$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft File: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json) Hash identifier: Z1bYdYD43cl31akhQvJHQDD/OR53sTuISQ/BXdBiIB8= Subject key identifier: 85:48:CE:A4:E0:80:CB:A5:EB:27:EC:42:59:19:BC:CB:B3:AD:66:E9 Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Certificate serial: 3533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft Manifest number: 34E1 Signing time: Fri 18 Jul 2025 14:17:39 +0000 Manifest this update: Fri 18 Jul 2025 14:17:38 +0000 Manifest next update: Fri 25 Jul 2025 14:17:38 +0000 Files and hashes: 1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: kMkBVCAxgvv5PIIpdTw8/Z3k7R27nXhsk76jbyQ5CT0=) 2: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: jqW67pSJSIsRiaBgE6s/DK3BAL3JeM6fk0sbod9Ihss=) 3: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: m0T5p+j/9s+rm9D6YdSh//2Alx2Eae+Du8lbaB1hR7Y=) 4: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: IkqW+PwyXlQ+AUTKEJ4fHo5q5mHtKj5Ve8Q8p0ADu48=) 5: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: tqonfMb2T4kEzGLFTTW3PK/xQqepl87jr8dA78s4VGI=) 6: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: D48/pxU7MzDuerY2hyHqIJz8Ni5AYoPlrPyxeWvQn8M=) 7: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: H76rrDZxK8h/g51b1krAIQ2ulCKuPO82m4joCbnFfEs=) 8: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: rb6m6NgtqMNqMVoEYBcUFewdPh6xLzsagwAw8cSDCbE=) 9: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: kN3zyoollwJXDugnYM0yHLk48cRpRCSo426eiI4jnbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13619 (0x3533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Validity Not Before: Jul 18 14:17:38 2025 GMT Not After : Jul 25 14:17:38 2025 GMT Subject: CN=687a5782-1ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:5e:47:9a:42:78:32:15:bb:3e:bb:c7:b1: 0b:58:78:7e:4c:15:83:ba:98:6a:6d:e7:5a:0c:65: ea:2b:e9:ae:c5:da:79:00:27:7c:07:8d:53:74:e2: 1d:eb:9f:cf:32:29:44:79:02:cc:fa:84:a9:42:55: 0c:86:cf:79:c9:10:a0:7d:e5:b9:0f:c3:63:ed:d5: 99:30:27:56:d5:f0:29:d9:f9:28:a3:f4:d2:83:49: a5:75:2d:6e:87:6d:c3:05:a0:59:78:3f:58:c7:6d: 4a:2d:48:0e:65:dc:e2:3f:ed:28:fa:8f:8e:5f:f9: 30:63:65:57:4e:28:c2:6c:24:71:a7:e0:52:b6:59: 82:a0:74:04:4b:88:16:6b:d2:77:4b:0f:c4:42:5e: 27:f3:08:27:71:71:4a:a0:46:75:99:2a:55:2f:53: da:4b:27:36:14:11:64:1a:a5:f4:2d:62:cf:12:25: 4a:f7:b2:c2:74:74:9c:88:a8:65:64:94:73:7c:d0: 90:07:e2:9d:bd:c9:3f:72:84:a5:e4:34:80:18:62: 1b:99:09:dd:8a:ba:bf:0a:63:c4:63:5a:8a:3f:37: 1f:8c:0a:b7:c4:00:b1:a8:66:61:f8:92:1e:fc:47: e4:a1:86:a0:11:aa:b9:34:c5:e5:d2:49:dd:74:01: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:48:CE:A4:E0:80:CB:A5:EB:27:EC:42:59:19:BC:CB:B3:AD:66:E9 X509v3 Authority Key Identifier: keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:13:42:ad:64:4c:12:f2:6f:6b:3c:03:ac:49:1f:42:28:b7: 10:65:96:1f:3a:02:e0:eb:51:40:1f:7e:2a:53:c9:5c:7e:2a: 36:00:d4:ec:b4:b7:c9:74:d5:50:dd:5a:99:b5:bb:51:04:bb: 0c:5d:2a:f9:b2:5c:f1:84:18:9e:ec:20:eb:61:a7:2e:76:aa: 9d:c2:02:bf:66:06:db:e8:53:f7:3c:c6:86:e0:c3:af:35:f1: 2c:f0:d0:c3:74:61:89:0b:7e:a3:c6:7c:81:83:4b:4b:cb:16: 55:b5:42:ee:ee:e7:4c:ef:64:40:27:7e:91:e6:71:1a:5e:88: 6f:4f:c7:ab:06:fa:77:8f:f3:48:14:5a:9e:e1:cb:fb:e2:c1: 4f:22:a7:6e:7b:8e:ab:db:1d:f6:52:ac:04:b7:e6:77:d9:0e: b8:fc:f7:a3:77:2d:c6:2d:3e:38:91:b2:07:b7:90:a1:5f:60: 77:a3:48:28:63:21:3e:19:77:77:cf:4c:3d:67:4f:ea:fa:cf: a9:18:e3:0d:36:18:14:6b:7e:ed:36:81:5a:91:9b:13:5f:27: 49:aa:6d:4b:9c:c3:35:15:b4:38:72:c7:28:e1:e0:d6:57:cf: ea:aa:f7:a0:34:c6:10:d5:cf:e3:aa:0f:26:44:13:41:dd:d1: 15:70:ca:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyRUQxMTAvBgNVBAUTKDY4RkFGOURBQ0UxOTc2OENBQzNENEVEN0JCMjQzNzJC RkZBNkQwMTgwHhcNMjUwNzE4MTQxNzM4WhcNMjUwNzI1MTQxNzM4WjAYMRYwFAYD VQQDEw02ODdhNTc4Mi0xZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp79eR5pCeDIVuz67x7ELWHh+TBWDuphqbedaDGXqK+muxdp5ACd8B41TdOId 65/PMilEeQLM+oSpQlUMhs95yRCgfeW5D8Nj7dWZMCdW1fAp2fkoo/TSg0mldS1u h23DBaBZeD9Yx21KLUgOZdziP+0o+o+OX/kwY2VXTijCbCRxp+BStlmCoHQES4gW a9J3Sw/EQl4n8wgncXFKoEZ1mSpVL1PaSyc2FBFkGqX0LWLPEiVK97LCdHSciKhl ZJRzfNCQB+Kdvck/coSl5DSAGGIbmQndirq/CmPEY1qKPzcfjAq3xACxqGZh+JIe /EfkoYagEaq5NMXl0knddAFsRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVIzqTg gMul6yfsQlkZvMuzrWbpMB8GA1UdIwQYMBaAFGj6+drOGXaMrD1O17skNyv/ptAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzJFRC9FRDhDOTY5MDFE NkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRveXNQVTdYdXlRM0tfLW0w QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQcjUyczRaZG95c1BVN1h1eVEzS18tbTBCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzJFRC9FRDhDOTY5MDFENkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRv eXNQVTdYdXlRM0tfLW0wQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOE0KtZEwS8m9rPAOsSR9CKLcQZZYfOgLg61FAH34qU8lcfio2ANTs tLfJdNVQ3VqZtbtRBLsMXSr5slzxhBie7CDrYacudqqdwgK/Zgbb6FP3PMaG4MOv NfEs8NDDdGGJC36jxnyBg0tLyxZVtULu7udM72RAJ36R5nEaXohvT8erBvp3j/NI FFqe4cv74sFPIqdue46r2x32UqwEt+Z32Q64/Pejdy3GLT44kbIHt5ChX2B3o0go YyE+GXd3z0w9Z0/q+s+pGOMNNhgUa37tNoFakZsTXydJqm1LnMM1FbQ4csco4eDW V8/qqvegNMYQ1c/jqg8mRBNB3dEVcMpR -----END CERTIFICATE-----Generated at Sun Jul 20 10:03:00 2025 by rpki-client