$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: J2Ca2Gvxv/Ea2vmw/YHayL1n7spU2AH8aBEmQSbmN10= Subject key identifier: DB:12:1F:93:48:47:0C:E8:9E:22:12:86:A8:A8:4D:B4:EF:07:A6:87 Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: 73 Signing time: Sun 15 Jun 2025 06:00:30 +0000 Manifest this update: Sun 15 Jun 2025 06:00:30 +0000 Manifest next update: Sun 22 Jun 2025 06:00:30 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: uB/F/u+KNgWVUI44C4+zQw8escXpHS+JDLs7pBQu5kc=) 2: 42F359D22DE211F0A991F83DC4F9AE02.roa (hash: GS7VGsIuP00slQDLOowlxynsnmpTUaLEp1HD+LKtTww=) 3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: ak2PMRQUjFtffexIQ55kAPaMfx+wqf8bsH7hFH3Plx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Jun 15 06:00:30 2025 GMT Not After : Jun 22 06:00:30 2025 GMT Subject: CN=684e617e-5a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:32:a1:96:0f:23:a5:ba:78:e4:27:fb:05: 0c:9c:c6:66:15:fc:96:24:eb:30:6e:0c:29:be:20: b4:50:84:22:c0:42:13:d0:32:78:e7:08:e3:34:c3: b9:36:c3:4e:33:2a:fc:40:35:67:4a:39:da:2e:04: 39:a9:69:ce:2c:78:f7:18:5f:9e:74:76:b6:63:d0: 70:53:d0:07:3f:55:27:7e:44:1f:43:78:88:96:04: 55:3b:05:10:7e:d9:a2:39:77:6f:be:4d:09:de:90: 33:dc:79:11:5c:a6:89:24:8b:b4:3d:fe:be:85:2b: d6:77:27:7e:59:9a:a8:61:66:10:33:6b:05:4e:a0: c0:c4:c9:42:b3:27:6b:83:f2:db:1b:44:18:83:00: 85:0d:0c:eb:71:9f:04:e3:7a:57:29:3f:af:33:29: 20:18:e1:3c:ee:8c:0a:29:00:9f:0b:25:0a:bb:b4: c3:7d:d2:cd:f4:40:06:33:8d:00:ea:25:14:66:61: c5:f2:ed:35:45:d1:fb:64:88:ee:c8:3f:6c:b7:13: 91:29:55:7c:f7:a3:bc:8a:5e:1e:04:0c:8d:76:bf: 89:e5:4e:7f:c1:a2:5e:ef:9f:2a:a0:4e:e1:49:a0: 90:95:2c:de:f4:79:a4:ba:38:28:06:df:06:fb:af: 04:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:12:1F:93:48:47:0C:E8:9E:22:12:86:A8:A8:4D:B4:EF:07:A6:87 X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:74:18:4f:3a:6e:f2:10:32:37:af:27:f5:29:fd:ed:1a:4d: c9:5e:ca:af:20:94:79:bc:89:9c:25:97:4a:b8:78:1b:5e:15: d9:a5:38:cf:7c:e2:8a:81:0d:81:64:9f:1c:d8:69:2d:30:ce: ec:fb:01:f3:c6:74:49:d2:a9:2b:79:56:67:34:27:a2:fa:85: 83:5e:e9:ed:2c:33:96:f5:fa:08:fe:ce:a5:60:0d:20:ca:c8: bb:09:a7:0a:9f:b0:f8:1b:e1:59:de:e0:92:46:1e:fb:65:9c: 29:31:19:4c:93:ef:51:89:ad:2a:a7:1b:2d:1c:54:25:33:d0: 4a:06:4e:57:2d:5b:1b:e9:78:75:d9:31:39:a8:8c:62:44:ad: 98:f0:3a:c1:c4:e0:61:75:43:0f:af:f2:c4:2a:27:3d:39:5f: 36:75:e0:bb:b4:ff:72:4e:88:63:7e:37:6c:80:15:b1:e2:ba: 7f:83:71:61:e5:d5:af:65:0f:bf:ac:35:44:8a:10:05:40:20: 97:c0:9d:81:a8:76:52:d2:9c:1e:92:55:ec:e3:79:a5:a3:47: d1:1b:b5:57:1f:0a:aa:d3:c4:c2:e8:e4:52:9c:0f:f1:d4:80: bf:3f:c0:26:32:28:fa:77:58:0f:55:76:d2:bc:f6:c3:e4:b2: ee:65:54:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzUzNzExMC8GA1UEBRMoREY1RkUyMUI3Qzk1NTIxNTkzNDQ3MTc5NEQ4QjA3MDY2 M0QyQjM0RTAeFw0yNTA2MTUwNjAwMzBaFw0yNTA2MjIwNjAwMzBaMBgxFjAUBgNV BAMTDTY4NGU2MTdlLTVhMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2HjKhlg8jpbp45Cf7BQycxmYV/JYk6zBuDCm+ILRQhCLAQhPQMnjnCOM0w7k2 w04zKvxANWdKOdouBDmpac4sePcYX550drZj0HBT0Ac/VSd+RB9DeIiWBFU7BRB+ 2aI5d2++TQnekDPceRFcpokki7Q9/r6FK9Z3J35ZmqhhZhAzawVOoMDEyUKzJ2uD 8tsbRBiDAIUNDOtxnwTjelcpP68zKSAY4TzujAopAJ8LJQq7tMN90s30QAYzjQDq JRRmYcXy7TVF0ftkiO7IP2y3E5EpVXz3o7yKXh4EDI12v4nlTn/Bol7vnyqgTuFJ oJCVLN70eaS6OCgG3wb7rwSZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2xIfk0hH DOieIhKGqKhNtO8HpocwHwYDVR0jBBgwFoAU31/iG3yVUhWTRHF5TYsHBmPSs04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTM3LzgwMkFFNjQ2QTI3 MTExRUZBMzkyRjA3OUM0RjlBRTAyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3Mw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMzFfaUczeVZVaFdUUkhGNVRZc0hCbVBTczA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 NTM3LzgwMkFFNjQ2QTI3MTExRUZBMzkyRjA3OUM0RjlBRTAyLzMxX2lHM3lWVWhX VFJIRjVUWXNIQm1QU3MwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAF0GE86bvIQMjevJ/Up/e0aTcleyq8glHm8iZwll0q4eBteFdmlOM98 4oqBDYFknxzYaS0wzuz7AfPGdEnSqSt5Vmc0J6L6hYNe6e0sM5b1+gj+zqVgDSDK yLsJpwqfsPgb4Vne4JJGHvtlnCkxGUyT71GJrSqnGy0cVCUz0EoGTlctWxvpeHXZ MTmojGJErZjwOsHE4GF1Qw+v8sQqJz05XzZ14Lu0/3JOiGN+N2yAFbHiun+DcWHl 1a9lD7+sNUSKEAVAIJfAnYGodlLSnB6SVezjeaWjR9EbtVcfCqrTxMLo5FKcD/HU gL8/wCYyKPp3WA9VdtK89sPksu5lVHg= -----END CERTIFICATE-----Generated at Sun Jun 15 21:54:55 2025 by rpki-client