$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft File: d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json) Hash identifier: n4m9Tl8/RTd4I4QdioaS/8P0Z+b3Xr2t7b21PWWcikU= Subject key identifier: EA:C3:EC:BE:6D:E9:DC:9C:8B:85:3B:F7:B6:8B:64:FB:49:41:A7:4F Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 Certificate issuer: /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Certificate serial: 03F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft Manifest number: 03EE Signing time: Tue 17 Jun 2025 00:06:31 +0000 Manifest this update: Tue 17 Jun 2025 00:06:30 +0000 Manifest next update: Tue 24 Jun 2025 00:06:30 +0000 Files and hashes: 1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: fm4UcrAlEHuJoDH93Tx6o+F8jV72/QUKV8sO3yXFKFU=) 2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: gxyFLyvg9iXUzDVt1BFdSUDwgh1JJfmLmwnyPeOCm3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1011 (0x3f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9EAC, serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Validity Not Before: Jun 17 00:06:30 2025 GMT Not After : Jun 24 00:06:30 2025 GMT Subject: CN=6850b186-7356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b5:5c:ed:2e:cd:72:9c:15:ca:d8:ac:25:1f: a8:ae:1f:56:5d:cd:05:8c:0e:83:f1:e7:1d:fc:2b: 04:da:37:c9:fb:45:36:e7:50:86:c8:96:94:1f:38: 94:d4:9c:fa:66:8b:d7:a0:7e:69:10:6a:80:56:33: 3c:b3:a1:30:7b:6b:40:1d:84:9b:92:3b:67:6e:8e: a3:5c:c0:7c:19:12:7e:c6:81:cd:fb:b8:8e:75:6f: 4d:53:e3:3c:ee:2b:5e:1b:64:5e:2d:40:97:a9:1a: 7d:47:34:9e:c0:9f:5b:c9:7c:86:8f:45:2a:bf:7c: 23:6b:10:1f:3e:23:7c:a3:0f:ac:db:26:b8:8d:13: ef:f0:ab:b7:20:19:d8:cf:f7:78:36:b2:81:c1:05: cc:4a:3b:ab:5a:a2:32:69:ad:3f:9a:7d:ff:24:98: 67:97:25:14:83:1b:9c:3b:df:4f:a6:12:27:e9:92: 2f:ff:37:eb:9d:48:34:00:95:b5:32:ef:c5:43:41: 17:22:b2:8c:7e:f5:43:16:d0:f0:57:59:03:93:dc: 6f:db:00:b5:ad:ff:b7:f3:97:9d:fd:e1:e2:48:1f: 8e:ad:9f:33:d2:62:f2:01:f1:4e:d6:9a:01:01:b8: 99:fc:80:66:32:cb:af:4d:6f:19:2e:b2:3d:2e:82: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C3:EC:BE:6D:E9:DC:9C:8B:85:3B:F7:B6:8B:64:FB:49:41:A7:4F X509v3 Authority Key Identifier: keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:01:55:b5:49:e8:6d:30:0f:56:11:b3:ba:93:c7:60:ae:9a: 6f:0f:fc:2d:0e:c5:d3:c4:ca:f8:6c:0b:ec:1a:4a:76:26:6a: 0e:7b:3d:c3:8a:15:17:ba:63:0b:a8:79:9e:b9:0f:57:c2:e7: be:83:7f:05:19:bf:24:69:12:27:19:9b:2a:59:c4:ff:39:56: 31:4c:1b:f8:8f:26:38:f1:6c:3e:37:97:39:46:11:04:49:7a: ef:ac:4f:ef:75:36:46:f1:ea:ad:d8:2e:f9:23:39:6e:d6:34: 78:71:5e:07:20:7b:ac:fc:73:29:d9:e4:aa:6a:85:ae:82:33: 13:0c:59:e5:13:7b:43:a5:13:31:ad:1c:b2:ca:d6:c7:85:34: f2:60:63:09:0f:cb:61:b8:0e:b5:a8:bb:e0:2b:db:57:71:e0: 37:70:fa:76:9e:ac:b4:58:03:00:0a:5d:c7:f6:ac:73:90:a6: 18:a0:86:0d:dd:5b:6a:ff:d1:6b:4c:5a:c5:f4:da:35:ca:8f: a7:18:a4:58:2e:9a:de:71:3e:46:96:08:88:ed:73:04:41:67: 03:d2:7d:13:cb:1e:0d:a9:cb:6b:e1:98:c0:21:21:3c:aa:7b: 7a:47:91:18:bc:b9:2c:fd:38:d6:8b:1a:d6:b1:03:69:0c:a2: 97:96:17:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFQUMxMTAvBgNVBAUTKDc3QjREODM4QjdEMjI5RkQxQzc0RDU1ODJDNzM1RTkx QjU2N0I1RTIwHhcNMjUwNjE3MDAwNjMwWhcNMjUwNjI0MDAwNjMwWjAYMRYwFAYD VQQDEw02ODUwYjE4Ni03MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17Vc7S7NcpwVytisJR+orh9WXc0FjA6D8ecd/CsE2jfJ+0U251CGyJaUHziU 1Jz6ZovXoH5pEGqAVjM8s6Ewe2tAHYSbkjtnbo6jXMB8GRJ+xoHN+7iOdW9NU+M8 7iteG2ReLUCXqRp9RzSewJ9byXyGj0Uqv3wjaxAfPiN8ow+s2ya4jRPv8Ku3IBnY z/d4NrKBwQXMSjurWqIyaa0/mn3/JJhnlyUUgxucO99PphIn6ZIv/zfrnUg0AJW1 Mu/FQ0EXIrKMfvVDFtDwV1kDk9xv2wC1rf+385ed/eHiSB+OrZ8z0mLyAfFO1poB AbiZ/IBmMsuvTW8ZLrI9LoLdQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrD7L5t 6dyci4U797aLZPtJQadPMB8GA1UdIwQYMBaAFHe02Di30in9HHTVWCxzXpG1Z7Xi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUVBQy81RDQ1MEZBRTdG NDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tmMGNkTlZZTEhOZWtiVm50 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q3VFlPTGZTS2YwY2ROVllMSE5la2JWbnRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUVBQy81RDQ1MEZBRTdGNDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tm MGNkTlZZTEhOZWtiVm50ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbAVW1SehtMA9WEbO6k8dgrppvD/wtDsXTxMr4bAvsGkp2JmoOez3D ihUXumMLqHmeuQ9Xwue+g38FGb8kaRInGZsqWcT/OVYxTBv4jyY48Ww+N5c5RhEE SXrvrE/vdTZG8eqt2C75Izlu1jR4cV4HIHus/HMp2eSqaoWugjMTDFnlE3tDpRMx rRyyytbHhTTyYGMJD8thuA61qLvgK9tXceA3cPp2nqy0WAMACl3H9qxzkKYYoIYN 3Vtq/9FrTFrF9No1yo+nGKRYLprecT5GlgiI7XMEQWcD0n0Tyx4Nqctr4ZjAISE8 qnt6R5EYvLks/TjWixrWsQNpDKKXlhdC -----END CERTIFICATE-----Generated at Thu Jun 19 00:51:03 2025 by rpki-client