$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: ryOH75wjNcEhsxUl5jpxDi/P6rz6DTwi0nKLuNlrVdw= Subject key identifier: 8F:D4:36:E2:CC:CC:6A:A5:E6:96:2C:ED:A4:89:E6:73:A0:2A:93:D4 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 07CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 07B6 Signing time: Fri 06 Jun 2025 21:21:46 +0000 Manifest this update: Fri 06 Jun 2025 21:21:45 +0000 Manifest next update: Fri 13 Jun 2025 21:21:45 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: dwyHavuBhuXjsy8kERwH1CRy+kZNRlBdCMx6vSPONdo=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: uenMBzygNtm8pOViOrVCvIQk55vDxQTLDfSdNpW+OjU=) 3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: pC04v+mNv7zR9Y+4n59q7qozKs19qd8Pl1ty97dV8dI=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: 4189wGj0EPbmCiBfwKVkbJETVgwnkFWeQOcnoateYoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 21:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Jun 6 21:21:45 2025 GMT Not After : Jun 13 21:21:45 2025 GMT Subject: CN=68435be9-3757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:c7:64:4f:d4:65:9f:9a:e5:4e:1d:d0:fe: 4f:ba:dd:aa:b7:3e:f5:94:43:63:91:d2:87:e9:93: 67:c9:f2:5e:c5:92:f7:5c:fb:37:2e:65:43:90:77: 3b:3e:22:e7:fd:6d:18:22:0b:69:3e:ab:70:b5:40: d8:af:bb:50:d7:00:d7:5d:4a:e9:76:be:c2:45:10: ba:a9:b6:79:83:d1:7a:4c:36:a5:74:39:ac:f2:1d: 84:1a:bd:6f:8e:ff:ab:1e:10:14:3e:53:b7:73:d1: 70:5b:0c:49:05:6c:23:aa:c0:77:49:11:29:02:08: ca:1d:df:78:ab:8b:f8:4a:b9:4b:c5:3d:b1:ca:b8: 8e:81:d0:3a:42:61:a4:c1:56:22:e9:b1:2f:43:5f: 23:85:48:ff:2d:a7:31:81:dc:17:96:02:33:22:89: f6:a3:74:53:35:62:a0:b2:e6:15:85:a1:87:84:27: c2:40:03:7b:70:8f:24:ed:84:fc:c2:a4:fe:63:4f: c9:f9:a8:8b:1a:ce:c5:a4:ad:4d:48:28:70:c7:35: 93:14:5d:16:47:b0:05:27:11:5a:10:63:28:4a:02: ab:1e:9d:d2:a5:d5:e3:83:0e:84:14:c3:89:18:af: 59:ed:4c:af:6f:9f:7f:f1:e8:4f:d0:63:48:5a:a8: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D4:36:E2:CC:CC:6A:A5:E6:96:2C:ED:A4:89:E6:73:A0:2A:93:D4 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:06:ea:2a:01:34:56:85:3f:63:21:be:79:aa:d0:a4:e5:68: b9:b6:1b:f6:85:ee:94:53:8e:8e:9e:10:49:40:e3:4a:d9:29: ee:b2:4e:a1:a9:13:38:1f:f6:04:de:d7:00:dd:75:1a:e5:4e: a6:0d:7a:13:2e:74:7c:9e:7b:a0:16:00:0e:62:f2:59:bb:0e: 67:45:15:e0:a0:8c:ba:5e:05:52:aa:8e:37:95:50:9b:1a:c7: 6a:4c:1a:33:7f:4e:cc:0d:8c:37:b4:a8:e6:4d:c7:94:9b:cb: ec:3b:9f:c1:43:3f:83:f1:3d:a4:25:1c:7d:4a:53:8b:b1:f2: d4:09:64:25:16:26:c8:ed:dc:44:69:03:24:71:bf:84:25:cb: 01:e0:7f:0a:9a:05:04:75:21:9b:d9:2a:de:46:92:94:49:67: 1d:4f:30:c9:5b:cd:fc:f3:18:00:0a:ea:4d:11:40:8c:56:c6: d8:b0:6c:3f:15:2b:db:68:65:2c:34:d6:db:54:3d:35:ad:3d: 94:98:f3:c9:2b:e5:01:3d:7f:b7:8c:ab:54:09:b2:40:05:0e: 20:db:a1:fc:dd:ac:b6:5f:40:2d:78:47:e1:11:6c:0d:42:ac: 87:99:c9:ac:51:f0:a4:14:f8:38:81:a6:4c:89:b6:0a:4d:4f: 8d:1e:07:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjUwNjA2MjEyMTQ1WhcNMjUwNjEzMjEyMTQ1WjAYMRYwFAYD VQQDEw02ODQzNWJlOS0zNzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6THZE/UZZ+a5U4d0P5Put2qtz71lENjkdKH6ZNnyfJexZL3XPs3LmVDkHc7 PiLn/W0YIgtpPqtwtUDYr7tQ1wDXXUrpdr7CRRC6qbZ5g9F6TDaldDms8h2EGr1v jv+rHhAUPlO3c9FwWwxJBWwjqsB3SREpAgjKHd94q4v4SrlLxT2xyriOgdA6QmGk wVYi6bEvQ18jhUj/LacxgdwXlgIzIon2o3RTNWKgsuYVhaGHhCfCQAN7cI8k7YT8 wqT+Y0/J+aiLGs7FpK1NSChwxzWTFF0WR7AFJxFaEGMoSgKrHp3SpdXjgw6EFMOJ GK9Z7Uyvb59/8ehP0GNIWqgvQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/UNuLM zGql5pYs7aSJ5nOgKpPUMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPBuoqATRWhT9jIb55qtCk5Wi5thv2he6UU46OnhBJQONK2Snusk6h qRM4H/YE3tcA3XUa5U6mDXoTLnR8nnugFgAOYvJZuw5nRRXgoIy6XgVSqo43lVCb GsdqTBozf07MDYw3tKjmTceUm8vsO5/BQz+D8T2kJRx9SlOLsfLUCWQlFibI7dxE aQMkcb+EJcsB4H8KmgUEdSGb2SreRpKUSWcdTzDJW8388xgACupNEUCMVsbYsGw/ FSvbaGUsNNbbVD01rT2UmPPJK+UBPX+3jKtUCbJABQ4g26H83ay2X0AteEfhEWwN QqyHmcmsUfCkFPg4gaZMibYKTU+NHgdW -----END CERTIFICATE-----Generated at Sat Jun 7 19:50:15 2025 by rpki-client