$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json) Hash identifier: nnHUUm9xKsnwvbYssQrj54DEU7XEU3deummGJzOWM2Y= Subject key identifier: F2:6E:87:76:C2:12:BC:5D:EF:A6:C9:F9:A4:A1:14:7C:E4:73:E7:31 Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft Manifest number: 01FD Signing time: Fri 13 Jun 2025 01:32:58 +0000 Manifest this update: Fri 13 Jun 2025 01:32:58 +0000 Manifest next update: Fri 20 Jun 2025 01:32:58 +0000 Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: BwJDKX/SNA5ywDcEd9f/4qW+aeIyQl3Ou3HBD+rL8zE=) 2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: xvgbQt4eEZhtv3D2xw3qg4iJxZwYxghUdqa6K5JPB6M=) 3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: xErCMLXYoA0hL6AVT+7fD9OFndfuVCyqiiQ1j2stZZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: Jun 13 01:32:58 2025 GMT Not After : Jun 20 01:32:58 2025 GMT Subject: CN=684b7fca-13e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:77:5f:d1:5a:6c:36:e0:c2:87:ec:5b:4a: 5d:4a:d5:d5:90:30:9c:87:94:7a:14:28:51:e7:c0: 7a:e7:a6:6e:46:93:f8:3d:1a:23:d9:f2:45:f6:c0: c2:e0:5c:ec:06:6b:80:8d:0c:cb:20:44:67:94:c5: 7b:c9:42:95:6b:41:07:1a:d2:fe:15:d1:73:21:4a: af:e9:60:78:47:ac:20:98:76:35:c1:c5:da:36:9b: 4e:4c:86:f4:e1:13:a6:61:da:23:c7:03:68:00:ca: 25:7a:75:3e:68:1f:b4:f2:26:3a:70:b0:3b:13:75: 42:e9:5a:83:6f:09:94:a1:dd:de:00:e9:3c:de:a8: c0:78:21:52:c3:ef:da:e1:61:31:ba:f9:17:54:42: 98:4b:55:ed:84:df:d8:1f:e2:75:12:2f:f1:0e:51: 8b:d7:f0:ff:59:0c:09:10:00:50:b1:4c:9f:74:7e: d9:68:89:76:1c:11:28:48:03:07:75:a1:37:bf:cd: f5:31:51:73:30:99:26:f7:b5:bc:77:f4:d2:8d:71: eb:30:f1:04:fc:21:5f:03:f0:b8:f7:e9:38:9d:c7: 6d:ff:da:98:29:26:86:66:65:35:1e:34:3d:c2:89: 4d:a6:26:45:c2:81:f0:67:fa:68:3a:fc:5b:95:fe: 92:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6E:87:76:C2:12:BC:5D:EF:A6:C9:F9:A4:A1:14:7C:E4:73:E7:31 X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:84:8c:0e:b1:59:d8:4c:a9:d5:4d:ec:a3:34:af:84:b5:16: 8f:92:c2:e0:15:b6:c3:03:ea:92:19:8a:7c:73:a4:58:ce:50: 7c:b3:b7:f5:0a:da:68:e4:01:ce:46:72:73:9e:72:b3:b1:ab: 81:5c:a2:96:af:5d:52:af:94:a4:88:58:34:25:86:7e:3b:65: 38:72:9a:7b:f2:0c:e8:6b:3b:74:45:8d:85:bb:77:ac:1b:4c: 06:92:7c:07:8b:6a:dc:47:6b:c4:59:3a:11:cb:02:ea:49:11: 72:5c:6b:15:ee:a4:8c:64:0b:4b:55:08:82:b2:89:ff:f0:2c: f5:4b:a2:a5:e4:37:ae:ab:d2:f3:86:f4:5f:50:77:b3:36:e2: e5:e8:1e:91:24:a3:49:ad:22:b6:f1:2b:75:d4:f7:ca:75:f3: 7a:af:bc:03:bb:0b:4e:4d:68:49:dd:e0:ac:f5:ec:10:ee:2a: fe:ef:b1:2a:bf:5b:94:47:27:03:79:7a:a2:df:83:c8:93:e4: 6a:0d:3a:51:d9:b8:68:e4:de:b5:75:4d:99:67:01:20:af:74: 46:0e:16:51:0f:13:8e:54:f5:b5:d1:d7:cc:17:17:5c:38:5b: cc:69:bb:aa:3f:66:a5:dc:67:7c:1a:25:30:0a:08:7c:ea:ae: a3:34:ab:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjUwNjEzMDEzMjU4WhcNMjUwNjIwMDEzMjU4WjAYMRYwFAYD VQQDEw02ODRiN2ZjYS0xM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5t3X9FabDbgwofsW0pdStXVkDCch5R6FChR58B656ZuRpP4PRoj2fJF9sDC 4FzsBmuAjQzLIERnlMV7yUKVa0EHGtL+FdFzIUqv6WB4R6wgmHY1wcXaNptOTIb0 4ROmYdojxwNoAMolenU+aB+08iY6cLA7E3VC6VqDbwmUod3eAOk83qjAeCFSw+/a 4WExuvkXVEKYS1XthN/YH+J1Ei/xDlGL1/D/WQwJEABQsUyfdH7ZaIl2HBEoSAMH daE3v831MVFzMJkm97W8d/TSjXHrMPEE/CFfA/C49+k4ncdt/9qYKSaGZmU1HjQ9 wolNpiZFwoHwZ/poOvxblf6SLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJuh3bC Erxd76bJ+aShFHzkc+cxMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz dS15TEw5bXBlM1NDYk0yOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0hIwOsVnYTKnVTeyjNK+EtRaPksLgFbbDA+qSGYp8c6RYzlB8s7f1 Ctpo5AHORnJznnKzsauBXKKWr11Sr5SkiFg0JYZ+O2U4cpp78gzoazt0RY2Fu3es G0wGknwHi2rcR2vEWToRywLqSRFyXGsV7qSMZAtLVQiCson/8Cz1S6Kl5Deuq9Lz hvRfUHezNuLl6B6RJKNJrSK28St11PfKdfN6r7wDuwtOTWhJ3eCs9ewQ7ir+77Eq v1uURycDeXqi34PIk+RqDTpR2bho5N61dU2ZZwEgr3RGDhZRDxOOVPW10dfMFxdc OFvMabuqP2al3Gd8GiUwCgh86q6jNKsu -----END CERTIFICATE-----Generated at Fri Jun 13 13:24:08 2025 by rpki-client