$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json) Hash identifier: 8iLgxrEzjW9TJLtVeBdlpaNkTHmJkMOmgdnHS14n2n0= Subject key identifier: A9:AE:7D:91:C6:E5:30:C0:B2:3A:14:10:41:71:84:02:14:0A:6E:2A Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft Manifest number: 0523 Signing time: Fri 18 Jul 2025 16:29:25 +0000 Manifest this update: Fri 18 Jul 2025 16:29:25 +0000 Manifest next update: Fri 25 Jul 2025 16:29:25 +0000 Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: swmk1Cs44g1x0QsdSZNBgjMKIS8luUL0idkFLI1ucCA=) 2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: yR/rS2v+MnuPsp4IAeWDDgPbPiNnjwU9wDh4QYZV4SU=) 3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: qkuJyiuag7r0VmHzzxIeNNPZvE1YemZEbkXs9TYwx5o=) 4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: YZwNutRVemyQTlte1eEv/AcDXWm1xtlx4204L/kTObo=) 5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: ACLXZnrak+BWFZVdvvziA50vZItebg8EqCvB342Th1I=) 6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: Cywfb2Rnt+MB9wFrcD0/BbNel0gnNnVhinHv2K8l9OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Jul 18 16:29:25 2025 GMT Not After : Jul 25 16:29:25 2025 GMT Subject: CN=687a7665-6178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:1a:e5:7e:af:06:14:61:4d:b7:bd:f5:d3: e3:8f:94:cf:97:47:4a:0a:cc:30:76:1b:85:d2:5e: ac:60:c3:27:9a:d5:16:fb:d9:56:87:4e:7c:17:28: 5c:eb:ee:4a:eb:6f:b5:13:dd:8b:82:1e:8a:98:3e: d7:96:e0:e4:2b:cf:06:25:53:1b:47:c5:c8:26:39: d5:40:63:c4:99:df:6b:dc:bb:0e:79:14:41:09:94: ae:e6:16:11:5e:7c:f6:38:99:85:d8:b1:4d:36:cc: 31:59:81:70:6e:0f:30:54:40:75:ec:06:f8:19:ab: a5:2f:d2:9d:a0:a9:b5:8f:d8:36:89:e9:9a:af:7c: 58:db:ed:94:09:45:51:91:04:4a:b1:3d:91:4c:21: 6e:4e:23:11:f1:64:c7:88:1a:d2:c1:43:5d:75:d7: 72:84:8f:0f:91:c6:7d:5f:dd:d9:a8:9b:30:c5:b0: 07:04:e5:85:11:40:d4:ac:42:eb:58:59:9e:33:32: 00:9a:58:84:c4:66:f3:c6:f6:bc:ab:3e:5b:2e:4d: 5f:eb:3f:33:3a:59:de:bf:3a:42:f2:9a:9d:8c:73: 50:e3:68:03:4c:4f:ee:76:ee:7d:e2:46:e7:69:07: 72:ca:4d:75:7c:b4:50:c0:62:7f:ef:b4:54:02:01: b2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AE:7D:91:C6:E5:30:C0:B2:3A:14:10:41:71:84:02:14:0A:6E:2A X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b5:32:32:55:89:85:5f:ad:16:8e:98:36:84:67:c0:73:29: 5a:19:e1:83:51:04:c6:f1:29:38:4b:bc:39:5f:ab:30:08:4a: 6b:bd:64:43:95:d4:67:1c:6c:98:15:cf:b9:ad:61:5b:b4:2c: 0b:74:8a:91:91:af:e6:03:fd:54:63:5b:1f:b4:ef:9b:db:96: b6:c6:64:5c:f6:20:01:ff:a8:0e:99:ed:8e:be:de:9f:d2:2d: ce:1b:1f:8c:7d:16:9a:40:b5:09:ca:1e:0f:f3:ca:55:32:4b: 75:55:42:a7:ad:78:44:b4:fb:d7:00:ad:55:d5:6e:be:04:39: d8:a0:ce:94:13:86:ac:04:52:3b:38:c0:0a:62:8b:6d:4c:31: ef:d4:bf:c2:4a:bd:e2:1a:9f:4a:87:dd:97:64:e3:9d:dd:2a: d3:70:a3:f6:3d:eb:70:5d:95:91:ae:2a:eb:62:94:80:fc:65: e2:d2:cf:a0:92:85:a7:e8:ef:72:be:79:1e:e6:21:89:e8:74: 35:c3:42:28:5f:a0:35:7a:67:41:5b:a1:15:46:a8:2a:76:37: b2:9b:58:eb:82:ea:7b:af:35:6b:d5:b2:3a:03:95:53:d2:52: bb:20:ad:44:87:3e:bf:2c:5b:95:e1:3f:8a:6a:09:aa:cd:b6: d5:d3:ea:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUwNzE4MTYyOTI1WhcNMjUwNzI1MTYyOTI1WjAYMRYwFAYD VQQDEw02ODdhNzY2NS02MTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ4a5X6vBhRhTbe99dPjj5TPl0dKCswwdhuF0l6sYMMnmtUW+9lWh058Fyhc 6+5K62+1E92Lgh6KmD7XluDkK88GJVMbR8XIJjnVQGPEmd9r3LsOeRRBCZSu5hYR Xnz2OJmF2LFNNswxWYFwbg8wVEB17Ab4GaulL9KdoKm1j9g2iemar3xY2+2UCUVR kQRKsT2RTCFuTiMR8WTHiBrSwUNddddyhI8PkcZ9X93ZqJswxbAHBOWFEUDUrELr WFmeMzIAmliExGbzxva8qz5bLk1f6z8zOlnevzpC8pqdjHNQ42gDTE/udu594kbn aQdyyk11fLRQwGJ/77RUAgGyjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmufZHG 5TDAsjoUEEFxhAIUCm4qMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1 blpxT3NxNXkwOERGVUVVNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBktTIyVYmFX60Wjpg2hGfAcylaGeGDUQTG8Sk4S7w5X6swCEprvWRD ldRnHGyYFc+5rWFbtCwLdIqRka/mA/1UY1sftO+b25a2xmRc9iAB/6gOme2Ovt6f 0i3OGx+MfRaaQLUJyh4P88pVMkt1VUKnrXhEtPvXAK1V1W6+BDnYoM6UE4asBFI7 OMAKYottTDHv1L/CSr3iGp9Kh92XZOOd3SrTcKP2PetwXZWRrirrYpSA/GXi0s+g koWn6O9yvnke5iGJ6HQ1w0IoX6A1emdBW6EVRqgqdjeym1jrgup7rzVr1bI6A5VT 0lK7IK1Ehz6/LFuV4T+KagmqzbbV0+qP -----END CERTIFICATE-----Generated at Sun Jul 20 15:02:03 2025 by rpki-client