$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft File: 3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json) Hash identifier: tDt+VWfIyaoD7RLj37vAQy8i5I1lnEeD4UDGSeqeKbg= Subject key identifier: 48:36:B2:2D:DA:E4:F1:0D:87:EF:8A:C9:6D:19:B0:12:21:65:16:A9 Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E Certificate issuer: /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft Manifest number: 6D Signing time: Sat 19 Jul 2025 07:18:42 +0000 Manifest this update: Sat 19 Jul 2025 07:18:42 +0000 Manifest next update: Sat 26 Jul 2025 07:18:42 +0000 Files and hashes: 1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: 15+3O8bIrHg5aZ0giyVCsK7VAltFjwYYqalkmsYYwS8=) 2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: hvte1LGzH8lQs5HlVIeT4otbezAzwXIr7d7vqIECmd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Validity Not Before: Jul 19 07:18:42 2025 GMT Not After : Jul 26 07:18:42 2025 GMT Subject: CN=687b46d2-8b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1d:a6:50:c0:9d:f7:31:de:44:c5:8a:ab:6d: d7:4a:59:00:12:bb:60:27:6a:69:12:a6:bb:50:4b: df:70:9f:77:e3:84:f0:50:11:02:99:10:a3:c2:d6: e5:41:af:1f:03:75:00:ba:44:ab:c1:1e:96:b3:8b: 11:7d:09:3f:b4:ed:34:25:2b:a8:c4:4c:23:20:3a: bf:5e:ed:3f:dd:67:14:a0:14:1a:49:5b:8d:4e:40: 44:c9:75:98:2d:c9:8d:6d:04:b7:75:86:f8:35:46: 79:b1:61:be:33:75:bb:c9:b8:d0:26:b8:f1:ee:25: 4f:5d:55:18:75:f4:a8:ec:db:6c:bd:72:5d:36:49: b0:28:9f:c4:3d:db:47:75:3a:5e:9e:5f:19:c0:8b: d2:a3:f0:5f:77:5e:d0:1e:de:05:99:2e:7b:15:94: a6:a1:b8:3b:09:1c:a2:0a:e1:19:2c:a2:03:cd:6a: 8a:9d:92:8b:ea:34:07:4a:e4:e4:a5:73:59:f8:06: f4:02:ef:9a:93:e0:c3:0c:8d:a1:c9:02:7f:ce:a5: 65:ac:3b:ea:fd:af:1d:fb:f1:ea:2f:a0:40:d0:8c: 9f:eb:e1:30:5c:87:28:96:37:1a:b6:16:ac:26:71: 00:7c:06:a1:f9:c6:ae:9c:da:d0:bf:6d:a0:6c:4c: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:36:B2:2D:DA:E4:F1:0D:87:EF:8A:C9:6D:19:B0:12:21:65:16:A9 X509v3 Authority Key Identifier: keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bc:90:37:f6:ad:ab:cc:d9:08:21:4f:00:8f:4c:ed:11:e6: 93:a7:a3:e5:2f:a2:cc:f9:04:e0:c8:27:d2:45:99:0a:06:9e: 5d:51:f0:77:79:48:ce:a8:97:94:12:54:d8:a5:23:45:b4:72: b8:c9:9e:b7:9f:77:05:6a:4a:d8:a6:ec:05:bd:85:f2:50:3a: 6a:a3:93:37:d4:99:ff:63:1d:40:49:1a:6c:70:79:81:06:e3: 57:6e:57:bf:c3:fa:a6:96:8b:2d:44:b2:b9:79:ad:d1:d4:35: c2:6f:3e:c8:8b:19:a3:2d:38:77:31:eb:f1:e0:d7:05:ba:88: 86:3e:66:af:56:c3:db:1f:d8:ac:0a:b8:b3:ef:5c:7a:a2:7c: 7a:12:94:f3:6c:16:9f:00:c5:c3:ab:d1:62:8d:e0:0b:e2:98: e3:35:b7:94:84:b4:8a:2f:5b:ed:45:43:6e:22:a9:a1:53:bc: 65:a3:2d:bb:18:e6:01:21:57:de:7c:99:35:f0:bf:c3:e3:38: cf:98:c1:0c:e9:f7:c0:5c:e5:d8:d5:dd:24:a2:8c:b1:e8:22: 5e:ac:61:06:5d:1b:01:e1:62:64:20:5e:e8:9b:ce:f2:1b:d7: 7d:dc:55:e2:b5:b7:49:6b:5f:91:df:f4:4c:39:a9:f4:ae:6f: 3e:32:1c:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzRBNjExMC8GA1UEBRMoREM4MEM4NUU1MTAxMDg5QUIyNDI1RDNGQzkxNzc5ODVB MDEyNUM2RTAeFw0yNTA3MTkwNzE4NDJaFw0yNTA3MjYwNzE4NDJaMBgxFjAUBgNV BAMTDTY4N2I0NmQyLThiMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiHaZQwJ33Md5ExYqrbddKWQASu2AnamkSprtQS99wn3fjhPBQEQKZEKPC1uVB rx8DdQC6RKvBHpazixF9CT+07TQlK6jETCMgOr9e7T/dZxSgFBpJW41OQETJdZgt yY1tBLd1hvg1RnmxYb4zdbvJuNAmuPHuJU9dVRh19Kjs22y9cl02SbAon8Q920d1 Ol6eXxnAi9Kj8F93XtAe3gWZLnsVlKahuDsJHKIK4RksogPNaoqdkovqNAdK5OSl c1n4BvQC75qT4MMMjaHJAn/OpWWsO+r9rx378eovoEDQjJ/r4TBchyiWNxq2Fqwm cQB8BqH5xq6c2tC/baBsTCuFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSDayLdrk 8Q2H74rJbRmwEiFlFqkwHwYDVR0jBBgwFoAU3IDIXlEBCJqyQl0/yRd5haASXG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3NEE2LzcxNzFCQkYyRDE5 QzExRUY4M0NFQUQzQ0M0RjlBRTAyLzNJRElYbEVCQ0pxeVFsMF95UmQ1aGFBU1hH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM0lESVhsRUJDSnF5UWwwX3lSZDVoYUFTWEc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 NEE2LzcxNzFCQkYyRDE5QzExRUY4M0NFQUQzQ0M0RjlBRTAyLzNJRElYbEVCQ0px eVFsMF95UmQ1aGFBU1hHNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI28kDf2ravM2QghTwCPTO0R5pOno+Uvosz5BODIJ9JFmQoGnl1R8Hd5 SM6ol5QSVNilI0W0crjJnrefdwVqStim7AW9hfJQOmqjkzfUmf9jHUBJGmxweYEG 41duV7/D+qaWiy1Esrl5rdHUNcJvPsiLGaMtOHcx6/Hg1wW6iIY+Zq9Ww9sf2KwK uLPvXHqifHoSlPNsFp8AxcOr0WKN4AvimOM1t5SEtIovW+1FQ24iqaFTvGWjLbsY 5gEhV958mTXwv8PjOM+YwQzp98Bc5djV3SSijLHoIl6sYQZdGwHhYmQgXuibzvIb 133cVeK1t0lrX5Hf9Ew5qfSubz4yHP0= -----END CERTIFICATE-----Generated at Sun Jul 20 18:38:31 2025 by rpki-client