$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft File: 5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json) Hash identifier: V8N4gINAHlN2euvPF/h6WPUAt38TXYQZYTA/trN0hX8= Subject key identifier: F5:A0:FF:EE:A8:6D:6D:52:20:03:3B:5E:3F:86:F0:DA:A1:AD:9D:01 Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft Manifest number: FA Signing time: Sat 19 Jul 2025 05:47:36 +0000 Manifest this update: Sat 19 Jul 2025 05:47:35 +0000 Manifest next update: Sat 26 Jul 2025 05:47:35 +0000 Files and hashes: 1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: GPS6JjI471+UJIqofmPms+0BITIlrUs62b2AzouN1NI=) 2: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: oS4PRK+VFwkVhFqqmzFtlUlVZ/0tESve4AVvdpaS7tg=) 3: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: zb91MkoqcDkuzuZwD7VYBRLCNDf9oSeL0ikN94ozVn8=) 4: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: TGsIq74Qma+U6c7Ey8qeEz04VjG5STVU5SpvAS46Q6U=) 5: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: qdwbcsIyL1f3wI2tO7dwB6BR0n7SfSV/G7xRpNDHqtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Validity Not Before: Jul 19 05:47:35 2025 GMT Not After : Jul 26 05:47:35 2025 GMT Subject: CN=687b3177-1176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:25:68:06:cf:87:d5:c9:ad:10:c7:d0:62: f3:02:12:b7:5d:9b:bd:a0:f5:71:49:ed:d2:4e:81: 4a:06:bd:01:5c:8c:1a:42:e8:c8:c1:38:1d:3e:89: 9c:d2:ae:33:74:24:c1:ad:b4:c1:12:ba:1f:f0:4e: d7:af:fc:16:8c:d7:5d:27:1f:34:8c:8c:7c:d5:b4: a2:bc:9a:7e:b3:51:d4:87:19:58:4c:a0:32:9c:f7: 27:34:95:21:50:0f:3a:d3:b4:cf:a4:65:23:b4:fe: 5e:cd:d0:30:fd:9b:57:69:93:35:7a:3e:ac:09:65: 50:3a:e7:61:23:ee:4b:2a:b1:16:af:99:2f:b2:23: 96:8c:41:73:e2:5c:79:d7:d9:16:c5:c9:7b:dc:4f: 33:44:57:8d:52:63:80:16:1f:23:69:e8:82:66:c6: 84:4c:ff:8e:cb:7b:a8:f1:86:2b:23:66:7d:c0:af: bc:34:c1:1d:5a:51:3f:91:e5:a1:86:2a:d1:2f:64: 9a:8c:0d:a2:8c:3c:fa:06:ed:49:5c:3f:be:4b:6a: 7a:6a:28:37:aa:10:ea:98:c9:49:8d:fb:26:af:53: 70:4b:33:c0:43:6b:46:9a:38:d1:5e:f1:ef:44:ca: 6a:55:41:03:e7:aa:33:61:ce:85:8f:29:02:b5:56: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:FF:EE:A8:6D:6D:52:20:03:3B:5E:3F:86:F0:DA:A1:AD:9D:01 X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e9:1d:b2:16:2b:87:28:57:36:5f:24:46:c1:1e:6f:31:98: 27:d6:26:9e:75:bd:5a:32:9e:29:86:50:34:6c:88:32:10:45: 4e:4e:33:0d:f0:30:97:2a:65:f1:04:c4:4d:94:cc:b0:62:e8: 86:c6:a6:16:0b:85:79:ab:fc:55:16:fc:1c:10:df:83:9a:27: 1f:dd:14:b4:86:4f:3e:21:55:b0:fe:56:af:8e:22:af:2d:e2: ea:28:e3:e5:a8:6d:05:87:39:fe:d4:81:55:34:fe:15:d0:d5: 36:f9:73:57:e0:58:59:9c:4f:ac:0b:e4:5f:36:09:85:1e:f0: 23:47:d2:a8:12:5f:f6:5d:70:63:cc:20:17:1c:37:08:dd:88: c4:1f:72:31:af:ca:ba:cc:b4:87:d4:ab:94:9a:04:20:28:b5: 68:6d:cc:5c:9f:79:c2:e8:37:ed:f4:4a:b2:94:46:51:0e:b4: ab:a6:da:ff:1e:9a:48:4b:27:4f:18:d9:cb:f1:a3:84:80:8f: 30:8d:5e:38:5d:6d:12:9b:f3:84:15:6d:9f:8f:ae:5b:e1:61: 66:5d:a1:7f:8f:1d:f1:10:7b:dd:ca:f9:a5:e7:d4:10:cc:b0: ee:7d:7b:f7:a2:95:a9:f1:fe:4a:13:0c:d0:c6:62:d4:ec:42: 9f:e5:93:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB REMzOEE0OEUwHhcNMjUwNzE5MDU0NzM1WhcNMjUwNzI2MDU0NzM1WjAYMRYwFAYD VQQDEw02ODdiMzE3Ny0xMTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvYlaAbPh9XJrRDH0GLzAhK3XZu9oPVxSe3SToFKBr0BXIwaQujIwTgdPomc 0q4zdCTBrbTBErof8E7Xr/wWjNddJx80jIx81bSivJp+s1HUhxlYTKAynPcnNJUh UA8607TPpGUjtP5ezdAw/ZtXaZM1ej6sCWVQOudhI+5LKrEWr5kvsiOWjEFz4lx5 19kWxcl73E8zRFeNUmOAFh8jaeiCZsaETP+Oy3uo8YYrI2Z9wK+8NMEdWlE/keWh hirRL2SajA2ijDz6Bu1JXD++S2p6aig3qhDqmMlJjfsmr1NwSzPAQ2tGmjjRXvHv RMpqVUED56ozYc6FjykCtVatmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWg/+6o bW1SIAM7Xj+G8NqhrZ0BMB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzcxMS9DN0QxQjA1NDFFRTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVY czlpaHktSkpGWGV0dzRwSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx6R2yFiuHKFc2XyRGwR5vMZgn1iaedb1aMp4phlA0bIgyEEVOTjMN 8DCXKmXxBMRNlMywYuiGxqYWC4V5q/xVFvwcEN+Dmicf3RS0hk8+IVWw/lavjiKv LeLqKOPlqG0Fhzn+1IFVNP4V0NU2+XNX4FhZnE+sC+RfNgmFHvAjR9KoEl/2XXBj zCAXHDcI3YjEH3Ixr8q6zLSH1KuUmgQgKLVobcxcn3nC6Dft9EqylEZRDrSrptr/ HppISydPGNnL8aOEgI8wjV44XW0Sm/OEFW2fj65b4WFmXaF/jx3xEHvdyvml59QQ zLDufXv3opWp8f5KEwzQxmLU7EKf5ZN4 -----END CERTIFICATE-----Generated at Sun Jul 20 14:32:08 2025 by rpki-client