$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft File: pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json) Hash identifier: +nIDQ8dRwWYcBtNJFbCRRwdZJ4R9XZPmq7qS6Glbpjs= Subject key identifier: B4:FB:E8:CA:39:E0:E9:74:D4:59:02:77:CF:81:83:AD:AD:A6:FB:9F Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 Certificate issuer: /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Certificate serial: 0667 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft Manifest number: 0662 Signing time: Fri 06 Jun 2025 22:29:49 +0000 Manifest this update: Fri 06 Jun 2025 22:29:49 +0000 Manifest next update: Fri 13 Jun 2025 22:29:49 +0000 Files and hashes: 1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: oGTfxaxR4OrG84/V6DBjjfRikyBqV43VP9vkqSKr2ko=) 2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: giAuMNdUQbQxU3qFD/XGoGW0oQf3mtKr16RicuaHSew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 22:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Validity Not Before: Jun 6 22:29:49 2025 GMT Not After : Jun 13 22:29:49 2025 GMT Subject: CN=68436bdd-b99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:1f:dc:33:93:63:7f:81:3e:a8:f8:45:64: 9d:2d:b4:4f:2d:d0:58:87:93:4d:e9:39:9b:04:f9: 21:c7:84:3c:b5:a3:91:06:4d:1d:22:e7:21:6f:fb: c3:7a:b6:62:0c:97:b0:bb:8b:93:d5:d4:50:39:27: a9:ad:b9:af:3a:18:14:f2:cf:f7:e4:24:5f:29:63: ef:51:12:4c:2f:1c:07:44:03:d5:2b:5f:bd:a2:54: 98:15:d5:92:e1:ea:56:d0:f2:6f:0b:d7:45:97:b2: cd:e7:46:0b:82:57:57:3c:f0:f6:b0:d6:5d:bc:ca: 00:76:63:e0:8b:c9:52:28:2c:69:98:a7:bf:d8:0b: 57:03:13:15:4a:90:48:ea:11:fa:52:1a:10:57:54: 9d:fe:e8:22:75:96:9f:4c:b0:bb:b2:d4:e0:3f:a4: fd:62:f9:76:be:fb:24:b7:52:9a:6e:15:d8:5c:a3: 82:52:55:dc:f6:89:b7:26:85:19:96:98:cc:a1:7a: f7:8f:ea:ff:97:6d:52:ee:a6:db:95:20:ba:84:af: 4a:78:83:a9:13:b6:5b:1a:d2:44:a3:0b:55:52:96: 5e:fb:c0:44:4c:48:e1:82:d0:b2:73:2e:f5:ea:2c: 1a:b0:ed:8e:09:22:c8:90:a9:76:eb:06:f2:0e:b8: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FB:E8:CA:39:E0:E9:74:D4:59:02:77:CF:81:83:AD:AD:A6:FB:9F X509v3 Authority Key Identifier: keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:4e:07:57:bc:eb:a1:85:d0:83:c9:e2:be:3a:7f:5a:59:00: ef:26:87:20:64:b7:f3:54:36:c9:a4:39:20:1b:1f:28:b3:e9: b8:80:48:db:00:ed:f3:15:1b:66:1b:27:2d:f2:0e:a7:ae:d0: b2:d2:43:18:b2:7d:c1:70:9a:a3:f4:ea:1e:5e:3a:c5:65:e0: a8:a3:69:fb:17:38:aa:29:41:b8:df:09:61:1b:8a:d9:55:2d: 5b:8c:f7:37:e0:e6:4a:78:43:80:28:9a:03:06:11:32:03:c3: 17:b8:54:31:a9:de:ad:d0:fd:1d:f1:96:79:f3:3e:34:10:67: 85:93:01:b8:b4:a3:4c:f2:1f:e7:c8:1b:e6:c5:37:23:5e:44: c6:f7:f7:c2:da:0c:dc:79:eb:cf:e5:0b:64:64:76:d5:64:6f: 2c:c1:2f:15:ce:f7:f1:f7:2a:20:ff:85:bc:bf:93:c6:89:0c: e7:7e:1c:83:21:59:e5:42:53:64:c1:ec:db:25:75:b4:20:82: 96:a4:97:04:02:7f:23:d2:36:1b:44:b9:3e:ff:64:43:a5:3a: 0f:a2:f8:31:69:72:4a:92:11:b8:2b:bc:1d:88:34:3f:2c:e2: d5:41:94:2c:d1:fc:f7:0f:8a:0b:b7:24:ac:94:a5:b5:6b:fa: 43:93:5b:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFFRDIxMTAvBgNVBAUTKEE0OEE5MzlCNjdEQjIyQkFGNzdFMDA3QjIxREYzQjc0 NUI2MjgzOTAwHhcNMjUwNjA2MjIyOTQ5WhcNMjUwNjEzMjIyOTQ5WjAYMRYwFAYD VQQDEw02ODQzNmJkZC1iOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlykf3DOTY3+BPqj4RWSdLbRPLdBYh5NN6TmbBPkhx4Q8taORBk0dIuchb/vD erZiDJewu4uT1dRQOSeprbmvOhgU8s/35CRfKWPvURJMLxwHRAPVK1+9olSYFdWS 4epW0PJvC9dFl7LN50YLgldXPPD2sNZdvMoAdmPgi8lSKCxpmKe/2AtXAxMVSpBI 6hH6UhoQV1Sd/ugidZafTLC7stTgP6T9Yvl2vvskt1KabhXYXKOCUlXc9om3JoUZ lpjMoXr3j+r/l21S7qbblSC6hK9KeIOpE7ZbGtJEowtVUpZe+8BETEjhgtCycy71 6iwasO2OCSLIkKl26wbyDrg+5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLT76Mo5 4Ol01FkCd8+Bg62tpvufMB8GA1UdIwQYMBaAFKSKk5tn2yK6934AeyHfO3RbYoOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUVEMi8zRkU4REU2Qzgy QkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYklycjNmZ0I3SWQ4N2RGdGln NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJcVRtMmZiSXJyM2ZnQjdJZDg3ZEZ0aWc1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUVEMi8zRkU4REU2QzgyQkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYkly cjNmZ0I3SWQ4N2RGdGlnNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/TgdXvOuhhdCDyeK+On9aWQDvJocgZLfzVDbJpDkgGx8os+m4gEjb AO3zFRtmGyct8g6nrtCy0kMYsn3BcJqj9OoeXjrFZeCoo2n7FziqKUG43wlhG4rZ VS1bjPc34OZKeEOAKJoDBhEyA8MXuFQxqd6t0P0d8ZZ58z40EGeFkwG4tKNM8h/n yBvmxTcjXkTG9/fC2gzceevP5QtkZHbVZG8swS8Vzvfx9yog/4W8v5PGiQznfhyD IVnlQlNkwezbJXW0IIKWpJcEAn8j0jYbRLk+/2RDpToPovgxaXJKkhG4K7wdiDQ/ LOLVQZQs0fz3D4oLtySslKW1a/pDk1vP -----END CERTIFICATE-----Generated at Sun Jun 8 05:01:18 2025 by rpki-client