$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft File: 71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json) Hash identifier: GpBpuzf2G39oLWRxtBNsN3TJkJ4v00vogszKnxfLoME= Subject key identifier: B1:0F:A9:AD:3E:4B:C7:1E:E7:0A:DF:90:4D:DF:74:69:C2:7D:8D:25 Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 Certificate issuer: /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft Manifest number: 0576 Signing time: Sun 20 Jul 2025 23:30:29 +0000 Manifest this update: Sun 20 Jul 2025 23:30:29 +0000 Manifest next update: Sun 27 Jul 2025 23:30:29 +0000 Files and hashes: 1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: xANqgLBQ4K9RTi3sBLyV8YEF4dm3KO0daMuWvrg5AdY=) 2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: MnGT95K1KMZ27Vz9GV0/eAka386Vq2ptFRht280ijWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Validity Not Before: Jul 20 23:30:29 2025 GMT Not After : Jul 27 23:30:29 2025 GMT Subject: CN=687d7c15-1cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:31:3f:ea:cc:89:46:01:59:4d:cb:df:dc: 5d:03:96:70:b6:f3:3f:d3:98:f3:b2:b4:4d:61:10: 16:57:de:4d:63:f9:22:9a:8e:d8:38:2f:a7:94:a6: 02:db:f2:c9:70:d5:a1:ef:55:3a:03:ef:a1:05:34: e4:7f:a1:b5:10:e0:c0:22:cc:45:17:81:29:79:96: dd:6d:48:d6:f4:83:34:73:99:0c:85:92:91:83:54: 7b:57:97:74:c7:67:92:78:32:53:76:f5:fd:90:ba: 25:4a:c8:9b:26:96:8b:b9:fe:65:18:a0:cb:c1:a1: 49:35:6a:f8:ae:fb:a6:63:36:87:a5:90:51:fe:ff: b3:b7:1c:f9:2a:2b:da:47:cb:ba:b7:32:79:6c:0c: 22:ac:93:3a:19:2c:73:9d:e3:33:39:4b:ff:7e:70: 15:08:63:20:03:92:fb:3a:97:ca:6b:47:a5:ed:d2: a1:a7:cc:d0:23:f2:4e:62:fe:fd:a1:ff:38:b1:b9: 76:df:b2:0c:9f:4d:e1:5b:88:3a:e2:64:da:57:a9: e3:b3:3f:5f:d1:4b:0d:96:57:5c:71:4c:07:7f:c8: 70:92:70:22:cf:b8:b6:25:9d:e8:12:93:3c:58:a9: d8:3d:29:c2:39:c5:25:cd:02:fb:45:00:09:2e:c7: 9d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0F:A9:AD:3E:4B:C7:1E:E7:0A:DF:90:4D:DF:74:69:C2:7D:8D:25 X509v3 Authority Key Identifier: keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b4:9d:a9:01:e5:85:f1:69:b3:7b:08:ac:4a:f3:e7:e2:10: fe:8a:04:dc:1d:26:bc:4b:df:6a:60:cb:03:15:a4:4f:d3:b3: 05:6a:d1:a1:20:37:95:00:32:4d:7e:0e:68:d6:b2:ba:7e:15: da:a1:9f:6a:cc:0c:65:99:fe:71:14:d8:f8:f4:2d:21:99:30: 46:ab:68:03:a0:22:e5:af:fb:46:50:c7:e6:3c:4e:4c:a7:5a: 52:1e:7a:d9:37:67:0e:2b:b5:94:e6:4f:d1:ed:03:01:51:e2: 9c:a0:e7:71:45:d0:bf:55:c6:f5:43:72:e4:b8:6e:86:58:06: 37:99:2b:cb:2d:1a:0f:08:a0:eb:13:59:df:67:88:f0:a8:25: ee:57:30:9a:86:aa:34:27:75:c2:59:e8:ff:c6:77:5f:d7:17: d3:88:d8:23:2e:f6:d2:1e:3b:82:a6:be:9d:f9:eb:22:df:16: 0f:b9:08:7e:74:00:fb:96:5a:fa:5f:6f:73:ee:a8:0e:29:78: 77:06:e6:da:af:21:24:6a:c8:5e:3a:c7:a9:cb:e7:f7:73:9b: 6b:98:af:8e:aa:f8:8b:91:9c:fe:27:58:87:eb:a0:56:e0:25: 30:6b:7c:b8:84:96:82:28:9d:b1:a1:c9:ab:2a:80:e6:e1:8e: ed:36:ee:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFMTkxMTAvBgNVBAUTKEVGNTAwMUE3NUI1ODA1OUQ5M0E1RDMxNjM4NTRCNDZB RDY2QTlFQzgwHhcNMjUwNzIwMjMzMDI5WhcNMjUwNzI3MjMzMDI5WjAYMRYwFAYD VQQDEw02ODdkN2MxNS0xY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmg8xP+rMiUYBWU3L39xdA5ZwtvM/05jzsrRNYRAWV95NY/kimo7YOC+nlKYC 2/LJcNWh71U6A++hBTTkf6G1EODAIsxFF4EpeZbdbUjW9IM0c5kMhZKRg1R7V5d0 x2eSeDJTdvX9kLolSsibJpaLuf5lGKDLwaFJNWr4rvumYzaHpZBR/v+ztxz5Kiva R8u6tzJ5bAwirJM6GSxzneMzOUv/fnAVCGMgA5L7OpfKa0el7dKhp8zQI/JOYv79 of84sbl237IMn03hW4g64mTaV6njsz9f0UsNlldccUwHf8hwknAiz7i2JZ3oEpM8 WKnYPSnCOcUlzQL7RQAJLsedMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEPqa0+ S8ce5wrfkE3fdGnCfY0lMB8GA1UdIwQYMBaAFO9QAadbWAWdk6XTFjhUtGrWap7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEUxOS83MDcxNDY0RUVE RUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJaMlRwZE1XT0ZTMGF0WnFu c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcxQUJwMXRZQloyVHBkTVdPRlMwYXRacW5zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEUxOS83MDcxNDY0RUVERUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJa MlRwZE1XT0ZTMGF0WnFuc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbtJ2pAeWF8WmzewisSvPn4hD+igTcHSa8S99qYMsDFaRP07MFatGh IDeVADJNfg5o1rK6fhXaoZ9qzAxlmf5xFNj49C0hmTBGq2gDoCLlr/tGUMfmPE5M p1pSHnrZN2cOK7WU5k/R7QMBUeKcoOdxRdC/Vcb1Q3LkuG6GWAY3mSvLLRoPCKDr E1nfZ4jwqCXuVzCahqo0J3XCWej/xndf1xfTiNgjLvbSHjuCpr6d+esi3xYPuQh+ dAD7llr6X29z7qgOKXh3BubaryEkasheOsepy+f3c5trmK+OqviLkZz+J1iH66BW 4CUwa3y4hJaCKJ2xocmrKoDm4Y7tNu4D -----END CERTIFICATE-----Generated at Tue Jul 22 05:11:16 2025 by rpki-client