$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: mvjBcn5CHe7w0TmQkXnLdA+yBSjfZcpXhxzRROJh2yM= Subject key identifier: 25:E1:DF:DE:B5:65:9C:EF:79:1C:FB:1D:8A:FE:81:34:BB:E8:29:F7 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 1342 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 132C Signing time: Mon 16 Jun 2025 17:04:28 +0000 Manifest this update: Mon 16 Jun 2025 17:04:28 +0000 Manifest next update: Mon 23 Jun 2025 17:04:28 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: 3y9/O4bLHR7T3bwXrkLSJku1NqQqQk/utywugsQqZlw=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: vee2Trog0A8Sa455ioxH/3gGtre4yzjbz6bH8ySXmH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4930 (0x1342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Jun 16 17:04:28 2025 GMT Not After : Jun 23 17:04:28 2025 GMT Subject: CN=68504e9c-714a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c6:16:12:2f:2c:d8:33:f2:85:91:71:96:14: dc:d9:fb:ea:5a:8f:3e:59:63:0a:4c:d2:61:3a:85: ff:90:91:da:b6:bb:96:80:9d:92:b6:33:b0:ce:9b: 19:ed:5c:66:a1:9b:51:54:d7:d7:6b:c4:d7:64:ca: 90:2f:c2:cf:7c:94:db:6b:96:00:94:83:ab:65:5e: 76:e7:02:01:04:25:ae:7a:e8:37:b6:32:5a:0b:eb: ca:05:89:e7:44:56:05:1c:ca:fd:1a:76:45:b3:0b: 22:55:b9:6c:d6:fb:a0:0e:5e:0d:7f:75:07:1e:97: ef:2a:ee:63:db:ce:1c:fa:d5:b7:33:7d:33:c1:d9: 4f:ac:a3:64:db:ad:85:0b:08:8a:09:b1:d3:37:27: e7:8b:0a:b5:ce:ce:b2:a6:fd:c2:eb:c7:02:31:ba: db:9e:03:4a:f1:e6:c2:fc:87:71:ab:63:e5:f7:9b: a4:d4:ed:fb:c7:9d:ba:60:a1:88:d5:fc:55:6a:4f: 27:d7:fd:df:f2:1f:82:bd:e6:43:e4:f0:57:dd:9d: 36:54:1c:2c:4a:4d:dc:b1:81:5d:07:33:39:ff:cf: 48:c2:9f:f8:5a:aa:ed:75:26:a0:9f:01:58:be:fc: 45:35:85:a0:77:e2:e6:ab:50:78:67:9d:8f:e1:bb: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E1:DF:DE:B5:65:9C:EF:79:1C:FB:1D:8A:FE:81:34:BB:E8:29:F7 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d1:6b:5a:fb:c9:a8:9d:e2:69:e3:3a:8e:c8:ab:72:56:dd: 73:2e:2d:38:b5:c2:0c:94:b8:d1:b9:4c:2a:74:db:2f:53:d8: 51:d5:f3:1d:45:0b:ce:09:14:b1:c0:a5:94:ea:c1:7e:58:91: 39:22:98:cf:88:12:26:ac:cc:d7:41:08:cc:81:d8:c8:77:66: 2d:ff:da:bc:1d:5a:fd:2c:8c:17:72:2a:80:0f:db:0c:6c:b4: 00:75:a3:0b:36:5c:44:27:ea:a7:53:44:b5:9a:18:06:38:9e: 39:f9:2a:33:95:17:70:c2:d3:97:d1:6b:e2:2b:22:27:e7:74: 27:46:47:7a:d4:2a:e0:e6:8c:22:34:f8:6a:a8:f4:f4:0f:07: af:8f:86:b0:0a:9a:f2:93:18:ae:74:08:e9:0c:07:93:5c:f0: d8:4e:3f:60:11:88:06:5a:8e:fb:67:c5:05:44:b8:b9:f1:8b: f1:08:08:93:3e:6c:a9:ac:f8:42:6f:50:62:f9:4c:82:9e:ef: 9d:81:70:74:98:8c:f9:42:d0:26:3b:50:be:1a:69:89:de:28: 64:44:8d:25:3d:d7:0b:bf:97:01:4e:33:3a:80:cc:af:b7:db: ce:3f:a7:ba:4b:11:ff:01:f6:0c:e2:dc:fa:37:99:f0:f4:d1: 34:fa:a4:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjUwNjE2MTcwNDI4WhcNMjUwNjIzMTcwNDI4WjAYMRYwFAYD VQQDEw02ODUwNGU5Yy03MTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7sYWEi8s2DPyhZFxlhTc2fvqWo8+WWMKTNJhOoX/kJHatruWgJ2StjOwzpsZ 7VxmoZtRVNfXa8TXZMqQL8LPfJTba5YAlIOrZV525wIBBCWueug3tjJaC+vKBYnn RFYFHMr9GnZFswsiVbls1vugDl4Nf3UHHpfvKu5j284c+tW3M30zwdlPrKNk262F CwiKCbHTNyfniwq1zs6ypv3C68cCMbrbngNK8ebC/Idxq2Pl95uk1O37x526YKGI 1fxVak8n1/3f8h+CveZD5PBX3Z02VBwsSk3csYFdBzM5/89Iwp/4WqrtdSagnwFY vvxFNYWgd+Lmq1B4Z52P4buy9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXh3961 ZZzveRz7HYr+gTS76Cn3MB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB0Wta+8moneJp4zqOyKtyVt1zLi04tcIMlLjRuUwqdNsvU9hR1fMd RQvOCRSxwKWU6sF+WJE5IpjPiBImrMzXQQjMgdjId2Yt/9q8HVr9LIwXciqAD9sM bLQAdaMLNlxEJ+qnU0S1mhgGOJ45+SozlRdwwtOX0WviKyIn53QnRkd61Crg5owi NPhqqPT0Dwevj4awCprykxiudAjpDAeTXPDYTj9gEYgGWo77Z8UFRLi58YvxCAiT PmyprPhCb1Bi+UyCnu+dgXB0mIz5QtAmO1C+GmmJ3ihkRI0lPdcLv5cBTjM6gMyv t9vOP6e6SxH/AfYM4tz6N5nw9NE0+qSc -----END CERTIFICATE-----Generated at Wed Jun 18 08:42:10 2025 by rpki-client