$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json) Hash identifier: 7w7I7lXcyPlvHsA+paMOEnsRIGY8vq1l8yOhIfQpCBc= Subject key identifier: 0A:C8:02:E6:A4:3A:28:58:88:C5:2B:36:CC:DB:14:D0:48:06:25:B9 Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Certificate serial: 1136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft Manifest number: 111F Signing time: Fri 20 Jun 2025 17:17:23 +0000 Manifest this update: Fri 20 Jun 2025 17:17:22 +0000 Manifest next update: Fri 27 Jun 2025 17:17:22 +0000 Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: gb3YB2CSyVSynFtZo+j/5an6zqSppq87MiyNaV+BrV0=) 2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: YvhnTG1A1W5kz0Vch4cPsIzgbILMaDioP1ySIyj5aeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 17:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4406 (0x1136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Validity Not Before: Jun 20 17:17:22 2025 GMT Not After : Jun 27 17:17:22 2025 GMT Subject: CN=685597a3-7519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6b:b6:95:87:c9:e0:7c:12:fe:8e:ac:e5:f3: 44:b8:21:48:d9:12:97:48:8d:5d:d8:5b:35:7f:13: c2:d6:3e:85:bd:fb:69:21:75:6a:ba:4e:aa:cf:34: db:3d:32:8d:fb:45:ac:6d:b9:70:2d:35:71:b2:69: cb:6e:e2:3e:51:0e:9a:78:bd:80:8c:8c:6e:77:53: 8b:79:31:b8:49:93:2f:47:24:56:0f:77:9f:a2:f9: 3f:2d:41:45:94:7d:3d:61:eb:c9:b4:65:8c:39:04: 4c:28:c6:26:06:e9:f4:bb:d3:6a:4f:92:a2:34:2d: 76:cc:85:df:f9:be:94:a4:94:57:ca:d5:8d:99:37: ae:1b:dc:d0:30:14:8b:9e:65:07:28:fb:98:82:bc: 51:73:c4:6e:be:5a:09:09:77:54:f1:16:b0:41:32: 2d:e8:b3:31:5e:27:f2:f9:21:26:87:f4:27:50:0a: af:8c:4f:50:0f:b2:13:ed:b7:2c:07:35:64:da:7a: f0:5e:00:d8:43:62:46:9e:11:10:85:90:9c:e4:e5: 9c:a8:e8:76:51:77:b6:1e:a6:95:42:0e:45:5f:16: cb:44:ed:da:70:1f:c9:58:3c:11:3a:8b:a1:23:24: a5:05:22:e5:d7:dd:1f:97:76:19:7f:f2:dd:99:18: c7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C8:02:E6:A4:3A:28:58:88:C5:2B:36:CC:DB:14:D0:48:06:25:B9 X509v3 Authority Key Identifier: keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:48:a0:c5:b8:5d:7a:e9:a0:fd:d9:4e:dd:96:2f:e8:60:6a: 32:5e:18:0a:c6:a9:c4:77:f1:4f:dd:f5:21:e8:bc:d0:2a:0e: 36:02:9d:3c:86:e8:57:95:6b:80:2b:6b:d2:79:71:2e:e1:3c: 5c:06:7c:a0:47:fc:7f:e1:bd:0b:5a:06:19:91:96:eb:61:f3: 09:ac:ea:bc:fa:c3:ce:15:68:e0:49:31:3d:a3:d5:ef:95:7a: 5c:1f:0e:cb:94:df:2e:92:92:f3:00:41:9c:eb:77:24:e2:9d: cb:c2:dc:7c:75:f1:ec:d6:dc:41:8b:56:f5:30:08:6f:f6:44: 3c:3a:b5:dc:10:3c:d7:49:48:a0:9a:90:32:17:65:e8:57:07: 63:c3:1a:f1:fc:e5:dc:ce:9b:43:79:8e:a5:56:d8:ad:8f:36: 05:4d:dd:3a:a2:46:b3:3c:d7:23:22:00:52:17:ef:59:28:18: 68:94:5b:77:c9:50:91:f9:29:aa:59:c3:b8:1e:98:89:0e:11: 5a:86:ee:cf:a2:24:ff:c3:cc:c4:76:17:50:42:31:92:e9:0b: fe:0b:62:6e:ed:3f:0c:e8:b9:34:e8:59:25:6a:b5:b2:1d:36: 78:38:56:4d:03:02:7a:cd:7f:9b:15:2c:de:6c:b5:51:4f:64: 9f:05:15:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzQxMTAvBgNVBAUTKEUzRDNCNDc4ODI3M0NFNDU5MjlCMDk5ODNBQkY2NEI1 RDQ0RDFGMDgwHhcNMjUwNjIwMTcxNzIyWhcNMjUwNjI3MTcxNzIyWjAYMRYwFAYD VQQDEw02ODU1OTdhMy03NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Wu2lYfJ4HwS/o6s5fNEuCFI2RKXSI1d2Fs1fxPC1j6FvftpIXVquk6qzzTb PTKN+0WsbblwLTVxsmnLbuI+UQ6aeL2AjIxud1OLeTG4SZMvRyRWD3efovk/LUFF lH09YevJtGWMOQRMKMYmBun0u9NqT5KiNC12zIXf+b6UpJRXytWNmTeuG9zQMBSL nmUHKPuYgrxRc8RuvloJCXdU8RawQTIt6LMxXify+SEmh/QnUAqvjE9QD7IT7bcs BzVk2nrwXgDYQ2JGnhEQhZCc5OWcqOh2UXe2HqaVQg5FXxbLRO3acB/JWDwROouh IySlBSLl190fl3YZf/LdmRjHDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArIAuak OihYiMUrNszbFNBIBiW5MB8GA1UdIwQYMBaAFOPTtHiCc85FkpsJmDq/ZLXUTR8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzNC8xMzI3QTczRTE3 MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenprV1Ntd21ZT3I5a3RkUk5I d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ5TzBlSUp6emtXU213bVlPcjlrdGRSTkh3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzNC8xMzI3QTczRTE3MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenpr V1Ntd21ZT3I5a3RkUk5Id2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/SKDFuF166aD92U7dli/oYGoyXhgKxqnEd/FP3fUh6LzQKg42Ap08 huhXlWuAK2vSeXEu4TxcBnygR/x/4b0LWgYZkZbrYfMJrOq8+sPOFWjgSTE9o9Xv lXpcHw7LlN8ukpLzAEGc63ck4p3Lwtx8dfHs1txBi1b1MAhv9kQ8OrXcEDzXSUig mpAyF2XoVwdjwxrx/OXczptDeY6lVtitjzYFTd06okazPNcjIgBSF+9ZKBholFt3 yVCR+SmqWcO4HpiJDhFahu7PoiT/w8zEdhdQQjGS6Qv+C2Ju7T8M6Lk06FklarWy HTZ4OFZNAwJ6zX+bFSzebLVRT2SfBRXe -----END CERTIFICATE-----Generated at Sat Jun 21 23:51:54 2025 by rpki-client