$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: tzky8tSd5lGEL995BGFIeHoTQqiQqp66V9WtlG42n/I= Subject key identifier: D5:E7:85:A4:D4:A4:B6:F4:09:1E:B7:FD:17:D8:57:B9:8B:9B:7F:73 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 1355 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 133E Signing time: Fri 18 Jul 2025 17:10:48 +0000 Manifest this update: Fri 18 Jul 2025 17:10:47 +0000 Manifest next update: Fri 25 Jul 2025 17:10:47 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: wA+NEVZzImAH1+eZ8+7x5bHX3hWk8HOolWmD6dtIGrM=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: R0AZPv6+24ga8tPLfZ8kNV1NXohs9+QG7hIHcrhg+8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4949 (0x1355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Jul 18 17:10:47 2025 GMT Not After : Jul 25 17:10:47 2025 GMT Subject: CN=687a8017-7f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:ee:0b:52:28:5f:b7:57:a1:63:e3:7f:2e: ea:38:61:a3:12:09:a0:45:3b:93:96:89:77:88:fb: 34:b8:b5:63:3a:d2:9c:1d:e9:1d:bb:fc:b2:24:23: d3:df:1d:cc:28:1f:f2:ca:69:a9:ec:e5:bc:e5:82: 72:24:07:41:be:9e:fd:a9:80:af:53:c4:f6:c1:fb: 8c:43:79:05:7e:80:83:52:1a:d4:4e:6e:de:cf:ec: 58:a1:77:5f:9b:5a:87:ca:47:0b:1c:06:4b:fa:5b: 20:78:be:af:49:6a:6f:1f:b2:05:43:07:1b:4c:06: 78:eb:d5:4c:f3:82:b3:05:12:d9:f6:77:9b:d4:bc: 1a:00:e2:e0:fc:70:5f:58:1f:9f:52:ce:25:0b:5a: 13:61:26:a9:2e:7a:13:da:52:b1:40:32:8b:c8:4a: ef:32:7f:34:93:3a:e8:75:5a:af:f2:17:27:f5:eb: 4a:41:89:5a:30:43:dd:3a:24:0e:77:05:26:0f:df: 13:4c:8f:00:8b:e4:7c:2a:25:cc:d5:0d:ce:54:93: e3:08:88:cc:82:3e:97:a4:a9:61:5c:7d:51:49:ba: e1:bc:6c:7b:45:dc:c3:80:55:a4:e7:86:02:1f:31: 0f:d9:c1:93:6a:f3:de:df:80:6e:c6:f3:77:9e:c4: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E7:85:A4:D4:A4:B6:F4:09:1E:B7:FD:17:D8:57:B9:8B:9B:7F:73 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:59:3b:97:19:ff:47:19:f4:aa:85:f9:fe:c9:63:20:f6:0a: 46:1f:6c:93:8f:28:23:b1:fc:f2:e9:20:6a:1f:f0:0b:7a:ba: 34:a3:18:66:d6:bd:64:d8:78:2a:26:9a:20:80:fe:82:80:e5: fc:9e:14:0e:d7:9e:36:e4:c1:1f:1c:e0:3f:62:95:7a:62:8b: 52:c1:2e:28:81:29:8a:b4:b6:3c:af:91:b9:b4:52:ef:eb:63: f2:23:fe:c9:c0:f7:ff:a5:c5:e8:c3:a5:55:65:c6:e1:4a:1e: f3:c5:fe:4f:7a:1e:19:d0:e2:41:0f:7f:68:51:75:3a:ad:d4: 67:eb:06:58:e0:ea:54:16:d7:0b:b8:d9:9b:ad:06:3c:59:59: a9:93:34:87:b9:06:0c:a2:dc:54:41:ee:ed:02:a7:9d:74:6a: 9c:49:53:fb:e4:35:60:70:27:94:4c:7e:2f:ec:8b:e3:3e:a4: 12:17:cb:a0:44:5f:22:51:c3:72:c8:49:b7:77:35:3a:b3:be: 69:7c:f2:56:ac:4e:d7:e6:a7:4a:23:d4:4a:f2:f8:26:0a:21: 4e:e7:e2:41:c6:5e:31:86:07:e0:47:e2:74:3f:43:60:10:39: 09:be:ea:e2:3d:2d:b1:ea:c0:c8:e5:68:17:f4:6a:62:9f:d7: c8:16:58:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjUwNzE4MTcxMDQ3WhcNMjUwNzI1MTcxMDQ3WjAYMRYwFAYD VQQDEw02ODdhODAxNy03ZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3vuC1IoX7dXoWPjfy7qOGGjEgmgRTuTlol3iPs0uLVjOtKcHekdu/yyJCPT 3x3MKB/yymmp7OW85YJyJAdBvp79qYCvU8T2wfuMQ3kFfoCDUhrUTm7ez+xYoXdf m1qHykcLHAZL+lsgeL6vSWpvH7IFQwcbTAZ469VM84KzBRLZ9neb1LwaAOLg/HBf WB+fUs4lC1oTYSapLnoT2lKxQDKLyErvMn80kzrodVqv8hcn9etKQYlaMEPdOiQO dwUmD98TTI8Ai+R8KiXM1Q3OVJPjCIjMgj6XpKlhXH1RSbrhvGx7RdzDgFWk54YC HzEP2cGTavPe34BuxvN3nsRdQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXnhaTU pLb0CR63/RfYV7mLm39zMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHWTuXGf9HGfSqhfn+yWMg9gpGH2yTjygjsfzy6SBqH/ALero0oxhm 1r1k2HgqJpoggP6CgOX8nhQO15425MEfHOA/YpV6YotSwS4ogSmKtLY8r5G5tFLv 62PyI/7JwPf/pcXow6VVZcbhSh7zxf5Peh4Z0OJBD39oUXU6rdRn6wZY4OpUFtcL uNmbrQY8WVmpkzSHuQYMotxUQe7tAqeddGqcSVP75DVgcCeUTH4v7IvjPqQSF8ug RF8iUcNyyEm3dzU6s75pfPJWrE7X5qdKI9RK8vgmCiFO5+JBxl4xhgfgR+J0P0Ng EDkJvuriPS2x6sDI5WgX9Gpin9fIFlgW -----END CERTIFICATE-----Generated at Sun Jul 20 06:28:31 2025 by rpki-client