3c:57:05:2f:94:29:28:d0:62:dd:55:73:3a: 03:e5:86:ba:61:bd:f9:d5:41:75:00:64:f6:ea:a0: e5:b0:40:ce:81:fb:bd:f6:6e:bf:5b:12:39:ae:8d: 98:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6E:19:DD:AE:26:C8:89:B4:20:16:5D:60:F7:2D:B7:C4:9F:8B:21 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:88:47:aa:f5:e2:b9:15:0f:67:13:e0:b4:6f:9f:f4:5b:fe: b6:97:e3:86:c9:bb:d1:58:e0:82:5c:37:44:81:d8:ac:92:fd: c4:d7:64:19:c6:8d:b4:e6:a1:20:84:dd:1b:0f:74:1b:bc:08: a6:18:e6:24:9d:f8:f1:db:28:42:21:ac:48:d0:2b:b0:06:fc: 2f:98:8b:f2:72:99:a6:08:14:60:62:74:09:05:b4:bd:31:81: fe:c2:f6:2c:d4:00:fa:bd:05:40:02:c3:8a:ea:ad:4c:bd:6d: 3e:eb:39:d8:bd:b5:e1:11:34:3d:6d:56:29:a0:3e:c2:95:c9: 60:87:26:25:44:dc:66:3e:d0:2b:4d:d5:62:7a:fa:e1:94:6e: ba:2f:bc:d6:23:cf:79:d7:c3:d0:64:e4:ee:8b:b6:6c:13:33: 33:64:48:b8:77:c4:24:85:c6:6a:8c:f7:a5:81:0d:2f:5d:a2: dd:c4:68:62:f4:bc:93:d3:8e:5c:08:01:76:d5:7e:66:2f:bf: 2d:4b:21:01:d8:35:ab:bb:70:84:0a:e9:cb:81:9a:70:b9:9b: ab:68:1d:ee:2c:93:06:ce:cd:cf:f7:ce:73:34:f2:c7:7b:21: 22:5b:9b:ca:6b:0d:0d:d7:47:1e:a5:e5:e0:20:0d:18:ee:0c: e3:95:5c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjUwNzE5MDUyMTUxWhcNMjUwNzI2MDUyMTUxWjAYMRYwFAYD VQQDEw02ODdiMmI3MC1lNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jfukUzx8diE1PBs19NTuabOgW9783Yej+S8/0vXpPWdcCTLQirGMS2sJTE3 ogoDym/2hItvzbkBC2XCgbKqUJni8cA3z8TG6WLecZrpF3FWFp/gXmSg33owvTks p0CJKtN6+/BV6RsKKt9KfDWUHG69bTzx/1GSySHrTW0jIKtuHKFGEe4IfrRJKM/k sbowEvOYs+0ajNrP5FkLYn7vWFyP5ZCnG5/8JoGqxxeiYY3Mt+i2ek6Xet2hTSZ8 ZAgNk6KobQVgy3nch6MdjCC95/NFmTxXBS+UKSjQYt1VczoD5Ya6Yb351UF1AGT2 6qDlsEDOgfu99m6/WxI5ro2Y1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNuGd2u JsiJtCAWXWD3LbfEn4shMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIiEeq9eK5FQ9nE+C0b5/0W/62l+OGybvRWOCCXDdEgdiskv3E12QZ xo205qEghN0bD3QbvAimGOYknfjx2yhCIaxI0CuwBvwvmIvycpmmCBRgYnQJBbS9 MYH+wvYs1AD6vQVAAsOK6q1MvW0+6znYvbXhETQ9bVYpoD7ClclghyYlRNxmPtAr TdVievrhlG66L7zWI89518PQZOTui7ZsEzMzZEi4d8QkhcZqjPelgQ0vXaLdxGhi 9LyT045cCAF21X5mL78tSyEB2DWru3CECunLgZpwuZuraB3uLJMGzs3P985zNPLH eyEiW5vKaw0N10cepeXgIA0Y7gzjlVwp -----END CERTIFICATE-----Generated at Sun Jul 20 15:02:01 2025 by rpki-client