$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: hlddi9EhirHwGKEAQpYNbkVdTRlYCVespSJdj3JaL5M= Subject key identifier: 90:25:1D:8A:C7:6B:C5:FF:01:65:B5:83:4B:31:DD:B0:EC:9A:D5:68 Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 08B7 Signing time: Fri 18 Jul 2025 20:43:15 +0000 Manifest this update: Fri 18 Jul 2025 20:43:15 +0000 Manifest next update: Fri 25 Jul 2025 20:43:15 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: IsPP+XgSSeVRRoSdILHipQOZe/3OE6pRfly93ufKN2I=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: JY394gUy9qqM6BqtEt3A+TeeEC3ZSaP+KRzIxp12INs=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Jul 18 20:43:15 2025 GMT Not After : Jul 25 20:43:15 2025 GMT Subject: CN=687ab1e3-77ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:ed:30:80:e4:91:2b:2e:eb:65:da:95:ec: c5:2b:15:3f:c4:78:d7:67:af:d4:a0:f0:61:95:f8: e9:e6:12:33:a1:21:3a:e2:c6:96:df:30:17:44:b7: 9e:70:4c:c4:56:1c:82:66:7d:6a:2e:92:20:e6:9c: 19:ca:77:b2:83:74:ec:54:57:d0:85:ee:ac:83:23: e5:85:ed:85:a6:d5:ab:e5:6d:fc:fe:c5:11:e2:7f: 98:39:ae:d0:c7:05:c0:69:6f:78:28:b1:49:b4:7e: 7d:2a:a9:24:25:3d:2d:a9:f1:44:8b:a3:d1:1d:82: a3:4b:8b:6f:8e:4b:07:7a:05:22:a6:9d:ab:9c:06: bd:6b:fb:4f:d9:aa:83:39:ba:0a:de:95:e4:8b:6d: f5:e2:3d:3f:72:a1:0f:cb:9d:c2:80:ff:79:c3:17: 76:23:97:02:4a:51:9f:aa:6a:a4:f0:8c:f9:0f:30: 82:b0:f3:b6:e3:40:d1:f9:51:3f:67:c1:55:78:0c: 22:2c:28:eb:e3:c2:eb:67:7c:6a:4c:68:96:b1:3d: c7:79:35:33:4b:21:68:86:8d:c3:89:fc:55:d9:26: b4:1d:e3:9d:fd:02:5f:79:c0:cb:60:b2:b7:8d:ab: 78:ad:8d:20:f3:cb:28:58:ca:b4:60:e3:a8:d2:6c: 7c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:25:1D:8A:C7:6B:C5:FF:01:65:B5:83:4B:31:DD:B0:EC:9A:D5:68 X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f4:89:4c:b9:0d:0f:15:16:fd:32:28:a9:16:10:08:24:c6: 43:72:d2:1f:39:dc:7c:a7:19:49:eb:e2:44:15:90:9b:4a:7c: d5:9c:8e:a3:18:f7:6e:6c:2f:1b:b7:fe:52:a3:75:5d:02:02: ef:d9:d8:5f:e4:40:01:eb:17:2a:df:57:81:4e:fe:17:50:70: 28:77:d9:82:b2:57:6d:71:eb:55:74:60:87:70:dd:e4:ca:85: 62:cb:2d:d1:f8:a1:91:b7:4e:4e:d1:1e:19:52:d0:cc:c7:34: eb:0f:a7:63:5c:02:f1:29:11:42:37:d2:1e:05:10:7a:fd:49: 52:35:aa:70:f8:01:a6:59:3e:88:0f:e5:ab:f1:76:95:a9:5a: 1b:b8:e7:e5:8d:cd:7c:90:b6:2d:74:b5:a6:a0:15:7d:01:3f: 81:39:ce:9b:7f:b0:c4:49:29:29:3d:f2:c7:cb:cb:c0:d8:74: bf:b1:09:57:b4:a8:8f:93:41:3d:36:fe:d2:2c:30:db:fa:79: 9e:ef:4b:af:db:f6:3c:4e:58:82:6d:65:a3:6e:39:2b:65:68: 92:5a:ce:ca:25:3e:0e:06:07:89:54:d2:82:9d:5c:59:7b:ae: d1:1a:7f:d5:ec:d0:a2:4d:5b:cb:6a:18:91:44:b1:82:63:49: 1f:51:03:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUwNzE4MjA0MzE1WhcNMjUwNzI1MjA0MzE1WjAYMRYwFAYD VQQDEw02ODdhYjFlMy03N2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVftMIDkkSsu62XalezFKxU/xHjXZ6/UoPBhlfjp5hIzoSE64saW3zAXRLee cEzEVhyCZn1qLpIg5pwZyneyg3TsVFfQhe6sgyPlhe2FptWr5W38/sUR4n+YOa7Q xwXAaW94KLFJtH59KqkkJT0tqfFEi6PRHYKjS4tvjksHegUipp2rnAa9a/tP2aqD OboK3pXki2314j0/cqEPy53CgP95wxd2I5cCSlGfqmqk8Iz5DzCCsPO240DR+VE/ Z8FVeAwiLCjr48LrZ3xqTGiWsT3HeTUzSyFoho3DifxV2Sa0HeOd/QJfecDLYLK3 jat4rY0g88soWMq0YOOo0mx8jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAlHYrH a8X/AWW1g0sx3bDsmtVoMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA9IlMuQ0PFRb9MiipFhAIJMZDctIfOdx8pxlJ6+JEFZCbSnzVnI6j GPdubC8bt/5So3VdAgLv2dhf5EAB6xcq31eBTv4XUHAod9mCsldtcetVdGCHcN3k yoViyy3R+KGRt05O0R4ZUtDMxzTrD6djXALxKRFCN9IeBRB6/UlSNapw+AGmWT6I D+Wr8XaVqVobuOfljc18kLYtdLWmoBV9AT+BOc6bf7DESSkpPfLHy8vA2HS/sQlX tKiPk0E9Nv7SLDDb+nme70uv2/Y8TliCbWWjbjkrZWiSWs7KJT4OBgeJVNKCnVxZ e67RGn/V7NCiTVvLahiRRLGCY0kfUQP4 -----END CERTIFICATE-----Generated at Sun Jul 20 07:48:27 2025 by rpki-client