$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json) Hash identifier: dExY/MDdCHVzpUeP41ZzFGlwwo49lc6yte4kmNmBAvY= Subject key identifier: 0D:63:9C:B4:42:07:C2:78:CD:89:B0:8B:2D:EA:69:AE:1F:52:AF:14 Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft Manifest number: 01A2 Signing time: Fri 25 Jul 2025 03:32:48 +0000 Manifest this update: Fri 25 Jul 2025 03:32:47 +0000 Manifest next update: Fri 01 Aug 2025 03:32:47 +0000 Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: AX6sE4yqG3Tk543fMFY46ohWfJ6tI+/EwPoQYf5SjPA=) 2: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (hash: AIB5iRq0wZoH+M+QlWHGPd+eXgQBKYvmWuJJAuisaNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 03:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: Jul 25 03:32:47 2025 GMT Not After : Aug 1 03:32:47 2025 GMT Subject: CN=6882fadf-f192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:6c:a3:ff:82:e3:21:21:6d:28:5e:65:95: 36:d9:88:91:9a:81:8e:a2:5f:71:42:1b:4b:9e:2e: 04:f6:c7:bb:14:ba:3f:83:1c:1a:b7:f7:e0:87:7a: b5:c6:7c:6b:10:4e:d3:70:dc:d5:2d:ed:63:ec:f8: 69:7e:0f:d7:3b:83:cb:2d:13:5f:79:12:10:76:ab: 5d:f7:2a:a6:95:9f:bc:79:9b:9d:21:ca:38:52:a7: 75:24:13:22:fe:35:8e:e3:38:33:14:9f:ef:a9:c8: f6:5e:cf:e1:52:eb:e2:29:94:27:65:fe:fe:5d:c3: e7:f6:a4:01:ef:24:e8:3e:ca:16:ce:99:dd:d3:66: c2:9b:2c:47:9a:20:13:dc:45:a9:a7:fd:85:7b:47: 02:7b:3e:84:5d:3a:07:68:95:89:0e:01:c0:b7:46: 49:19:af:87:7b:76:a1:04:df:9e:b8:08:20:d8:74: ca:a9:c9:66:23:49:06:bf:05:1d:e3:fc:e5:06:89: 66:58:fe:df:5e:62:9b:88:1d:4f:48:79:10:ba:75: 8f:1c:ab:60:5c:5f:77:76:6f:de:4b:33:12:f1:71: 7b:4d:a4:12:aa:dd:82:55:49:94:43:c8:97:c5:c1: 77:22:89:ba:9a:85:9b:cf:d6:c0:2a:e1:b6:54:e7: 28:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:63:9C:B4:42:07:C2:78:CD:89:B0:8B:2D:EA:69:AE:1F:52:AF:14 X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e4:36:74:14:50:19:14:23:2e:9d:43:9b:02:e9:2f:82:9f: b6:03:5f:0d:2f:8b:a0:53:8f:8c:98:0c:6d:17:d6:fd:f1:6e: 8f:c0:79:7d:9b:53:1a:cd:0c:a2:24:3c:3a:94:04:95:55:5a: 6a:07:d1:79:f1:dc:9d:40:69:2c:4a:76:49:1e:20:d7:63:06: 9b:77:40:8b:58:09:a3:7a:4b:31:10:09:33:7d:d7:d7:4c:9e: 7f:d6:c9:46:7c:c9:a7:bb:d0:4c:06:03:60:77:e1:1a:fc:a6: be:be:3e:e1:77:b3:60:3c:f8:ce:4d:4c:96:23:98:61:fc:95: 57:ad:4b:8f:b6:12:bc:95:18:d9:71:7f:81:68:65:d1:a3:88: 28:dd:49:7a:2a:72:6a:ef:94:e4:1f:f6:1b:59:8d:60:c6:cf: 2d:62:67:04:93:db:a1:c7:67:b5:3c:c3:dd:d7:45:aa:1b:e5: ba:1c:f3:c3:96:41:aa:8b:99:05:16:55:a3:c7:9a:ba:1e:93: 73:7c:be:fc:4e:b1:3d:6d:51:07:a4:da:fc:a6:8d:cf:52:ae: 5f:59:e5:8d:79:09:0b:77:1c:02:31:a4:2b:0d:4d:06:95:f6: a4:63:e5:60:86:05:e1:c5:e7:d3:36:c4:1c:1f:d6:99:41:c0: 0a:98:be:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjUwNzI1MDMzMjQ3WhcNMjUwODAxMDMzMjQ3WjAYMRYwFAYD VQQDEw02ODgyZmFkZi1mMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnc1so/+C4yEhbSheZZU22YiRmoGOol9xQhtLni4E9se7FLo/gxwat/fgh3q1 xnxrEE7TcNzVLe1j7Phpfg/XO4PLLRNfeRIQdqtd9yqmlZ+8eZudIco4Uqd1JBMi /jWO4zgzFJ/vqcj2Xs/hUuviKZQnZf7+XcPn9qQB7yToPsoWzpnd02bCmyxHmiAT 3EWpp/2Fe0cCez6EXToHaJWJDgHAt0ZJGa+He3ahBN+euAgg2HTKqclmI0kGvwUd 4/zlBolmWP7fXmKbiB1PSHkQunWPHKtgXF93dm/eSzMS8XF7TaQSqt2CVUmUQ8iX xcF3Iom6moWbz9bAKuG2VOcoZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1jnLRC B8J4zYmwiy3qaa4fUq8UMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4 emlBNi1xM282OGNacXNJN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+5DZ0FFAZFCMunUObAukvgp+2A18NL4ugU4+MmAxtF9b98W6PwHl9 m1MazQyiJDw6lASVVVpqB9F58dydQGksSnZJHiDXYwabd0CLWAmjeksxEAkzfdfX TJ5/1slGfMmnu9BMBgNgd+Ea/Ka+vj7hd7NgPPjOTUyWI5hh/JVXrUuPthK8lRjZ cX+BaGXRo4go3Ul6KnJq75TkH/YbWY1gxs8tYmcEk9uhx2e1PMPd10WqG+W6HPPD lkGqi5kFFlWjx5q6HpNzfL78TrE9bVEHpNr8po3PUq5fWeWNeQkLdxwCMaQrDU0G lfakY+VghgXhxefTNsQcH9aZQcAKmL61 -----END CERTIFICATE-----Generated at Sat Jul 26 08:06:06 2025 by rpki-client