$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: ore4gWTC7o29UTNJsfrGv7O8AQ2Q9YkMRqoizE0U5a4= Subject key identifier: D2:68:67:B4:87:42:FC:83:A8:7D:D2:21:9E:99:72:91:E2:E7:85:61 Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: 017B Signing time: Mon 21 Jul 2025 03:54:08 +0000 Manifest this update: Mon 21 Jul 2025 03:54:08 +0000 Manifest next update: Mon 28 Jul 2025 03:54:08 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: dvPDM0J8rUCbjRMJUysX/dKxSkuce/Pq7F9e9UqSuL8=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: 0UTp5Ayv/ftDBInci/moVW1XbBA3xfvlEMb4Bw4foQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: Jul 21 03:54:08 2025 GMT Not After : Jul 28 03:54:08 2025 GMT Subject: CN=687db9e0-6451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:f4:f2:62:f8:c9:c4:58:7a:52:59:2f:4e: 22:c6:02:83:5c:6c:04:a6:85:ee:24:33:70:fb:19: fb:9e:e6:8c:a6:f6:d1:06:8a:fe:6d:49:e6:78:cc: cc:01:49:27:0e:52:ed:e2:e6:f2:9b:e8:c2:ad:99: cb:48:4d:04:fa:87:e0:d3:4a:7f:e9:34:f6:a0:1b: d9:46:30:0e:ab:b6:ae:16:4d:4d:67:61:26:d4:21: 00:5d:ed:d4:ae:51:01:12:de:73:53:ee:9f:af:ae: f9:87:c7:c8:29:aa:4c:aa:20:90:58:9d:f6:05:eb: 91:11:ea:35:8c:fc:e1:2e:03:f4:a7:d7:38:a8:ab: ff:12:c9:91:1a:48:11:8f:35:9c:be:25:d9:c0:2b: fd:bf:3d:5d:ad:db:0f:ac:4b:45:63:a4:ee:b1:eb: a0:2a:3e:25:cc:5d:91:fb:a4:47:2b:5e:c7:e1:b3: 2b:71:e1:20:66:00:14:83:18:80:24:f3:b2:e6:cb: 79:d9:c1:29:de:f9:13:f9:d2:90:b1:8b:00:71:af: a2:58:88:e9:1f:bd:d5:ef:e8:d4:02:45:d8:22:0e: 0b:91:c6:21:81:79:bf:ae:38:ad:c4:88:aa:70:29: 77:62:08:3e:bb:21:5c:2b:69:bc:02:b5:a4:d1:88: b2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:68:67:B4:87:42:FC:83:A8:7D:D2:21:9E:99:72:91:E2:E7:85:61 X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:70:53:b2:e5:77:29:f3:81:7e:36:a8:1f:21:0f:db:71:a5: c1:12:30:f9:01:83:44:c2:b1:b8:84:27:96:95:63:7b:0f:c5: ce:30:ed:ed:30:ba:e2:0a:62:ea:cb:12:03:dc:d4:e1:88:16: 2b:31:d3:31:7f:38:ca:6b:f5:5a:ec:2c:96:a2:bd:62:6f:77: 3d:8b:5c:a3:8b:64:e0:44:dc:2f:c2:fd:1c:8d:36:f1:e8:02: 38:38:20:83:2e:69:b5:42:f3:1a:39:0a:24:39:4b:73:3c:f0: 25:15:1b:0d:37:de:17:92:f7:eb:e3:cb:ea:7d:1a:5c:ed:de: a9:f5:c5:3a:8c:78:96:8e:77:9f:7c:1a:c8:78:99:34:a6:f1: 14:c2:32:4f:fc:17:64:0c:f7:c6:21:42:7e:5f:8e:69:97:d1: 10:be:83:e8:c5:c4:fc:72:fd:34:a3:fa:7d:a3:b5:ee:4b:12: 2b:59:6d:14:2f:86:f4:0e:d9:62:99:24:21:18:4b:6f:d8:6b: df:2e:b1:91:ba:aa:c9:f3:94:ab:c2:63:7f:aa:73:94:21:75: c2:5d:02:41:77:1d:98:27:46:e8:14:7a:3d:13:03:b3:c2:21: ec:b0:1b:32:16:e2:19:d0:67:63:db:91:33:b6:c7:a3:bb:30: c6:c4:4b:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjUwNzIxMDM1NDA4WhcNMjUwNzI4MDM1NDA4WjAYMRYwFAYD VQQDEw02ODdkYjllMC02NDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7/08mL4ycRYelJZL04ixgKDXGwEpoXuJDNw+xn7nuaMpvbRBor+bUnmeMzM AUknDlLt4ubym+jCrZnLSE0E+ofg00p/6TT2oBvZRjAOq7auFk1NZ2Em1CEAXe3U rlEBEt5zU+6fr675h8fIKapMqiCQWJ32BeuREeo1jPzhLgP0p9c4qKv/EsmRGkgR jzWcviXZwCv9vz1drdsPrEtFY6TuseugKj4lzF2R+6RHK17H4bMrceEgZgAUgxiA JPOy5st52cEp3vkT+dKQsYsAca+iWIjpH73V7+jUAkXYIg4LkcYhgXm/rjitxIiq cCl3Ygg+uyFcK2m8ArWk0YiycwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJoZ7SH QvyDqH3SIZ6ZcpHi54VhMB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVcFOy5Xcp84F+NqgfIQ/bcaXBEjD5AYNEwrG4hCeWlWN7D8XOMO3t MLriCmLqyxID3NThiBYrMdMxfzjKa/Va7CyWor1ib3c9i1yji2TgRNwvwv0cjTbx 6AI4OCCDLmm1QvMaOQokOUtzPPAlFRsNN94Xkvfr48vqfRpc7d6p9cU6jHiWjnef fBrIeJk0pvEUwjJP/BdkDPfGIUJ+X45pl9EQvoPoxcT8cv00o/p9o7XuSxIrWW0U L4b0DtlimSQhGEtv2GvfLrGRuqrJ85SrwmN/qnOUIXXCXQJBdx2YJ0boFHo9EwOz wiHssBsyFuIZ0Gdj25EztsejuzDGxEsT -----END CERTIFICATE-----Generated at Mon Jul 21 12:53:04 2025 by rpki-client