$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft File: -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json) Hash identifier: FwsqAYPG9051H6CuLHiMJyf1GsuwfmN77YfRaEQlrV0= Subject key identifier: 44:6B:7D:5D:46:FA:31:49:A8:8E:21:6C:50:C1:F0:23:30:97:34:CB Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE Certificate issuer: /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Certificate serial: 032F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft Manifest number: 032B Signing time: Fri 13 Jun 2025 00:39:20 +0000 Manifest this update: Fri 13 Jun 2025 00:39:20 +0000 Manifest next update: Fri 20 Jun 2025 00:39:20 +0000 Files and hashes: 1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: EYtpdCIuGhrgtKcoAT3i7MvsVjm2IyzNvFV/BUte2IQ=) 2: 3E62F2ECC9EA11ECB6295B34C4F9AE02.roa (hash: mfXzwKGY7gUqiLkJW1SqazxLmJ2CAU7Yff9kCtQmKuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD056, serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Validity Not Before: Jun 13 00:39:20 2025 GMT Not After : Jun 20 00:39:20 2025 GMT Subject: CN=684b7338-7177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fb:93:41:d2:df:36:b4:fe:3a:26:8c:77:d5: f5:af:9a:99:28:6b:d3:f7:a4:6d:b4:38:41:3e:17: b3:fd:1f:d8:49:9f:f8:de:63:0b:5d:d6:7e:bd:e1: 8f:b1:45:d7:bd:8f:a9:93:ce:37:3f:63:a0:9d:10: f8:af:f6:21:67:9d:15:9c:98:09:7d:9b:35:1f:d1: 1e:1f:14:f4:87:f5:fb:e5:f3:82:90:18:ae:d8:19: e9:a8:ca:af:35:82:17:77:22:c9:52:20:59:05:1b: 99:9f:7e:f3:5e:b2:3d:0d:77:1d:23:8a:77:ec:13: 3f:a8:75:48:c7:a9:03:1b:15:5b:5b:da:ba:dc:61: e5:75:da:b7:ee:33:8a:84:20:8a:82:58:66:36:10: 22:2f:1e:d0:09:0a:c1:a3:a0:6d:ea:ed:1f:c1:90: 7d:dc:04:a6:c4:a1:5f:ae:19:19:f8:33:b9:30:e2: e1:06:11:fe:b0:e4:65:38:14:69:5a:0b:c3:bd:b6: 2a:a0:17:86:d7:36:47:01:d5:2a:ac:9b:ef:67:a9: 24:93:0a:94:14:6c:c5:2d:66:ff:1d:7b:4b:98:d1: 84:13:be:c6:d7:2d:59:77:b7:c5:f3:0d:03:6a:95: 55:52:9e:56:c5:e5:53:35:26:3f:b2:7c:65:52:a6: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6B:7D:5D:46:FA:31:49:A8:8E:21:6C:50:C1:F0:23:30:97:34:CB X509v3 Authority Key Identifier: keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:40:fb:f2:94:61:1e:b2:ac:9e:e8:9f:6d:e4:26:ea:e2:a1: 02:7e:92:76:1d:c3:a9:2c:ce:0f:51:df:fe:dc:a2:d0:94:76: a1:67:86:d5:fd:53:12:3e:57:2b:87:67:ec:a1:68:d0:b1:68: d4:ed:bc:85:2d:1a:7a:19:f1:ea:4d:c1:a4:0f:b9:1f:81:41: ba:e8:98:65:97:78:33:38:60:a3:cd:68:4c:70:9c:df:86:c2: 3e:ca:60:19:5e:44:d3:3c:b3:fa:1c:62:ea:ca:04:49:71:17: a4:9c:01:86:d8:8f:2d:1c:3d:7a:f0:21:ec:05:b2:d7:a9:db: 02:65:6a:a7:63:a3:90:98:13:eb:67:42:dd:8e:89:e8:43:06: 42:fb:b3:1f:67:f1:4b:40:5a:bc:75:62:20:09:7b:cc:ac:39: 1e:55:9a:d3:64:fe:8e:8f:2d:32:9a:5e:b4:82:c6:15:f1:1d: 87:e2:ba:80:ae:a4:33:34:22:2f:aa:cb:65:6f:5a:54:b8:90: 3b:9f:d7:48:a3:e2:ed:0c:72:0f:27:03:76:7b:76:81:3b:e0: ec:9b:bd:8d:57:39:66:39:82:01:ba:9c:ae:17:7d:aa:78:d1: 7e:95:1e:b8:2e:a7:82:c4:71:34:ff:81:27:3b:25:d2:87:a9: ad:8a:89:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwNTYxMTAvBgNVBAUTKEZBNjdENTMwQTg3MDBBQThFQjdENEY2Q0JFOTY0N0JF NTM3RjVGQ0UwHhcNMjUwNjEzMDAzOTIwWhcNMjUwNjIwMDAzOTIwWjAYMRYwFAYD VQQDEw02ODRiNzMzOC03MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvuTQdLfNrT+OiaMd9X1r5qZKGvT96RttDhBPhez/R/YSZ/43mMLXdZ+veGP sUXXvY+pk843P2OgnRD4r/YhZ50VnJgJfZs1H9EeHxT0h/X75fOCkBiu2BnpqMqv NYIXdyLJUiBZBRuZn37zXrI9DXcdI4p37BM/qHVIx6kDGxVbW9q63GHlddq37jOK hCCKglhmNhAiLx7QCQrBo6Bt6u0fwZB93ASmxKFfrhkZ+DO5MOLhBhH+sORlOBRp WgvDvbYqoBeG1zZHAdUqrJvvZ6kkkwqUFGzFLWb/HXtLmNGEE77G1y1Zd7fF8w0D apVVUp5WxeVTNSY/snxlUqYc5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERrfV1G +jFJqI4hbFDB8CMwlzTLMB8GA1UdIwQYMBaAFPpn1TCocAqo631PbL6WR75Tf1/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA1Ni9ENzAyNjRBQUM5 RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0NxanJmVTlzdnBaSHZsTl9Y ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1tZlZNS2h3Q3FqcmZVOXN2cFpIdmxOX1g4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA1Ni9ENzAyNjRBQUM5RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0Nx anJmVTlzdnBaSHZsTl9YODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfQPvylGEesqye6J9t5Cbq4qECfpJ2HcOpLM4PUd/+3KLQlHahZ4bV /VMSPlcrh2fsoWjQsWjU7byFLRp6GfHqTcGkD7kfgUG66Jhll3gzOGCjzWhMcJzf hsI+ymAZXkTTPLP6HGLqygRJcReknAGG2I8tHD168CHsBbLXqdsCZWqnY6OQmBPr Z0LdjonoQwZC+7MfZ/FLQFq8dWIgCXvMrDkeVZrTZP6Ojy0yml60gsYV8R2H4rqA rqQzNCIvqstlb1pUuJA7n9dIo+LtDHIPJwN2e3aBO+Dsm72NVzlmOYIBupyuF32q eNF+lR64LqeCxHE0/4EnOyXSh6mtiolh -----END CERTIFICATE-----Generated at Sat Jun 14 19:06:10 2025 by rpki-client