$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json) Hash identifier: TMK9KfcIF0MZSAwUHtG8WuhQJ7wE4g+ZN3YjUdV931Q= Subject key identifier: 74:90:21:DE:87:C2:04:27:3A:94:78:72:DB:63:FA:6B:63:A8:92:0D Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft Manifest number: 0192 Signing time: Tue 05 Aug 2025 03:57:04 +0000 Manifest this update: Tue 05 Aug 2025 03:57:03 +0000 Manifest next update: Tue 12 Aug 2025 03:57:03 +0000 Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: MpURm8QbK8fip97rX0GV4l2xGpa7uEMXKE2HxbtmDpE=) 2: 87695D32591811EE973B1058C4F9AE02.roa (hash: t+UtlSfQB7uB9LxMHNDwpYNTZSeeRrSKvGFeOr/lo+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Validity Not Before: Aug 5 03:57:03 2025 GMT Not After : Aug 12 03:57:03 2025 GMT Subject: CN=6891810f-243a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a8:da:af:e8:30:10:17:8b:e3:c8:0e:92:2a: be:1e:c1:b4:b4:3a:7a:7c:26:fe:6e:dd:ef:cd:09: 3a:bb:4f:e3:3c:3e:13:97:3b:cc:c4:9c:eb:84:b6: ea:89:e0:22:b0:af:2e:4f:fc:30:99:74:9a:a5:11: 47:75:fc:6a:1b:5a:8f:aa:62:f6:80:0c:cf:15:f6: 38:3c:9d:be:b1:92:52:1d:4e:53:14:76:e9:7f:f6: e4:12:93:96:23:06:52:1c:db:5e:6e:2b:9b:0a:9a: 80:1f:00:e4:4c:eb:00:e0:6a:83:d4:1f:6a:36:a7: f9:bc:b9:84:21:c1:8b:e6:2d:b5:89:a1:30:5f:10: a9:6f:37:2c:d9:34:11:2a:20:cd:27:9f:10:b6:6e: a1:71:cc:d9:98:af:6d:2e:99:08:50:49:bc:c2:d9: 91:de:28:11:28:0a:55:93:6d:27:27:d2:8c:dc:4c: 71:f2:97:80:ba:47:d1:64:aa:43:72:e3:19:c9:84: 3e:bc:d8:ed:a4:22:9d:3f:6e:dd:76:44:03:d2:53: 0a:a6:f2:5b:70:bb:06:7f:93:0e:ad:3e:21:0d:fc: 2b:84:12:4e:03:0c:17:9b:d1:9e:e4:95:94:d2:28: 49:c8:08:15:8f:c2:48:87:5d:4e:61:b9:05:00:4e: 1e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:90:21:DE:87:C2:04:27:3A:94:78:72:DB:63:FA:6B:63:A8:92:0D X509v3 Authority Key Identifier: keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e7:14:61:fa:01:52:1e:3b:74:ef:66:9f:4c:35:a7:d6:33: 06:20:85:f8:77:31:b7:0d:41:b3:3a:8f:36:cb:0a:92:15:29: d7:d9:9e:31:92:0d:69:42:9d:9f:01:76:f7:14:ac:5f:ca:4f: 95:63:ce:a7:2d:6e:39:98:51:23:89:ce:0d:97:81:89:52:21: 09:44:85:47:8c:45:b9:cd:46:f0:5a:9c:86:5e:98:5b:d9:1f: 13:c6:30:a7:15:e8:b0:56:d7:f3:35:3a:e0:9f:ea:56:5f:cd: 38:26:b6:02:99:53:1d:8d:73:e7:49:35:99:bc:24:47:49:c7: 8b:a6:65:75:4f:92:fb:13:cb:2b:ba:a3:7a:47:59:61:db:9e: 26:c5:23:4a:64:60:e4:65:17:de:ea:1c:ee:b8:76:c3:55:e2: 87:e4:02:10:7d:5f:81:41:ec:48:42:8b:49:3e:6c:ba:03:39: 64:db:7b:5c:0e:09:0d:50:94:bc:2d:8b:9c:3e:ee:7e:88:cd: 47:92:f2:ff:c6:a1:94:5c:6e:5d:1e:8d:e5:71:96:24:c1:07: 37:32:48:6b:6c:22:4e:da:bf:65:08:d4:b8:4b:1d:ec:ec:43: b2:ba:8b:11:98:78:c2:8c:1b:48:fe:fc:db:c7:ee:27:28:79: af:db:ea:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB RjM2ODMxQUIwHhcNMjUwODA1MDM1NzAzWhcNMjUwODEyMDM1NzAzWjAYMRYwFAYD VQQDEw02ODkxODEwZi0yNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKjar+gwEBeL48gOkiq+HsG0tDp6fCb+bt3vzQk6u0/jPD4TlzvMxJzrhLbq ieAisK8uT/wwmXSapRFHdfxqG1qPqmL2gAzPFfY4PJ2+sZJSHU5TFHbpf/bkEpOW IwZSHNtebiubCpqAHwDkTOsA4GqD1B9qNqf5vLmEIcGL5i21iaEwXxCpbzcs2TQR KiDNJ58Qtm6hcczZmK9tLpkIUEm8wtmR3igRKApVk20nJ9KM3Exx8peAukfRZKpD cuMZyYQ+vNjtpCKdP27ddkQD0lMKpvJbcLsGf5MOrT4hDfwrhBJOAwwXm9Ge5JWU 0ihJyAgVj8JIh11OYbkFAE4eRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSQId6H wgQnOpR4cttj+mtjqJINMB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0 OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr dFc5Q3owYlo4U092Tm9NYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN5xRh+gFSHjt072afTDWn1jMGIIX4dzG3DUGzOo82ywqSFSnX2Z4x kg1pQp2fAXb3FKxfyk+VY86nLW45mFEjic4Nl4GJUiEJRIVHjEW5zUbwWpyGXphb 2R8TxjCnFeiwVtfzNTrgn+pWX804JrYCmVMdjXPnSTWZvCRHSceLpmV1T5L7E8sr uqN6R1lh254mxSNKZGDkZRfe6hzuuHbDVeKH5AIQfV+BQexIQotJPmy6Azlk23tc DgkNUJS8LYucPu5+iM1HkvL/xqGUXG5dHo3lcZYkwQc3MkhrbCJO2r9lCNS4Sx3s 7EOyuosRmHjCjBtI/vzbx+4nKHmv2+pt -----END CERTIFICATE-----Generated at Wed Aug 6 05:26:36 2025 by rpki-client