$ rpki-client -vvf rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft File: 92edhcQsfjk3x9JAjAZ5uVznEXk.mft (raw, json) Hash identifier: Q9bLR3az8l9/buYcxfcxTO4d3udizgB97kr+VexfF40= Subject key identifier: 5E:20:AF:66:D2:20:7A:EC:54:8F:0C:93:D9:21:95:93:0D:46:39:34 Authority key identifier: F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79 Certificate issuer: /CN=A91A82F8/serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft Manifest number: 47 Signing time: Sat 19 Jul 2025 07:40:04 +0000 Manifest this update: Sat 19 Jul 2025 07:40:04 +0000 Manifest next update: Sat 26 Jul 2025 07:40:04 +0000 Files and hashes: 1: 92edhcQsfjk3x9JAjAZ5uVznEXk.crl (hash: UjUgKbKF0aVu64lWlfJ4tYOQOxg3ZYPtTLGQDgRFBsM=) 2: 01103988FB5911EF8B32E613C4F9AE02.roa (hash: R1vera/J21wpLzxHOvQ0xtue7DdueGMpTshOHPQT8vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A82F8, serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179 Validity Not Before: Jul 19 07:40:04 2025 GMT Not After : Jul 26 07:40:04 2025 GMT Subject: CN=687b4bd4-339b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:05:b6:ff:39:4a:68:94:05:76:d3:06:c2: bf:01:6b:c7:61:75:41:25:89:54:8c:6c:da:12:ec: 4c:b2:b4:c1:08:b8:b4:d1:5e:a5:b0:d2:20:f3:b0: 7e:ed:8d:92:3b:09:ea:ce:74:32:7d:2f:65:6a:3a: 9e:92:23:24:7f:a1:81:df:e7:f1:00:bb:7f:ff:a2: ef:69:5d:c9:41:37:1e:1b:b4:73:ec:ab:4e:75:1a: 03:c9:0a:c4:d4:b7:cc:e7:47:39:4d:a0:62:dc:3c: df:e6:f3:15:dc:d1:3c:08:af:85:58:04:88:01:2b: a7:13:39:ba:5b:df:8e:11:fd:4d:5b:ab:2f:55:0c: 13:fe:68:57:a2:75:74:0f:81:17:df:66:85:18:04: ca:82:a0:85:b8:6d:56:81:60:f8:cb:80:5d:d4:51: 3a:93:32:1e:4c:6b:3c:e3:3b:df:ef:6a:a7:52:e5: 4e:82:cd:a2:e6:d1:ac:58:fb:77:ae:f7:21:e8:90: f7:63:2b:f9:c6:3d:8a:32:67:a1:95:85:07:8e:56: cc:06:d3:24:72:8e:67:13:64:72:38:55:24:b3:5b: bf:78:11:d5:15:b6:35:bc:bf:3a:ea:bc:c9:ac:ad: 2c:76:27:b5:7e:f9:5d:fb:1c:36:2a:b6:f4:65:f3: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:20:AF:66:D2:20:7A:EC:54:8F:0C:93:D9:21:95:93:0D:46:39:34 X509v3 Authority Key Identifier: keyid:F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:13:51:e7:9f:35:b4:12:52:5a:28:75:1c:29:06:84:71:72: 84:1f:6b:bb:16:64:f9:a1:5c:54:35:49:84:12:a6:70:b0:5a: c1:de:90:bc:23:14:ea:6b:ce:86:63:dc:42:b1:e2:7d:e6:02: 57:b5:8a:7f:dd:7c:b0:d7:87:16:df:71:63:ba:93:56:45:bd: ec:40:ea:78:bb:02:2e:90:80:74:07:f5:77:93:93:8b:70:11: a3:bd:34:28:dd:4a:bd:23:d3:1c:56:41:0b:82:a2:08:e0:a9: f2:60:d7:27:08:e3:5e:a2:8b:fa:23:15:4b:f3:d4:f5:0d:d0: 6e:80:3b:a6:4e:84:61:9c:7e:e7:8f:ac:b6:f9:c1:71:d7:90: 66:b4:6f:47:97:54:ff:a0:8a:57:46:f1:bc:45:a1:d0:53:d0: be:17:9c:77:3a:27:8a:f7:6d:0d:81:fc:0f:aa:2b:20:72:ab: 1d:4d:ce:30:0f:1a:d4:fc:bb:0f:ae:0c:6c:63:78:a0:57:59: 0e:54:4d:ef:c2:31:05:b7:50:47:1a:cc:90:82:31:23:5a:fa: 82:99:65:37:86:37:fa:a9:af:4f:c1:0b:a8:0d:72:a9:90:aa: 34:f9:54:f4:f7:ed:49:12:84:fb:13:a4:c7:69:29:fd:ad:60: f9:09:59:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODJGODExMC8GA1UEBRMoRjc2NzlEODVDNDJDN0UzOTM3QzdEMjQwOEMwNjc5Qjk1 Q0U3MTE3OTAeFw0yNTA3MTkwNzQwMDRaFw0yNTA3MjYwNzQwMDRaMBgxFjAUBgNV BAMTDTY4N2I0YmQ0LTMzOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC91QW2/zlKaJQFdtMGwr8Ba8dhdUEliVSMbNoS7EyytMEIuLTRXqWw0iDzsH7t jZI7CerOdDJ9L2VqOp6SIyR/oYHf5/EAu3//ou9pXclBNx4btHPsq051GgPJCsTU t8znRzlNoGLcPN/m8xXc0TwIr4VYBIgBK6cTObpb344R/U1bqy9VDBP+aFeidXQP gRffZoUYBMqCoIW4bVaBYPjLgF3UUTqTMh5MazzjO9/vaqdS5U6CzaLm0axY+3eu 9yHokPdjK/nGPYoyZ6GVhQeOVswG0yRyjmcTZHI4VSSzW794EdUVtjW8vzrqvMms rSx2J7V++V37HDYqtvRl86JLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXiCvZtIg euxUjwyT2SGVkw1GOTQwHwYDVR0jBBgwFoAU92edhcQsfjk3x9JAjAZ5uVznEXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MkY4L0JDQjgyNzhDRkI1 ODExRUZCMzJDRkQxMkM0RjlBRTAyLzkyZWRoY1FzZmprM3g5SkFqQVo1dVZ6bkVY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTJlZGhjUXNmamszeDlKQWpBWjV1VnpuRVhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 MkY4L0JDQjgyNzhDRkI1ODExRUZCMzJDRkQxMkM0RjlBRTAyLzkyZWRoY1FzZmpr M3g5SkFqQVo1dVZ6bkVYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGgTUeefNbQSUloodRwpBoRxcoQfa7sWZPmhXFQ1SYQSpnCwWsHekLwj FOprzoZj3EKx4n3mAle1in/dfLDXhxbfcWO6k1ZFvexA6ni7Ai6QgHQH9XeTk4tw EaO9NCjdSr0j0xxWQQuCogjgqfJg1ycI416ii/ojFUvz1PUN0G6AO6ZOhGGcfueP rLb5wXHXkGa0b0eXVP+gildG8bxFodBT0L4XnHc6J4r3bQ2B/A+qKyByqx1NzjAP GtT8uw+uDGxjeKBXWQ5UTe/CMQW3UEcazJCCMSNa+oKZZTeGN/qpr0/BC6gNcqmQ qjT5VPT37UkShPsTpMdpKf2tYPkJWZQ= -----END CERTIFICATE-----Generated at Sun Jul 20 15:05:24 2025 by rpki-client