$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft File: 5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json) Hash identifier: bcSLgGMMNmpeMn8/UgtgBPpCeW5tcr1QphqmLAyoz/s= Subject key identifier: 59:C0:6C:D8:62:D5:52:DF:CA:FD:E5:4A:AE:D2:DE:2C:7C:35:27:B3 Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft Manifest number: 03CC Signing time: Sat 19 Jul 2025 01:03:44 +0000 Manifest this update: Sat 19 Jul 2025 01:03:44 +0000 Manifest next update: Sat 26 Jul 2025 01:03:44 +0000 Files and hashes: 1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: wGK71hPxhP2O7jsTAw4K7RR3WgYVT4qGAhiV/ygaOic=) 2: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: 0ekBq+u3qTtCrN1H3WBpcyEBXqtT/nmRB1wnzUy864Q=) 3: 06820D08961011ECA540626AC4F9AE02.roa (hash: AajhgEbZBOC20FRVNZHV44NbIbhPj9V3ePlv/pPgwT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Validity Not Before: Jul 19 01:03:44 2025 GMT Not After : Jul 26 01:03:44 2025 GMT Subject: CN=687aeef0-245f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:2f:7e:0e:1b:ac:fa:ad:45:ed:c2:06:19: 36:55:7e:af:37:e1:d4:77:3a:f4:fe:69:fc:5c:8c: 4f:4b:70:e2:fc:5c:87:0c:ad:e5:93:84:64:21:70: f4:b2:3c:6c:be:4a:23:51:5c:a1:87:b5:ef:77:73: 6b:ce:57:6e:ec:34:4c:21:2b:55:21:d9:7b:c0:f1: 30:c9:fd:46:fe:8d:ac:00:3c:f8:da:8b:55:81:4f: 1f:5d:8f:93:e1:ba:73:15:85:be:93:cb:b4:3b:a5: 1d:68:f6:98:b4:4a:9e:29:a3:fc:86:c3:7e:e5:8a: 12:2e:ce:29:0b:80:d7:cf:18:13:5f:a0:5f:c3:32: 4a:62:94:40:a6:65:84:ec:0a:b6:14:04:b6:75:16: 74:7c:44:c2:6b:6f:17:07:a1:8b:d0:10:75:e7:94: 03:d7:d6:f9:e6:3a:14:7a:db:16:69:ad:69:a3:bf: 2c:2e:68:bb:fa:08:f0:95:74:4f:aa:08:f9:a1:29: c4:89:cc:0b:0b:05:4a:99:23:4c:01:96:19:22:c6: bb:b9:3d:7f:da:13:b3:48:c6:c3:40:5b:36:c3:bb: 7c:f2:77:20:34:8a:61:ab:85:ae:b4:41:3c:4f:82: af:52:13:1b:f7:db:26:95:e8:9b:e7:6f:97:b6:b3: d4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C0:6C:D8:62:D5:52:DF:CA:FD:E5:4A:AE:D2:DE:2C:7C:35:27:B3 X509v3 Authority Key Identifier: keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:79:04:35:a7:e9:b1:8f:2e:3e:de:f5:78:f5:0d:42:38:74: f8:0b:f6:ec:15:3a:b1:95:50:1b:84:5a:24:be:4b:74:75:ea: 97:13:ee:f6:84:64:96:84:45:1f:97:8b:7b:f0:ec:83:5f:77: 03:a4:4b:e1:b3:fc:7c:7e:e2:16:42:c2:19:70:24:fc:51:96: 57:68:7f:84:43:5a:f6:7e:88:34:6a:46:6b:5f:4c:7d:1c:00: d3:9e:34:86:71:55:cb:6f:b6:9d:69:90:2f:1b:d4:4b:e1:6e: 10:91:88:28:21:c8:ab:97:cf:25:a5:41:fe:13:63:7f:64:03: 7a:60:83:9d:5e:47:d3:85:18:ea:26:57:94:29:a7:a7:96:37: 74:5a:b7:15:30:6f:18:7d:e5:ff:7e:0f:b1:0e:1a:fc:c4:64: a2:2d:f6:90:99:99:79:0c:29:da:14:04:a8:3e:8e:22:94:f7: 54:a1:e1:1d:89:98:8d:ef:65:30:66:4e:e5:cc:b8:b3:c0:88: c9:a1:4d:e2:d4:94:b5:c4:ec:2f:28:90:56:c4:67:30:00:39: 4c:38:89:b9:ac:96:c4:17:fb:d7:43:36:3e:96:d6:94:c2:78: 90:8e:84:aa:28:52:f9:93:fc:5a:a5:da:46:30:aa:97:0f:c0: 97:d1:27:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEU0NzdEMzhBQUFDNEEzN0NDNkRGMTY2NUJGMUM4ODBB Rjk5QjdCNEYwHhcNMjUwNzE5MDEwMzQ0WhcNMjUwNzI2MDEwMzQ0WjAYMRYwFAYD VQQDEw02ODdhZWVmMC0yNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wUvfg4brPqtRe3CBhk2VX6vN+HUdzr0/mn8XIxPS3Di/FyHDK3lk4RkIXD0 sjxsvkojUVyhh7Xvd3Nrzldu7DRMIStVIdl7wPEwyf1G/o2sADz42otVgU8fXY+T 4bpzFYW+k8u0O6UdaPaYtEqeKaP8hsN+5YoSLs4pC4DXzxgTX6BfwzJKYpRApmWE 7Aq2FAS2dRZ0fETCa28XB6GL0BB155QD19b55joUetsWaa1po78sLmi7+gjwlXRP qgj5oSnEicwLCwVKmSNMAZYZIsa7uT1/2hOzSMbDQFs2w7t88ncgNIphq4WutEE8 T4KvUhMb99smleib52+XtrPUaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnAbNhi 1VLfyv3lSq7S3ix8NSezMB8GA1UdIwQYMBaAFOR304qqxKN8xt8WZb8ciAr5m3tP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80RTNFMzY3RTk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8zekczeFpsdnh5SUN2bWJl MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVIZlRpcXJFbzN6RzN4Wmx2eHlJQ3ZtYmUwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80RTNFMzY3RTk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8z ekczeFpsdnh5SUN2bWJlMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCseQQ1p+mxjy4+3vV49Q1COHT4C/bsFTqxlVAbhFokvkt0deqXE+72 hGSWhEUfl4t78OyDX3cDpEvhs/x8fuIWQsIZcCT8UZZXaH+EQ1r2fog0akZrX0x9 HADTnjSGcVXLb7adaZAvG9RL4W4QkYgoIcirl88lpUH+E2N/ZAN6YIOdXkfThRjq JleUKaenljd0WrcVMG8YfeX/fg+xDhr8xGSiLfaQmZl5DCnaFASoPo4ilPdUoeEd iZiN72UwZk7lzLizwIjJoU3i1JS1xOwvKJBWxGcwADlMOIm5rJbEF/vXQzY+ltaU wniQjoSqKFL5k/xapdpGMKqXD8CX0Se7 -----END CERTIFICATE-----Generated at Sun Jul 20 19:02:17 2025 by rpki-client