$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: 8BbWwPjQZMFNVNA2eKXXdRf4WoSE6/SjhfCxGEPfx90= Subject key identifier: A3:3C:AC:08:DB:34:69:22:D0:40:F5:11:7D:C0:D5:CE:4A:B1:5F:F1 Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 03BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 03AB Signing time: Tue 17 Jun 2025 00:20:37 +0000 Manifest this update: Tue 17 Jun 2025 00:20:36 +0000 Manifest next update: Tue 24 Jun 2025 00:20:36 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: W68XoFfUB1L1gDptr50+6x0TGUHzwW62s0Ts86HiD8E=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: +qgf84XC7fwqmND33skSgzHGmdhqJ+EK/64iZ97m69g=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: M3aykX0j4vteJ7Aeu69jjSSSHCYOZs36DtkdcU8NJ0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Validity Not Before: Jun 17 00:20:36 2025 GMT Not After : Jun 24 00:20:36 2025 GMT Subject: CN=6850b4d5-094c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:17:e3:ab:b7:89:9b:44:49:eb:1f:ef:6c:77: d1:62:52:e7:d6:72:9b:46:60:4e:38:c8:1e:1d:f9: 11:60:c9:50:83:9d:8b:f1:26:ff:53:87:95:c6:13: db:3f:ba:90:7b:36:a0:ab:49:63:14:21:3f:b4:0e: c5:7f:1b:3d:77:38:ef:63:bc:74:81:2f:8a:29:56: 3a:d8:d4:23:e8:ff:c3:9e:65:d2:41:94:fc:98:5e: 81:d1:5f:8d:14:81:40:fb:5c:11:a4:d7:3d:63:0d: c0:27:d4:61:53:5f:73:02:0c:43:1e:59:6e:b8:38: 07:43:8b:87:07:fe:09:19:1d:09:b6:f1:51:4e:40: 84:90:c8:0c:ee:7c:b6:1a:57:17:73:5b:f7:82:d0: 18:c9:86:25:39:e2:62:29:38:48:ba:fc:ed:04:63: 75:e5:16:21:4c:d7:7c:2e:fc:72:bb:27:22:17:59: dd:a2:02:91:05:d9:53:a7:aa:60:8a:b3:39:28:07: 5b:b0:0b:5f:db:90:f3:21:7c:bb:72:a9:cd:ab:07: 71:6f:e7:e4:44:0e:79:af:5f:9c:e5:13:07:fd:8e: 03:8c:34:aa:f0:3c:bf:7e:41:d6:c3:75:2f:32:c0: eb:41:97:4b:e0:25:ee:b3:ad:2c:04:c3:98:4a:a2: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3C:AC:08:DB:34:69:22:D0:40:F5:11:7D:C0:D5:CE:4A:B1:5F:F1 X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:3a:d2:7e:ea:eb:de:e7:f6:af:f9:6d:cc:f1:74:44:c5:88: bd:3b:06:a2:ab:68:ee:6e:6c:b0:77:44:cc:6e:3b:8b:fd:4a: ca:2b:44:43:60:b0:2a:19:48:7f:cf:ab:d6:6c:26:5a:c5:da: 03:0f:bb:7c:e2:38:0a:de:b7:73:33:0c:d0:5e:32:fa:a4:c6: 00:23:26:47:95:eb:5f:ab:d6:3f:c1:af:13:ec:b4:a2:2c:ad: 8e:02:11:66:55:bc:a7:3b:2f:16:cc:71:c8:51:94:51:31:06: 09:ee:2e:ae:0c:53:17:28:b2:f2:91:22:27:9e:e2:e7:eb:0a: 2d:15:92:e4:5a:91:e6:4b:4b:f3:0b:20:0a:bc:d6:03:aa:df: 98:c6:66:d6:27:10:7f:ea:d1:f2:e1:ec:70:b1:49:19:37:f4: 86:24:01:ed:fb:c9:15:33:f5:a1:94:cb:ba:c8:ae:1a:f9:6c: 71:af:28:64:5f:7b:35:15:92:a4:fb:67:bc:05:c3:e6:dd:4a: a6:57:6c:04:14:2a:51:63:2c:42:d2:33:59:45:f5:06:52:36: 42:b8:8e:b6:6c:8b:67:85:4a:4a:dd:75:e4:1e:07:a3:78:c5: 6f:f1:d1:9d:73:19:bd:1b:d6:9e:59:09:34:88:7b:7e:ae:33: c8:16:b3:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjUwNjE3MDAyMDM2WhcNMjUwNjI0MDAyMDM2WjAYMRYwFAYD VQQDEw02ODUwYjRkNS0wOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Rfjq7eJm0RJ6x/vbHfRYlLn1nKbRmBOOMgeHfkRYMlQg52L8Sb/U4eVxhPb P7qQezagq0ljFCE/tA7Ffxs9dzjvY7x0gS+KKVY62NQj6P/DnmXSQZT8mF6B0V+N FIFA+1wRpNc9Yw3AJ9RhU19zAgxDHlluuDgHQ4uHB/4JGR0JtvFRTkCEkMgM7ny2 GlcXc1v3gtAYyYYlOeJiKThIuvztBGN15RYhTNd8LvxyuyciF1ndogKRBdlTp6pg irM5KAdbsAtf25DzIXy7cqnNqwdxb+fkRA55r1+c5RMH/Y4DjDSq8Dy/fkHWw3Uv MsDrQZdL4CXus60sBMOYSqKm3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKM8rAjb NGki0ED1EX3A1c5KsV/xMB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3OtJ+6uve5/av+W3M8XRExYi9Owaiq2jubmywd0TMbjuL/UrKK0RD YLAqGUh/z6vWbCZaxdoDD7t84jgK3rdzMwzQXjL6pMYAIyZHletfq9Y/wa8T7LSi LK2OAhFmVbynOy8WzHHIUZRRMQYJ7i6uDFMXKLLykSInnuLn6wotFZLkWpHmS0vz CyAKvNYDqt+YxmbWJxB/6tHy4exwsUkZN/SGJAHt+8kVM/WhlMu6yK4a+Wxxryhk X3s1FZKk+2e8BcPm3UqmV2wEFCpRYyxC0jNZRfUGUjZCuI62bItnhUpK3XXkHgej eMVv8dGdcxm9G9aeWQk0iHt+rjPIFrOQ -----END CERTIFICATE-----Generated at Wed Jun 18 16:43:03 2025 by rpki-client