$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: bZO6WtMzvSwOEOmC1UAw8SnODdRsup/ICGdbTiYszn4= Subject key identifier: B6:E8:3E:13:87:49:3B:8E:32:EE:9D:DD:F3:FE:11:97:36:30:7C:FA Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: 8D Signing time: Tue 05 Aug 2025 07:08:34 +0000 Manifest this update: Tue 05 Aug 2025 07:08:33 +0000 Manifest next update: Tue 12 Aug 2025 07:08:32 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: z0tj2eGT+mf0Fei3BS6lu68cG6IEIA5IsoNLDxWV6wo=) 2: 42F359D22DE211F0A991F83DC4F9AE02.roa (hash: GS7VGsIuP00slQDLOowlxynsnmpTUaLEp1HD+LKtTww=) 3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: ak2PMRQUjFtffexIQ55kAPaMfx+wqf8bsH7hFH3Plx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Aug 5 07:08:33 2025 GMT Not After : Aug 12 07:08:32 2025 GMT Subject: CN=6891adf1-01ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:9e:96:63:2c:bb:83:b0:21:3c:87:9b:e1: cf:89:c7:22:94:0a:14:05:2e:28:3d:82:e9:c1:78: e6:79:18:19:d5:5c:75:a3:bb:32:3e:bb:e4:8e:09: 57:2d:17:31:b0:1e:43:cd:57:81:4e:b6:b1:b0:39: 6e:70:91:46:16:f5:69:3e:a2:3e:51:1d:c6:d5:29: d2:1a:83:9a:73:0e:d5:6e:db:df:df:2b:71:16:7a: d2:a8:0b:3f:e2:ef:39:5c:37:bb:c2:ba:91:1f:ae: 77:52:f0:e2:d8:f2:84:1b:f7:77:7c:2a:fa:77:36: 01:43:8e:45:06:e9:90:87:a5:dc:63:89:24:68:cb: 0e:8f:a1:ca:09:97:b5:33:df:2a:d6:3e:c7:34:6c: 3c:9f:20:28:5a:e0:8f:f1:08:f2:c8:75:29:29:ac: a7:f4:61:f9:e6:00:41:e5:09:58:09:21:d3:77:71: 77:32:fe:79:d1:7a:4b:82:1e:fc:9f:0c:0b:55:eb: 23:61:37:90:e2:b3:08:f1:ac:d4:35:14:b1:1d:71: 7b:eb:84:09:f1:32:74:b8:ff:6c:c9:78:cc:ce:86: 13:e2:0d:6e:b8:f2:ad:21:18:9f:97:03:e1:a9:1d: b9:f1:5e:8d:3d:10:9e:61:e1:3e:98:c2:14:cb:a3: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E8:3E:13:87:49:3B:8E:32:EE:9D:DD:F3:FE:11:97:36:30:7C:FA X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:79:eb:32:41:2e:ea:5a:f5:6c:93:0e:10:a4:3d:70:13:82: e0:af:7e:64:84:cb:5a:79:f5:ba:fc:b8:ef:91:3b:96:f3:2e: b1:dc:f6:60:c4:aa:ac:aa:0d:86:89:40:61:98:50:ec:1f:9b: dc:0d:de:3c:23:96:6b:3b:b0:75:8e:74:63:ec:e0:72:0d:17: 44:70:06:a3:20:7e:64:c7:a9:19:c6:77:38:f9:5e:51:7f:f5: 49:c4:2a:cc:9a:08:23:76:28:28:3e:c2:68:c7:df:d4:7c:17: e5:1c:be:d1:44:49:30:37:f3:64:00:99:84:f9:6f:cc:cc:8b: 8a:65:67:bb:9b:ca:45:be:6b:75:0c:00:5b:f1:d5:99:81:79: 16:70:c8:fe:31:2f:c2:0b:aa:a3:b3:56:7f:ab:73:d1:f4:18: 2e:2e:5f:82:06:71:e0:6a:c8:d9:4f:73:76:2b:df:7c:4e:21: 2d:47:65:06:15:fe:5b:03:24:ce:99:43:d4:6a:5a:54:87:18: 48:a0:29:e9:53:14:b9:46:d4:52:ce:de:dc:b1:08:ae:62:08: b6:76:5b:51:50:3c:92:9a:49:18:00:e7:67:85:d0:20:db:31: 25:21:7e:a9:64:ce:08:5e:1d:0b:4f:82:4a:55:51:30:f6:51: c9:48:96:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKERGNUZFMjFCN0M5NTUyMTU5MzQ0NzE3OTREOEIwNzA2 NjNEMkIzNEUwHhcNMjUwODA1MDcwODMzWhcNMjUwODEyMDcwODMyWjAYMRYwFAYD VQQDEw02ODkxYWRmMS0wMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAqelmMsu4OwITyHm+HPiccilAoUBS4oPYLpwXjmeRgZ1Vx1o7syPrvkjglX LRcxsB5DzVeBTraxsDlucJFGFvVpPqI+UR3G1SnSGoOacw7Vbtvf3ytxFnrSqAs/ 4u85XDe7wrqRH653UvDi2PKEG/d3fCr6dzYBQ45FBumQh6XcY4kkaMsOj6HKCZe1 M98q1j7HNGw8nyAoWuCP8QjyyHUpKayn9GH55gBB5QlYCSHTd3F3Mv550XpLgh78 nwwLVesjYTeQ4rMI8azUNRSxHXF764QJ8TJ0uP9syXjMzoYT4g1uuPKtIRiflwPh qR258V6NPRCeYeE+mMIUy6OEOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLboPhOH STuOMu6d3fP+EZc2MHz6MB8GA1UdIwQYMBaAFN9f4ht8lVIVk0RxeU2LBwZj0rNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84MDJBRTY0NkEy NzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVoV1RSSEY1VFlzSEJtUFNz MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3MwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVo V1RSSEY1VFlzSEJtUFNzMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMeesyQS7qWvVskw4QpD1wE4Lgr35khMtaefW6/LjvkTuW8y6x3PZg xKqsqg2GiUBhmFDsH5vcDd48I5ZrO7B1jnRj7OByDRdEcAajIH5kx6kZxnc4+V5R f/VJxCrMmggjdigoPsJox9/UfBflHL7RREkwN/NkAJmE+W/MzIuKZWe7m8pFvmt1 DABb8dWZgXkWcMj+MS/CC6qjs1Z/q3PR9BguLl+CBnHgasjZT3N2K998TiEtR2UG Ff5bAyTOmUPUalpUhxhIoCnpUxS5RtRSzt7csQiuYgi2dltRUDySmkkYAOdnhdAg 2zElIX6pZM4IXh0LT4JKVVEw9lHJSJYD -----END CERTIFICATE-----Generated at Wed Aug 6 05:28:47 2025 by rpki-client