$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: QP36vTaJfuVAQlEEkSvXYZ4yTfNWnmj3+LPr6ilAAvA= Subject key identifier: D9:B4:7B:EE:44:01:80:69:FC:29:2B:57:49:A4:FB:03:A9:F7:CA:38 Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 0499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 048D Signing time: Mon 16 Jun 2025 23:40:20 +0000 Manifest this update: Mon 16 Jun 2025 23:40:19 +0000 Manifest next update: Mon 23 Jun 2025 23:40:19 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: bRLnmOaFFgnqOgY8OmfIQfXPcP+TNLA/J1ElwybIK9E=) 2: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: C2tgoi4ndceE+FSZfwDXIED+n+ZW+4Wp1mUo8nhP9gw=) 3: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: jv1ungDFXqLOGYMpTJjaYjynG3firC0fxKibhbmN4oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Jun 16 23:40:19 2025 GMT Not After : Jun 23 23:40:19 2025 GMT Subject: CN=6850ab64-cd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:14:18:59:f1:22:a1:16:9c:0d:f8:05:a9:06: 94:9b:3b:10:57:c6:76:bd:54:52:69:77:7e:7a:6b: c7:c3:9b:5c:20:52:01:8b:4e:e3:33:65:4c:cb:f2: 87:26:4c:dc:a1:94:01:48:6d:8c:45:07:1e:b2:3f: 68:97:18:f2:03:e5:1b:8a:85:aa:de:f0:41:18:12: d5:fe:2e:68:71:f9:4b:40:57:70:d1:1b:51:f1:a2: 69:66:eb:29:58:33:6b:66:da:19:9a:fe:97:76:56: 31:e3:89:da:38:77:f5:f1:f0:3c:22:9f:4e:16:66: 59:a9:f4:d7:86:89:97:f5:7b:35:d4:5b:86:72:ee: 23:41:76:0f:63:d2:e0:52:8b:ed:bc:a9:26:a9:77: 51:43:7d:6c:86:da:ec:1c:64:7c:b3:ec:51:7d:b2: 6d:c8:b1:29:11:b9:66:44:5d:3e:5c:27:32:9a:dc: 2f:46:f8:fd:f3:37:74:8c:c8:3d:ba:9f:c1:18:45: 6b:38:84:a7:b2:45:8a:04:54:2f:8f:0f:15:c3:f5: c0:9a:d9:50:21:fe:b7:22:7b:90:3d:54:a8:7b:94: c9:1d:37:90:07:ca:da:a3:b0:0c:71:54:06:3c:8e: 71:bd:2b:a5:24:1b:5f:fe:8b:7a:75:86:66:c0:c2: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B4:7B:EE:44:01:80:69:FC:29:2B:57:49:A4:FB:03:A9:F7:CA:38 X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b0:8c:8f:53:05:55:1e:00:c7:72:b4:15:02:ab:4a:71:d1: 1b:0f:71:a7:82:c0:d3:9f:1b:a8:0d:a3:a8:b9:6e:6b:b6:14: 9a:3c:94:b1:83:09:18:39:93:9d:78:87:8e:e0:ba:fd:cf:46: bb:15:55:a8:7e:16:10:be:b8:bc:ef:ff:7e:60:5f:f4:cf:f0: f0:26:ce:3d:c4:0c:d1:01:35:0c:9c:db:43:70:e2:3d:cb:83: 56:a3:89:63:b1:38:0d:06:c6:3b:ae:97:f8:ae:0c:48:a6:83: f2:c9:a2:b5:89:46:7a:d5:b8:95:00:16:7b:2a:66:74:38:eb: 52:52:8a:54:bc:77:96:7f:f2:7e:42:fa:49:48:d6:8b:b8:71: e3:d3:7a:b5:42:91:92:d8:4f:c0:f5:ec:0d:9f:bf:66:e9:94: 41:f8:d3:c2:58:4a:1c:7b:17:2f:12:b4:2c:ef:56:35:83:3c: d3:90:00:2e:67:85:18:2e:73:1e:8b:64:0a:73:28:c1:d8:b9: 18:42:b2:db:f1:ca:c3:a5:e8:a0:a6:2b:dd:01:9a:d3:cb:97: b0:45:0d:ce:84:67:18:16:b4:ba:7d:08:3c:e1:4d:c8:58:1c: ae:b1:c5:4b:63:ef:6c:66:ff:05:f5:6e:52:a8:ee:88:b9:f7: ef:f9:e6:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjUwNjE2MjM0MDE5WhcNMjUwNjIzMjM0MDE5WjAYMRYwFAYD VQQDEw02ODUwYWI2NC1jZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xQYWfEioRacDfgFqQaUmzsQV8Z2vVRSaXd+emvHw5tcIFIBi07jM2VMy/KH JkzcoZQBSG2MRQcesj9olxjyA+UbioWq3vBBGBLV/i5ocflLQFdw0RtR8aJpZusp WDNrZtoZmv6XdlYx44naOHf18fA8Ip9OFmZZqfTXhomX9Xs11FuGcu4jQXYPY9Lg UovtvKkmqXdRQ31shtrsHGR8s+xRfbJtyLEpEblmRF0+XCcymtwvRvj98zd0jMg9 up/BGEVrOISnskWKBFQvjw8Vw/XAmtlQIf63InuQPVSoe5TJHTeQB8rao7AMcVQG PI5xvSulJBtf/ot6dYZmwMLOCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNm0e+5E AYBp/CkrV0mk+wOp98o4MB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnsIyPUwVVHgDHcrQVAqtKcdEbD3GngsDTnxuoDaOouW5rthSaPJSx gwkYOZOdeIeO4Lr9z0a7FVWofhYQvri87/9+YF/0z/DwJs49xAzRATUMnNtDcOI9 y4NWo4ljsTgNBsY7rpf4rgxIpoPyyaK1iUZ61biVABZ7KmZ0OOtSUopUvHeWf/J+ QvpJSNaLuHHj03q1QpGS2E/A9ewNn79m6ZRB+NPCWEocexcvErQs71Y1gzzTkAAu Z4UYLnMei2QKcyjB2LkYQrLb8crDpeigpivdAZrTy5ewRQ3OhGcYFrS6fQg84U3I WByuscVLY+9sZv8F9W5SqO6Iuffv+ebl -----END CERTIFICATE-----Generated at Tue Jun 17 19:42:23 2025 by rpki-client