$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft File: S630I4efFU256siNFgtOEW9mzak.mft (raw, json) Hash identifier: 3BxHy40WX2We9ufFXRFPAi6x6beMoXAbuG+DD1Mjf2I= Subject key identifier: 9A:BE:2E:87:82:3F:51:42:32:E9:4A:5D:05:49:41:58:39:6F:94:51 Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft Manifest number: 01E9 Signing time: Thu 07 Aug 2025 03:02:23 +0000 Manifest this update: Thu 07 Aug 2025 03:02:23 +0000 Manifest next update: Thu 14 Aug 2025 03:02:23 +0000 Files and hashes: 1: S630I4efFU256siNFgtOEW9mzak.crl (hash: WdZkUoZV10AKdNNf/3Ovkgu2forr6L7zHz0wqGFEYsI=) 2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: aGKXoopb0arb0ntbaAeX9hZshlxruOuTWjBQoFMqiCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Validity Not Before: Aug 7 03:02:23 2025 GMT Not After : Aug 14 03:02:23 2025 GMT Subject: CN=6894173f-5e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:93:ad:40:0b:74:c9:89:1f:99:c2:db:12: ea:76:df:52:6e:30:f2:f8:bf:7f:eb:25:fc:c8:f7: c2:04:92:99:aa:82:0a:f4:b6:62:66:37:9e:4b:2c: 33:1a:9d:cd:1b:79:82:60:97:6d:19:cc:1b:e3:2c: c7:66:08:3a:31:64:f5:42:f4:9a:df:ed:35:df:d1: ef:de:f4:da:9e:60:1d:a9:2f:1a:15:c9:35:40:61: 0b:7d:3c:72:8d:22:db:7b:fa:9f:09:81:82:c2:18: 9d:04:52:9a:a4:1d:31:45:b3:1c:a4:2d:ba:48:92: e9:0d:4c:95:26:5b:94:84:f0:75:4c:1a:a9:7d:9c: 28:ab:79:72:d7:50:ac:ad:66:ff:52:69:a4:2f:11: b0:52:34:6e:38:5c:34:53:37:f4:ab:05:ce:44:0b: a5:c2:fe:53:2c:0f:bf:10:c8:bc:4d:b2:3d:df:a0: 9a:1b:73:a1:4b:48:ac:3b:dd:c1:2f:96:21:59:4c: 55:9f:01:39:46:74:0c:9d:af:6b:51:2f:10:4e:b5: 1b:67:e1:d2:0f:67:92:84:32:01:d0:4b:a0:ed:6f: 2f:0d:6c:84:b4:76:07:e6:94:f1:02:6b:9e:86:c4: 09:ae:8b:bf:d9:58:1f:3e:05:89:d5:74:8b:5f:91: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BE:2E:87:82:3F:51:42:32:E9:4A:5D:05:49:41:58:39:6F:94:51 X509v3 Authority Key Identifier: keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:0a:ff:34:0b:b0:13:92:b3:14:bb:86:9b:22:02:90:8d:f2: 93:33:03:89:c3:b4:a9:f4:33:7c:73:16:f2:8f:e4:3e:30:25: a0:79:93:02:c8:60:d5:32:88:2c:d7:7b:ae:db:55:84:b6:2a: 01:af:0d:e8:23:bb:45:9e:3a:a1:af:7e:09:25:85:74:5d:58: 5b:7a:80:92:44:10:4b:12:af:40:bc:a7:f1:be:e8:4c:d6:77: 90:bf:90:65:57:0c:3c:f9:f3:45:07:d7:65:41:5e:79:6a:a9: 35:e3:79:5c:49:ed:b4:e4:ed:a9:42:58:c0:ba:23:af:40:95: a2:8e:5c:45:f6:61:c9:9d:3a:ed:ff:53:c6:c7:c3:74:26:ff: 8f:29:c4:24:f2:51:6b:72:16:84:43:b2:09:dd:ce:4b:9a:c1: 4e:47:21:a9:48:39:50:d3:c6:95:d9:70:08:0f:ed:99:03:6a: 14:83:c0:d9:8c:96:1e:4c:6e:96:7f:9e:b8:8f:4b:78:9c:65: f6:4c:03:ba:20:ec:f8:b7:01:41:f7:38:02:ed:ea:76:1f:13: a5:89:89:2a:b7:2d:52:f2:ca:32:e1:68:24:5a:85:87:81:89: 95:83:e3:27:01:56:59:19:d4:c6:d2:42:07:ee:66:58:86:22: 1c:0d:97:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwRTUxMTAvBgNVBAUTKDRCQURGNDIzODc5RjE1NERCOUVBQzg4RDE2MEI0RTEx NkY2NkNEQTkwHhcNMjUwODA3MDMwMjIzWhcNMjUwODE0MDMwMjIzWjAYMRYwFAYD VQQDEw02ODk0MTczZi01ZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUOTrUALdMmJH5nC2xLqdt9SbjDy+L9/6yX8yPfCBJKZqoIK9LZiZjeeSywz Gp3NG3mCYJdtGcwb4yzHZgg6MWT1QvSa3+0139Hv3vTanmAdqS8aFck1QGELfTxy jSLbe/qfCYGCwhidBFKapB0xRbMcpC26SJLpDUyVJluUhPB1TBqpfZwoq3ly11Cs rWb/UmmkLxGwUjRuOFw0Uzf0qwXORAulwv5TLA+/EMi8TbI936CaG3OhS0isO93B L5YhWUxVnwE5RnQMna9rUS8QTrUbZ+HSD2eShDIB0Eug7W8vDWyEtHYH5pTxAmue hsQJrou/2VgfPgWJ1XSLX5H5iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq+LoeC P1FCMulKXQVJQVg5b5RRMB8GA1UdIwQYMBaAFEut9COHnxVNuerIjRYLThFvZs2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzBFNS83MjkzQzExNjg2 ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZVMjU2c2lORmd0T0VXOW16 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M2MzBJNGVmRlUyNTZzaU5GZ3RPRVc5bXphay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzBFNS83MjkzQzExNjg2ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZV MjU2c2lORmd0T0VXOW16YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZCv80C7ATkrMUu4abIgKQjfKTMwOJw7Sp9DN8cxbyj+Q+MCWgeZMC yGDVMogs13uu21WEtioBrw3oI7tFnjqhr34JJYV0XVhbeoCSRBBLEq9AvKfxvuhM 1neQv5BlVww8+fNFB9dlQV55aqk143lcSe205O2pQljAuiOvQJWijlxF9mHJnTrt /1PGx8N0Jv+PKcQk8lFrchaEQ7IJ3c5LmsFORyGpSDlQ08aV2XAID+2ZA2oUg8DZ jJYeTG6Wf564j0t4nGX2TAO6IOz4twFB9zgC7ep2HxOliYkqty1S8soy4WgkWoWH gYmVg+MnAVZZGdTG0kIH7mZYhiIcDZfJ -----END CERTIFICATE-----Generated at Fri Aug 8 00:13:18 2025 by rpki-client