$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft File: 148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json) Hash identifier: fd/br/DOxQq4n2nLjm8YAO/SyEyuZke6F1e68p5ryDE= Subject key identifier: 46:6D:E2:71:04:4C:D9:1B:73:78:EA:5F:88:2A:83:E8:CB:FD:3F:85 Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft Manifest number: C8 Signing time: Sun 15 Jun 2025 04:51:56 +0000 Manifest this update: Sun 15 Jun 2025 04:51:56 +0000 Manifest next update: Sun 22 Jun 2025 04:51:56 +0000 Files and hashes: 1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: btVQR4MBSMLRQalt8Qdn2JYZEFnYN11GZP4F5we4s6k=) 2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: 3q4SG/qlGVDYq4EV5cqZmr+jLzfEittQVkz7pS+z/KE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Validity Not Before: Jun 15 04:51:56 2025 GMT Not After : Jun 22 04:51:56 2025 GMT Subject: CN=684e516c-7f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:12:d8:ac:8d:93:fc:99:bf:b6:fe:a0:e9:3d: 29:5e:f3:82:c1:ef:6f:39:f2:27:7e:c2:3d:60:0a: 32:3e:c3:95:01:0f:21:26:a2:f6:53:32:ae:4d:99: a2:b0:0e:a5:4f:df:04:68:d8:50:85:35:94:7b:24: 50:03:b3:0d:cd:96:6c:cc:22:39:13:d5:75:bd:4b: ec:13:eb:5f:ea:e7:c1:3f:0a:7f:78:16:c7:97:5b: d3:93:f7:16:30:ca:ad:90:02:bf:26:a0:c3:5d:82: a0:df:fa:a4:16:e5:28:85:ce:bc:5c:dd:d1:d4:9d: 1a:ea:0e:1c:91:47:4b:2e:9f:38:3b:fe:8c:8d:4d: c1:c9:22:b4:2d:13:2b:57:77:03:35:1e:c8:77:f0: d3:b6:68:42:b7:e1:4d:03:38:a3:15:67:39:f6:99: 15:f6:62:7b:56:40:af:d1:4f:9c:12:ed:0f:5f:0f: 53:77:64:28:48:80:42:c0:a2:ff:dc:01:43:c8:06: 01:2c:b8:23:8b:e3:37:49:73:ed:c7:c7:e0:06:50: 93:47:7d:02:72:eb:ec:78:a8:34:36:b2:a6:e4:a7: 41:fb:fb:ca:78:85:c0:fb:d3:23:de:1b:70:e3:00: df:29:b9:08:6a:cc:31:97:cc:ec:99:ff:c8:cd:b3: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6D:E2:71:04:4C:D9:1B:73:78:EA:5F:88:2A:83:E8:CB:FD:3F:85 X509v3 Authority Key Identifier: keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:3c:7f:29:cb:6e:34:85:01:68:b0:64:b0:e0:92:3d:e7:59: 8e:c3:77:80:13:70:a6:23:20:a4:ae:e0:d0:2d:84:f0:61:a5: 18:e9:2b:f7:53:78:c3:72:b1:3d:8b:25:90:20:df:bf:19:df: 67:c5:81:83:18:1a:e5:0a:df:d0:bf:95:6a:21:2e:b4:c1:49: 5d:2a:2b:92:84:94:69:dc:3c:04:29:80:2c:6b:7b:5d:61:93: e2:92:5a:8b:bd:9b:be:bc:24:d8:6a:20:05:6b:14:d8:e2:35: 45:a7:79:1d:4f:03:59:30:cc:48:fa:ce:ba:e2:92:8a:ee:b3: 86:52:8e:cf:93:64:8a:9f:05:3b:de:d3:ed:04:b7:1d:bf:01: ec:dc:17:80:30:87:50:76:f6:b9:69:1a:a5:12:bc:7c:ed:52: 25:fa:fa:fe:ec:c9:c6:a3:e2:74:9c:d1:69:e4:fa:5f:be:d7: 33:f5:ed:8a:c5:82:44:c0:44:ab:6a:3e:d4:25:6e:5a:7e:4c: 6c:3c:6d:c3:c8:0d:bb:60:bf:ee:db:ff:94:32:f0:cd:59:a4: cd:48:7e:23:d3:b2:d9:d1:39:d1:4d:ce:73:88:31:c9:47:dd: 7e:4f:40:bc:8d:ff:82:c0:c9:a1:1e:21:aa:16:8e:4f:20:66: bc:3f:1a:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0MDMxMTAvBgNVBAUTKEQ3OEYzMDkwNEU3NURGOTRDRUI3NTk2NkFGODM4RTc2 M0VBODk3NjIwHhcNMjUwNjE1MDQ1MTU2WhcNMjUwNjIyMDQ1MTU2WjAYMRYwFAYD VQQDEw02ODRlNTE2Yy03ZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxLYrI2T/Jm/tv6g6T0pXvOCwe9vOfInfsI9YAoyPsOVAQ8hJqL2UzKuTZmi sA6lT98EaNhQhTWUeyRQA7MNzZZszCI5E9V1vUvsE+tf6ufBPwp/eBbHl1vTk/cW MMqtkAK/JqDDXYKg3/qkFuUohc68XN3R1J0a6g4ckUdLLp84O/6MjU3BySK0LRMr V3cDNR7Id/DTtmhCt+FNAzijFWc59pkV9mJ7VkCv0U+cEu0PXw9Td2QoSIBCwKL/ 3AFDyAYBLLgji+M3SXPtx8fgBlCTR30CcuvseKg0NrKm5KdB+/vKeIXA+9Mj3htw 4wDfKbkIaswxl8zsmf/IzbMr/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZt4nEE TNkbc3jqX4gqg+jL/T+FMB8GA1UdIwQYMBaAFNePMJBOdd+UzrdZZq+DjnY+qJdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTQwMy84MDIwNzJFODE4 QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1VE90MWxtcjRPT2RqNm9s MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE0OHdrRTUxMzVUT3QxbG1yNE9PZGo2b2wySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTQwMy84MDIwNzJFODE4QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1 VE90MWxtcjRPT2RqNm9sMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFPH8py240hQFosGSw4JI951mOw3eAE3CmIyCkruDQLYTwYaUY6Sv3 U3jDcrE9iyWQIN+/Gd9nxYGDGBrlCt/Qv5VqIS60wUldKiuShJRp3DwEKYAsa3td YZPiklqLvZu+vCTYaiAFaxTY4jVFp3kdTwNZMMxI+s664pKK7rOGUo7Pk2SKnwU7 3tPtBLcdvwHs3BeAMIdQdva5aRqlErx87VIl+vr+7MnGo+J0nNFp5Ppfvtcz9e2K xYJEwESraj7UJW5afkxsPG3DyA27YL/u2/+UMvDNWaTNSH4j07LZ0TnRTc5ziDHJ R91+T0C8jf+CwMmhHiGqFo5PIGa8Pxqp -----END CERTIFICATE-----Generated at Sun Jun 15 08:34:59 2025 by rpki-client