$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft File: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json) Hash identifier: RAYksezHtpSrQeHqN5l/7Dx1M0OnFC2lgy//bf42vY8= Subject key identifier: 8A:E4:FB:22:E1:C6:17:5A:96:D3:A0:AB:88:92:DA:02:F3:85:D4:52 Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 Certificate issuer: /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft Manifest number: AF Signing time: Sat 19 Jul 2025 06:14:38 +0000 Manifest this update: Sat 19 Jul 2025 06:14:38 +0000 Manifest next update: Sat 26 Jul 2025 06:14:38 +0000 Files and hashes: 1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: POjhcpakuiARcgetj1LZqQMwtSc0SOGXeIt1dh7BjPk=) 2: F47CB05C5AE011EFB4CD7428C4F9AE02.roa (hash: dP/ms8awhu5P0L5X1kq3UaHwPpJfEdsfRvw8IFgrpFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720 Validity Not Before: Jul 19 06:14:38 2025 GMT Not After : Jul 26 06:14:38 2025 GMT Subject: CN=687b37ce-330d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c9:ce:f6:86:da:1f:af:1b:e2:0c:ae:8d:a4: f9:6d:e2:79:75:00:0b:2e:26:a3:07:c8:61:bd:0d: 95:9f:5e:d4:bf:47:c6:c2:a2:e8:b5:3d:31:86:d0: cb:66:0b:8e:5e:e3:61:a2:32:6a:ef:17:7a:0a:e6: 5c:98:d5:6d:d9:95:46:b3:23:24:ba:0b:91:af:c2: 95:f8:68:6c:63:16:42:68:46:9f:f2:7a:d7:22:9c: e3:6d:5e:6c:1d:29:07:9b:00:e0:9c:3e:06:4d:96: a3:89:28:ac:91:ae:e4:3b:fa:3f:10:79:23:3a:74: 96:a8:5c:23:8a:86:3c:39:fb:65:23:9c:8e:ba:87: 63:58:14:9c:62:3c:15:5f:80:79:cb:d2:3e:1f:8d: 3d:84:70:aa:61:12:81:a6:68:7e:30:4f:ba:1e:eb: 34:3b:95:b1:16:da:da:b7:c4:82:53:f8:e7:46:38: 9c:f0:a9:65:8c:0a:49:26:cc:6b:83:b2:4d:00:cf: 27:ca:8e:b5:5a:41:ed:5d:c6:30:5d:ed:c6:48:5c: 82:0f:62:79:ff:30:55:72:3a:76:41:44:f6:b1:42: cc:82:d2:5c:6a:b2:8d:74:31:74:39:76:62:76:d9: 9e:71:55:f0:40:df:5b:a0:3e:42:42:62:81:8f:69: ba:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E4:FB:22:E1:C6:17:5A:96:D3:A0:AB:88:92:DA:02:F3:85:D4:52 X509v3 Authority Key Identifier: keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:09:81:e7:9e:90:fe:39:c6:ce:ee:0b:1a:22:89:44:96:66: 3d:d0:c1:7d:2d:55:8a:5d:41:95:17:d2:39:8c:09:13:e3:c4: 5f:d4:d3:5e:74:d6:ca:c7:6b:04:c3:2b:c8:9a:54:a7:6f:f7: 5c:97:5b:c7:2f:05:06:23:4c:f8:90:eb:f2:4b:22:e6:9d:0a: bd:d9:69:c7:29:4b:76:b0:e1:c2:60:e9:76:0e:c6:d0:13:5e: d8:85:1a:d4:ab:a5:3d:39:92:c6:3a:b8:f6:14:c9:e9:6f:08: ae:e8:fe:6b:e3:00:6b:7d:69:c8:0f:79:ef:f9:01:ae:ef:94: 81:ca:56:95:1b:ff:75:ed:da:99:a9:98:c4:ea:c7:28:1b:f8: 52:87:ff:42:47:9e:35:53:86:ca:a8:2a:bd:26:e3:32:67:be: 2a:e6:f2:44:ec:b9:4b:8d:59:47:6c:9e:50:c8:73:16:66:2e: 35:22:f1:31:88:0f:6e:d4:91:20:0d:25:18:d4:fc:64:75:08: 7e:c4:39:c4:36:f8:ec:4d:07:b6:c3:f1:72:37:2d:d3:c0:3a: 65:ed:ba:bc:49:89:9b:e6:d4:6e:e4:aa:de:34:91:1b:ab:42: a8:a6:91:6a:c8:f7:86:ec:8f:73:c3:6f:7c:d2:56:e6:13:b3: 78:73:2b:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJCNjIxMTAvBgNVBAUTKEU2RjY1RDIyMUI1OTVGNkJBMTNFQjMxNERFRTMzOENB MjQxRTI3MjAwHhcNMjUwNzE5MDYxNDM4WhcNMjUwNzI2MDYxNDM4WjAYMRYwFAYD VQQDEw02ODdiMzdjZS0zMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MnO9obaH68b4gyujaT5beJ5dQALLiajB8hhvQ2Vn17Uv0fGwqLotT0xhtDL ZguOXuNhojJq7xd6CuZcmNVt2ZVGsyMkuguRr8KV+GhsYxZCaEaf8nrXIpzjbV5s HSkHmwDgnD4GTZajiSiska7kO/o/EHkjOnSWqFwjioY8OftlI5yOuodjWBScYjwV X4B5y9I+H409hHCqYRKBpmh+ME+6Hus0O5WxFtrat8SCU/jnRjic8KlljApJJsxr g7JNAM8nyo61WkHtXcYwXe3GSFyCD2J5/zBVcjp2QUT2sULMgtJcarKNdDF0OXZi dtmecVXwQN9boD5CQmKBj2m6CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrk+yLh xhdaltOgq4iS2gLzhdRSMB8GA1UdIwQYMBaAFOb2XSIbWV9roT6zFN7jOMokHicg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkI2Mi9CRDI5QjgxNjVB RTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0WlgydWhQck1VM3VNNHlpUWVK eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2WmRJaHRaWDJ1aFByTVUzdU00eWlRZUp5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkI2Mi9CRDI5QjgxNjVBRTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0Wlgy dWhQck1VM3VNNHlpUWVKeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFCYHnnpD+OcbO7gsaIolElmY90MF9LVWKXUGVF9I5jAkT48Rf1NNe dNbKx2sEwyvImlSnb/dcl1vHLwUGI0z4kOvySyLmnQq92WnHKUt2sOHCYOl2DsbQ E17YhRrUq6U9OZLGOrj2FMnpbwiu6P5r4wBrfWnID3nv+QGu75SBylaVG/917dqZ qZjE6scoG/hSh/9CR541U4bKqCq9JuMyZ74q5vJE7LlLjVlHbJ5QyHMWZi41IvEx iA9u1JEgDSUY1PxkdQh+xDnENvjsTQe2w/FyNy3TwDpl7bq8SYmb5tRu5KreNJEb q0KoppFqyPeG7I9zw2980lbmE7N4cysY -----END CERTIFICATE-----Generated at Sun Jul 20 15:14:10 2025 by rpki-client