$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft File: AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft (raw, json) Hash identifier: edQU61k3ZGC1vhdAOIF7iKlXk/5aPR8LisV0NqZuYGE= Subject key identifier: 74:DD:AE:D5:D8:87:DF:11:A7:E8:17:92:25:2E:BE:80:CF:DF:48:62 Authority key identifier: 00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 Certificate issuer: /CN=A91C09EA/serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft Manifest number: 5C Signing time: Sun 27 Jul 2025 07:25:51 +0000 Manifest this update: Sun 27 Jul 2025 07:25:51 +0000 Manifest next update: Sun 03 Aug 2025 07:25:51 +0000 Files and hashes: 1: AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl (hash: KTwNsb5UDargS4WHRub+64RRhI4zugPcyQynU+7xVrk=) 2: 7970EAA266DA11F084325D42C4F9AE02.roa (hash: PikBYoAiLsYP3+Plkjib3H61VZb7HfjBFcsCC14z91s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 07:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09EA, serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8 Validity Not Before: Jul 27 07:25:51 2025 GMT Not After : Aug 3 07:25:51 2025 GMT Subject: CN=6885d47f-36f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:55:62:76:60:96:23:2e:30:61:9b:08:9c:29: d8:96:bf:81:14:66:f1:11:3c:14:e5:26:b1:19:25: 3a:26:ec:08:2f:f9:db:14:6c:6c:97:3d:c0:b4:df: 4d:4e:26:f8:70:3b:a5:a5:ce:e6:5d:d4:19:ba:a1: 09:54:4c:ff:89:5a:b3:9b:87:94:d0:9b:1a:17:51: 90:83:aa:a0:51:bf:58:3c:8e:81:7a:9b:d9:5d:a8: 43:8c:0e:c4:bd:c7:50:a9:2c:6e:2d:d5:29:6b:93: 13:16:99:42:e3:f0:a9:02:4e:a9:68:8d:30:fe:c7: 9a:bd:25:75:f5:90:59:54:4e:bb:5b:3e:be:fe:e6: 1e:ba:fd:d9:15:c3:9e:ac:79:17:ad:36:f5:6b:54: 44:7d:1b:86:b4:89:82:c2:44:88:41:bd:51:77:66: c4:bb:6a:56:4c:ec:b3:ec:2a:ae:a8:62:0e:6b:d4: 35:47:8d:45:61:35:00:26:11:b3:c5:7c:c4:f5:f9: 80:6c:cb:c3:c5:9f:94:6a:28:eb:b1:da:fa:84:4f: 0d:6a:6c:39:1a:f5:4c:f9:c4:62:dd:12:08:06:e6: a9:8e:d4:66:81:13:03:0f:8a:d9:30:d5:98:f7:40: f2:db:23:38:6c:d1:8a:c8:57:8f:76:d4:49:ef:6f: 01:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DD:AE:D5:D8:87:DF:11:A7:E8:17:92:25:2E:BE:80:CF:DF:48:62 X509v3 Authority Key Identifier: keyid:00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ad:8b:3d:23:b7:93:0d:32:83:fe:37:35:26:53:0e:33:37: 7c:1b:c8:83:93:2e:f2:45:29:02:42:19:92:44:8d:b9:5f:80: a7:63:9c:fb:57:b1:ee:b9:1f:d4:62:9e:62:a2:24:5d:ca:e6: 95:ca:eb:55:2c:e3:88:9b:7d:0c:80:7d:78:c1:3a:92:43:c3: 80:fd:67:05:fb:d5:a9:12:b2:c3:17:2f:0c:3c:74:7f:0f:6d: 6b:19:2b:3d:e8:be:43:90:19:df:27:3b:11:e9:32:7c:ea:53: db:b9:9d:2a:5a:b7:94:d4:b8:7f:29:aa:41:be:d0:2a:c6:3e: 49:be:b9:35:78:f3:3c:93:4d:f6:4d:d4:98:82:70:d0:98:3f: 75:5f:82:c5:86:b2:6c:49:53:73:e4:e1:20:35:b6:6e:43:57: 03:c0:f6:7f:48:5e:e2:5c:cb:3c:e7:13:c6:e3:c3:76:ef:0f: cc:94:c8:6b:96:99:44:6e:81:fa:1f:30:25:a0:be:96:c1:07: b6:05:7a:46:7b:e1:15:22:46:ce:d2:89:c6:88:c5:7d:2c:3b: 41:fd:d7:83:3f:08:2c:0f:a8:f5:00:72:b2:78:2e:8b:8c:8e: f3:be:84:3b:d7:ef:52:d4:b6:55:e2:72:22:d9:23:75:0d:42: 42:c1:d0:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDlFQTExMC8GA1UEBRMoMDBGRDMxRkQwNkI0MjA0QzNERENCNjM1MDcxODk1MzM3 NzhDQ0NGODAeFw0yNTA3MjcwNzI1NTFaFw0yNTA4MDMwNzI1NTFaMBgxFjAUBgNV BAMTDTY4ODVkNDdmLTM2ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhVWJ2YJYjLjBhmwicKdiWv4EUZvERPBTlJrEZJTom7Agv+dsUbGyXPcC0301O JvhwO6WlzuZd1Bm6oQlUTP+JWrObh5TQmxoXUZCDqqBRv1g8joF6m9ldqEOMDsS9 x1CpLG4t1SlrkxMWmULj8KkCTqlojTD+x5q9JXX1kFlUTrtbPr7+5h66/dkVw56s eRetNvVrVER9G4a0iYLCRIhBvVF3ZsS7alZM7LPsKq6oYg5r1DVHjUVhNQAmEbPF fMT1+YBsy8PFn5RqKOux2vqETw1qbDka9Uz5xGLdEggG5qmO1GaBEwMPitkw1Zj3 QPLbIzhs0YrIV4921EnvbwF1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdN2u1diH 3xGn6BeSJS6+gM/fSGIwHwYDVR0jBBgwFoAUAP0x/Qa0IEw93LY1BxiVM3eMzPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOUVBLzhDNTkxMkZFRTEz QjExRUZCQTdCREYzQkM0RjlBRTAyL0FQMHhfUWEwSUV3OTNMWTFCeGlWTTNlTXpQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQVAweF9RYTBJRXc5M0xZMUJ4aVZNM2VNelBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw OUVBLzhDNTkxMkZFRTEzQjExRUZCQTdCREYzQkM0RjlBRTAyL0FQMHhfUWEwSUV3 OTNMWTFCeGlWTTNlTXpQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAACtiz0jt5MNMoP+NzUmUw4zN3wbyIOTLvJFKQJCGZJEjblfgKdjnPtX se65H9RinmKiJF3K5pXK61Us44ibfQyAfXjBOpJDw4D9ZwX71akSssMXLww8dH8P bWsZKz3ovkOQGd8nOxHpMnzqU9u5nSpat5TUuH8pqkG+0CrGPkm+uTV48zyTTfZN 1JiCcNCYP3VfgsWGsmxJU3Pk4SA1tm5DVwPA9n9IXuJcyzznE8bjw3bvD8yUyGuW mURugfofMCWgvpbBB7YFekZ74RUiRs7SicaIxX0sO0H914M/CCwPqPUAcrJ4LouM jvO+hDvX71LUtlXiciLZI3UNQkLB0Kw= -----END CERTIFICATE-----Generated at Sun Jul 27 14:06:16 2025 by rpki-client