$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: x1O6g3pTU+68T1OVv1Z1A/kRGvXaIpM1/5x0c031oDM= Subject key identifier: B5:86:B9:45:4C:41:8B:CD:0A:9D:07:92:0A:D2:CE:16:3C:82:EF:DC Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 015D Signing time: Mon 21 Jul 2025 04:13:33 +0000 Manifest this update: Mon 21 Jul 2025 04:13:32 +0000 Manifest next update: Mon 28 Jul 2025 04:13:32 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: 1zuprX3LAWbq+Ru2hvw+X9yVy03LN4ybrFH9091iNDc=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: 8DzejS8W4fMDZxY9d0U5Ub0yW6L6q7unUQ1/+VEKpFE=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: M7N4nEDh5dyTQv8ASFX1wDCT+UJFNgGAfP+B+anOP+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Jul 21 04:13:32 2025 GMT Not After : Jul 28 04:13:32 2025 GMT Subject: CN=687dbe6c-459c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:67:ff:2e:1c:5a:b6:13:5d:da:8b:4a:35: 09:2d:4d:08:4d:67:da:99:ff:96:36:af:30:b0:59: 5f:97:7e:31:26:f7:94:0c:da:7d:cf:b5:93:f5:a3: ec:a9:b1:ea:af:7b:ab:82:f6:4e:3e:78:bb:04:99: ea:ca:21:bc:d6:36:0f:4a:b8:3e:d8:7b:87:ee:40: 9f:b1:cc:d8:96:8a:dd:4f:28:ed:43:81:24:6d:bf: c7:95:f9:ec:9d:90:86:a7:f0:cf:7d:85:6e:de:8b: 53:31:6b:34:dd:76:0b:76:04:8c:7a:35:a7:9c:76: 88:1f:2d:23:b6:65:42:b4:e9:bb:8e:4b:ad:a6:9e: 0d:86:9c:c2:56:0d:2e:51:c5:cc:f4:7e:4a:dc:b9: db:53:3b:31:2b:e4:07:32:ff:4f:ff:2e:7d:2e:62: 36:dd:c6:b9:50:3e:76:92:e1:b7:28:7e:8c:9e:de: c9:5b:3d:35:ec:82:54:c8:a5:ea:5b:8c:22:9f:78: d0:4e:39:a2:56:98:a1:af:4f:e7:35:fc:02:1d:af: 1d:31:1d:81:58:af:f9:b0:d4:5e:c7:b3:e6:02:19: 88:26:aa:82:71:a4:c1:81:8e:c7:f6:06:bf:5e:18: c2:c3:39:98:fb:0a:a1:59:a5:88:fc:80:e5:d9:22: 04:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:86:B9:45:4C:41:8B:CD:0A:9D:07:92:0A:D2:CE:16:3C:82:EF:DC X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d3:40:81:db:b8:b2:76:fc:65:72:f3:9a:79:90:d0:7a:ff: 5f:05:ac:ec:7c:63:ce:75:c2:c2:ab:f1:f4:76:d3:b5:ce:49: 30:10:6b:bb:f1:52:42:4b:40:4c:fb:4f:7f:3f:eb:c7:1f:6d: 4d:08:a2:5e:80:1e:10:33:7a:4c:45:27:fd:39:19:0d:62:57: 5b:77:28:c3:fb:eb:34:41:50:b9:e9:4e:14:0a:44:69:b0:16: 64:e4:9e:6f:84:ee:71:c0:64:de:60:02:97:82:69:c7:1d:b9: 1a:fb:4e:8a:dd:ff:da:59:22:cd:1c:fc:3e:f3:68:d6:46:31: a6:7f:d0:6c:0d:bc:0e:93:1f:10:53:37:46:c7:80:d9:4f:30: 52:1c:4c:b7:83:df:7d:16:01:07:8a:f5:37:28:d6:0f:e8:74: 17:06:72:53:b4:08:ad:54:ba:11:54:35:3b:7f:48:80:29:95: aa:d9:bd:a2:cc:25:35:11:b1:5b:1f:53:93:8d:c9:26:da:56: 2f:66:36:a5:da:77:0b:3b:2a:ba:0e:b1:42:0f:9d:0a:c6:7c: e7:cd:b4:5c:aa:7c:86:98:b8:74:ea:ff:cd:e2:fa:f6:af:a7: bc:6a:95:46:b5:65:05:11:c3:57:06:4c:2a:ad:34:13:5c:bd: 9d:61:41:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUwNzIxMDQxMzMyWhcNMjUwNzI4MDQxMzMyWjAYMRYwFAYD VQQDEw02ODdkYmU2Yy00NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/Nn/y4cWrYTXdqLSjUJLU0ITWfamf+WNq8wsFlfl34xJveUDNp9z7WT9aPs qbHqr3urgvZOPni7BJnqyiG81jYPSrg+2HuH7kCfsczYlordTyjtQ4Ekbb/Hlfns nZCGp/DPfYVu3otTMWs03XYLdgSMejWnnHaIHy0jtmVCtOm7jkutpp4NhpzCVg0u UcXM9H5K3LnbUzsxK+QHMv9P/y59LmI23ca5UD52kuG3KH6Mnt7JWz017IJUyKXq W4win3jQTjmiVpihr0/nNfwCHa8dMR2BWK/5sNRex7PmAhmIJqqCcaTBgY7H9ga/ XhjCwzmY+wqhWaWI/IDl2SIEWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWGuUVM QYvNCp0HkgrSzhY8gu/cMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG00CB27iydvxlcvOaeZDQev9fBazsfGPOdcLCq/H0dtO1zkkwEGu7 8VJCS0BM+09/P+vHH21NCKJegB4QM3pMRSf9ORkNYldbdyjD++s0QVC56U4UCkRp sBZk5J5vhO5xwGTeYAKXgmnHHbka+06K3f/aWSLNHPw+82jWRjGmf9BsDbwOkx8Q UzdGx4DZTzBSHEy3g999FgEHivU3KNYP6HQXBnJTtAitVLoRVDU7f0iAKZWq2b2i zCU1EbFbH1OTjckm2lYvZjal2ncLOyq6DrFCD50KxnznzbRcqnyGmLh06v/N4vr2 r6e8apVGtWUFEcNXBkwqrTQTXL2dYUHn -----END CERTIFICATE-----Generated at Wed Jul 23 05:35:42 2025 by rpki-client