$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft File: n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json) Hash identifier: TNV8xyu/wm7V0yOlxPFsg6TsmfS8Vyw3P7Afg3IPt/A= Subject key identifier: 14:BE:92:63:B5:4F:D3:6D:75:24:1D:AB:A2:6E:E0:79:35:C9:74:D2 Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8 Certificate issuer: /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft Manifest number: 0112 Signing time: Thu 19 Jun 2025 04:17:01 +0000 Manifest this update: Thu 19 Jun 2025 04:17:01 +0000 Manifest next update: Thu 26 Jun 2025 04:17:01 +0000 Files and hashes: 1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: C+fP8b4tEhRbQFVuW8A6NFiuedRaovshrp+B+VqLsr8=) 2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8 Validity Not Before: Jun 19 04:17:01 2025 GMT Not After : Jun 26 04:17:01 2025 GMT Subject: CN=68538f3d-bddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:40:cf:63:73:6c:6a:8e:da:8c:76:22:8f:9f: ce:1f:62:83:38:f0:86:57:55:25:07:81:bc:8c:85: ee:5c:ed:dc:96:7c:ec:0a:f8:5f:9d:e3:99:19:b1: b7:a7:39:38:50:25:7b:dc:26:8c:34:c5:5a:5c:dd: 40:92:08:f1:44:3e:9c:a2:cd:12:56:2e:b3:58:e5: 13:8e:8c:d4:3b:36:2e:dc:eb:27:d2:0d:c6:d1:51: 7a:6a:5c:d8:e4:35:53:bb:1b:f6:c1:d8:88:ec:37: 4e:e2:6e:cf:34:c8:bf:7e:8e:39:d1:46:4b:1e:fa: e5:f1:f9:10:d9:28:b4:37:17:4e:47:ae:37:21:9a: 46:64:53:4f:99:82:7e:a5:b2:5c:05:01:e9:35:2c: 1d:2f:f6:7c:6b:65:73:95:cf:76:fa:60:5f:ef:2d: d4:f4:60:e4:6b:40:9f:4d:c7:1d:5a:06:f0:71:0b: 5e:cd:39:22:93:4d:ee:1d:f1:59:e3:5d:b5:dc:50: 6f:41:be:34:0f:ea:3e:17:78:26:9e:b3:bd:de:7c: 37:18:3c:21:4b:6b:7b:b7:6e:7d:27:e6:ee:54:e0: 01:98:40:78:0d:48:ea:3a:ae:b7:64:93:8d:e6:75: 48:9b:a4:f8:d3:46:11:c3:85:b8:67:26:ae:92:cb: d5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BE:92:63:B5:4F:D3:6D:75:24:1D:AB:A2:6E:E0:79:35:C9:74:D2 X509v3 Authority Key Identifier: keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:52:fe:63:af:72:07:27:62:f6:db:4d:0c:ac:cd:8c:b3:b6: 81:8d:2b:7f:0d:f3:81:4e:8c:58:7c:08:d7:46:bd:94:12:fd: e7:e2:49:1d:1c:e5:cd:43:51:7e:0f:a0:1d:23:b0:c5:f5:f8: dd:95:a1:6d:6c:be:18:1a:83:58:66:58:00:06:be:c8:d3:ff: ad:c9:26:dd:b8:74:c4:41:2d:29:5d:7b:47:7c:ad:27:6b:4b: 89:c6:aa:2b:b9:f0:6d:ed:01:13:5d:d6:48:8c:bb:8d:b2:42: ef:78:50:5c:fa:23:18:65:1f:90:2b:c6:2e:b2:18:57:fa:a3: 41:bf:fe:e7:04:7a:88:72:ea:49:a0:4b:e4:9c:36:9f:e6:d2: 3e:22:92:88:85:74:99:49:55:f3:b2:ab:16:58:92:f4:50:27: 70:53:c9:e9:28:e0:7c:fa:3d:3d:d7:87:e6:77:02:20:27:b6: 79:da:ed:45:8d:ea:a3:14:d1:d8:9a:ac:09:cb:53:db:9d:ad: fa:20:5e:22:c9:3d:3a:e0:00:4f:44:87:6f:4f:0e:1e:78:34: af:ee:ac:f1:bc:61:29:90:3b:d9:05:39:8e:c6:1a:f9:3a:4d: 86:3d:0a:20:78:5a:c9:0e:2d:1d:d5:48:7c:39:cf:7d:8c:d8: ad:11:32:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDlGQjc0MUI3Mjk4MDNDNkI0MzI5QkMzQjQwRTc2RTUy QUJEOEI5RjgwHhcNMjUwNjE5MDQxNzAxWhcNMjUwNjI2MDQxNzAxWjAYMRYwFAYD VQQDEw02ODUzOGYzZC1iZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0DPY3Nsao7ajHYij5/OH2KDOPCGV1UlB4G8jIXuXO3clnzsCvhfneOZGbG3 pzk4UCV73CaMNMVaXN1AkgjxRD6cos0SVi6zWOUTjozUOzYu3Osn0g3G0VF6alzY 5DVTuxv2wdiI7DdO4m7PNMi/fo450UZLHvrl8fkQ2Si0NxdOR643IZpGZFNPmYJ+ pbJcBQHpNSwdL/Z8a2Vzlc92+mBf7y3U9GDka0CfTccdWgbwcQtezTkik03uHfFZ 41213FBvQb40D+o+F3gmnrO93nw3GDwhS2t7t259J+buVOABmEB4DUjqOq63ZJON 5nVIm6T400YRw4W4ZyauksvVywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBS+kmO1 T9NtdSQdq6Ju4Hk1yXTSMB8GA1UdIwQYMBaAFJ+3QbcpgDxrQym8O0DnblKr2Ln4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85NEQ1NzIzNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBHdERLYnc3UU9kdVVxdll1 ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL243ZEJ0eW1BUEd0REtidzdRT2R1VXF2WXVmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85NEQ1NzIzNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBH dERLYnc3UU9kdVVxdll1ZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXUv5jr3IHJ2L2200MrM2Ms7aBjSt/DfOBToxYfAjXRr2UEv3n4kkd HOXNQ1F+D6AdI7DF9fjdlaFtbL4YGoNYZlgABr7I0/+tySbduHTEQS0pXXtHfK0n a0uJxqorufBt7QETXdZIjLuNskLveFBc+iMYZR+QK8YushhX+qNBv/7nBHqIcupJ oEvknDaf5tI+IpKIhXSZSVXzsqsWWJL0UCdwU8npKOB8+j0914fmdwIgJ7Z52u1F jeqjFNHYmqwJy1Pbna36IF4iyT064ABPRIdvTw4eeDSv7qzxvGEpkDvZBTmOxhr5 Ok2GPQogeFrJDi0d1Uh8Oc99jNitETJI -----END CERTIFICATE-----Generated at Fri Jun 20 11:06:46 2025 by rpki-client