$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: GhF4lENQbgr2+fbJoi3gIO8wZFhb9eExoXIRzrTEE9c= Subject key identifier: 56:EE:C5:9C:40:FA:B4:72:90:34:EB:DD:AB:E4:9A:C4:D5:A2:ED:46 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 01E3 Signing time: Tue 17 Jun 2025 01:50:15 +0000 Manifest this update: Tue 17 Jun 2025 01:50:15 +0000 Manifest next update: Tue 24 Jun 2025 01:50:15 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: QmxOAMuWJR0MaN37ZJlIhR9ZIhpS8XXft2Qx9r9cy/w=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: zXr6NOZcCRqEcE9Pgk6RR5qOsx1G0XavR+U4MW0E+MQ=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: DV9Gdp3YkASaDfgSFkYwRK6BKaUQSr3ziC7H6K89rT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Jun 17 01:50:15 2025 GMT Not After : Jun 24 01:50:15 2025 GMT Subject: CN=6850c9d7-eeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:94:c1:c9:ea:f6:3f:1b:09:13:a2:1b:3f: 91:4d:e4:02:00:3e:5f:a5:2f:14:54:86:12:fa:41: 99:fd:02:5b:24:b4:5e:03:d8:02:d9:11:17:12:82: 40:5b:20:03:ae:a1:7a:13:d3:8d:06:ed:5a:6f:80: 68:59:1a:5a:69:5d:b3:2d:71:98:ea:4a:0b:37:70: a2:8b:60:c0:3b:26:c4:3a:ff:b0:be:af:40:ce:78: 32:7f:74:99:f2:35:bb:0b:16:d3:95:4d:ff:04:f3: d3:29:15:b1:22:af:af:f5:ea:0d:18:5d:48:5c:1e: 97:95:aa:09:5d:b2:47:a1:0d:bd:4d:bb:c1:00:93: 48:70:e7:e5:de:91:19:f8:7a:61:39:8c:f7:1d:03: b8:0c:28:7f:81:15:cf:12:67:e9:85:48:d5:9f:42: ad:bf:ed:62:3f:b9:c7:8a:6e:8d:a2:58:28:69:d2: de:d1:ca:67:0b:e3:29:ca:55:56:26:41:c3:bf:21: c0:f9:63:e7:f2:79:d6:a7:3f:51:6b:74:17:50:ba: 0d:c4:cd:1f:70:e9:38:a7:18:c3:ae:41:70:28:88: 5d:a7:4c:9c:d0:d2:21:45:14:c1:5a:1d:c4:f9:b6: 8f:89:2d:c3:5a:f9:97:e2:e5:77:8b:c4:ce:d7:fd: 8e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EE:C5:9C:40:FA:B4:72:90:34:EB:DD:AB:E4:9A:C4:D5:A2:ED:46 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:87:7d:8f:a6:c6:dd:51:25:9c:e3:30:d9:71:86:40:0f:55: 2f:a3:f6:5b:ad:20:14:84:b4:22:bc:ca:50:54:c8:be:b4:8a: 7b:96:66:79:65:fa:99:ad:55:fe:74:9e:96:ff:a6:50:2f:2d: 1b:c6:95:5b:ff:99:2c:58:b5:ef:95:ce:b6:40:41:4a:4f:1f: 6e:e9:b8:ef:9c:d5:28:0f:2e:ed:27:89:53:bc:12:e3:ba:94: 5c:66:a6:48:51:02:7a:53:b0:1e:41:c9:d5:17:57:0a:2f:01: 7a:b5:70:2c:bf:d3:af:ac:9a:98:e4:d9:37:1b:6f:ea:fe:24: d6:0e:27:9f:86:d6:dd:07:04:18:39:a7:06:d3:4d:4a:3e:ea: 0f:b1:c7:80:d3:fd:b9:40:02:a3:f9:7d:ed:89:3f:3a:8d:de: e8:1f:9e:42:73:91:97:dd:01:c3:5d:6c:68:a3:d1:43:26:bb: 58:46:65:20:fd:df:10:34:29:d9:92:46:98:32:83:7e:7b:6d: 3d:c3:19:7a:1a:48:ff:99:56:49:64:93:ff:0e:4b:17:b0:ab: 5f:63:9e:2c:dd:c2:3a:de:2f:fa:23:e2:24:e6:17:20:8f:dd: 17:b3:eb:f4:f3:c4:65:12:11:19:4b:9a:9c:3f:2b:2b:a6:6a: 04:98:52:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjUwNjE3MDE1MDE1WhcNMjUwNjI0MDE1MDE1WjAYMRYwFAYD VQQDEw02ODUwYzlkNy1lZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzICUwcnq9j8bCROiGz+RTeQCAD5fpS8UVIYS+kGZ/QJbJLReA9gC2REXEoJA WyADrqF6E9ONBu1ab4BoWRpaaV2zLXGY6koLN3Cii2DAOybEOv+wvq9Azngyf3SZ 8jW7CxbTlU3/BPPTKRWxIq+v9eoNGF1IXB6XlaoJXbJHoQ29TbvBAJNIcOfl3pEZ +HphOYz3HQO4DCh/gRXPEmfphUjVn0Ktv+1iP7nHim6NolgoadLe0cpnC+MpylVW JkHDvyHA+WPn8nnWpz9Ra3QXULoNxM0fcOk4pxjDrkFwKIhdp0yc0NIhRRTBWh3E +baPiS3DWvmX4uV3i8TO1/2OaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbuxZxA +rRykDTr3avkmsTVou1GMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChh32PpsbdUSWc4zDZcYZAD1Uvo/ZbrSAUhLQivMpQVMi+tIp7lmZ5 ZfqZrVX+dJ6W/6ZQLy0bxpVb/5ksWLXvlc62QEFKTx9u6bjvnNUoDy7tJ4lTvBLj upRcZqZIUQJ6U7AeQcnVF1cKLwF6tXAsv9OvrJqY5Nk3G2/q/iTWDiefhtbdBwQY OacG001KPuoPsceA0/25QAKj+X3tiT86jd7oH55Cc5GX3QHDXWxoo9FDJrtYRmUg /d8QNCnZkkaYMoN+e209wxl6Gkj/mVZJZJP/DksXsKtfY54s3cI63i/6I+Ik5hcg j90Xs+v088RlEhEZS5qcPysrpmoEmFKq -----END CERTIFICATE-----Generated at Wed Jun 18 16:23:18 2025 by rpki-client