$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json) Hash identifier: 5ztbc0pa8RWQy6NEUv7g8faMIb+NE5mk4XubWvSUm78= Subject key identifier: E0:E8:B8:9D:FF:90:9C:C1:42:F9:AF:96:12:02:C7:44:F3:A6:24:95 Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft Manifest number: 5F Signing time: Mon 21 Jul 2025 07:16:36 +0000 Manifest this update: Mon 21 Jul 2025 07:16:36 +0000 Manifest next update: Mon 28 Jul 2025 07:16:36 +0000 Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: bEzZ2X9IcUQIWXGGxbijnO2/EfjJgqpUyDFR1n4BODk=) 2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Validity Not Before: Jul 21 07:16:36 2025 GMT Not After : Jul 28 07:16:36 2025 GMT Subject: CN=687de954-516e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4a:32:6f:36:c4:7e:7a:fd:75:29:87:b5:63: ed:aa:bb:0c:fa:61:c1:fe:48:b8:dc:c2:fa:a6:e8: b0:0e:42:bc:6c:71:aa:46:69:82:9c:5b:36:a9:8e: 0b:07:63:56:e6:24:bd:38:1a:e8:54:28:bc:b2:2b: 48:b8:8a:04:12:a7:40:e9:d5:a3:d9:aa:0c:29:b0: e3:be:38:8b:2b:cb:e5:98:27:d7:70:e2:d0:05:74: 20:ce:ae:da:44:cd:5c:bf:bf:5c:5d:98:76:27:56: 43:31:2b:57:f2:21:7b:fa:03:d4:ce:44:d7:4b:4d: 44:0d:50:5f:f1:6e:0e:28:a9:b5:49:14:fe:06:e7: 44:a1:c6:85:7b:a1:f0:db:61:ac:03:b9:26:21:47: c9:65:1c:f6:90:4c:85:53:52:13:f9:48:9a:5d:f6: 4e:ae:48:e0:e2:0c:1a:40:4c:85:7b:52:10:60:50: d0:5f:be:f6:6f:cc:8a:29:91:58:88:13:54:4d:f5: e8:b5:20:4f:2a:b4:cb:a8:cb:8a:5e:0a:95:96:ba: 35:00:44:69:b7:53:e6:d1:e0:65:b9:74:78:31:58: 70:ca:85:89:e7:8f:f7:ad:be:ae:85:23:56:8c:09: be:32:1c:c1:17:88:1d:aa:31:55:a9:39:1c:4a:aa: a8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E8:B8:9D:FF:90:9C:C1:42:F9:AF:96:12:02:C7:44:F3:A6:24:95 X509v3 Authority Key Identifier: keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f1:39:9e:60:a3:1a:38:d3:3b:cb:26:06:a4:8f:96:6c:9e: f3:4f:89:59:b8:dc:e9:3a:3f:5b:6d:a8:67:b1:68:7f:f1:92: 81:ea:65:56:ff:95:f7:09:97:fc:8c:52:dc:8d:17:b2:6a:f9: f5:94:e0:a9:5b:ab:3c:b5:c8:35:55:a8:53:66:4f:80:43:b8: d9:ec:c6:d1:6c:8e:fd:84:de:28:3f:57:23:26:49:94:5a:a4: 86:5d:11:05:b6:0e:d6:c2:bb:9d:71:54:1b:db:da:31:20:b7: d7:3a:9b:85:52:df:18:3a:44:19:05:bd:47:fb:27:ae:86:2a: f7:74:cb:ed:ed:e8:aa:fa:fb:fe:c6:44:bf:54:f5:4a:f0:15: 49:37:fd:78:e5:b4:63:93:b6:5d:a5:d9:86:18:70:1f:bc:4e: ed:55:fb:a3:54:66:5e:e3:d2:c6:97:f9:f5:a9:7b:52:6a:d8: a7:d5:6a:53:04:97:12:80:76:b7:10:77:c3:28:13:4c:b4:1b: 0c:4f:5a:64:04:7d:3d:8b:bb:b0:73:94:72:9f:a5:47:80:91: 1b:34:a4:51:e0:99:80:91:b4:90:24:54:c5:d3:e9:f5:83:f6: d2:76:1c:06:63:62:a4:a1:6d:87:94:54:13:92:70:95:93:8d: f8:fd:46:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoRkI2Qjk0NjM2MUYwQzVDODJFMkIwNjc0MEQ0QkE4QjBC OTkzNTNGODAeFw0yNTA3MjEwNzE2MzZaFw0yNTA3MjgwNzE2MzZaMBgxFjAUBgNV BAMTDTY4N2RlOTU0LTUxNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZSjJvNsR+ev11KYe1Y+2quwz6YcH+SLjcwvqm6LAOQrxscapGaYKcWzapjgsH Y1bmJL04GuhUKLyyK0i4igQSp0Dp1aPZqgwpsOO+OIsry+WYJ9dw4tAFdCDOrtpE zVy/v1xdmHYnVkMxK1fyIXv6A9TORNdLTUQNUF/xbg4oqbVJFP4G50ShxoV7ofDb YawDuSYhR8llHPaQTIVTUhP5SJpd9k6uSODiDBpATIV7UhBgUNBfvvZvzIopkViI E1RN9ei1IE8qtMuoy4peCpWWujUARGm3U+bR4GW5dHgxWHDKhYnnj/etvq6FI1aM Cb4yHMEXiB2qMVWpORxKqqh3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4Oi4nf+Q nMFC+a+WEgLHRPOmJJUwHwYDVR0jBBgwFoAU+2uUY2HwxcguKwZ0DUuosLmTU/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1L0ExNTlGNzgyRDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNndUt3WjBEVXVvc0xtVFVf Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTJ1VVkySHd4Y2d1S3daMERVdW9zTG1UVV9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1L0ExNTlGNzgyRDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNn dUt3WjBEVXVvc0xtVFVfZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHvxOZ5goxo40zvLJgakj5ZsnvNPiVm43Ok6P1ttqGexaH/xkoHqZVb/ lfcJl/yMUtyNF7Jq+fWU4Klbqzy1yDVVqFNmT4BDuNnsxtFsjv2E3ig/VyMmSZRa pIZdEQW2DtbCu51xVBvb2jEgt9c6m4VS3xg6RBkFvUf7J66GKvd0y+3t6Kr6+/7G RL9U9UrwFUk3/XjltGOTtl2l2YYYcB+8Tu1V+6NUZl7j0saX+fWpe1Jq2KfValME lxKAdrcQd8MoE0y0GwxPWmQEfT2Lu7BzlHKfpUeAkRs0pFHgmYCRtJAkVMXT6fWD 9tJ2HAZjYqShbYeUVBOScJWTjfj9Rpw= -----END CERTIFICATE-----Generated at Wed Jul 23 02:27:07 2025 by rpki-client