$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft File: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft (raw, json) Hash identifier: YhX8cHUqfPVtHzyJXi4MDKv9Y4VmOFi6daWTiaz/Eeg= Subject key identifier: 96:74:01:40:F3:82:F8:25:52:15:3A:93:B4:6F:27:0C:08:70:01:0D Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B Certificate issuer: /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B Certificate serial: 054B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft Manifest number: 0542 Signing time: Sun 20 Jul 2025 23:39:15 +0000 Manifest this update: Sun 20 Jul 2025 23:39:15 +0000 Manifest next update: Sun 27 Jul 2025 23:39:15 +0000 Files and hashes: 1: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl (hash: xkrlmMwyXQyV217AMXM0t1tBfCk7mwT72+TVF57XceM=) 2: 0006ED8263DD11EC9A50031BC4F9AE02.roa (hash: wRribXkCp4s0JF1oTM02hSLF0pchc7JmKUBHKJxUnUY=) 3: D249CE5EFE8911EBA7BEB564C4F9AE02.roa (hash: Kl/jYxUXqCil/0G6LuLn2peWneSNh/bHX1vc6KhRG0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1355 (0x54b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982FB, serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B Validity Not Before: Jul 20 23:39:15 2025 GMT Not After : Jul 27 23:39:15 2025 GMT Subject: CN=687d7e23-a8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8d:5f:70:7c:4b:42:71:23:2a:8a:d8:4f:8e: e0:4f:d7:bc:a3:a6:7e:e8:d8:9b:61:a7:6e:64:78: cc:15:82:39:70:41:10:20:4f:f5:8c:0f:ea:7d:a7: 3f:5b:b6:29:cf:0b:84:2f:d9:c6:73:5a:0f:8f:18: c7:91:d6:24:41:0c:5f:c1:47:46:a5:46:07:a1:c7: b5:5b:03:b9:e1:0e:bd:eb:f9:dc:3a:73:03:00:a5: 33:c9:e6:8c:2d:82:84:85:f1:74:29:2b:a1:f2:ce: f9:88:de:2b:60:e5:46:76:65:5b:20:14:ad:8e:4c: 36:75:23:10:9e:b9:14:20:23:e3:e3:81:03:b3:b4: 5a:3a:79:44:1f:d8:1f:a1:95:7e:ac:0a:fc:ed:76: fe:40:4f:77:ed:4a:38:5a:c3:03:f8:4f:e6:15:41: 57:72:01:95:6a:b9:30:ba:c0:5a:de:ed:50:b7:e0: 53:a0:88:49:96:95:86:90:e1:9f:bf:04:1f:ea:9f: 17:24:2b:ad:c2:2d:24:0d:e8:67:db:c5:93:3b:d1: 2f:bc:03:92:45:5e:b3:19:c3:21:77:6a:e2:30:4f: 87:cb:d0:a3:f1:67:2b:e1:f2:ae:fc:db:ec:c0:ac: 95:cc:8d:85:fc:a6:49:30:7f:f7:a9:d2:2d:43:a7: cd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:74:01:40:F3:82:F8:25:52:15:3A:93:B4:6F:27:0C:08:70:01:0D X509v3 Authority Key Identifier: keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fd:aa:58:3f:5c:01:be:7d:56:8e:12:22:ce:c7:4a:f4:d7: c1:80:dd:81:27:1a:f0:79:94:99:05:9c:f3:80:99:a3:4d:ed: 29:fa:14:06:b1:8c:90:6a:9c:d4:2c:79:31:e1:35:57:d1:63: 82:5b:ae:5c:b5:27:a9:49:8c:4a:44:c7:4f:0b:78:79:cb:78: 28:a4:37:c7:64:7c:59:8f:c2:9f:f5:96:9b:b3:79:27:ff:67: d2:37:42:e7:e1:fa:34:2e:8a:25:4d:de:15:98:fb:4b:54:f8: 49:2e:63:97:2c:22:5b:ee:10:12:5a:02:67:ad:4a:1a:a3:76: 1e:05:07:1e:09:06:56:74:21:77:19:9d:44:03:2e:3c:70:f5: f8:9a:2a:5a:9e:5f:8c:9d:ea:b1:1c:23:b3:69:03:c9:4c:0b: e0:c8:5b:75:88:72:0a:27:32:b8:73:19:0f:53:8f:6f:0e:af: 0e:90:e8:3f:82:9e:69:4a:a8:bf:73:c9:22:47:a3:6c:a6:28: 12:4a:d4:43:da:6f:b3:38:b8:92:3b:06:af:a9:72:62:30:95: ae:8f:1b:94:7d:d2:d6:2c:1e:2f:b5:6e:74:05:cc:dc:60:05: 9d:1d:f7:16:0d:00:c4:86:60:44:77:50:ff:40:d6:a7:53:d8: e6:3b:c0:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRkIxMTAvBgNVBAUTKDQ2NDlCMjQ5RTQyNkMyQjhGQUFGRjYyRjI3OTBGMkU2 N0IwMEZDNUIwHhcNMjUwNzIwMjMzOTE1WhcNMjUwNzI3MjMzOTE1WjAYMRYwFAYD VQQDEw02ODdkN2UyMy1hOGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o1fcHxLQnEjKorYT47gT9e8o6Z+6NibYaduZHjMFYI5cEEQIE/1jA/qfac/ W7YpzwuEL9nGc1oPjxjHkdYkQQxfwUdGpUYHoce1WwO54Q696/ncOnMDAKUzyeaM LYKEhfF0KSuh8s75iN4rYOVGdmVbIBStjkw2dSMQnrkUICPj44EDs7RaOnlEH9gf oZV+rAr87Xb+QE937Uo4WsMD+E/mFUFXcgGVarkwusBa3u1Qt+BToIhJlpWGkOGf vwQf6p8XJCutwi0kDehn28WTO9EvvAOSRV6zGcMhd2riME+Hy9Cj8Wcr4fKu/Nvs wKyVzI2F/KZJMH/3qdItQ6fN1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZ0AUDz gvglUhU6k7RvJwwIcAENMB8GA1UdIwQYMBaAFEZJsknkJsK4+q/2LyeQ8uZ7APxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJGQi85OTRENkRBNkZF ODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdyajZyX1l2SjVEeTVuc0Ff RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JrbXlTZVFtd3JqNnJfWXZKNUR5NW5zQV9Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJGQi85OTRENkRBNkZFODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdy ajZyX1l2SjVEeTVuc0FfRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm/apYP1wBvn1WjhIizsdK9NfBgN2BJxrweZSZBZzzgJmjTe0p+hQG sYyQapzULHkx4TVX0WOCW65ctSepSYxKRMdPC3h5y3gopDfHZHxZj8Kf9Zabs3kn /2fSN0Ln4fo0LoolTd4VmPtLVPhJLmOXLCJb7hASWgJnrUoao3YeBQceCQZWdCF3 GZ1EAy48cPX4mipanl+MneqxHCOzaQPJTAvgyFt1iHIKJzK4cxkPU49vDq8OkOg/ gp5pSqi/c8kiR6NspigSStRD2m+zOLiSOwavqXJiMJWujxuUfdLWLB4vtW50Bczc YAWdHfcWDQDEhmBEd1D/QNanU9jmO8Cq -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:35 2025 by rpki-client