$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: TU3//Bo7m6Lp51Yeju+G4I9bXSQg5hsnuTHzUmYtP7k= Subject key identifier: 23:66:6D:96:60:A9:81:B4:92:2B:A4:3C:61:09:91:D7:A9:B2:A1:13 Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 1228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 1209 Signing time: Fri 18 Jul 2025 17:18:58 +0000 Manifest this update: Fri 18 Jul 2025 17:18:58 +0000 Manifest next update: Fri 25 Jul 2025 17:18:58 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: drkDfd14hYVZm4Oc/8820GpK4VuS4oWdq0pnC4kKoTo=) 2: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: EG7DAdh62MT15Z2IRnWNBPi8u6Tt+z9LL+klU2Atkq0=) 3: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: ieAu/eYOiYngZXOxKG9Shsj5mrubW8gne154rOLi258=) 4: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: Zb8K4a4S76xzShJsXA+J8BCfBTGu/Fav49T1ERobF/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4648 (0x1228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: Jul 18 17:18:58 2025 GMT Not After : Jul 25 17:18:58 2025 GMT Subject: CN=687a8202-d268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:d1:a5:1e:72:52:0c:48:35:eb:b3:89:19: 8f:b2:e5:fe:0b:16:2c:1b:10:91:c3:03:92:57:5d: 89:9f:55:41:18:5a:ff:83:3e:ac:13:83:6e:70:2c: 3f:bf:58:02:b0:8e:ee:fe:68:1e:83:a2:36:ea:ac: d3:9a:4b:8b:27:47:20:ca:de:d4:70:d0:80:68:cf: 16:f2:6e:fb:e1:ef:d2:dd:3f:1d:dd:c3:2c:00:56: 1e:43:06:02:97:55:fa:4e:56:6e:64:fe:b6:7a:8c: 7f:ee:13:d4:52:f2:ba:0c:ff:ef:74:59:fd:32:11: bb:3f:82:ef:9f:4e:54:dc:31:25:2b:be:8c:a5:dd: 8c:ac:31:9a:d8:4d:1f:fd:1c:05:c6:5c:a9:c6:e1: 3a:78:7e:7a:b7:94:07:f9:1c:25:77:16:55:d0:9b: 87:03:02:f6:f1:53:c6:8d:c6:38:d2:14:0c:fa:cf: f7:e6:54:83:ff:44:05:c3:4d:82:43:c0:ce:9d:7b: 14:73:a5:72:8f:b5:e2:c0:0f:4a:8d:04:60:28:b3: 07:cc:83:26:2a:82:fd:e7:c5:9e:43:03:1f:ce:03: 03:fd:ad:db:8b:5e:59:c4:e1:50:99:d3:4e:44:55: 7e:b9:19:5a:a8:79:d0:45:ff:34:86:cc:52:4a:64: 32:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:66:6D:96:60:A9:81:B4:92:2B:A4:3C:61:09:91:D7:A9:B2:A1:13 X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e5:9b:2b:39:19:a1:37:fd:48:a3:41:f1:8c:a8:48:99:c4: 51:a4:3a:7e:39:d7:6b:e8:07:ca:9d:f8:9f:78:99:05:3d:ad: c7:b9:bf:e0:a5:67:bb:9a:55:fa:45:6b:9c:e3:63:f2:b9:37: 15:14:e5:10:5d:91:a0:6e:d1:fb:dc:aa:be:63:7f:2c:60:dc: 66:dc:d7:af:5f:7e:52:3c:35:c1:d4:ef:ed:1d:01:84:c8:58: 42:0b:79:10:c8:0e:a0:da:2c:7d:fa:a0:45:73:06:12:51:30: 53:9c:32:33:ed:19:bb:61:c9:bf:28:67:fc:68:f8:4d:49:e0: 12:01:7b:fc:d1:f5:56:67:67:fa:00:92:af:0c:62:fa:d3:51: b4:55:c7:28:51:82:ee:56:e7:b5:c4:ed:90:6e:d8:3f:2d:38: 35:6e:a3:25:dc:7d:ec:aa:f0:48:e3:3b:b4:ff:19:e3:71:2a: ef:4f:65:7d:81:93:87:8b:07:de:f7:e1:e6:40:51:a9:00:a2: bf:9d:60:4d:4a:35:97:3f:e5:d9:3d:68:d6:ce:cf:6f:34:aa: fd:5a:c6:51:e8:33:37:b9:87:3a:53:aa:b8:9d:d4:c8:f1:86: e1:f1:0b:16:0c:fd:1f:d4:af:d4:32:9c:3d:f8:61:d4:a8:1b: 1a:1b:45:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjUwNzE4MTcxODU4WhcNMjUwNzI1MTcxODU4WjAYMRYwFAYD VQQDEw02ODdhODIwMi1kMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfvRpR5yUgxINeuziRmPsuX+CxYsGxCRwwOSV12Jn1VBGFr/gz6sE4NucCw/ v1gCsI7u/mgeg6I26qzTmkuLJ0cgyt7UcNCAaM8W8m774e/S3T8d3cMsAFYeQwYC l1X6TlZuZP62eox/7hPUUvK6DP/vdFn9MhG7P4Lvn05U3DElK76Mpd2MrDGa2E0f /RwFxlypxuE6eH56t5QH+RwldxZV0JuHAwL28VPGjcY40hQM+s/35lSD/0QFw02C Q8DOnXsUc6Vyj7XiwA9KjQRgKLMHzIMmKoL958WeQwMfzgMD/a3bi15ZxOFQmdNO RFV+uRlaqHnQRf80hsxSSmQygwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNmbZZg qYG0kiukPGEJkdepsqETMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR5ZsrORmhN/1Io0HxjKhImcRRpDp+Oddr6AfKnfifeJkFPa3Hub/g pWe7mlX6RWuc42PyuTcVFOUQXZGgbtH73Kq+Y38sYNxm3NevX35SPDXB1O/tHQGE yFhCC3kQyA6g2ix9+qBFcwYSUTBTnDIz7Rm7Ycm/KGf8aPhNSeASAXv80fVWZ2f6 AJKvDGL601G0VccoUYLuVue1xO2Qbtg/LTg1bqMl3H3sqvBI4zu0/xnjcSrvT2V9 gZOHiwfe9+HmQFGpAKK/nWBNSjWXP+XZPWjWzs9vNKr9WsZR6DM3uYc6U6q4ndTI 8Ybh8QsWDP0f1K/UMpw9+GHUqBsaG0Vp -----END CERTIFICATE-----Generated at Sun Jul 20 02:21:26 2025 by rpki-client