$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json) Hash identifier: 0zvdXEoZJ+aWRHgIAnYzZ7T++JctTQuUMDfEHs8acNE= Subject key identifier: 46:66:59:5E:5C:13:DE:21:DB:68:E5:C4:BC:A5:37:F2:C7:EE:ED:A8 Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft Manifest number: 0C5B Signing time: Fri 18 Jul 2025 18:36:57 +0000 Manifest this update: Fri 18 Jul 2025 18:36:56 +0000 Manifest next update: Fri 25 Jul 2025 18:36:56 +0000 Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: +sdJvBMT242fZv4S1alzqUqlK3wzdu+WyIKtiI/2SyA=) 2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 78Vf6/fB7sknA1Wt2VtN9AZj7sBbXgPyMuxI8cL1zlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Validity Not Before: Jul 18 18:36:56 2025 GMT Not After : Jul 25 18:36:56 2025 GMT Subject: CN=687a9448-75e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:01:1d:88:37:2d:23:a7:19:a2:f1:5d:00: 61:d3:cf:c1:aa:1d:89:2f:82:d8:fa:2f:e8:dc:6f: fe:2c:21:3c:d0:47:9b:ce:f9:65:da:c1:60:f0:a7: 2f:d3:48:d0:9d:52:2f:c4:c4:6b:74:8c:d2:61:e0: c4:60:a8:17:57:11:23:94:d9:62:bc:91:e7:5f:f1: 59:77:7b:d1:1d:de:84:18:b4:49:cc:34:5c:3e:c1: fb:b6:56:c4:5e:17:94:ca:de:df:1c:f7:c2:7e:d1: 00:5b:f6:02:fd:80:6d:d3:4b:2b:8c:c7:56:d5:a8: c4:0a:85:9e:1e:97:5c:29:e6:43:70:2f:0f:8a:be: 54:c1:38:fd:b5:e5:df:fb:0a:9c:20:c0:1b:ca:ff: 0c:97:18:8f:c5:14:75:b0:57:39:f5:0b:f0:df:95: 46:8c:25:90:8a:72:1c:ed:61:0c:34:11:97:30:f6: 7b:7a:9d:69:55:40:72:a6:d3:79:b1:9a:35:58:88: 57:98:24:f5:d7:4e:7c:d6:21:6e:e3:b5:70:6f:fe: a4:58:da:f3:0f:e0:eb:f8:41:3e:d0:f6:b5:af:39: c4:34:c2:99:e1:d8:09:22:ec:d1:48:d8:3a:58:c0: 8e:7a:77:c1:64:d0:ad:78:2e:ef:59:47:80:46:12: a4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:66:59:5E:5C:13:DE:21:DB:68:E5:C4:BC:A5:37:F2:C7:EE:ED:A8 X509v3 Authority Key Identifier: keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:9d:87:8b:fb:d9:5b:74:97:2d:28:31:c1:90:93:34:9e:ec: b0:8e:47:fe:f4:a3:22:23:76:d3:c1:3d:52:d7:35:3d:da:9a: 36:06:fd:dd:32:b4:20:08:ea:5e:27:68:80:01:34:4f:02:fa: ed:60:a4:82:7b:b2:35:db:05:03:a2:1d:71:f2:c2:aa:b1:a6: 6f:7d:d2:32:3a:5c:3f:e4:88:6f:d8:69:6f:37:78:c2:97:07: 74:e2:d6:01:be:77:fc:67:63:cc:fc:2f:64:e7:6a:a8:5f:37: 23:10:f5:27:2a:b4:91:26:b3:2f:63:1e:47:b6:d1:a4:63:b3: 2d:6f:2f:c0:af:72:fe:8d:38:95:38:08:ee:7e:3d:cc:a0:be: 13:95:97:2d:c7:84:00:ab:4f:2a:f7:84:9a:fb:8b:8e:eb:d2: 35:ed:2f:76:4c:e8:d8:0f:3b:f8:59:a1:ae:0a:76:3d:26:e6: 10:57:28:1a:e9:e2:8e:36:0b:35:cc:ee:72:90:de:1f:3b:44: 4c:fa:b6:80:68:3f:69:31:e1:e3:ea:c2:ee:52:94:22:76:b9: f3:2c:8d:0e:25:c4:c1:2a:a8:2a:d1:78:95:a5:61:77:ef:f2: e0:b2:da:7e:08:56:93:c2:43:26:58:a5:69:56:71:8a:0c:41: b8:c9:66:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREOEUxMTAvBgNVBAUTKDNGN0Q5QkJBRUQ3QzVCRkRCQkEzQTM0OUFCRTk2QjIx QUQyN0RBNjcwHhcNMjUwNzE4MTgzNjU2WhcNMjUwNzI1MTgzNjU2WjAYMRYwFAYD VQQDEw02ODdhOTQ0OC03NWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOoBHYg3LSOnGaLxXQBh08/Bqh2JL4LY+i/o3G/+LCE80Eebzvll2sFg8Kcv 00jQnVIvxMRrdIzSYeDEYKgXVxEjlNlivJHnX/FZd3vRHd6EGLRJzDRcPsH7tlbE XheUyt7fHPfCftEAW/YC/YBt00srjMdW1ajECoWeHpdcKeZDcC8Pir5UwTj9teXf +wqcIMAbyv8MlxiPxRR1sFc59Qvw35VGjCWQinIc7WEMNBGXMPZ7ep1pVUByptN5 sZo1WIhXmCT110581iFu47Vwb/6kWNrzD+Dr+EE+0Pa1rznENMKZ4dgJIuzRSNg6 WMCOenfBZNCteC7vWUeARhKkVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZmWV5c E94h22jlxLylN/LH7u2oMB8GA1UdIwQYMBaAFD99m7rtfFv9u6OjSavpayGtJ9pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ4RS81ODlCOTMzQzA2 QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdfMjdvNk5KcS1scklhMG4y bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzMmJ1dTE4V18yN282TkpxLWxySWEwbjJtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQ4RS81ODlCOTMzQzA2QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdf MjdvNk5KcS1scklhMG4ybWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgnYeL+9lbdJctKDHBkJM0nuywjkf+9KMiI3bTwT1S1zU92po2Bv3d MrQgCOpeJ2iAATRPAvrtYKSCe7I12wUDoh1x8sKqsaZvfdIyOlw/5Ihv2GlvN3jC lwd04tYBvnf8Z2PM/C9k52qoXzcjEPUnKrSRJrMvYx5HttGkY7Mtby/Ar3L+jTiV OAjufj3MoL4TlZctx4QAq08q94Sa+4uO69I17S92TOjYDzv4WaGuCnY9JuYQVyga 6eKONgs1zO5ykN4fO0RM+raAaD9pMeHj6sLuUpQidrnzLI0OJcTBKqgq0XiVpWF3 7/Lgstp+CFaTwkMmWKVpVnGKDEG4yWbo -----END CERTIFICATE-----Generated at Sun Jul 20 11:32:59 2025 by rpki-client