$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: eFkbM8AYDZmnHZetW0NwdUAHK47Z6fOR6bsKvWUWMwc= Subject key identifier: 66:A6:76:69:0B:90:59:EB:0E:95:90:2F:82:E5:CA:37:ED:F3:80:E0 Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 01E3 Signing time: Mon 21 Jul 2025 02:44:30 +0000 Manifest this update: Mon 21 Jul 2025 02:44:30 +0000 Manifest next update: Mon 28 Jul 2025 02:44:30 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: GlXQI6fILIu0/+QepbRJosTYxL0ut6h8V6F9dYYbicw=) 2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: O+0diP1NN2sNjxwB1I26KY0g98dCGDnYbn9P30v6lyY=) 3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: AmVibyk3kyTCjjmayzEhVr/vWHjKhAHUPjsO+1Nf/Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: Jul 21 02:44:30 2025 GMT Not After : Jul 28 02:44:30 2025 GMT Subject: CN=687da98e-e009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:60:f9:75:8e:11:0c:aa:cc:5a:d4:e8:b3: a0:12:78:05:2b:12:5c:f3:ee:40:bc:33:c0:0d:60: 9d:bc:dc:e8:3f:b0:99:fe:7b:c8:71:a6:e9:3a:3c: 4c:7d:d6:b3:6c:bd:93:b1:38:39:25:15:38:16:17: 48:6d:0a:34:ca:37:fd:c2:64:63:fd:e8:26:e0:44: 75:f1:02:c4:d9:b2:13:65:da:43:6d:a0:e1:e4:c6: 86:1b:90:72:21:ee:4c:7d:3c:b5:d0:05:4e:b5:65: a2:ba:b4:fa:2c:5f:b8:cc:61:30:76:0e:70:98:b9: 8a:42:33:bc:12:3c:1e:21:1b:e3:07:d8:82:3d:40: 85:24:91:54:7d:f0:9b:b7:8d:97:76:86:21:45:00: aa:a8:5f:ce:d1:8b:1a:d2:72:ca:14:58:b6:5e:87: 5e:fa:68:49:6d:89:bb:a4:d5:7e:45:44:7d:34:36: df:51:7f:63:d8:99:36:12:48:28:12:b1:4b:07:01: 85:31:9c:c2:a9:a9:92:3b:78:06:35:15:9c:ba:77: de:39:89:76:78:41:7f:db:ef:93:13:60:2f:78:8c: 32:c7:30:e0:70:d8:b9:ff:23:fc:51:c0:12:58:8c: 6e:df:bc:39:17:d6:2b:e5:50:44:cf:51:0f:6b:a9: 5e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A6:76:69:0B:90:59:EB:0E:95:90:2F:82:E5:CA:37:ED:F3:80:E0 X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e7:84:b5:61:bd:d8:05:bd:ff:db:bc:6d:a1:c1:78:04:33: 44:17:91:77:f8:e7:11:cc:64:75:81:0d:fd:db:72:bf:6c:d6: fb:bc:e2:52:c2:4f:37:d0:46:36:cc:b6:a1:02:22:86:b3:50: a5:7c:61:fe:d2:62:90:4d:6e:72:9c:06:9b:7b:f9:f7:be:7e: ce:39:fd:53:a5:df:ba:12:70:9f:61:5b:bf:54:fd:14:2b:d6: f2:c0:39:f2:45:21:6a:88:7d:47:af:64:e5:50:41:92:2d:b1: e9:6b:59:66:cd:52:e4:99:31:1c:f8:4e:e4:87:31:d0:6a:04: 69:a9:82:1f:6e:f1:61:38:8a:65:18:88:93:0b:04:f8:b8:ac: bc:e8:ed:e9:87:32:8f:a6:0e:3f:71:76:b8:d6:6f:bf:49:77: d2:16:0c:5d:dc:00:be:dc:ec:23:b1:ac:fc:06:e7:22:bc:ad: 37:15:84:14:b0:3f:b8:bf:7f:d5:f4:3f:be:07:ae:08:9b:8d: 0a:98:cc:3b:63:a9:e4:b9:85:2e:6d:d4:0b:40:1e:a6:b6:85: 69:3d:0d:0c:b0:2f:2e:b2:78:51:e4:80:14:0e:1e:60:c4:26: ea:2a:66:d5:f8:ab:3b:7c:ba:75:17:fc:e6:b2:bb:64:af:a7: 3b:f5:06:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjUwNzIxMDI0NDMwWhcNMjUwNzI4MDI0NDMwWjAYMRYwFAYD VQQDEw02ODdkYTk4ZS1lMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtG1g+XWOEQyqzFrU6LOgEngFKxJc8+5AvDPADWCdvNzoP7CZ/nvIcabpOjxM fdazbL2TsTg5JRU4FhdIbQo0yjf9wmRj/egm4ER18QLE2bITZdpDbaDh5MaGG5By Ie5MfTy10AVOtWWiurT6LF+4zGEwdg5wmLmKQjO8EjweIRvjB9iCPUCFJJFUffCb t42XdoYhRQCqqF/O0Ysa0nLKFFi2Xode+mhJbYm7pNV+RUR9NDbfUX9j2Jk2Ekgo ErFLBwGFMZzCqamSO3gGNRWcunfeOYl2eEF/2++TE2AveIwyxzDgcNi5/yP8UcAS WIxu37w5F9Yr5VBEz1EPa6leZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGamdmkL kFnrDpWQL4Llyjft84DgMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE54S1Yb3YBb3/27xtocF4BDNEF5F3+OcRzGR1gQ3923K/bNb7vOJS wk830EY2zLahAiKGs1ClfGH+0mKQTW5ynAabe/n3vn7OOf1Tpd+6EnCfYVu/VP0U K9bywDnyRSFqiH1Hr2TlUEGSLbHpa1lmzVLkmTEc+E7khzHQagRpqYIfbvFhOIpl GIiTCwT4uKy86O3phzKPpg4/cXa41m+/SXfSFgxd3AC+3Owjsaz8BucivK03FYQU sD+4v3/V9D++B64Im40KmMw7Y6nkuYUubdQLQB6mtoVpPQ0MsC8usnhR5IAUDh5g xCbqKmbV+Ks7fLp1F/zmsrtkr6c79QZT -----END CERTIFICATE-----Generated at Mon Jul 21 05:48:59 2025 by rpki-client