$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft File: ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json) Hash identifier: m7NUZ83WT4in6HzOXTxlGExQ47buTp5tbkBGoTEVs24= Subject key identifier: 82:FD:78:C1:1C:54:54:2B:06:46:46:CB:11:6F:D6:53:E4:D0:AD:48 Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED Certificate issuer: /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Certificate serial: 05E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft Manifest number: 05DE Signing time: Fri 18 Jul 2025 23:21:15 +0000 Manifest this update: Fri 18 Jul 2025 23:21:14 +0000 Manifest next update: Fri 25 Jul 2025 23:21:14 +0000 Files and hashes: 1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: hCE8OO45GAmXsz120xXqtnfsHhge2zPKTFURqqwUrDU=) 2: BB01CFB0723811EEA39E0042C4F9AE02.roa (hash: 1LEbeB2sOSy0yXmk2wIYI71rgNCCnZow4wFFO18wbUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1509 (0x5e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944AB, serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Validity Not Before: Jul 18 23:21:14 2025 GMT Not After : Jul 25 23:21:14 2025 GMT Subject: CN=687ad6eb-0910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ed:6b:12:41:3c:5a:2b:81:50:da:5d:b5:11: cf:83:e0:74:e4:a0:3c:43:83:f4:76:80:e7:b8:0c: 7d:57:49:6a:a8:a0:79:f1:8f:cb:9e:9b:cc:4b:38: 48:81:0f:86:36:37:8f:ef:aa:25:32:9f:a1:ca:88: 72:c9:66:b9:f3:a9:24:28:88:3a:83:22:ec:14:35: 6c:ef:c0:3f:53:c5:d8:e3:0f:70:79:39:22:5d:f8: 3a:f0:c9:e6:56:5e:d7:87:f0:ae:dc:d8:38:88:5f: 97:97:31:b5:24:65:af:d6:8d:20:a6:0f:4f:93:89: d0:23:53:51:c6:f8:de:25:8c:2c:9f:f2:10:9d:8b: 9f:95:27:d8:6e:e6:4a:d2:d0:8b:01:33:bb:7b:26: a5:a8:5f:6d:5d:b2:48:a6:7c:cf:d2:96:37:0f:a0: d5:b1:ae:59:1b:73:1b:60:70:1d:7b:87:f8:e3:f2: e9:8d:ad:77:44:8f:37:9c:89:dc:c3:8f:9c:7d:2b: 35:5f:42:ab:a0:5c:c3:8f:ae:85:84:92:08:a6:aa: d5:36:ea:1a:e3:50:ab:1d:16:7e:9e:fb:18:ad:61: 76:b9:eb:42:5f:ad:43:6c:a3:f2:19:b2:8a:2d:3e: 67:b2:13:e6:f9:74:0f:5c:73:dd:0a:db:c2:35:57: ff:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FD:78:C1:1C:54:54:2B:06:46:46:CB:11:6F:D6:53:E4:D0:AD:48 X509v3 Authority Key Identifier: keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:c8:c7:43:f7:bc:b3:b1:92:a8:33:0c:fa:c8:4b:de:b7:0c: 89:03:54:25:56:eb:77:42:cf:57:60:b9:ae:6b:f1:53:f4:6f: cc:61:70:a2:d5:b6:be:8e:36:d6:5c:31:91:40:de:24:1c:b7: d9:d8:21:d3:d6:88:22:0f:fe:cd:b3:e1:96:28:d6:29:a7:b3: 0b:89:74:e3:f6:c9:8d:91:5c:d4:d4:9c:46:e1:ad:52:8b:9b: 6a:45:0e:59:99:10:e2:4f:43:5c:5a:aa:7d:fb:72:03:fe:45: b9:69:6d:59:91:5a:6a:02:8d:f9:27:9a:cf:b6:64:bd:26:c9: a3:ea:72:f1:3c:09:ba:8f:dc:40:16:8d:28:d4:35:c7:bc:3c: 71:cc:3b:a4:2b:1a:98:00:16:31:eb:d3:5e:a5:9c:c3:5a:c4: 55:08:1a:fa:38:04:75:4a:fa:d0:d0:9a:6e:53:e9:4f:eb:0b: 34:29:f4:64:aa:89:c0:5c:e9:80:52:0b:7e:98:2d:d6:29:23: 1c:71:02:c8:d8:6e:73:7c:d1:4b:8b:f0:06:0c:59:95:ed:1e: 81:94:e4:05:9c:9c:e5:41:21:05:52:0f:6b:6a:55:e0:75:c4: 80:07:d4:e0:74:0d:3a:62:51:84:ba:e6:bc:2b:8a:60:74:d1: 86:94:d1:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0QUIxMTAvBgNVBAUTKDZBMTIxOTcyNkQyMzlDODJGNUE0NDYwMTEyN0QxQUY4 NzI1Q0UwRUQwHhcNMjUwNzE4MjMyMTE0WhcNMjUwNzI1MjMyMTE0WjAYMRYwFAYD VQQDEw02ODdhZDZlYi0wOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5e1rEkE8WiuBUNpdtRHPg+B05KA8Q4P0doDnuAx9V0lqqKB58Y/LnpvMSzhI gQ+GNjeP76olMp+hyohyyWa586kkKIg6gyLsFDVs78A/U8XY4w9weTkiXfg68Mnm Vl7Xh/Cu3Ng4iF+XlzG1JGWv1o0gpg9Pk4nQI1NRxvjeJYwsn/IQnYuflSfYbuZK 0tCLATO7eyalqF9tXbJIpnzP0pY3D6DVsa5ZG3MbYHAde4f44/Lpja13RI83nInc w4+cfSs1X0KroFzDj66FhJIIpqrVNuoa41CrHRZ+nvsYrWF2uetCX61DbKPyGbKK LT5nshPm+XQPXHPdCtvCNVf/OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIL9eMEc VFQrBkZGyxFv1lPk0K1IMB8GA1UdIwQYMBaAFGoSGXJtI5yC9aRGARJ9GvhyXODt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRBQi82RkUzMDZBNkMy QzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5JTDFwRVlCRW4wYS1ISmM0 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoSVpjbTBqbklMMXBFWUJFbjBhLUhKYzRPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDRBQi82RkUzMDZBNkMyQzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5J TDFwRVlCRW4wYS1ISmM0TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQyMdD97yzsZKoMwz6yEvetwyJA1QlVut3Qs9XYLmua/FT9G/MYXCi 1ba+jjbWXDGRQN4kHLfZ2CHT1ogiD/7Ns+GWKNYpp7MLiXTj9smNkVzU1JxG4a1S i5tqRQ5ZmRDiT0NcWqp9+3ID/kW5aW1ZkVpqAo35J5rPtmS9Jsmj6nLxPAm6j9xA Fo0o1DXHvDxxzDukKxqYABYx69NepZzDWsRVCBr6OAR1SvrQ0JpuU+lP6ws0KfRk qonAXOmAUgt+mC3WKSMccQLI2G5zfNFLi/AGDFmV7R6BlOQFnJzlQSEFUg9ralXg dcSAB9TgdA06YlGEuua8K4pgdNGGlNHr -----END CERTIFICATE-----Generated at Sun Jul 20 10:57:12 2025 by rpki-client