$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json) Hash identifier: 2UDSTy/1sh3Lxjd8eEFz+7gmaaeP0Mb5F/voPaLm/xY= Subject key identifier: E2:5D:64:C3:B8:B2:FC:44:EC:99:E2:54:21:66:12:A9:D0:66:A5:8B Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Certificate serial: 06FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft Manifest number: 06F6 Signing time: Sun 20 Jul 2025 22:03:14 +0000 Manifest this update: Sun 20 Jul 2025 22:03:14 +0000 Manifest next update: Sun 27 Jul 2025 22:03:14 +0000 Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: FRdWX3OGzb0OsuWQiyiWCVyGtts9AZjuEjK00iReNq0=) 2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=) 3: 56617572537F11EB9C970658C4F9AE02.roa (hash: xS7amPwlmGL+CP12HQjnbonilF649h5RUnRZcUUg8FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Validity Not Before: Jul 20 22:03:14 2025 GMT Not After : Jul 27 22:03:14 2025 GMT Subject: CN=687d67a2-d227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:c4:01:a4:42:70:d4:bb:48:28:f9:a0:5f: c5:2f:52:b3:ec:79:6f:40:ef:c9:ca:90:5c:4d:ca: 93:47:23:30:46:26:43:0b:c9:a1:7b:55:e9:6a:8b: b2:f3:f8:b9:b9:78:1f:1d:a1:6a:5c:fb:9b:bd:0e: 20:8f:b6:9e:c1:d1:02:69:58:79:58:79:73:fd:1b: 86:c3:1d:1b:73:91:ae:d7:a1:04:ee:e0:65:72:27: f0:de:6e:61:2d:bd:2b:81:21:06:f9:6b:dc:4c:94: 13:60:c3:3f:8e:2e:f1:e6:c7:6b:88:79:9b:81:c7: 06:51:c0:98:62:1a:bc:f9:ff:5b:9c:33:bc:20:25: 43:da:cf:1a:d8:a1:4d:ce:1e:f3:d7:c0:a7:87:50: e9:67:52:cb:59:ed:b6:59:90:d7:26:0b:cb:b9:81: 4a:ed:d2:29:c2:0d:b3:1e:7a:b8:1d:a5:5b:71:47: 32:ae:54:e8:0e:2b:80:15:78:6e:35:74:7b:ea:10: 7f:a3:42:ef:f9:84:63:c9:80:a5:1d:ac:6d:ed:00: f3:2d:99:b6:b9:9a:a6:02:ff:65:5b:17:11:a5:18: a2:86:9f:54:29:4f:c5:a4:3b:27:e9:f5:14:d4:49: c2:b0:2a:3f:db:3e:1d:28:df:4e:ce:1e:95:78:b8: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5D:64:C3:B8:B2:FC:44:EC:99:E2:54:21:66:12:A9:D0:66:A5:8B X509v3 Authority Key Identifier: keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:35:6d:62:72:03:f6:97:13:83:3e:64:dd:38:77:42:12:2e: 81:52:08:74:5b:2c:08:b0:d2:b8:09:b2:65:02:0f:3b:59:ba: 7a:fa:ac:3e:c2:a9:fc:76:2f:92:bd:1c:ff:3b:45:cf:31:19: 00:8e:53:80:14:57:11:73:ba:9f:80:39:02:c3:91:ff:7b:50: 75:bb:09:17:bc:d0:c5:4a:25:33:94:92:60:a9:2c:f5:9e:fb: c7:fd:90:d8:60:7b:15:f1:23:9a:9d:e9:36:a1:49:82:20:8e: b5:7b:ed:5d:ef:57:d5:65:c8:a7:ab:f4:0c:c9:d7:cc:8c:30: 52:20:14:50:a0:5b:f8:d0:95:46:49:f6:8f:28:9e:6f:d6:f6: 6c:e4:76:76:a0:34:51:1a:a3:f2:81:5f:ef:d4:49:b9:4e:9a: 22:0b:dc:e4:8b:8b:be:04:ea:20:5b:c0:d9:0d:f1:a1:ea:dc: ff:26:b0:27:46:12:87:87:c4:ad:e6:4d:89:92:b4:c2:2d:30: fb:1a:d7:7d:35:c6:d3:3d:9f:9d:69:d9:6f:fe:6c:9f:f3:4c: b7:50:fe:62:e9:7a:46:69:53:b3:1b:21:e0:90:6c:eb:1e:ae: 31:0e:c2:eb:99:4a:41:de:9c:f8:6a:8c:9a:26:95:dc:de:5e: f4:23:d5:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD OUM3OTNCMUUwHhcNMjUwNzIwMjIwMzE0WhcNMjUwNzI3MjIwMzE0WjAYMRYwFAYD VQQDEw02ODdkNjdhMi1kMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUTEAaRCcNS7SCj5oF/FL1Kz7HlvQO/JypBcTcqTRyMwRiZDC8mhe1Xpaouy 8/i5uXgfHaFqXPubvQ4gj7aewdECaVh5WHlz/RuGwx0bc5Gu16EE7uBlcifw3m5h Lb0rgSEG+WvcTJQTYMM/ji7x5sdriHmbgccGUcCYYhq8+f9bnDO8ICVD2s8a2KFN zh7z18Cnh1DpZ1LLWe22WZDXJgvLuYFK7dIpwg2zHnq4HaVbcUcyrlToDiuAFXhu NXR76hB/o0Lv+YRjyYClHaxt7QDzLZm2uZqmAv9lWxcRpRiihp9UKU/FpDsn6fUU 1EnCsCo/2z4dKN9Ozh6VeLg33QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJdZMO4 svxE7JniVCFmEqnQZqWLMB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm SjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJNW1icgP2lxODPmTdOHdCEi6BUgh0WywIsNK4CbJlAg87Wbp6+qw+ wqn8di+SvRz/O0XPMRkAjlOAFFcRc7qfgDkCw5H/e1B1uwkXvNDFSiUzlJJgqSz1 nvvH/ZDYYHsV8SOanek2oUmCII61e+1d71fVZcinq/QMydfMjDBSIBRQoFv40JVG SfaPKJ5v1vZs5HZ2oDRRGqPygV/v1Em5TpoiC9zki4u+BOogW8DZDfGh6tz/JrAn RhKHh8St5k2JkrTCLTD7Gtd9NcbTPZ+dadlv/myf80y3UP5i6XpGaVOzGyHgkGzr Hq4xDsLrmUpB3pz4aoyaJpXc3l70I9VO -----END CERTIFICATE-----Generated at Mon Jul 21 08:04:56 2025 by rpki-client