$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft File: R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json) Hash identifier: 1LwjVCKijwsRg3kHn31XusAQ9bhrFDXqBEdKHetUoBo= Subject key identifier: 75:2D:75:C4:E2:7C:D1:80:34:29:07:FE:83:45:BE:7D:32:D7:E4:94 Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E Certificate issuer: /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft Manifest number: 0294 Signing time: Wed 23 Jul 2025 02:05:16 +0000 Manifest this update: Wed 23 Jul 2025 02:05:16 +0000 Manifest next update: Wed 30 Jul 2025 02:05:16 +0000 Files and hashes: 1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: Fad5FEqRm5lW62KZHt8K1CnXRjhNvU+3FNkJKs5jHWk=) 2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: e4e/2weEWR9V4/NE3J2YPV05BSS+/w2P0bwX2/dmeeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E Validity Not Before: Jul 23 02:05:16 2025 GMT Not After : Jul 30 02:05:16 2025 GMT Subject: CN=6880435c-f18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f1:c3:f7:28:d5:f8:ee:66:ca:3b:7b:65:5a: cd:23:46:2e:f5:3a:ce:83:1b:8d:81:c6:20:40:35: db:88:ca:95:a7:f9:0a:dc:93:8d:d4:de:1a:a9:61: 10:2a:a3:b7:d1:64:63:80:b0:d7:70:6c:49:e9:9b: fc:37:2e:11:c2:8a:4a:3b:f7:9d:28:61:56:7b:11: 8e:23:6a:94:ca:76:fb:d4:8d:2a:3b:99:06:27:a7: ed:b9:66:4e:a9:83:da:2f:a5:7d:74:9f:40:27:22: cd:3d:4d:df:6b:4b:37:08:f1:06:f9:3f:9c:4c:02: 2f:31:ae:62:6e:18:70:eb:9f:00:12:87:98:a7:34: cf:d8:5a:21:86:24:03:e5:88:03:27:a6:24:6d:44: ad:bf:c0:a2:f8:c7:bb:6b:47:00:64:44:0f:a4:b3: ce:f2:11:a1:af:e2:df:dc:33:d5:f4:2f:bd:86:b2: d1:25:ca:a6:51:ce:2a:b7:b4:e2:6d:69:34:d6:64: 4c:b4:b1:22:6a:63:b9:44:05:85:9d:93:87:92:49: a7:da:32:4e:36:03:c0:e1:af:a7:36:62:46:2c:6f: 2a:0b:25:bd:4c:9b:a8:15:83:48:f3:88:40:8b:89: e9:47:65:d8:54:c5:e0:2a:ee:92:2d:02:4e:d6:c4: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2D:75:C4:E2:7C:D1:80:34:29:07:FE:83:45:BE:7D:32:D7:E4:94 X509v3 Authority Key Identifier: keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:71:3b:7c:d4:32:ad:d3:1f:ac:0e:95:67:6b:48:9e:7f:6e: c4:3f:00:4e:6c:2e:fa:e1:56:de:bf:9e:23:27:4d:e0:9e:10: 62:2a:67:62:cc:ae:13:c9:2c:e8:5a:4c:47:db:1d:b4:12:6b: b8:39:8b:bd:e9:18:87:c7:f6:38:40:02:b8:d0:72:41:6b:55: 86:a9:26:6b:80:d7:11:c0:2f:5d:07:7e:48:82:e8:09:1e:72: 59:a5:8c:8e:71:38:6b:75:9c:be:37:3f:88:9b:e7:72:8f:8f: 99:16:cf:45:23:35:b0:88:f2:e1:2f:08:44:8f:e3:0f:05:51: b3:73:72:87:a4:eb:02:10:b3:0e:6d:07:76:91:9c:13:33:ce: 7e:fe:de:f4:e7:f6:1c:13:4e:59:ce:44:ce:a9:9d:fa:c4:56: 80:b7:d0:fd:b3:47:8e:f5:0d:0c:5d:38:65:10:3d:c2:aa:cb: 0a:d7:30:b2:e4:5f:b6:c3:96:b2:30:67:ed:d1:58:11:c0:fe: 7c:9c:bf:4d:74:17:83:e9:37:62:b1:a0:40:6a:83:d9:47:0a: a8:83:ec:ad:42:1b:35:1d:57:6b:3a:5f:d1:50:e2:95:d9:8a: 3d:8c:e5:90:4d:be:a2:99:69:65:cc:1a:3b:28:33:01:a5:b1: 55:e4:80:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE3MzMxMTAvBgNVBAUTKDQ3NDA2NTdBNEUyRkI4NjdCRkI0NERCRjZDQjhCQzFE RDFCMkMyMEUwHhcNMjUwNzIzMDIwNTE2WhcNMjUwNzMwMDIwNTE2WjAYMRYwFAYD VQQDEw02ODgwNDM1Yy1mMThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PHD9yjV+O5myjt7ZVrNI0Yu9TrOgxuNgcYgQDXbiMqVp/kK3JON1N4aqWEQ KqO30WRjgLDXcGxJ6Zv8Ny4RwopKO/edKGFWexGOI2qUynb71I0qO5kGJ6ftuWZO qYPaL6V9dJ9AJyLNPU3fa0s3CPEG+T+cTAIvMa5ibhhw658AEoeYpzTP2FohhiQD 5YgDJ6YkbUStv8Ci+Me7a0cAZEQPpLPO8hGhr+Lf3DPV9C+9hrLRJcqmUc4qt7Ti bWk01mRMtLEiamO5RAWFnZOHkkmn2jJONgPA4a+nNmJGLG8qCyW9TJuoFYNI84hA i4npR2XYVMXgKu6SLQJO1sTZVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUtdcTi fNGANCkH/oNFvn0y1+SUMB8GA1UdIwQYMBaAFEdAZXpOL7hnv7RNv2y4vB3RssIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTczMy8zMzM4NzJBMjBE NzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVHZV90RTJfYkxpOEhkR3l3 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IwQmxlazR2dUdlX3RFMl9iTGk4SGRHeXdnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTczMy8zMzM4NzJBMjBENzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVH ZV90RTJfYkxpOEhkR3l3ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdcTt81DKt0x+sDpVna0ief27EPwBObC764Vbev54jJ03gnhBiKmdi zK4TySzoWkxH2x20Emu4OYu96RiHx/Y4QAK40HJBa1WGqSZrgNcRwC9dB35IgugJ HnJZpYyOcThrdZy+Nz+Im+dyj4+ZFs9FIzWwiPLhLwhEj+MPBVGzc3KHpOsCELMO bQd2kZwTM85+/t705/YcE05ZzkTOqZ36xFaAt9D9s0eO9Q0MXThlED3CqssK1zCy 5F+2w5ayMGft0VgRwP58nL9NdBeD6TdisaBAaoPZRwqog+ytQhs1HVdrOl/RUOKV 2Yo9jOWQTb6imWllzBo7KDMBpbFV5IAy -----END CERTIFICATE-----Generated at Fri Jul 25 00:55:32 2025 by rpki-client