$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json) Hash identifier: REdeg/CUuD0Xs0W36d0yZhUWIYnxh268lPCfsiH90rg= Subject key identifier: E0:4E:67:5B:B2:95:46:DD:AE:5F:BF:FD:E6:D4:07:E9:7A:9D:DA:EA Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Certificate serial: 3561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft Manifest number: 34FC Signing time: Sun 20 Jul 2025 14:54:18 +0000 Manifest this update: Sun 20 Jul 2025 14:54:18 +0000 Manifest next update: Sun 27 Jul 2025 14:54:18 +0000 Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: 2c2U/j5hS0LofVmhJGfRna0AO2A1kDmLKLWdeoWttjA=) 2: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: oj9MA2Xl79Ulu/1U7XExVD59vw2GZhJkFrHTogIDTCg=) 3: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 1mDu3Q1bdiSa3axtc15ZDTGlc4zW4OxSySLPwHbTbvE=) 4: DDF4B0D2F08C11EEB70A1F76C4F9AE02.roa (hash: 3IhKk2ns73ug1cPcItokkvNYGQWI9rs7b4nF6YtsTSc=) 5: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: vltJ7Buw53igWVIfCgs9blss6VeKEkgF9l7xhGZDnwo=) 6: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: ZqgeyChgSkuAuEy8E4XBqCcFOmGTEjV9SXx7odN3pv4=) 7: D1EE6884F06C11EEA5BAA656C4F9AE02.roa (hash: 8K4hb6GJHcWswysfKKK+VFXlsdhKy8EjS5fIz+8731Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13665 (0x3561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Validity Not Before: Jul 20 14:54:18 2025 GMT Not After : Jul 27 14:54:18 2025 GMT Subject: CN=687d031a-8c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6c:40:ad:33:08:6e:2a:84:00:d1:22:62:3b: 42:ef:75:bb:a2:b6:e8:8f:b0:3e:b2:24:cc:13:a5: 05:01:36:f6:4a:3c:a8:92:04:ab:1d:08:34:42:81: 7b:12:f6:3c:21:ff:a3:38:bf:9e:62:ab:f9:dc:41: a2:14:99:ce:0d:29:e5:bf:19:96:65:4c:fd:34:67: 5d:a1:56:0c:fa:77:32:5b:bb:f8:82:8d:aa:fc:13: c8:29:22:91:ec:d6:a0:a1:a7:bd:87:e0:26:3c:40: 8e:9f:02:a6:18:c5:3d:d7:03:55:a0:64:19:b4:a6: ca:85:8c:49:c1:96:c7:cd:38:fe:f7:69:2b:da:34: 28:02:7b:1a:4a:b0:80:44:10:01:6b:63:c6:70:20: 93:76:09:4d:de:3d:de:fd:b2:ee:e6:0a:8c:d4:ec: 6b:97:d6:f3:d9:2c:00:18:f0:87:85:5b:e9:1b:cb: 3c:86:59:6a:2e:d7:d9:93:28:dc:55:c6:e0:36:09: b0:84:3a:b5:d7:a8:08:f9:30:ef:88:6c:be:52:2c: a1:63:39:91:9f:db:45:da:4e:5d:8d:5c:6d:a3:8a: 86:1f:10:b5:98:a5:38:5d:3a:7a:52:5e:9a:31:bb: 70:ae:06:d2:ab:80:7a:4a:10:76:9e:0d:7d:71:b2: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4E:67:5B:B2:95:46:DD:AE:5F:BF:FD:E6:D4:07:E9:7A:9D:DA:EA X509v3 Authority Key Identifier: keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:20:ec:10:0f:28:e6:ba:f5:8a:aa:9a:6a:bb:ab:f8:ec:6b: 65:ce:2e:44:98:53:ff:1e:c6:ac:56:e0:5d:b7:ce:b5:bb:cb: 63:f4:17:d5:6b:92:95:3c:91:ea:15:af:87:89:63:14:0d:a6: 11:f9:46:0a:7b:73:a8:0f:5e:6d:f1:2c:03:90:03:e7:77:bc: 01:61:52:33:c0:6f:24:be:a7:0a:90:48:89:9d:ea:b3:fc:6e: fe:05:6d:43:2e:96:9f:ba:ce:51:72:32:e6:07:70:49:0b:74: 11:a7:8a:30:c7:54:aa:16:54:ce:59:b5:ef:1a:db:f8:e2:b2: 52:a1:29:93:86:63:d4:64:08:76:fa:be:a4:ec:b6:d9:48:bd: 43:3b:e4:47:ce:a7:4e:f0:e0:f2:19:d5:16:a0:8e:7b:52:b0: 08:e9:90:87:bc:90:69:c5:42:cd:74:9a:3a:a1:e9:aa:cf:9f: fc:84:7f:0a:42:b5:cd:e9:08:4b:5b:fe:9c:4f:f2:26:25:2c: 52:ab:de:b0:74:6c:81:6d:78:8c:99:39:17:86:db:9b:10:b9: 01:48:22:c3:d1:0d:6d:1b:92:1f:bf:e2:51:dd:8c:32:85:dd: 3d:49:c8:c1:b4:c6:68:50:e6:ae:08:e9:01:ab:07:2a:7f:74: 47:4f:f2:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE RjgzOTZFQkUwHhcNMjUwNzIwMTQ1NDE4WhcNMjUwNzI3MTQ1NDE4WjAYMRYwFAYD VQQDEw02ODdkMDMxYS04Yzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WxArTMIbiqEANEiYjtC73W7orboj7A+siTME6UFATb2SjyokgSrHQg0QoF7 EvY8If+jOL+eYqv53EGiFJnODSnlvxmWZUz9NGddoVYM+ncyW7v4go2q/BPIKSKR 7Nagoae9h+AmPECOnwKmGMU91wNVoGQZtKbKhYxJwZbHzTj+92kr2jQoAnsaSrCA RBABa2PGcCCTdglN3j3e/bLu5gqM1Oxrl9bz2SwAGPCHhVvpG8s8hllqLtfZkyjc VcbgNgmwhDq116gI+TDviGy+UiyhYzmRn9tF2k5djVxto4qGHxC1mKU4XTp6Ul6a MbtwrgbSq4B6ShB2ng19cbJEnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBOZ1uy lUbdrl+//ebUB+l6ndrqMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk3OC8zMjIzRjM1RTFEOTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMy bVZJc2s5Sm5jX0RmZzVicjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkIOwQDyjmuvWKqppqu6v47Gtlzi5EmFP/HsasVuBdt861u8tj9BfV a5KVPJHqFa+HiWMUDaYR+UYKe3OoD15t8SwDkAPnd7wBYVIzwG8kvqcKkEiJneqz /G7+BW1DLpafus5RcjLmB3BJC3QRp4owx1SqFlTOWbXvGtv44rJSoSmThmPUZAh2 +r6k7LbZSL1DO+RHzqdO8ODyGdUWoI57UrAI6ZCHvJBpxULNdJo6oemqz5/8hH8K QrXN6QhLW/6cT/ImJSxSq96wdGyBbXiMmTkXhtubELkBSCLD0Q1tG5Ifv+JR3Ywy hd09ScjBtMZoUOauCOkBqwcqf3RHT/Lz -----END CERTIFICATE-----Generated at Sun Jul 20 16:25:54 2025 by rpki-client