$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft File: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json) Hash identifier: 3pzd2veiM9Gk6SwGh5NY9EpVi2EZ6t+oh38GgGLHxc4= Subject key identifier: 37:82:9C:71:65:FD:30:3F:D9:61:41:7D:7A:83:8F:3E:6A:3A:62:6D Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft Manifest number: 0733 Signing time: Thu 12 Jun 2025 21:27:14 +0000 Manifest this update: Thu 12 Jun 2025 21:27:14 +0000 Manifest next update: Thu 19 Jun 2025 21:27:14 +0000 Files and hashes: 1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: 6znYBIR9e9p3piXjwdBH4+YR6997yrBJcOm0ufV5tNE=) 2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: qziDfsPw/gmvbvNR9GeSBAN/K4Vo5CvfMXXnhzWlgBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Validity Not Before: Jun 12 21:27:14 2025 GMT Not After : Jun 19 21:27:14 2025 GMT Subject: CN=684b4632-5c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8e:74:6e:80:1f:75:f3:da:d7:2d:a4:46:2d: 3f:59:19:bb:7b:cb:61:f4:3a:05:0b:4c:01:f1:d0: af:a5:f7:e7:ff:4e:a8:04:5d:1c:16:a0:bc:bc:97: fd:be:4d:97:1b:ac:f5:5b:0b:6c:fc:9a:35:4f:47: c1:c9:e6:e7:49:54:b2:c9:45:8e:4a:56:b3:e8:3f: e0:6a:45:a0:e2:8e:9b:d9:5e:20:78:69:11:39:01: 7c:3a:4e:4c:94:30:42:bf:b8:f4:f6:f0:88:23:c3: 5c:9a:77:6f:ab:e3:49:23:8d:dc:53:1c:ee:fc:0b: dc:d8:79:49:b0:b0:d4:b3:a7:22:82:26:fa:2c:8f: 3d:c0:70:98:bf:08:03:70:42:fa:14:59:c7:1f:a9: b0:b7:de:9a:39:ae:cd:c8:57:7b:51:96:43:e9:0d: 43:af:6e:fa:3c:7b:97:ca:e2:4d:96:fb:ae:e3:d1: b6:05:79:c3:51:bb:bb:4c:90:90:f4:22:d5:a3:ae: 7e:0c:85:31:1c:7d:9b:95:16:20:42:48:52:5d:cb: 9e:74:ab:f2:61:24:00:54:c5:25:57:22:d5:bb:7c: 57:51:4d:8b:35:1f:da:d0:02:2f:b6:bb:d3:4b:34: 7e:0d:1b:a8:f8:8c:8e:46:30:ed:e1:1b:2c:86:5a: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:82:9C:71:65:FD:30:3F:D9:61:41:7D:7A:83:8F:3E:6A:3A:62:6D X509v3 Authority Key Identifier: keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1e:20:c9:3c:05:ff:36:60:47:b2:72:05:dc:16:fd:ea:de: 25:05:d8:e4:e8:89:7b:0c:f2:92:52:51:f7:43:92:c4:9f:86: d0:b9:74:97:c0:16:67:d0:21:b4:04:ad:c4:3e:12:49:86:85: 80:7f:be:2d:a1:5c:da:dd:71:4d:99:d8:4c:99:59:aa:df:32: 23:1c:0e:d2:0e:36:12:15:6f:8c:f8:96:19:d9:29:a5:dc:c6: f1:50:39:ea:9c:3f:b1:42:48:68:dd:aa:e4:ec:45:c0:1b:3e: 23:35:4a:ed:a8:fa:7b:f9:79:ff:2e:f7:52:1e:89:17:a4:68: 96:33:3b:02:c9:82:e4:e0:82:9f:ac:ed:eb:a3:9d:4a:13:d6: 8b:b8:b0:13:ac:22:a5:b6:53:4e:63:59:6c:1b:10:60:e5:3d: cf:d7:b1:cf:3b:a1:6c:a3:90:54:4e:c2:5c:7f:06:75:bb:7f: ff:b2:c2:f1:58:8e:a9:55:be:b5:f1:6d:21:62:21:35:f9:e5: 92:67:97:c5:fd:39:ed:3b:8c:3b:78:9a:9b:50:8a:b9:8d:77: a7:49:0a:c0:ef:b7:cd:06:a1:d0:08:a8:de:c5:92:de:a0:50: 0f:fe:ab:67:4c:88:a3:22:08:15:b8:8c:c0:69:b0:57:e5:be: e8:92:21:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw NzhGMUU4ODEwHhcNMjUwNjEyMjEyNzE0WhcNMjUwNjE5MjEyNzE0WjAYMRYwFAYD VQQDEw02ODRiNDYzMi01YzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5I50boAfdfPa1y2kRi0/WRm7e8th9DoFC0wB8dCvpffn/06oBF0cFqC8vJf9 vk2XG6z1Wwts/Jo1T0fByebnSVSyyUWOSlaz6D/gakWg4o6b2V4geGkROQF8Ok5M lDBCv7j09vCII8Ncmndvq+NJI43cUxzu/Avc2HlJsLDUs6cigib6LI89wHCYvwgD cEL6FFnHH6mwt96aOa7NyFd7UZZD6Q1Dr276PHuXyuJNlvuu49G2BXnDUbu7TJCQ 9CLVo65+DIUxHH2blRYgQkhSXcuedKvyYSQAVMUlVyLVu3xXUU2LNR/a0AIvtrvT SzR+DRuo+IyORjDt4RsshlppHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeCnHFl /TA/2WFBfXqDjz5qOmJtMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My9BRkI2QkY3NjMzNDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxO VDd2eUdJVzlyMjBIang2SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaHiDJPAX/NmBHsnIF3Bb96t4lBdjk6Il7DPKSUlH3Q5LEn4bQuXSX wBZn0CG0BK3EPhJJhoWAf74toVza3XFNmdhMmVmq3zIjHA7SDjYSFW+M+JYZ2Sml 3MbxUDnqnD+xQkho3ark7EXAGz4jNUrtqPp7+Xn/LvdSHokXpGiWMzsCyYLk4IKf rO3ro51KE9aLuLATrCKltlNOY1lsGxBg5T3P17HPO6Fso5BUTsJcfwZ1u3//ssLx WI6pVb618W0hYiE1+eWSZ5fF/TntO4w7eJqbUIq5jXenSQrA77fNBqHQCKjexZLe oFAP/qtnTIijIggVuIzAabBX5b7okiEL -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:57 2025 by rpki-client