$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json) Hash identifier: QLucgurBNh6HWYFnw3QzJqtbd/Jr+y1ze1rWPv0Fxj4= Subject key identifier: 1A:0C:A0:00:2B:A2:26:62:97:4E:57:68:38:90:67:F9:5F:A7:29:93 Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft Manifest number: 01B1 Signing time: Thu 19 Jun 2025 03:05:19 +0000 Manifest this update: Thu 19 Jun 2025 03:05:18 +0000 Manifest next update: Thu 26 Jun 2025 03:05:18 +0000 Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: gk9jJvBX31rwiClD2PcFXqjgfI7wxnxYAzAhxfbTtSE=) 2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: q2jyIpsgOSZMDylILKfsOrMIus5pnrAFZdrI/kJzgvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: Jun 19 03:05:18 2025 GMT Not After : Jun 26 03:05:18 2025 GMT Subject: CN=68537e6e-b584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:9d:92:cf:d1:38:df:8d:b8:3d:b8:27:38: 8b:ed:7f:1f:5a:72:fe:cc:47:1f:76:d0:dd:59:46: 9a:18:1f:3c:90:36:bd:c9:97:89:72:48:71:b0:91: 2c:f8:6f:da:96:71:22:58:09:75:90:3d:dc:73:8d: 21:5c:35:07:2f:da:02:10:dc:8c:3e:16:3a:08:ea: 4a:5a:b0:74:c2:f5:3c:33:8e:42:54:91:6a:c4:74: 80:4c:d9:2e:b3:d4:dc:eb:c3:4e:38:3d:3e:88:28: 71:73:2a:23:5a:cd:69:d5:5c:48:47:98:38:82:4b: 24:94:b5:af:bc:71:9d:df:95:cf:95:3f:d4:16:c3: 16:3d:dc:ad:e7:1f:bf:99:8b:15:68:4d:5e:7c:2f: 09:cc:32:0b:0e:3c:28:c5:70:9a:8f:fd:55:ee:65: 2e:cd:26:5f:98:b4:46:35:a8:0f:34:43:37:fc:b3: db:59:23:89:2a:83:0d:2b:c3:f4:79:67:b4:2c:09: 6e:d2:28:52:ab:cd:85:e0:3a:31:92:99:cd:17:af: f1:61:ac:1f:a5:93:1a:df:3c:dc:af:04:e4:1e:de: 5c:7c:b6:a7:da:47:e6:f1:9f:11:90:27:d1:78:42: a4:91:80:65:33:8e:01:4a:d1:5e:1f:5c:9e:a2:7e: 0d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0C:A0:00:2B:A2:26:62:97:4E:57:68:38:90:67:F9:5F:A7:29:93 X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:37:9a:15:56:bd:20:2f:e0:c6:3a:d0:16:e8:5f:c7:1b:be: 11:44:0b:85:e6:46:41:f7:73:dc:fc:87:33:af:24:ed:21:aa: c5:1c:38:dc:f8:1e:bc:b1:e2:65:d3:a0:9e:c2:31:d1:5d:b0: 73:0a:2f:ea:b6:6c:17:80:02:35:ff:21:e0:76:c3:51:dd:e3: 90:06:f3:eb:0c:42:83:d1:4a:5a:c6:96:c2:a3:91:6a:0a:77: 33:87:5f:55:75:05:85:6e:de:4e:93:2c:b2:b2:75:ee:5d:60: 1b:49:eb:b0:7b:12:54:ee:77:d5:41:07:b0:ad:df:76:ee:88: 6a:ee:da:eb:09:2d:6f:37:ba:7b:fb:55:d2:60:36:9d:24:81: 11:2f:55:07:63:8b:4a:88:6d:28:ad:32:98:5d:54:27:5f:75: f0:90:a8:13:db:17:38:be:b3:42:f0:3c:df:f6:65:4e:94:aa: 0a:a8:30:f7:14:59:a5:40:c0:d5:f7:fa:b0:57:13:c2:4f:8d: 52:af:08:da:fe:51:b3:2c:95:c6:52:21:32:cc:68:de:06:e0: a7:34:6f:3e:5b:4b:fe:1d:b5:f1:32:a5:a8:5b:91:58:7d:15: 43:65:7c:6a:76:bf:38:63:8f:dc:f5:b6:b1:b2:18:73:69:58: 47:e6:49:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0QzIxMTAvBgNVBAUTKERDMjNBNjlFQTFFRkMxQTM3OTQ5MkMxM0U5QUMxNDdD NDlGNUFEMDQwHhcNMjUwNjE5MDMwNTE4WhcNMjUwNjI2MDMwNTE4WjAYMRYwFAYD VQQDEw02ODUzN2U2ZS1iNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/mdks/RON+NuD24JziL7X8fWnL+zEcfdtDdWUaaGB88kDa9yZeJckhxsJEs +G/alnEiWAl1kD3cc40hXDUHL9oCENyMPhY6COpKWrB0wvU8M45CVJFqxHSATNku s9Tc68NOOD0+iChxcyojWs1p1VxIR5g4gksklLWvvHGd35XPlT/UFsMWPdyt5x+/ mYsVaE1efC8JzDILDjwoxXCaj/1V7mUuzSZfmLRGNagPNEM3/LPbWSOJKoMNK8P0 eWe0LAlu0ihSq82F4DoxkpnNF6/xYawfpZMa3zzcrwTkHt5cfLan2kfm8Z8RkCfR eEKkkYBlM44BStFeH1yeon4NOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoMoAAr oiZil05XaDiQZ/lfpymTMB8GA1UdIwQYMBaAFNwjpp6h78GjeUksE+msFHxJ9a0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjRDMi9CMTdFOTVENjAz NzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndhTjVTU3dUNmF3VWZFbjFy UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndh TjVTU3dUNmF3VWZFbjFyUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYN5oVVr0gL+DGOtAW6F/HG74RRAuF5kZB93Pc/IczryTtIarFHDjc +B68seJl06CewjHRXbBzCi/qtmwXgAI1/yHgdsNR3eOQBvPrDEKD0UpaxpbCo5Fq Cnczh19VdQWFbt5OkyyysnXuXWAbSeuwexJU7nfVQQewrd927ohq7trrCS1vN7p7 +1XSYDadJIERL1UHY4tKiG0orTKYXVQnX3XwkKgT2xc4vrNC8Dzf9mVOlKoKqDD3 FFmlQMDV9/qwVxPCT41Srwja/lGzLJXGUiEyzGjeBuCnNG8+W0v+HbXxMqWoW5FY fRVDZXxqdr84Y4/c9baxshhzaVhH5km/ -----END CERTIFICATE-----Generated at Thu Jun 19 21:45:42 2025 by rpki-client