$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json) Hash identifier: EFcr5wzgz+xW/TH+kbJZeDaY9hgvkrDkbfTKS15gUy8= Subject key identifier: 09:12:3E:14:F9:0F:2F:71:6C:3F:C8:66:E9:17:F9:9F:45:50:2B:76 Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft Manifest number: AC Signing time: Sat 19 Jul 2025 06:18:42 +0000 Manifest this update: Sat 19 Jul 2025 06:18:42 +0000 Manifest next update: Sat 26 Jul 2025 06:18:42 +0000 Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: sWtTVjCTeyxsOQLrhaxhciwwghLCNPCctB/I05+jA0k=) 2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: AOHVL3D6FsryT04X8+k30AkGqkWA0TurnsDlj6WqM9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Validity Not Before: Jul 19 06:18:42 2025 GMT Not After : Jul 26 06:18:42 2025 GMT Subject: CN=687b38c2-bca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0f:68:3d:53:96:ee:2d:a1:69:79:0b:2e:d4: 24:56:eb:5d:3d:8c:75:72:34:a8:c0:f8:52:a8:70: f7:90:a4:3e:63:90:e8:ba:93:e0:84:f3:9a:17:df: 2b:8f:08:43:04:04:66:37:ae:b4:b3:95:0a:08:61: df:04:82:02:a7:1f:1b:0b:46:73:5f:0e:59:de:d8: ba:f2:07:9b:dd:dd:c7:68:57:32:ee:7c:69:64:83: 53:13:46:eb:09:64:88:cf:55:49:97:2e:dc:0d:3e: 0e:fb:98:5c:5c:9a:b7:31:e1:c6:eb:78:3b:79:30: de:f7:60:86:a6:91:52:cf:fe:7f:1b:cf:56:fe:a4: 0e:9d:f7:ce:64:f8:60:ed:14:31:ea:05:a4:ca:38: dd:a5:d8:8b:51:77:a5:c3:76:f3:29:c7:e7:44:c7: 71:8f:8b:ea:3b:5e:7a:f5:21:69:f7:fc:ec:53:ae: a5:02:df:39:14:23:6c:d3:2c:6f:cd:6a:9d:61:15: 8d:7c:73:b9:2c:e8:63:83:9f:f1:66:ec:f9:5e:52: 01:b8:e1:ac:cd:f4:25:1f:55:69:2f:d2:65:c6:33: 7a:c0:54:5a:4d:31:72:d1:58:a2:9b:e3:08:35:82: 22:60:77:84:e0:79:5b:ce:8b:eb:ef:fb:fe:c7:71: 86:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:12:3E:14:F9:0F:2F:71:6C:3F:C8:66:E9:17:F9:9F:45:50:2B:76 X509v3 Authority Key Identifier: keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:2d:5f:1a:80:7c:33:40:0f:f1:3e:3e:3b:87:a0:53:fe:0e: 54:ea:b6:b3:e5:26:bb:78:8c:13:26:06:42:12:d8:9f:c3:6a: b3:8a:35:1e:49:a5:51:07:d0:0a:bd:70:62:67:73:9c:92:0e: 9b:b7:22:1f:8c:99:9c:cb:5f:30:6f:3b:ca:cd:2d:d9:e5:5e: d3:d6:92:c4:43:a0:ab:ce:99:45:d7:09:6c:57:a0:0f:11:e7: 42:e0:08:42:53:af:bf:5f:07:96:48:b1:17:9b:cf:fb:f5:d5: 56:d0:3d:4c:ad:b9:85:32:c9:da:cc:29:19:64:2d:aa:9c:57: 97:2d:09:66:fa:1b:dd:0c:f6:bd:6b:ba:60:33:72:00:8c:52: 2f:7a:e4:ac:59:bd:1e:2c:cf:94:09:fb:b4:a7:58:b8:d6:ad: 61:f9:d1:ac:48:d5:05:5a:b7:ba:20:07:f0:62:4b:4d:81:5b: 2e:18:e6:ea:f8:1c:1d:e4:39:76:78:ca:e8:41:2f:37:2f:c9: d7:0d:04:ed:e8:16:98:6e:ac:11:1a:08:81:05:e7:c6:39:35: ca:70:91:6e:10:a4:3c:4a:66:3e:08:f1:c8:79:12:e8:70:66: f9:1d:34:4d:b5:f3:cc:7e:39:03:f9:02:1a:ae:82:77:5b:8e: 0a:e8:f0:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKEZDOURDQzZCQUM0RjNEOUJFQzlFRDFFOTA2NEQ5QkNB RENGOUEzQTkwHhcNMjUwNzE5MDYxODQyWhcNMjUwNzI2MDYxODQyWjAYMRYwFAYD VQQDEw02ODdiMzhjMi1iY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxA9oPVOW7i2haXkLLtQkVutdPYx1cjSowPhSqHD3kKQ+Y5DoupPghPOaF98r jwhDBARmN660s5UKCGHfBIICpx8bC0ZzXw5Z3ti68geb3d3HaFcy7nxpZINTE0br CWSIz1VJly7cDT4O+5hcXJq3MeHG63g7eTDe92CGppFSz/5/G89W/qQOnffOZPhg 7RQx6gWkyjjdpdiLUXelw3bzKcfnRMdxj4vqO1569SFp9/zsU66lAt85FCNs0yxv zWqdYRWNfHO5LOhjg5/xZuz5XlIBuOGszfQlH1VpL9JlxjN6wFRaTTFy0Viim+MI NYIiYHeE4Hlbzovr7/v+x3GGIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkSPhT5 Dy9xbD/IZukX+Z9FUCt2MB8GA1UdIwQYMBaAFPydzGusTz2b7J7R6QZNm8rc+aOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi83OTQ2MzBDQzVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBadnNudEhwQmsyYnl0ejVv NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi83OTQ2MzBDQzVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBa dnNudEhwQmsyYnl0ejVvNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACLV8agHwzQA/xPj47h6BT/g5U6raz5Sa7eIwTJgZCEtifw2qzijUe SaVRB9AKvXBiZ3Ockg6btyIfjJmcy18wbzvKzS3Z5V7T1pLEQ6CrzplF1wlsV6AP EedC4AhCU6+/XweWSLEXm8/79dVW0D1MrbmFMsnazCkZZC2qnFeXLQlm+hvdDPa9 a7pgM3IAjFIveuSsWb0eLM+UCfu0p1i41q1h+dGsSNUFWre6IAfwYktNgVsuGObq +Bwd5Dl2eMroQS83L8nXDQTt6BaYbqwRGgiBBefGOTXKcJFuEKQ8SmY+CPHIeRLo cGb5HTRNtfPMfjkD+QIaroJ3W44K6PCS -----END CERTIFICATE-----Generated at Sun Jul 20 18:38:44 2025 by rpki-client