$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft File: 07yEKALa0i1cMMKCZffRCL1HjnA.mft (raw, json) Hash identifier: caagtgS5WdTlNTIAcYINSxK84y8LG+5vfxt2wYpbtyQ= Subject key identifier: 04:C8:80:C2:60:30:0B:17:7A:BD:5A:95:E3:C1:92:B0:2F:BC:A6:CC Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 Certificate issuer: /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft Manifest number: FA Signing time: Thu 19 Jun 2025 04:37:27 +0000 Manifest this update: Thu 19 Jun 2025 04:37:27 +0000 Manifest next update: Thu 26 Jun 2025 04:37:27 +0000 Files and hashes: 1: 07yEKALa0i1cMMKCZffRCL1HjnA.crl (hash: 1PpYmR1HW0zL1p7FrjOm/NSVGiFQbIrGEApwoa0HbSk=) 2: 675CAE1C097B11F089FAE77FC4F9AE02.roa (hash: g8goRa5uN0098PK1vnqVTndrxAdY1S5JKnq752ZsLOQ=) 3: C63D0814097B11F0B1329480C4F9AE02.roa (hash: BxZpcifR3l7qhnt+56VpPmZ3hTQmgPYYxX/h3b9rorE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Validity Not Before: Jun 19 04:37:27 2025 GMT Not After : Jun 26 04:37:27 2025 GMT Subject: CN=68539407-8d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4e:89:9b:59:0f:6b:7c:75:d2:d6:27:68:d6: 56:a8:00:34:ed:8d:ee:bf:f5:35:9c:8e:87:0f:c0: b6:67:c8:45:9f:9c:3b:68:4d:0d:e7:d3:5d:5e:33: bc:9e:25:49:d6:c3:3a:7f:c9:8c:28:15:9b:23:2d: 77:3a:64:65:17:35:6b:08:0a:5d:34:94:b0:01:72: c9:20:74:59:2b:da:68:87:67:53:16:67:9e:32:60: 1d:a1:e7:ec:b5:13:aa:8a:e8:13:d2:5c:e3:8c:66: 37:be:eb:cd:6c:70:a4:e2:32:c4:9b:8f:66:49:6c: f2:45:c0:99:2d:bd:a0:a5:f2:52:1b:1c:fb:b2:33: bd:34:9a:85:49:3b:43:5a:86:87:75:5e:29:75:43: f3:04:26:26:64:68:59:b9:0f:c1:43:ac:d2:1f:d9: b9:13:9c:79:e8:19:c9:11:b5:23:36:2b:18:ab:82: a3:54:53:83:fd:d0:7f:10:d1:2d:00:79:b7:49:f5: 50:d3:db:75:de:a3:72:e0:01:dc:19:42:14:85:86: 67:b3:d5:31:74:8e:fa:c8:94:1f:87:22:56:39:69: 90:1e:b7:fe:61:b8:e1:4b:dc:c1:89:5f:9d:de:7f: 4a:d3:68:67:ec:89:f6:71:3c:01:27:5a:8f:88:2f: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C8:80:C2:60:30:0B:17:7A:BD:5A:95:E3:C1:92:B0:2F:BC:A6:CC X509v3 Authority Key Identifier: keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:43:a5:a3:07:b2:2f:82:62:41:1e:9c:42:4e:99:91:15:00: 24:c4:18:09:1d:32:f6:fe:d9:c1:73:d8:dc:b7:ba:ca:64:82: c6:f7:97:e0:17:77:2a:9e:9f:67:73:4a:70:b1:05:85:ed:7f: 95:3b:fb:46:57:54:91:ab:5d:fa:e0:a5:46:e7:4d:15:b2:63: 0f:07:81:76:a9:93:34:9f:1f:9d:71:54:c5:06:07:b4:c3:06: 4d:ca:45:4c:db:a0:c0:19:ee:8c:69:22:7b:89:58:b0:88:ec: b7:ed:92:7d:da:1a:39:71:fd:d2:6a:18:d0:16:6c:db:41:ee: d5:46:39:d6:fb:4b:50:86:22:75:6c:19:eb:44:1c:b5:10:d0: 72:90:63:77:8e:a8:fc:28:17:59:b4:45:0c:55:ef:4a:f5:7c: 34:7a:14:0c:cb:55:e6:95:7e:f0:9a:77:6c:d8:a7:3c:f5:c7: fe:ff:51:bb:30:32:bd:e1:40:6e:bf:6c:8d:50:c2:f4:44:ed: 25:32:09:b3:76:31:b7:2f:b2:77:58:a4:b6:41:b7:0e:c3:f2: f5:25:7c:47:ab:5c:44:45:17:0a:ed:43:04:c1:e0:ec:41:21: 8f:10:43:89:b6:7f:da:1d:16:8f:1b:94:4a:d0:f8:66:57:bd: 67:7b:51:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc1OEUxMTAvBgNVBAUTKEQzQkM4NDI4MDJEQUQyMkQ1QzMwQzI4MjY1RjdEMTA4 QkQ0NzhFNzAwHhcNMjUwNjE5MDQzNzI3WhcNMjUwNjI2MDQzNzI3WjAYMRYwFAYD VQQDEw02ODUzOTQwNy04ZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwk6Jm1kPa3x10tYnaNZWqAA07Y3uv/U1nI6HD8C2Z8hFn5w7aE0N59NdXjO8 niVJ1sM6f8mMKBWbIy13OmRlFzVrCApdNJSwAXLJIHRZK9poh2dTFmeeMmAdoefs tROqiugT0lzjjGY3vuvNbHCk4jLEm49mSWzyRcCZLb2gpfJSGxz7sjO9NJqFSTtD WoaHdV4pdUPzBCYmZGhZuQ/BQ6zSH9m5E5x56BnJEbUjNisYq4KjVFOD/dB/ENEt AHm3SfVQ09t13qNy4AHcGUIUhYZns9UxdI76yJQfhyJWOWmQHrf+YbjhS9zBiV+d 3n9K02hn7In2cTwBJ1qPiC9l7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATIgMJg MAsXer1alePBkrAvvKbMMB8GA1UdIwQYMBaAFNO8hCgC2tItXDDCgmX30Qi9R45w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9EREVDODEyNEQ1 M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBpMWNNTUtDWmZmUkNMMUhq bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA3eUVLQUxhMGkxY01NS0NaZmZSQ0wxSGpuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzU4RS9EREVDODEyNEQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBp MWNNTUtDWmZmUkNMMUhqbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeQ6WjB7IvgmJBHpxCTpmRFQAkxBgJHTL2/tnBc9jct7rKZILG95fg F3cqnp9nc0pwsQWF7X+VO/tGV1SRq1364KVG500VsmMPB4F2qZM0nx+dcVTFBge0 wwZNykVM26DAGe6MaSJ7iViwiOy37ZJ92ho5cf3SahjQFmzbQe7VRjnW+0tQhiJ1 bBnrRBy1ENBykGN3jqj8KBdZtEUMVe9K9Xw0ehQMy1XmlX7wmnds2Kc89cf+/1G7 MDK94UBuv2yNUML0RO0lMgmzdjG3L7J3WKS2QbcOw/L1JXxHq1xERRcK7UMEweDs QSGPEEOJtn/aHRaPG5RK0PhmV71ne1F1 -----END CERTIFICATE-----Generated at Thu Jun 19 07:35:22 2025 by rpki-client