$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft File: pSvwKHcZGUlxLT2tKdSreid57EM.mft (raw, json) Hash identifier: 5L4VzgdSRlkoC+VQ0kup5gAvFR0GNqRLWqbLqJ8HD2I= Subject key identifier: 25:3A:FD:2E:31:C6:6B:7D:36:AB:47:9E:14:9E:70:22:60:5B:69:4A Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43 Certificate issuer: /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft Manifest number: C5 Signing time: Sat 19 Jul 2025 06:01:09 +0000 Manifest this update: Sat 19 Jul 2025 06:01:09 +0000 Manifest next update: Sat 26 Jul 2025 06:01:09 +0000 Files and hashes: 1: pSvwKHcZGUlxLT2tKdSreid57EM.crl (hash: 6nZ0C+1qKLR1Kk+wCElfijS5mPDF3+YE5jWM+clekBs=) 2: 88F562E83DAD11EFAA46E417C4F9AE02.roa (hash: y+CwsCOmzO2omqt+7OucZwgkShxhjQvdzFrUFNJogYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43 Validity Not Before: Jul 19 06:01:09 2025 GMT Not After : Jul 26 06:01:09 2025 GMT Subject: CN=687b34a5-a9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:0a:59:fe:86:7e:20:b6:9a:79:77:98:1a: 62:0e:21:b8:ed:94:36:80:72:02:98:97:25:e0:4b: 3e:d5:ed:36:7b:11:35:77:0c:9b:8f:9f:55:a4:b1: 7e:a3:81:a5:6d:bd:4b:45:07:ba:4e:21:96:5a:18: 96:6a:d5:06:f8:d8:7a:0f:12:80:85:cc:d5:b9:91: e7:e6:c6:e7:40:e4:62:bb:93:03:03:34:d1:39:83: 1e:2d:f0:25:70:81:25:85:de:74:07:35:78:18:f8: 09:c7:b6:59:e0:3d:8d:8f:16:6b:c9:86:4f:c7:cb: 66:0c:60:aa:93:b6:c3:89:26:51:8b:4b:1b:b7:71: eb:72:05:52:b9:a9:81:14:44:da:73:c2:d2:20:59: 68:97:3b:b4:0a:9c:45:01:08:f0:7b:24:f7:d7:0a: a4:bd:d5:54:c2:15:5a:b9:cb:26:1a:c0:9e:64:ed: d8:c3:78:7f:61:4a:7d:aa:66:12:bd:d9:bd:ad:54: 7f:d6:f5:e7:1e:5a:f0:b0:a2:05:f8:24:f4:5e:36: 2b:9d:b7:05:d4:66:87:30:e7:7c:dc:fd:97:d9:58: 51:5e:dc:9f:fa:d9:df:c3:7f:d1:63:54:1b:03:82: e5:8a:f5:06:cc:11:db:42:1b:f0:78:8d:1c:1c:66: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3A:FD:2E:31:C6:6B:7D:36:AB:47:9E:14:9E:70:22:60:5B:69:4A X509v3 Authority Key Identifier: keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:0c:29:66:df:0d:47:d7:cb:f3:5f:fb:89:2e:f3:7a:03:82: fd:c9:76:be:0b:3f:29:e6:a4:5d:f7:ec:cd:e4:93:2d:4e:65: 30:86:52:01:30:db:fc:84:74:c2:4f:70:1b:8c:b5:f2:5b:ab: 93:a0:0e:04:b8:9d:72:83:65:d1:bb:78:7a:df:16:06:bf:f4: e5:9f:aa:9f:ab:96:c4:0a:0c:3b:b7:d9:f9:17:7e:8a:7c:12: 80:78:f6:b4:ce:a6:c1:95:88:85:cc:3e:e8:d6:35:83:d0:13: 08:ff:fc:0c:6f:0d:54:20:f4:2c:ee:3e:3f:12:52:8b:95:e4: 10:73:2d:76:12:cc:f7:b5:60:f6:7c:b1:c1:1d:e0:44:50:b7: 1f:9f:bd:2e:e2:c2:9c:dd:a5:fc:49:02:66:06:8d:db:5c:b8: 3c:b1:8a:54:67:a6:62:43:2e:a5:3b:93:59:47:00:51:f9:f1: 96:3d:9a:f7:b8:59:06:93:76:b7:3e:64:dc:88:eb:10:e0:8e: 62:35:d2:0a:ea:6b:26:12:88:e0:fc:93:e7:30:53:30:29:66: a1:a9:ca:99:39:42:a8:75:c5:54:45:e0:d8:06:e6:2d:c3:e0: 5c:5d:e8:5b:3d:04:dd:ea:01:7b:71:e2:8b:14:7b:0a:aa:e9: e9:cf:e8:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE2MTgxMTAvBgNVBAUTKEE1MkJGMDI4NzcxOTE5NDk3MTJEM0RBRDI5RDRBQjdB Mjc3OUVDNDMwHhcNMjUwNzE5MDYwMTA5WhcNMjUwNzI2MDYwMTA5WjAYMRYwFAYD VQQDEw02ODdiMzRhNS1hOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwywKWf6GfiC2mnl3mBpiDiG47ZQ2gHICmJcl4Es+1e02exE1dwybj59VpLF+ o4Glbb1LRQe6TiGWWhiWatUG+Nh6DxKAhczVuZHn5sbnQORiu5MDAzTROYMeLfAl cIElhd50BzV4GPgJx7ZZ4D2NjxZryYZPx8tmDGCqk7bDiSZRi0sbt3HrcgVSuamB FETac8LSIFlolzu0CpxFAQjweyT31wqkvdVUwhVaucsmGsCeZO3Yw3h/YUp9qmYS vdm9rVR/1vXnHlrwsKIF+CT0XjYrnbcF1GaHMOd83P2X2VhRXtyf+tnfw3/RY1Qb A4LlivUGzBHbQhvweI0cHGYKiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCU6/S4x xmt9NqtHnhSecCJgW2lKMB8GA1UdIwQYMBaAFKUr8Ch3GRlJcS09rSnUq3oneexD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTYxOC81NTdFQUIzQzNB QkUxMUVGODYxOUQyMjBDNEY5QUUwMi9wU3Z3S0hjWkdVbHhMVDJ0S2RTcmVpZDU3 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdndLSGNaR1VseExUMnRLZFNyZWlkNTdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTYxOC81NTdFQUIzQzNBQkUxMUVGODYxOUQyMjBDNEY5QUUwMi9wU3Z3S0hjWkdV bHhMVDJ0S2RTcmVpZDU3RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3DClm3w1H18vzX/uJLvN6A4L9yXa+Cz8p5qRd9+zN5JMtTmUwhlIB MNv8hHTCT3AbjLXyW6uToA4EuJ1yg2XRu3h63xYGv/Tln6qfq5bECgw7t9n5F36K fBKAePa0zqbBlYiFzD7o1jWD0BMI//wMbw1UIPQs7j4/ElKLleQQcy12Esz3tWD2 fLHBHeBEULcfn70u4sKc3aX8SQJmBo3bXLg8sYpUZ6ZiQy6lO5NZRwBR+fGWPZr3 uFkGk3a3PmTciOsQ4I5iNdIK6msmEojg/JPnMFMwKWahqcqZOUKodcVUReDYBuYt w+BcXehbPQTd6gF7ceKLFHsKqunpz+gb -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:25 2025 by rpki-client