$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: pr4MIrYuk1HYnWBsmCDfi4MORc2qCqfKaYxN0Q0O7kI= Subject key identifier: 22:C2:41:4C:24:3B:6C:F7:F2:EE:82:9B:5D:E9:EB:BE:95:42:32:DD Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 3497 Signing time: Wed 18 Jun 2025 14:31:50 +0000 Manifest this update: Wed 18 Jun 2025 14:31:50 +0000 Manifest next update: Wed 25 Jun 2025 14:31:50 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: L5N+eGMiKbP03PdZ7xULZxbDAp73aZUV8cxt6PvlJw0=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Jun 18 14:31:50 2025 GMT Not After : Jun 25 14:31:50 2025 GMT Subject: CN=6852cdd6-59c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:11:96:d3:4f:1a:87:64:8f:10:f7:d0:23: 58:23:b4:c7:93:09:a4:48:8a:db:95:f0:fb:fe:20: db:c1:fe:02:d3:d3:23:0d:38:de:7f:8d:ad:25:52: 46:4c:a3:4e:47:cb:c2:3e:70:34:35:cb:aa:d8:84: 6e:7a:24:10:c3:c9:6f:65:38:6d:71:6e:6c:94:d3: c2:59:60:67:8d:a9:f0:e2:5c:76:34:93:86:66:2f: aa:73:d4:28:d4:78:fc:70:ca:36:b1:17:94:0f:28: f2:1d:a7:86:51:d6:fd:19:8d:6a:95:c8:6c:a6:2b: f3:a5:37:d1:96:d4:bb:64:3f:45:f6:0f:1a:1b:51: c2:a3:5f:a8:80:88:f9:78:6e:15:3b:a4:c0:74:b2: 5d:0f:8d:d1:1a:34:a0:09:2d:87:5f:5d:fd:c9:2e: 1e:d2:8b:93:0a:38:3a:4e:4c:21:0c:ad:3d:93:86: a7:58:40:04:58:ce:3f:bc:26:3f:11:bc:85:fc:45: 42:99:b9:e7:7f:85:54:3f:3e:fd:37:a0:00:bd:cc: 31:d6:4e:3f:f9:6d:b9:67:49:1b:39:81:02:a7:39: 4a:e2:38:9f:74:8c:89:dc:05:8a:46:b7:6e:15:f2: 26:49:2e:e1:ac:6f:f2:f7:88:a8:f5:bb:d5:64:d9: 57:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C2:41:4C:24:3B:6C:F7:F2:EE:82:9B:5D:E9:EB:BE:95:42:32:DD X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:26:07:e7:d1:7a:f0:e2:81:fa:6e:6c:38:43:b6:f8:1b:2d: 0c:5e:d0:9a:64:85:1e:1e:21:57:82:8e:d6:36:4b:e2:29:6b: 52:ce:2b:08:ed:72:50:87:91:ab:7a:7e:16:82:50:ae:10:0d: bf:74:7b:48:92:08:23:ad:a7:e5:b7:b0:60:51:8d:96:96:3c: e2:b0:4c:2a:a9:0c:36:59:29:98:af:3b:0a:7e:6b:02:38:16: a4:b8:f0:a6:4c:c0:f9:f5:de:02:e8:1e:b7:42:61:b7:e0:1d: eb:40:d5:79:e6:57:4a:2b:f0:85:7b:c5:ad:f2:e7:cb:75:9c: 68:d4:35:5d:31:7d:aa:58:95:05:e3:29:00:79:46:c1:a6:dd: 95:e1:56:3c:a5:98:d9:42:91:21:7b:4b:8e:4c:5b:59:75:c0: 19:40:2c:d8:8b:38:33:43:53:00:22:fa:c9:b6:c7:c4:2e:d4: e5:d6:34:83:e5:a5:eb:1d:ee:6b:0d:6f:bd:be:df:5d:91:da: a5:64:28:3b:8b:82:25:70:0d:a8:dd:37:2c:17:f8:c7:0b:58: 0a:23:c3:97:f4:5c:2f:d5:85:76:aa:f7:27:89:2d:b6:e4:d4: c6:06:55:7e:5d:32:5c:cf:0e:e4:33:20:7c:04:ed:20:04:e7: 7d:72:0b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUwNjE4MTQzMTUwWhcNMjUwNjI1MTQzMTUwWjAYMRYwFAYD VQQDEw02ODUyY2RkNi01OWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI4RltNPGodkjxD30CNYI7THkwmkSIrblfD7/iDbwf4C09MjDTjef42tJVJG TKNOR8vCPnA0Ncuq2IRueiQQw8lvZThtcW5slNPCWWBnjanw4lx2NJOGZi+qc9Qo 1Hj8cMo2sReUDyjyHaeGUdb9GY1qlchspivzpTfRltS7ZD9F9g8aG1HCo1+ogIj5 eG4VO6TAdLJdD43RGjSgCS2HX139yS4e0ouTCjg6TkwhDK09k4anWEAEWM4/vCY/ EbyF/EVCmbnnf4VUPz79N6AAvcwx1k4/+W25Z0kbOYECpzlK4jifdIyJ3AWKRrdu FfImSS7hrG/y94io9bvVZNlXyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLCQUwk O2z38u6Cm13p676VQjLdMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Jgfn0Xrw4oH6bmw4Q7b4Gy0MXtCaZIUeHiFXgo7WNkviKWtSzisI 7XJQh5Gren4WglCuEA2/dHtIkggjraflt7BgUY2WljzisEwqqQw2WSmYrzsKfmsC OBakuPCmTMD59d4C6B63QmG34B3rQNV55ldKK/CFe8Wt8ufLdZxo1DVdMX2qWJUF 4ykAeUbBpt2V4VY8pZjZQpEhe0uOTFtZdcAZQCzYizgzQ1MAIvrJtsfELtTl1jSD 5aXrHe5rDW+9vt9dkdqlZCg7i4IlcA2o3TcsF/jHC1gKI8OX9Fwv1YV2qvcniS22 5NTGBlV+XTJczw7kMyB8BO0gBOd9cgtO -----END CERTIFICATE-----Generated at Fri Jun 20 11:23:08 2025 by rpki-client