$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft File: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft (raw, json) Hash identifier: SOtHWLU7leYVKSmNTnWHr0S95X1GKVkS7mQoEA6fcxc= Subject key identifier: BD:58:14:B5:2D:CA:07:E5:E5:F5:F4:0B:AB:12:D7:5B:0D:16:4F:1E Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft Manifest number: 0298 Signing time: Mon 21 Jul 2025 01:58:15 +0000 Manifest this update: Mon 21 Jul 2025 01:58:15 +0000 Manifest next update: Mon 28 Jul 2025 01:58:15 +0000 Files and hashes: 1: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl (hash: 9KfpwmsD7HhQg/hGsbNjm+3adeW66d9N1RtQi6W3frk=) 2: 60A2CF98817811EE9E9A211DC4F9AE02.roa (hash: aB3dythZL58wPQ38hpXRQSekusK0F1zAbGBxXUIobiU=) 3: 195EA596AC8711EEAC4B2427C4F9AE02.roa (hash: ImPy7S1POa8U9HTb3lUMJQCI8t5ncYSuN7VvXCvciPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91447E7, serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Validity Not Before: Jul 21 01:58:15 2025 GMT Not After : Jul 28 01:58:15 2025 GMT Subject: CN=687d9eb7-cd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c7:98:a2:2d:34:51:26:03:38:1c:ea:93:3a: 3e:aa:08:f7:5c:f9:90:c2:6e:fe:7b:97:50:fb:78: d3:16:87:34:1a:66:b5:f2:78:9b:ec:d7:d4:84:a8: 4f:ec:0a:cf:62:6b:ee:31:b2:00:f6:1b:1d:d0:2f: b9:7b:bd:4c:5f:ee:a5:63:51:ed:b0:35:29:a2:bf: 15:6f:f1:89:57:43:7c:50:7f:9b:c2:d8:0b:fa:99: a1:41:b5:f2:1f:c6:b5:d0:11:e4:19:76:ab:e2:70: 05:8b:2f:3f:2c:ec:4e:b6:98:c3:01:97:ab:31:95: 13:0c:1a:90:ba:73:2d:2e:16:1b:2d:cf:3d:fc:8d: 10:1f:61:3f:e5:82:e8:ec:1e:24:1f:00:95:8d:73: 30:8d:f8:1e:32:fc:eb:a8:63:00:a9:20:7e:bc:59: d7:7e:83:a6:0c:b2:f1:31:e8:d2:a5:b7:e4:5a:0e: 43:40:73:8e:c3:13:2a:e6:88:03:6b:c6:67:4b:d8: 8b:47:08:7e:9c:a4:8e:7c:95:db:f1:5c:dd:30:21: e5:e5:6f:fb:3e:55:a8:04:9e:59:43:70:39:dd:78: 26:7d:46:31:9d:ca:8b:16:c1:72:b9:62:0d:13:d3: 38:45:cc:3c:8a:87:48:fc:d0:ff:d8:20:d4:e4:18: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:58:14:B5:2D:CA:07:E5:E5:F5:F4:0B:AB:12:D7:5B:0D:16:4F:1E X509v3 Authority Key Identifier: keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5d:df:b1:5c:cf:7d:46:0f:1a:ed:52:9e:9e:c2:e9:e7:f6: 7f:af:b1:7c:ce:81:12:c5:d5:91:2c:15:9c:c3:65:0b:4f:d7: a4:3e:38:80:09:36:48:6a:b4:0c:85:06:36:18:9f:68:26:59: 50:a1:c6:c9:a3:f7:7c:64:c8:8d:5c:20:07:7f:01:f7:fd:c3: bd:de:9d:2e:88:38:35:51:c9:bd:f5:8b:fc:10:41:19:fc:d2: 77:69:52:54:1f:73:e8:0b:04:62:e3:08:1b:70:69:3c:06:b1: 12:89:14:ba:fa:d0:76:f7:2c:e1:bf:52:b5:8f:4d:5b:d4:96: 00:e7:2e:cf:77:65:1f:71:e5:ed:ba:93:1e:26:f7:fa:2d:42: 4a:d4:17:38:a4:0e:54:fa:e1:f3:4d:3c:0f:5d:a2:bb:a0:1e: d1:d6:d6:d6:1a:a8:f5:9a:e6:12:74:5e:5a:55:89:fd:1d:3b: 8b:d9:a8:df:65:85:dd:7a:89:44:4b:60:ca:ba:6f:02:91:62: 39:e3:f6:a7:f0:c1:68:92:0e:8c:b3:26:f2:d0:35:0b:41:b5: b2:bc:a2:66:af:c3:19:f7:4e:63:fa:c0:bf:19:c1:37:dd:a9: 35:ad:60:35:c2:52:77:71:a2:dd:9e:09:0e:71:c5:e7:d1:76: f9:1f:d1:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3RTcxMTAvBgNVBAUTKEU3N0I4NzE0NjgwNUUyNjA0QjQ5RUVGMkI0QTQzOENC RDJBNTE0MjQwHhcNMjUwNzIxMDE1ODE1WhcNMjUwNzI4MDE1ODE1WjAYMRYwFAYD VQQDEw02ODdkOWViNy1jZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38eYoi00USYDOBzqkzo+qgj3XPmQwm7+e5dQ+3jTFoc0Gma18nib7NfUhKhP 7ArPYmvuMbIA9hsd0C+5e71MX+6lY1HtsDUpor8Vb/GJV0N8UH+bwtgL+pmhQbXy H8a10BHkGXar4nAFiy8/LOxOtpjDAZerMZUTDBqQunMtLhYbLc89/I0QH2E/5YLo 7B4kHwCVjXMwjfgeMvzrqGMAqSB+vFnXfoOmDLLxMejSpbfkWg5DQHOOwxMq5ogD a8ZnS9iLRwh+nKSOfJXb8VzdMCHl5W/7PlWoBJ5ZQ3A53XgmfUYxncqLFsFyuWIN E9M4Rcw8iodI/ND/2CDU5BgGNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1YFLUt ygfl5fX0C6sS11sNFk8eMB8GA1UdIwQYMBaAFOd7hxRoBeJgS0nu8rSkOMvSpRQk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDdFNy9GRTQ0NjlEMjEz MDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRtQkxTZTd5dEtRNHk5S2xG Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzdUhGR2dGNG1CTFNlN3l0S1E0eTlLbEZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDdFNy9GRTQ0NjlEMjEzMDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRt QkxTZTd5dEtRNHk5S2xGQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArXd+xXM99Rg8a7VKensLp5/Z/r7F8zoESxdWRLBWcw2ULT9ekPjiA CTZIarQMhQY2GJ9oJllQocbJo/d8ZMiNXCAHfwH3/cO93p0uiDg1Ucm99Yv8EEEZ /NJ3aVJUH3PoCwRi4wgbcGk8BrESiRS6+tB29yzhv1K1j01b1JYA5y7Pd2UfceXt upMeJvf6LUJK1Bc4pA5U+uHzTTwPXaK7oB7R1tbWGqj1muYSdF5aVYn9HTuL2ajf ZYXdeolES2DKum8CkWI54/an8MFokg6Msyby0DULQbWyvKJmr8MZ905j+sC/GcE3 3ak1rWA1wlJ3caLdngkOccXn0Xb5H9FY -----END CERTIFICATE-----Generated at Mon Jul 21 12:46:58 2025 by rpki-client