$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: xXVW4AF67BmL8gEo+Yq7WjS+3j+48VbFAoumKtME5Yo= Subject key identifier: F0:0A:9B:9E:72:C1:D6:36:8F:CC:D1:BA:E0:A2:ED:59:DE:6E:06:E0 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 0154 Signing time: Sat 19 Jul 2025 04:18:58 +0000 Manifest this update: Sat 19 Jul 2025 04:18:58 +0000 Manifest next update: Sat 26 Jul 2025 04:18:58 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: U1whFL5b2clBXdHq5/j/OCAo8Im6Y4I5mpZjfqwy17w=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: 5Y7qsAaq9WIcozANz4ZXMikS+vaHk2RGINX/W4ZA3l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Jul 19 04:18:58 2025 GMT Not After : Jul 26 04:18:58 2025 GMT Subject: CN=687b1cb2-ec53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a3:fd:48:c3:be:8c:08:af:dc:89:54:8e:86: 62:25:52:76:e5:4a:63:75:c1:9e:8d:6d:ea:81:04: 37:36:4f:b9:9c:a5:78:dd:37:c7:ae:a5:c8:10:c5: ef:63:c5:cc:3c:04:90:2a:71:99:c3:ff:f2:11:d8: 0e:14:87:7e:4a:74:16:f4:8b:14:52:ee:c4:97:80: 9a:f5:87:21:ac:9e:79:b2:ba:25:bd:c3:34:0e:e2: 8a:1b:e3:16:50:ea:53:63:6d:f4:9f:6b:ed:fe:cd: 9c:71:43:51:73:29:12:98:73:e4:de:ea:ca:d1:a8: 02:57:85:0e:d2:3f:35:36:a3:5a:26:7a:03:ae:97: 66:2f:51:f9:d7:87:17:bb:1d:40:84:1d:51:4b:bf: 63:ad:fa:06:0b:10:19:42:61:b7:53:34:8c:a8:f5: 59:7a:6e:08:c2:16:d5:fd:9a:3f:05:d4:ed:e1:44: 4c:e0:90:b1:ec:8a:75:7f:90:39:7f:90:bf:c3:1f: 03:14:bc:21:d1:da:9f:c5:19:fd:d7:86:de:0f:5d: eb:3f:2c:a9:ef:8a:e9:c5:98:23:1e:c7:eb:02:96: d5:40:45:87:3f:cf:ec:32:a3:1a:94:92:98:50:e4: 82:e4:2b:4b:f4:ef:0e:86:b7:02:38:cc:60:6e:a3: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0A:9B:9E:72:C1:D6:36:8F:CC:D1:BA:E0:A2:ED:59:DE:6E:06:E0 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c2:1b:a1:c9:10:b0:72:80:76:0e:83:b4:48:6a:92:1f:85: fe:dd:0a:f0:cf:ca:36:60:0d:78:3c:50:4f:74:23:89:b8:fb: 15:95:e9:f3:09:6c:94:49:96:37:00:f1:0d:d8:10:de:03:ed: 0a:42:bb:1d:c8:6a:27:d2:cf:a0:6c:95:50:7a:ee:c4:03:67: f2:61:b4:9e:af:9b:3d:c1:ec:32:8d:ed:4a:12:3a:70:42:84: 6a:88:e0:5c:38:6a:bc:db:24:33:65:61:60:5d:f8:19:c8:dd: 8b:d6:70:10:bc:62:dc:df:fc:10:67:75:9d:18:ad:e9:57:7a: c3:b5:42:17:67:08:d8:50:c2:92:e0:51:d8:0c:a7:e6:cf:f9: a1:01:1e:a1:7e:e3:cb:55:7b:3d:e8:7a:e5:da:bf:96:b8:5f: 4c:5e:f2:11:c1:4a:a1:ef:9c:f9:85:f4:c0:ac:9b:ae:ad:fb: 25:c5:f7:c2:54:e0:e0:d6:38:21:0b:fe:40:72:6a:b2:b9:4e: 5c:08:02:83:ce:b3:d0:24:3e:f8:57:de:54:20:fc:80:4e:eb: 0b:e3:09:27:96:9f:16:c8:2f:d4:20:fb:2e:44:53:5c:d8:78: 42:bf:38:5f:d2:54:33:25:b7:84:58:11:50:c1:f6:ae:a3:48: 44:84:4b:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUwNzE5MDQxODU4WhcNMjUwNzI2MDQxODU4WjAYMRYwFAYD VQQDEw02ODdiMWNiMi1lYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KP9SMO+jAiv3IlUjoZiJVJ25UpjdcGejW3qgQQ3Nk+5nKV43TfHrqXIEMXv Y8XMPASQKnGZw//yEdgOFId+SnQW9IsUUu7El4Ca9YchrJ55srolvcM0DuKKG+MW UOpTY230n2vt/s2ccUNRcykSmHPk3urK0agCV4UO0j81NqNaJnoDrpdmL1H514cX ux1AhB1RS79jrfoGCxAZQmG3UzSMqPVZem4IwhbV/Zo/BdTt4URM4JCx7Ip1f5A5 f5C/wx8DFLwh0dqfxRn914beD13rPyyp74rpxZgjHsfrApbVQEWHP8/sMqMalJKY UOSC5CtL9O8OhrcCOMxgbqMxvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAKm55y wdY2j8zRuuCi7VnebgbgMB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdwhuhyRCwcoB2DoO0SGqSH4X+3Qrwz8o2YA14PFBPdCOJuPsVlenz CWyUSZY3APEN2BDeA+0KQrsdyGon0s+gbJVQeu7EA2fyYbSer5s9wewyje1KEjpw QoRqiOBcOGq82yQzZWFgXfgZyN2L1nAQvGLc3/wQZ3WdGK3pV3rDtUIXZwjYUMKS 4FHYDKfmz/mhAR6hfuPLVXs96Hrl2r+WuF9MXvIRwUqh75z5hfTArJuurfslxffC VODg1jghC/5AcmqyuU5cCAKDzrPQJD74V95UIPyATusL4wknlp8WyC/UIPsuRFNc 2HhCvzhf0lQzJbeEWBFQwfauo0hEhEur -----END CERTIFICATE-----Generated at Sun Jul 20 02:33:00 2025 by rpki-client