$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: QWthYmTSoHhdiodGhNFXXfZDhuGEhndGyRISs+kVCZM= Subject key identifier: B4:EB:CC:E5:47:6F:97:3E:D4:7F:CC:6C:29:1B:E5:64:C7:7D:F4:C7 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 03D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 03CD Signing time: Sun 15 Jun 2025 00:20:28 +0000 Manifest this update: Sun 15 Jun 2025 00:20:27 +0000 Manifest next update: Sun 22 Jun 2025 00:20:27 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: bqjx+FHAC2ju8S2e75gtDONbjUKHpP638C8L32r8egE=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 981 (0x3d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Jun 15 00:20:27 2025 GMT Not After : Jun 22 00:20:27 2025 GMT Subject: CN=684e11cc-e548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:2d:c9:fd:06:4b:d2:58:d4:64:51:5a:0e: 54:6e:f4:94:fe:c4:ee:2f:87:78:3f:06:cd:c0:3d: f3:2d:d3:20:e3:c5:c5:99:e6:51:e5:8c:88:88:b2: e4:33:00:e2:d4:4a:ad:3d:47:05:a7:66:7c:7c:55: e9:83:71:5d:18:f9:13:ab:f0:23:42:af:28:d1:fa: d8:0b:ac:32:9f:26:7a:13:f9:48:51:8d:04:2b:5c: a9:ee:36:e1:9b:79:8a:36:64:da:6a:bd:66:61:45: 34:4a:f6:02:99:01:94:b6:a6:84:1b:c1:ad:81:bb: e9:b6:8f:5d:d6:c9:55:9c:48:13:9b:8a:19:cc:38: 1b:d6:a6:89:e7:f7:21:7c:8e:c5:a2:12:10:e8:8d: cc:2a:f0:e2:51:f9:27:ae:eb:e8:f2:46:37:47:50: 54:fb:97:ce:94:4a:9f:79:03:f8:6f:ca:b9:d8:4f: 7e:e3:45:f8:10:04:0a:8e:1a:53:90:b1:bb:76:e1: e6:98:f0:f7:3a:01:51:b8:26:23:d1:9d:6c:e8:e1: 69:85:9d:24:0a:7c:e0:c2:8b:9b:1c:68:23:b1:c4: 14:8c:0b:bb:a7:0d:61:5d:af:dd:1b:65:ac:14:b9: 6d:20:4d:f3:ea:d6:f4:70:52:29:9c:7f:56:fa:98: f5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EB:CC:E5:47:6F:97:3E:D4:7F:CC:6C:29:1B:E5:64:C7:7D:F4:C7 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5c:70:25:ea:fd:ac:7b:48:6e:0d:d6:a4:95:0d:9b:79:9b: c7:6f:df:bc:15:a1:2a:6a:fd:79:de:9d:bf:05:8d:26:98:82: d6:30:8e:eb:70:54:a5:37:0f:46:1e:92:a3:a2:6c:e1:8c:63: 98:cd:d6:72:95:9a:32:ee:cd:c5:c9:40:f2:3a:55:e6:97:bd: 28:2e:50:0e:08:2d:f5:ee:e6:36:c0:69:4f:5d:62:2b:a1:73: 66:c1:36:70:b1:f3:a9:2d:4b:0f:d6:e6:f6:88:74:91:93:f9: ef:05:d1:d3:8a:d7:cc:8b:88:43:d6:21:f9:17:2f:22:50:44: e5:88:9f:ab:e8:6d:97:0d:08:8d:13:d4:88:bc:4d:ac:7d:ef: e0:06:0d:ab:de:32:52:ec:79:53:b6:54:d0:32:5b:45:d7:e0: 1c:aa:1b:95:f1:a1:c9:75:f8:0f:85:53:6c:bb:f4:25:50:73: be:ef:cc:6f:ed:01:92:a7:ee:88:98:7f:fe:33:8a:5d:09:5c: e3:3d:fa:31:ee:87:b6:f2:73:d5:f7:a7:18:24:ad:6e:28:b3: be:a0:e7:17:e0:ab:62:7e:e5:88:5c:38:2d:29:fc:f6:e5:a6: 2d:2a:7f:10:23:ae:0b:09:b1:1c:98:72:13:31:4b:b6:67:07: 6d:66:12:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjUwNjE1MDAyMDI3WhcNMjUwNjIyMDAyMDI3WjAYMRYwFAYD VQQDEw02ODRlMTFjYy1lNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Xgtyf0GS9JY1GRRWg5UbvSU/sTuL4d4PwbNwD3zLdMg48XFmeZR5YyIiLLk MwDi1EqtPUcFp2Z8fFXpg3FdGPkTq/AjQq8o0frYC6wynyZ6E/lIUY0EK1yp7jbh m3mKNmTaar1mYUU0SvYCmQGUtqaEG8Gtgbvpto9d1slVnEgTm4oZzDgb1qaJ5/ch fI7FohIQ6I3MKvDiUfknruvo8kY3R1BU+5fOlEqfeQP4b8q52E9+40X4EAQKjhpT kLG7duHmmPD3OgFRuCYj0Z1s6OFphZ0kCnzgwoubHGgjscQUjAu7pw1hXa/dG2Ws FLltIE3z6tb0cFIpnH9W+pj1JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTrzOVH b5c+1H/MbCkb5WTHffTHMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdXHAl6v2se0huDdaklQ2beZvHb9+8FaEqav153p2/BY0mmILWMI7r cFSlNw9GHpKjomzhjGOYzdZylZoy7s3FyUDyOlXml70oLlAOCC317uY2wGlPXWIr oXNmwTZwsfOpLUsP1ub2iHSRk/nvBdHTitfMi4hD1iH5Fy8iUETliJ+r6G2XDQiN E9SIvE2sfe/gBg2r3jJS7HlTtlTQMltF1+AcqhuV8aHJdfgPhVNsu/QlUHO+78xv 7QGSp+6ImH/+M4pdCVzjPfox7oe28nPV96cYJK1uKLO+oOcX4KtifuWIXDgtKfz2 5aYtKn8QI64LCbEcmHITMUu2ZwdtZhK/ -----END CERTIFICATE-----Generated at Sun Jun 15 08:47:31 2025 by rpki-client