$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: gWmhUNP2XpB+3bmlsbmDzqqD0htgobFWX63/ZiUZJkE= Subject key identifier: 4A:5E:13:AF:FD:85:00:53:4A:56:DD:AE:C8:1B:82:C1:D8:13:A6:52 Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0C55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0C42 Signing time: Sun 20 Jul 2025 18:37:21 +0000 Manifest this update: Sun 20 Jul 2025 18:37:20 +0000 Manifest next update: Sun 27 Jul 2025 18:37:20 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: YOgiM1oDV73qY9VeseZqNnOG0yRSAc6hBQdkBYi5TC4=) 2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: I8xUhuaKZwm6lPAAKATroItwpWXb2vxsxqVz/BIgbyE=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: oiRTxf178GSVajMFJOV88czGN0g9LsEQwe3fVsmhNYs=) 4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: MSG4IEJD21Lg46cXlyVsJXQNoEWSJs0ZdoCdo0HPe4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Jul 20 18:37:20 2025 GMT Not After : Jul 27 18:37:20 2025 GMT Subject: CN=687d3761-d3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:8b:73:c2:a9:41:b2:07:63:34:1f:8d:a9: ab:3b:f2:2a:35:07:16:e3:75:06:41:36:75:b0:f9: 1a:cf:56:6b:1d:2a:ab:9c:c7:31:44:69:4a:b3:64: 68:6c:4c:2d:0a:d3:3d:9a:9d:a6:0c:dc:ee:3d:b3: ae:29:19:04:7e:60:5e:70:d1:80:c5:64:c9:27:14: df:41:48:7e:a7:bf:d0:37:1b:cb:c0:30:4e:5b:56: af:d9:d2:57:b0:31:62:86:11:86:cc:ed:32:3c:e3: 8c:17:1c:dc:16:36:6b:b1:90:d6:ea:a9:ad:b8:06: 40:c0:ee:b8:74:87:1b:da:25:91:2c:b4:b3:8e:a4: 21:5e:e3:e4:3f:af:42:ca:ec:78:68:8e:0e:9b:d6: 7b:30:e0:d6:1e:08:8f:ed:10:aa:d0:fe:06:94:b4: 09:23:70:da:c0:9e:c5:dd:9f:46:c0:c4:bc:34:47: e3:56:ed:09:f2:20:cd:e5:bf:47:4c:a0:45:b5:26: 4c:dc:25:30:c4:f5:93:27:f0:d8:d7:a5:93:7e:29: 61:94:1b:58:80:cc:4b:69:8f:db:a8:5e:43:e4:5b: 1b:aa:51:cd:3c:f3:73:4e:88:c0:1a:59:db:47:c4: 8e:a4:f6:17:b3:f9:7b:db:a2:b9:f8:61:25:c8:16: 8f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5E:13:AF:FD:85:00:53:4A:56:DD:AE:C8:1B:82:C1:D8:13:A6:52 X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9b:06:40:89:8d:dd:81:b1:e3:e8:fe:d6:d8:6f:26:e0:ff: d7:0b:cb:39:47:5e:fd:fa:6c:08:60:46:49:2f:61:d3:12:3c: 9e:c3:6d:cc:84:d4:d4:95:3c:65:d6:e8:64:eb:dc:1c:f7:fb: 71:c8:a3:ca:7e:d4:de:56:2f:3a:31:c2:a2:a2:23:4a:16:64: 96:75:b0:e6:f8:b9:8e:60:2b:35:eb:99:57:03:c4:e0:be:8b: 1e:d4:04:44:e4:81:9c:9f:a3:3d:2e:0e:5f:b2:0a:2d:eb:0a: a3:d7:4d:c8:87:06:50:2d:8b:79:6d:10:bc:26:02:5b:2a:ab: 53:6b:f9:09:96:41:04:3e:01:fa:9f:d4:3a:2b:0b:0f:97:23: 48:5f:ec:a7:40:b1:6d:be:aa:32:64:3d:a0:bb:20:86:49:55: 64:ae:65:72:4d:6b:26:d2:1d:9e:92:9a:82:d2:79:8d:26:c5: b6:4b:cf:b6:39:3e:92:9b:16:b0:f0:5b:a2:e9:c5:1e:4b:bd: 56:72:7c:6f:bd:95:41:59:76:14:31:f6:1a:19:f4:90:8e:a7: 3d:9a:1f:e5:41:87:27:bd:2c:65:fe:58:bd:47:06:94:49:8b: 52:80:88:c5:c8:14:44:eb:e6:b4:9f:70:e3:5a:e4:92:fb:84: ab:3b:47:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjUwNzIwMTgzNzIwWhcNMjUwNzI3MTgzNzIwWjAYMRYwFAYD VQQDEw02ODdkMzc2MS1kM2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33GLc8KpQbIHYzQfjamrO/IqNQcW43UGQTZ1sPkaz1ZrHSqrnMcxRGlKs2Ro bEwtCtM9mp2mDNzuPbOuKRkEfmBecNGAxWTJJxTfQUh+p7/QNxvLwDBOW1av2dJX sDFihhGGzO0yPOOMFxzcFjZrsZDW6qmtuAZAwO64dIcb2iWRLLSzjqQhXuPkP69C yux4aI4Om9Z7MODWHgiP7RCq0P4GlLQJI3DawJ7F3Z9GwMS8NEfjVu0J8iDN5b9H TKBFtSZM3CUwxPWTJ/DY16WTfilhlBtYgMxLaY/bqF5D5FsbqlHNPPNzTojAGlnb R8SOpPYXs/l726K5+GElyBaPrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpeE6/9 hQBTSlbdrsgbgsHYE6ZSMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqmwZAiY3dgbHj6P7W2G8m4P/XC8s5R179+mwIYEZJL2HTEjyew23M hNTUlTxl1uhk69wc9/txyKPKftTeVi86McKioiNKFmSWdbDm+LmOYCs165lXA8Tg vose1ARE5IGcn6M9Lg5fsgot6wqj103IhwZQLYt5bRC8JgJbKqtTa/kJlkEEPgH6 n9Q6KwsPlyNIX+ynQLFtvqoyZD2guyCGSVVkrmVyTWsm0h2ekpqC0nmNJsW2S8+2 OT6Smxaw8Fui6cUeS71WcnxvvZVBWXYUMfYaGfSQjqc9mh/lQYcnvSxl/li9RwaU SYtSgIjFyBRE6+a0n3DjWuSS+4SrO0cL -----END CERTIFICATE-----Generated at Mon Jul 21 07:23:41 2025 by rpki-client