$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: nAnD1esj2C1cJTlzgz8+miVBiufbxU9/B9/6J9i+KcY= Subject key identifier: E6:19:DA:D5:0C:4D:55:F7:8A:8C:87:C5:34:6D:FC:5F:12:ED:F6:B1 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 11BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 11A3 Signing time: Sat 14 Jun 2025 17:09:15 +0000 Manifest this update: Sat 14 Jun 2025 17:09:15 +0000 Manifest next update: Sat 21 Jun 2025 17:09:15 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: 7/o/sVsa1nTh8IEcvrd3nT+Boab6sWmbGAgNZZtaT1E=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4541 (0x11bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Jun 14 17:09:15 2025 GMT Not After : Jun 21 17:09:15 2025 GMT Subject: CN=684dacbb-624b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:4f:ba:ff:a4:f3:36:31:5b:b5:fb:64:24: f2:de:97:21:5a:72:b2:16:5a:92:21:5f:80:37:70: 53:18:a9:ea:20:44:12:bc:f9:4d:d2:e3:ae:09:68: 00:5a:49:a5:c9:c8:87:66:be:db:9e:a6:64:29:1a: 4b:eb:9a:18:d1:65:39:79:9c:dc:50:dd:50:cf:8f: ba:b2:0f:ac:dc:dd:bf:ff:4d:ee:74:fb:40:b7:a6: a7:a3:76:56:ed:3b:f6:93:bc:c2:41:94:c1:1d:a7: c8:cd:c9:80:8a:9e:c8:48:71:fa:bf:ad:49:24:2e: 4a:d4:82:d7:00:e8:23:5d:a2:1b:bf:57:5d:51:b5: 9a:ca:06:43:0d:de:ca:ff:7c:3e:61:27:13:28:c2: 3a:9c:b9:d6:dd:83:4d:af:b4:71:bb:49:4a:61:a7: 60:a5:5e:b5:e6:3c:6b:7e:0b:38:df:5f:ee:3d:a6: af:f2:7f:c9:56:0a:c7:e7:13:63:22:db:7f:ff:de: 65:8a:f7:8a:82:34:e7:c8:fa:a7:2f:3a:ae:dd:76: e8:12:4b:41:50:e5:dc:b5:c9:7d:25:e9:ee:7a:96: 2f:cc:5f:75:73:8b:cd:81:f7:12:ef:8e:0f:05:ab: 9a:66:75:3d:ca:70:f4:98:c8:1d:28:3d:76:b5:2c: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:19:DA:D5:0C:4D:55:F7:8A:8C:87:C5:34:6D:FC:5F:12:ED:F6:B1 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:57:b5:17:be:86:eb:ab:4e:d2:0c:96:a2:ab:f4:d0:e9:42: 9c:95:a9:c8:af:56:e5:49:f0:f4:04:32:19:c3:89:45:d9:63: a3:48:ad:33:f7:bc:0d:5d:f6:96:77:d3:a5:28:32:13:e4:81: 78:49:b8:4d:5d:b3:ac:a9:63:c5:58:ff:19:23:e1:d4:20:fa: bd:0f:17:5c:4d:35:9c:6b:e0:43:d0:1c:5a:de:1d:e7:74:77: 80:f5:1b:a5:4b:e7:5a:f8:67:cf:d1:66:24:89:cc:38:34:57: dd:93:65:1c:9e:4f:b7:7b:58:ae:a3:cc:da:0b:a6:16:de:f9: ee:92:0b:0f:b0:90:c4:e5:ad:06:36:75:3f:27:1b:41:7d:fe: 7e:b1:ef:5e:04:5d:b4:b1:fa:bd:2f:04:16:98:93:ad:b7:67: a2:0d:79:69:4f:a5:a2:a2:e1:27:84:c0:25:3f:19:bc:b5:c3: 04:37:fb:d7:6c:b0:77:dc:00:ad:e5:96:83:35:e1:3b:36:3c: 67:b8:6f:c3:b2:98:0b:96:1b:9b:0e:bc:63:e1:ce:d2:bc:59: 34:0a:ab:4a:b5:d0:af:19:8d:ce:fa:36:94:29:5b:5b:c6:26: ef:8d:14:85:0c:52:c3:62:2e:5d:33:c7:f1:15:28:56:e6:b2: da:e9:25:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUwNjE0MTcwOTE1WhcNMjUwNjIxMTcwOTE1WjAYMRYwFAYD VQQDEw02ODRkYWNiYi02MjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0hPuv+k8zYxW7X7ZCTy3pchWnKyFlqSIV+AN3BTGKnqIEQSvPlN0uOuCWgA WkmlyciHZr7bnqZkKRpL65oY0WU5eZzcUN1Qz4+6sg+s3N2//03udPtAt6ano3ZW 7Tv2k7zCQZTBHafIzcmAip7ISHH6v61JJC5K1ILXAOgjXaIbv1ddUbWaygZDDd7K /3w+YScTKMI6nLnW3YNNr7Rxu0lKYadgpV615jxrfgs431/uPaav8n/JVgrH5xNj Itt//95liveKgjTnyPqnLzqu3XboEktBUOXctcl9JenuepYvzF91c4vNgfcS744P BauaZnU9ynD0mMgdKD12tSwEcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYZ2tUM TVX3ioyHxTRt/F8S7faxMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOV7UXvobrq07SDJaiq/TQ6UKclanIr1blSfD0BDIZw4lF2WOjSK0z 97wNXfaWd9OlKDIT5IF4SbhNXbOsqWPFWP8ZI+HUIPq9DxdcTTWca+BD0Bxa3h3n dHeA9RulS+da+GfP0WYkicw4NFfdk2Ucnk+3e1iuo8zaC6YW3vnukgsPsJDE5a0G NnU/JxtBff5+se9eBF20sfq9LwQWmJOtt2eiDXlpT6WiouEnhMAlPxm8tcMEN/vX bLB33ACt5ZaDNeE7NjxnuG/DspgLlhubDrxj4c7SvFk0CqtKtdCvGY3O+jaUKVtb xibvjRSFDFLDYi5dM8fxFShW5rLa6SUY -----END CERTIFICATE-----Generated at Sun Jun 15 10:18:14 2025 by rpki-client