$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: vTItAFhCGsgKVc5sKfGLSeM/MB64GJ/aMs0SZME5Ves= Subject key identifier: B0:7B:49:13:5F:D1:8F:B9:4E:F5:8A:03:0C:75:60:EB:F0:D0:AB:92 Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 0299 Signing time: Sun 15 Jun 2025 01:18:10 +0000 Manifest this update: Sun 15 Jun 2025 01:18:10 +0000 Manifest next update: Sun 22 Jun 2025 01:18:10 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: sSIMsW9N+H9B4yNbZYAH1ncHjByoI+GUgp7NWuXxOuE=) 2: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: uXjCh7TkzA4xr6P8TlTEkjQ53fF7fy/5V3MP61ICuDM=) 3: CFB6C2ECB55511EFB8F19317C4F9AE02.roa (hash: E9DNWqzp2wZLkwnC6xw9jZ+NrMoV73xye7vJhI3lWVs=) 4: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: LJgcF5ukT6mBdzEM26be8zREGTvnZs0KmOcJarcZEy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Jun 15 01:18:10 2025 GMT Not After : Jun 22 01:18:10 2025 GMT Subject: CN=684e1f52-3369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:a0:28:05:db:66:b1:56:7e:23:45:2b:02: 51:2c:31:7b:e3:9d:16:1a:3b:00:88:84:7c:83:24: 27:b7:e6:e0:39:98:94:3a:33:4a:9b:1b:ea:b0:e5: 78:3f:5d:a5:eb:26:14:9a:7a:d5:3a:ad:98:f1:f2: 09:2b:fd:12:19:03:70:60:86:c6:36:c1:9b:c1:d3: 08:22:39:48:fa:59:41:45:69:d1:16:ea:3d:3d:5c: fa:a0:49:91:d2:1b:18:99:d3:52:72:d2:f9:9e:14: dc:c1:04:ca:0c:be:09:15:19:e5:c7:65:63:19:3d: e2:cb:b4:c1:62:cd:7d:5b:56:ea:99:f4:1c:96:77: 29:ab:67:93:f1:99:31:f4:8c:8c:dc:07:97:7d:b3: c6:84:0d:2b:74:73:33:9a:e0:3a:c7:11:21:9f:05: f3:ac:62:09:6a:bd:4a:87:5d:94:ad:6a:a5:c8:d9: 76:98:55:a1:77:b5:3e:84:42:3c:a1:2b:21:50:94: 50:ed:4a:73:33:6e:9b:f2:a5:52:b4:ca:2c:6d:80: f9:c4:71:5e:47:e1:16:e2:f9:87:c9:d4:a1:3f:d7: 4c:1e:6b:20:55:f7:c8:d5:c1:c1:9b:63:22:31:fc: db:eb:8c:48:4d:c7:b1:d7:37:29:31:98:58:07:5a: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7B:49:13:5F:D1:8F:B9:4E:F5:8A:03:0C:75:60:EB:F0:D0:AB:92 X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:32:ef:cb:48:b7:de:37:d7:ca:f8:1e:48:5e:d5:aa:64:dd: 18:ce:5a:30:b9:d1:92:e0:e3:e3:1d:32:ec:9d:6e:00:5c:ee: a2:51:22:15:aa:a2:a4:01:ae:91:6f:b8:58:26:14:1b:5e:96: b8:f3:d2:45:1e:5c:b1:b3:72:eb:4e:d9:a6:e7:52:c6:34:c1: ce:af:b0:a0:f9:0d:c1:b6:9a:82:d3:2a:b7:65:3d:9a:2d:09: a1:bd:85:aa:16:96:7b:bb:71:d1:1c:d0:c5:f6:7e:a1:4b:ed: ce:ff:d2:e7:70:6a:d6:cc:a8:f8:0d:9c:75:4b:2e:8e:ff:53: 78:99:25:b5:c8:e6:32:02:e5:37:21:96:a0:c4:b5:e4:57:0a: 48:1d:2b:ca:bd:68:33:13:57:8f:13:3d:52:e7:77:43:aa:f7: 4e:0a:56:17:3f:b5:29:d1:72:a0:e7:f0:33:17:36:1e:43:2a: 9e:6b:b0:f4:29:fd:91:a4:ed:27:90:a0:87:a0:90:5f:b1:d9: e2:b7:65:ac:95:6d:f0:07:9a:fd:c7:3e:33:25:f0:f6:d3:c8: 43:b1:11:11:b7:0f:3f:00:7a:27:0d:57:74:54:1a:ca:4e:36: 8c:30:97:f3:23:1a:0f:6f:16:11:c6:d6:20:e2:51:a0:e4:35: b9:7d:97:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjUwNjE1MDExODEwWhcNMjUwNjIyMDExODEwWjAYMRYwFAYD VQQDEw02ODRlMWY1Mi0zMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSqgKAXbZrFWfiNFKwJRLDF7450WGjsAiIR8gyQnt+bgOZiUOjNKmxvqsOV4 P12l6yYUmnrVOq2Y8fIJK/0SGQNwYIbGNsGbwdMIIjlI+llBRWnRFuo9PVz6oEmR 0hsYmdNSctL5nhTcwQTKDL4JFRnlx2VjGT3iy7TBYs19W1bqmfQclncpq2eT8Zkx 9IyM3AeXfbPGhA0rdHMzmuA6xxEhnwXzrGIJar1Kh12UrWqlyNl2mFWhd7U+hEI8 oSshUJRQ7UpzM26b8qVStMosbYD5xHFeR+EW4vmHydShP9dMHmsgVffI1cHBm2Mi Mfzb64xITcex1zcpMZhYB1q58wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLB7SRNf 0Y+5TvWKAwx1YOvw0KuSMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgMu/LSLfeN9fK+B5IXtWqZN0YzlowudGS4OPjHTLsnW4AXO6iUSIV qqKkAa6Rb7hYJhQbXpa489JFHlyxs3LrTtmm51LGNMHOr7Cg+Q3BtpqC0yq3ZT2a LQmhvYWqFpZ7u3HRHNDF9n6hS+3O/9LncGrWzKj4DZx1Sy6O/1N4mSW1yOYyAuU3 IZagxLXkVwpIHSvKvWgzE1ePEz1S53dDqvdOClYXP7Up0XKg5/AzFzYeQyqea7D0 Kf2RpO0nkKCHoJBfsdnit2WslW3wB5r9xz4zJfD208hDsRERtw8/AHonDVd0VBrK TjaMMJfzIxoPbxYRxtYg4lGg5DW5fZff -----END CERTIFICATE-----Generated at Sun Jun 15 08:29:31 2025 by rpki-client