$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json) Hash identifier: PqOPFa6hWitkcNnswZ9IA02mE65/WuUDGB+eKY9zU2c= Subject key identifier: C5:A6:68:0E:CF:12:77:C5:0A:04:4E:53:76:2B:71:2E:9C:CF:CF:9A Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Certificate serial: 0559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft Manifest number: 0551 Signing time: Fri 18 Jul 2025 23:44:44 +0000 Manifest this update: Fri 18 Jul 2025 23:44:43 +0000 Manifest next update: Fri 25 Jul 2025 23:44:43 +0000 Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: Exi4rCtZQhjx1pa1klbWLr3N/Zdp6mCM0+whVzWnNt4=) 2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: IJTuUd/n8OCJ5dJ8YqUV7DdTVdb9JOIyqBQaxiAGn2k=) 3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: ZpRAboF0Zy0eld2L5SbNx4a1RdCdtnze/MEYgH64xko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1369 (0x559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Validity Not Before: Jul 18 23:44:43 2025 GMT Not After : Jul 25 23:44:43 2025 GMT Subject: CN=687adc6b-0a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:7a:d6:71:c0:98:b0:58:d3:4f:42:a3:ff: 75:1c:d8:74:0b:84:4d:58:5b:16:b4:ac:91:58:0e: 77:fc:6f:04:4a:66:ef:cc:fe:9b:ac:f1:aa:0d:ed: 8f:7f:7a:db:dd:5e:3b:de:84:69:e2:16:da:fe:90: 71:a7:e6:03:f3:ea:93:37:fa:fe:62:81:15:9e:49: b5:55:40:93:72:7e:7a:b9:c6:59:b2:b2:81:ef:27: 58:ce:32:ac:5f:97:28:ff:f7:06:8e:22:17:fc:6e: 84:a7:f1:7b:3c:d1:10:18:9b:d4:f0:2e:1e:ab:b7: ac:ae:70:f8:d9:58:79:38:ee:87:94:e1:58:11:23: 09:0a:1f:88:92:76:5e:54:a8:eb:87:8d:10:b3:4e: 74:16:67:25:1c:f3:7d:fe:e2:66:ac:08:59:99:67: 82:59:f5:bd:b3:34:da:4b:cd:7b:2a:81:13:b3:7b: fb:e3:cd:bf:cb:1b:5b:a1:38:81:65:98:32:89:20: 5a:62:92:e9:3b:d0:09:97:62:88:02:bc:ed:cb:7e: fb:bc:71:a0:00:86:1d:9d:a5:32:5a:95:65:f6:44: b0:78:c2:41:56:2a:9d:0f:ea:51:02:69:5a:ff:42: 1c:4d:dd:a1:48:1e:7a:e9:f1:fd:11:93:37:61:68: 0e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A6:68:0E:CF:12:77:C5:0A:04:4E:53:76:2B:71:2E:9C:CF:CF:9A X509v3 Authority Key Identifier: keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:4a:d8:72:51:28:0d:fd:d3:4e:92:32:3a:9c:76:eb:56:5a: 5c:bc:b5:c9:0d:75:0b:2a:52:bf:ba:64:b6:aa:1b:fa:c6:75: 6a:c8:cc:0b:2b:25:af:b6:4e:40:39:0d:9b:22:50:89:b5:ab: b9:be:21:2f:a3:2f:30:b0:2d:02:e9:a4:56:53:e4:68:00:26: bd:67:1f:99:e5:7f:b5:de:7f:86:40:b2:0b:98:f7:0d:d5:25: c6:14:10:77:5d:fc:03:42:ed:8c:29:d2:db:56:d2:b8:ca:a4: df:ba:98:16:02:fd:10:42:9d:7b:d1:94:46:82:04:4c:34:9f: 89:25:38:c8:04:ce:75:a9:06:83:62:a8:6d:e3:47:91:6e:9c: 30:34:94:4e:79:f6:57:52:9e:74:ce:ef:e5:02:55:0d:ba:3b: 9f:63:ad:8d:e1:e7:ab:e3:5c:e5:b4:f1:f2:fc:58:81:7a:b4: ac:b7:b6:11:25:2e:15:a7:5a:fd:25:f9:b2:50:f8:e7:9e:34: 68:50:94:94:d4:b1:03:2a:89:ae:d2:3d:75:fe:44:b1:b8:ad: 10:1a:1f:9e:6f:f9:72:2f:55:4f:d5:31:d3:9a:bc:85:72:06: 4a:31:3a:41:42:1a:80:48:7f:c9:4d:8a:cf:f1:e4:c1:44:d4: ea:1c:0c:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyNTExMTAvBgNVBAUTKDUzRDVEQjg3MEU1Q0NENDhFOThENzM1NjBEQkQ1RTY1 OTQ2QzJERDQwHhcNMjUwNzE4MjM0NDQzWhcNMjUwNzI1MjM0NDQzWjAYMRYwFAYD VQQDEw02ODdhZGM2Yi0wYTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1S561nHAmLBY009Co/91HNh0C4RNWFsWtKyRWA53/G8ESmbvzP6brPGqDe2P f3rb3V473oRp4hba/pBxp+YD8+qTN/r+YoEVnkm1VUCTcn56ucZZsrKB7ydYzjKs X5co//cGjiIX/G6Ep/F7PNEQGJvU8C4eq7esrnD42Vh5OO6HlOFYESMJCh+IknZe VKjrh40Qs050FmclHPN9/uJmrAhZmWeCWfW9szTaS817KoETs3v7482/yxtboTiB ZZgyiSBaYpLpO9AJl2KIArzty377vHGgAIYdnaUyWpVl9kSweMJBViqdD+pRAmla /0IcTd2hSB566fH9EZM3YWgOVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWmaA7P EnfFCgROU3YrcS6cz8+aMB8GA1UdIwQYMBaAFFPV24cOXM1I6Y1zVg29XmWUbC3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTI1MS9EOTNENzk2MEY3 NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pVanBqWE5XRGIxZVpaUnNM ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U5WGJodzVjelVqcGpYTldEYjFlWlpSc0xkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTI1MS9EOTNENzk2MEY3NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pV anBqWE5XRGIxZVpaUnNMZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeSthyUSgN/dNOkjI6nHbrVlpcvLXJDXULKlK/umS2qhv6xnVqyMwL KyWvtk5AOQ2bIlCJtau5viEvoy8wsC0C6aRWU+RoACa9Zx+Z5X+13n+GQLILmPcN 1SXGFBB3XfwDQu2MKdLbVtK4yqTfupgWAv0QQp170ZRGggRMNJ+JJTjIBM51qQaD Yqht40eRbpwwNJROefZXUp50zu/lAlUNujufY62N4eer41zltPHy/FiBerSst7YR JS4Vp1r9JfmyUPjnnjRoUJSU1LEDKomu0j11/kSxuK0QGh+eb/lyL1VP1THTmryF cgZKMTpBQhqASH/JTYrP8eTBRNTqHAzo -----END CERTIFICATE-----Generated at Sun Jul 20 18:56:46 2025 by rpki-client