$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft File: 99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json) Hash identifier: 2sDDKF2W1JOk6cPMR6cV5WWgel2+AgyW4tN/1JWgGfk= Subject key identifier: 31:C4:DC:32:6A:59:2A:03:BD:DF:85:89:84:CA:89:01:7C:04:19:07 Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E Certificate issuer: /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft Manifest number: 03 Signing time: Sat 05 Jul 2025 06:18:46 +0000 Manifest this update: Sat 05 Jul 2025 06:18:46 +0000 Manifest next update: Sat 12 Jul 2025 06:18:46 +0000 Files and hashes: 1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: gDI7pb+LwFIjprIoZAUqa2M8R0ZPScl/M+d9HZv0ceA=) 2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: KsrzFIQg6uK84oBVBjzffm7U9gXX448ArNBcSCFz+n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 06:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Validity Not Before: Jul 5 06:18:46 2025 GMT Not After : Jul 12 06:18:46 2025 GMT Subject: CN=6868c3c6-01a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:20:05:ae:a3:73:98:f8:80:89:73:8d:96: e5:5f:21:e0:01:7d:3a:cf:e6:2d:8f:75:cf:ce:1b: 42:e7:b0:53:48:47:ea:3d:24:71:9e:67:46:4a:2e: d4:0e:17:4b:5e:1e:a4:83:81:0c:22:78:e6:c0:e4: ea:28:a1:cf:00:90:e7:5f:66:7e:97:28:42:0f:04: 2a:8b:e6:24:29:98:2c:79:c2:d8:db:e1:67:f9:82: b2:02:08:8d:69:47:21:1d:6d:63:94:f3:9b:75:3a: ca:ff:4f:70:06:2e:ec:d8:1f:69:ee:79:c1:88:92: ff:60:c0:18:72:e1:6c:c5:0e:da:01:c4:26:70:c6: 48:c5:31:c3:0c:d0:98:1b:09:b9:d8:f6:34:f8:04: c5:5d:5a:37:c0:69:f9:3b:4b:52:84:ab:0c:33:e8: 4e:60:a7:9a:54:4c:1d:3c:50:ea:01:5b:02:d8:0f: 91:e4:40:b4:4b:80:83:de:ae:cb:97:56:cc:10:7b: d2:b8:9e:6c:c5:b3:34:01:7c:88:7e:e4:b2:c4:4d: 9c:9b:41:b5:ae:4f:5e:79:78:00:f5:2b:a8:00:f4: 0b:9d:52:a4:2c:c1:0b:b2:45:22:26:91:33:5f:46: f1:05:a0:2e:7a:ca:19:d9:ae:98:ac:19:c2:ce:43: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C4:DC:32:6A:59:2A:03:BD:DF:85:89:84:CA:89:01:7C:04:19:07 X509v3 Authority Key Identifier: keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:00:40:e8:03:2a:5c:e3:7a:88:95:07:8a:2d:76:f7:b4:fc: 99:2d:1f:1b:36:5e:85:3e:e0:99:3b:e9:57:45:a7:6e:d3:47: 54:81:86:32:91:e6:dc:eb:49:fc:be:2a:5a:ff:1f:c3:7f:f7: d6:3c:e0:56:2c:3d:c6:b3:e4:3d:0b:53:61:08:9f:03:a6:40: bc:d7:04:cb:09:ed:3e:50:bb:ae:ec:e5:0b:b3:e4:50:98:9f: 2e:2c:68:a7:bf:7a:44:8f:2b:d3:c4:d6:b8:3d:f8:c3:01:a6: f2:26:54:8f:35:a0:aa:bd:12:56:1c:a2:3f:6a:0e:df:d9:fc: 60:83:34:71:d9:f8:4d:71:e6:10:8c:31:36:7d:20:eb:24:67: ce:fc:ec:35:81:8c:b4:5d:53:f2:44:ba:47:bd:16:15:e4:a8: da:ed:21:3c:8b:19:c0:52:6b:43:d8:a4:72:b1:a6:ca:5e:0c: e8:7c:e8:72:21:76:00:09:c0:b0:d3:32:bf:3f:32:77:a9:da: c6:0d:50:93:44:5e:76:a0:30:23:d1:05:d2:b8:ba:8f:4b:13: 91:9d:8c:1a:0a:f0:9d:67:f0:ab:86:95:ee:be:88:b2:a9:79: 74:81:ca:d3:30:a2:bf:7e:89:b3:16:28:67:74:23:e9:f1:fc: 9e:19:99:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzNBQTExMC8GA1UEBRMoRjdENkRFNkU3QjJBQzdCRDQ1MEM3NzE1ODYzRTk3OTk1 NTM4M0U0RTAeFw0yNTA3MDUwNjE4NDZaFw0yNTA3MTIwNjE4NDZaMBgxFjAUBgNV BAMTDTY4NjhjM2M2LTAxYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC07SAFrqNzmPiAiXONluVfIeABfTrP5i2Pdc/OG0LnsFNIR+o9JHGeZ0ZKLtQO F0teHqSDgQwieObA5Ooooc8AkOdfZn6XKEIPBCqL5iQpmCx5wtjb4Wf5grICCI1p RyEdbWOU85t1Osr/T3AGLuzYH2nuecGIkv9gwBhy4WzFDtoBxCZwxkjFMcMM0Jgb CbnY9jT4BMVdWjfAafk7S1KEqwwz6E5gp5pUTB08UOoBWwLYD5HkQLRLgIPersuX VswQe9K4nmzFszQBfIh+5LLETZybQbWuT155eAD1K6gA9AudUqQswQuyRSImkTNf RvEFoC56yhnZrpisGcLOQ15vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMcTcMmpZ KgO934WJhMqJAXwEGQcwHwYDVR0jBBgwFoAU99bebnsqx71FDHcVhj6XmVU4Pk4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzUyRDlBRDQ2NTk2 NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBr NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTliZWJuc3F4NzFGREhjVmhqNlhtVlU0UGs0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz M0FBLzUyRDlBRDQ2NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcx RkRIY1ZoajZYbVZVNFBrNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACQAQOgDKlzjeoiVB4otdve0/JktHxs2XoU+4Jk76VdFp27TR1SBhjKR 5tzrSfy+Klr/H8N/99Y84FYsPcaz5D0LU2EInwOmQLzXBMsJ7T5Qu67s5Quz5FCY ny4saKe/ekSPK9PE1rg9+MMBpvImVI81oKq9ElYcoj9qDt/Z/GCDNHHZ+E1x5hCM MTZ9IOskZ8787DWBjLRdU/JEuke9FhXkqNrtITyLGcBSa0PYpHKxpspeDOh86HIh dgAJwLDTMr8/Mnep2sYNUJNEXnagMCPRBdK4uo9LE5GdjBoK8J1n8KuGle6+iLKp eXSBytMwor9+ibMWKGd0I+nx/J4ZmQc= -----END CERTIFICATE-----Generated at Mon Jul 7 08:55:36 2025 by rpki-client