$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: /q3QrOls+P6KykoPrZ4lMqyE4LCp25JxxI5sUtF7rK4= Subject key identifier: 01:01:FD:75:AF:54:1D:85:86:18:77:1D:82:FE:AC:59:8D:1F:A8:FB Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: C5 Signing time: Sat 19 Jul 2025 06:01:43 +0000 Manifest this update: Sat 19 Jul 2025 06:01:42 +0000 Manifest next update: Sat 26 Jul 2025 06:01:42 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: qeWzPz+MLGhCzDnxYgZGdjL+pSacV20A/t5HOZr3BKc=) 2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: pQpO0/PUmsk8Ne8Tm6dn6viR4Yd/Q34ajbz6wbYS9Zc=) 3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: sO/FcuusJDef8Jgb3m4tmdQe6il72ChJ0DAhA0al1Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Jul 19 06:01:42 2025 GMT Not After : Jul 26 06:01:42 2025 GMT Subject: CN=687b34c6-a604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:44:88:c1:6c:d4:64:d3:3c:c1:03:a3:43: 0e:50:87:1c:02:e3:6e:93:8b:e9:5b:9a:fb:ec:32: 83:ae:0d:41:1d:81:f0:57:bb:79:7e:16:e6:37:c9: 21:60:8c:bc:27:a2:64:d2:69:a4:5f:0d:fb:89:c5: 10:10:4b:3e:66:9c:bf:7c:35:6f:42:58:5c:b0:79: 7e:49:10:6d:d0:bc:87:4a:ef:44:d8:d7:6a:9a:b6: d7:fe:46:0e:59:24:5b:ba:27:c5:e0:1d:67:1a:99: 10:da:96:ae:2b:95:a1:37:87:16:72:d3:9d:99:56: d0:7c:5c:5c:9b:f4:9d:7c:b8:57:d3:9d:87:34:de: da:05:68:24:97:b5:6c:fd:57:a2:3e:5a:60:67:eb: e6:2a:2a:50:70:c9:c8:e2:bc:36:89:fb:fc:82:30: bb:ed:72:56:ce:89:d4:8a:84:73:9b:09:23:2e:34: b4:ba:04:03:22:62:28:02:35:bb:a1:7b:33:07:70: 09:61:34:e7:8b:74:27:a5:ca:20:42:87:7a:ad:bf: 36:d6:06:41:91:7c:17:7a:cb:8f:74:13:3c:45:ce: b6:51:a6:c5:e7:e2:72:e3:71:e7:57:75:97:77:0f: 2a:ab:a4:34:c7:70:7e:f1:ce:29:9a:55:78:a5:51: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:01:FD:75:AF:54:1D:85:86:18:77:1D:82:FE:AC:59:8D:1F:A8:FB X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:5c:74:a1:1e:87:a9:51:62:41:f6:fd:18:04:83:02:42:08: 04:6f:07:a2:34:e0:50:9c:01:5b:14:e4:76:23:0d:eb:e8:65: e4:85:ae:03:5a:37:e0:ab:97:22:e2:0f:c0:92:3a:d0:25:27: 8f:eb:9b:3f:80:29:fb:a9:8a:ab:9e:4a:d5:54:4a:af:f8:64: 44:0b:ec:de:c5:ce:26:bb:9c:ed:98:23:95:63:85:20:b3:84: 73:8c:90:98:3b:52:40:43:be:f7:8d:b9:01:61:a2:a6:f8:f4: 6d:79:90:78:d5:b0:d4:94:71:e4:05:32:fd:f0:36:8f:48:be: 5e:cf:c1:d6:93:6b:77:f4:3c:f7:d0:b0:05:b4:7a:c4:92:40: d5:a4:bc:10:a2:69:2b:b0:44:2a:09:90:61:76:dd:67:80:ac: 5c:30:81:7e:38:27:85:98:06:2f:16:7e:ac:42:5a:e9:59:4d: bd:7f:a3:a8:33:98:60:e8:be:fc:f9:80:f4:b0:7b:e7:d1:21: c8:79:3d:77:a5:72:2a:33:e8:75:9a:d8:4f:d0:2c:94:7d:11: 46:6f:bf:a7:d1:c8:50:91:80:0b:0a:f7:ae:24:9e:2b:8c:a4: a5:f4:4d:cb:36:a4:3f:10:3a:ff:a5:79:9a:56:fb:bb:81:e3: 55:38:0d:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjUwNzE5MDYwMTQyWhcNMjUwNzI2MDYwMTQyWjAYMRYwFAYD VQQDEw02ODdiMzRjNi1hNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEBEiMFs1GTTPMEDo0MOUIccAuNuk4vpW5r77DKDrg1BHYHwV7t5fhbmN8kh YIy8J6Jk0mmkXw37icUQEEs+Zpy/fDVvQlhcsHl+SRBt0LyHSu9E2NdqmrbX/kYO WSRbuifF4B1nGpkQ2pauK5WhN4cWctOdmVbQfFxcm/SdfLhX052HNN7aBWgkl7Vs /VeiPlpgZ+vmKipQcMnI4rw2ifv8gjC77XJWzonUioRzmwkjLjS0ugQDImIoAjW7 oXszB3AJYTTni3QnpcogQod6rb821gZBkXwXesuPdBM8Rc62UabF5+Jy43HnV3WX dw8qq6Q0x3B+8c4pmlV4pVG4UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEB/XWv VB2Fhhh3HYL+rFmNH6j7MB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5XHShHoepUWJB9v0YBIMCQggEbweiNOBQnAFbFOR2Iw3r6GXkha4D Wjfgq5ci4g/AkjrQJSeP65s/gCn7qYqrnkrVVEqv+GREC+zexc4mu5ztmCOVY4Ug s4RzjJCYO1JAQ773jbkBYaKm+PRteZB41bDUlHHkBTL98DaPSL5ez8HWk2t39Dz3 0LAFtHrEkkDVpLwQomkrsEQqCZBhdt1ngKxcMIF+OCeFmAYvFn6sQlrpWU29f6Oo M5hg6L78+YD0sHvn0SHIeT13pXIqM+h1mthP0CyUfRFGb7+n0chQkYALCveuJJ4r jKSl9E3LNqQ/EDr/pXmaVvu7geNVOA1m -----END CERTIFICATE-----Generated at Sun Jul 20 03:17:34 2025 by rpki-client