$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: 9k09lnhH4tqmp2d4n/ne/GfjHFql7l5acR/gMwTyQ+M= Subject key identifier: E5:A6:80:69:5B:51:10:FB:99:35:84:04:F7:29:37:8A:D9:F7:23:5A Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 048E Signing time: Wed 23 Jul 2025 00:29:59 +0000 Manifest this update: Wed 23 Jul 2025 00:29:59 +0000 Manifest next update: Wed 30 Jul 2025 00:29:59 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: Z2wCt3baREZ55gpldP9yiMBr2mFjYVZlS9lPuRMLXWI=) 2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: 4GFmq+y/6BnQNNwGjl1gbuy3YynLJ9fv1uZb3cM+3cw=) 3: F14C782E5B4111F0A3307863C4F9AE02.roa (hash: 6vTGONqzhjdGHEUkre6z0hWqKpmgbLwLfYX97Y9ROXU=) 4: 4BA245C01F3711F0BFC63D0BC4F9AE02.roa (hash: S6UWCaduxR+lbz98yPRDyqlqJNdrgD9va4Ql8ns2n7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 00:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Jul 23 00:29:59 2025 GMT Not After : Jul 30 00:29:59 2025 GMT Subject: CN=68802d07-6f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:29:59:56:7a:e9:f2:9c:32:66:1d:cd:29:31: 55:3e:51:a3:a9:e7:d1:25:37:fc:49:ac:f0:8a:13: ed:9f:09:06:30:0c:2a:d6:67:d9:e2:03:16:6d:9d: 31:ad:5f:7c:68:b8:dd:55:c4:7c:39:47:f9:8f:bb: 82:21:27:d2:49:bd:50:cf:0a:40:be:4a:09:29:58: 28:a3:3a:d9:62:6a:74:b8:93:d5:51:50:d8:4a:c1: 32:3a:c6:40:97:0b:99:a1:37:6c:df:57:3d:f5:be: 9d:13:21:95:e8:7a:71:4f:e9:a1:3a:e3:be:93:5a: 32:0e:92:64:c5:3c:75:77:de:48:90:fc:db:6d:fe: 0a:f2:2c:8b:ac:3a:c7:1b:cb:a6:f1:89:ed:c3:b2: 93:76:c7:06:9d:c7:34:91:27:90:c9:52:3f:90:ae: 84:f4:22:92:a9:3d:92:91:90:c7:d9:ec:7d:17:ae: 30:d8:c0:69:f7:7d:31:78:cf:ca:13:5b:46:39:cf: fd:34:22:a6:6c:ad:af:60:de:81:8f:44:cb:ce:86: 61:db:f4:f6:b3:a6:04:17:05:f2:28:96:3f:f7:2d: b6:4e:bc:e2:15:84:50:72:53:0a:03:46:0d:e1:69: 0c:1f:c8:e7:a1:b7:ef:8f:09:6d:86:be:9d:11:96: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A6:80:69:5B:51:10:FB:99:35:84:04:F7:29:37:8A:D9:F7:23:5A X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:86:cf:99:f6:8f:12:6c:76:46:0a:82:9c:87:8a:16:5e:49: 8c:d0:2b:15:53:1a:6f:db:07:be:63:9f:6c:31:ed:6f:c9:78: 5b:98:ad:dd:da:b8:20:ed:4a:ae:b4:6d:0a:a6:47:f4:77:64: d6:e2:d1:ee:de:84:18:68:c2:39:a5:1e:44:97:72:dd:eb:10: ff:03:34:f3:d9:8a:2e:26:ad:3b:40:8d:ab:fb:92:e3:62:2b: ab:35:d7:60:33:4f:49:52:14:34:fb:d7:a5:09:fc:c7:58:76: 47:4b:80:48:07:73:3b:a9:4e:d6:54:fe:88:6b:8b:d9:89:dc: 73:49:ec:99:d0:0e:39:95:0a:e7:12:47:90:b3:68:03:77:8f: c7:9a:d6:46:d5:9b:7e:79:c8:ec:bc:d3:27:ca:6c:51:5a:5c: d6:04:4e:bd:96:9f:54:9c:19:db:1b:83:b1:91:35:de:11:bb: 7a:09:53:1a:fd:0d:de:4c:2e:38:5a:2b:93:58:ad:7b:c4:f3: 32:09:04:91:7f:9a:3a:f0:fc:76:90:16:03:d1:c5:43:6e:63: 8b:7f:85:3b:67:af:b0:5b:72:04:3d:00:77:c3:10:da:b2:bd: 75:3e:e1:17:2f:6d:07:ee:6e:95:66:a4:a1:5e:96:d2:d6:e7: 07:e1:a5:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjUwNzIzMDAyOTU5WhcNMjUwNzMwMDAyOTU5WjAYMRYwFAYD VQQDEw02ODgwMmQwNy02ZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ClZVnrp8pwyZh3NKTFVPlGjqefRJTf8SazwihPtnwkGMAwq1mfZ4gMWbZ0x rV98aLjdVcR8OUf5j7uCISfSSb1QzwpAvkoJKVgoozrZYmp0uJPVUVDYSsEyOsZA lwuZoTds31c99b6dEyGV6HpxT+mhOuO+k1oyDpJkxTx1d95IkPzbbf4K8iyLrDrH G8um8Yntw7KTdscGncc0kSeQyVI/kK6E9CKSqT2SkZDH2ex9F64w2MBp930xeM/K E1tGOc/9NCKmbK2vYN6Bj0TLzoZh2/T2s6YEFwXyKJY/9y22TrziFYRQclMKA0YN 4WkMH8jnobfvjwlthr6dEZZchwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWmgGlb URD7mTWEBPcpN4rZ9yNaMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8hs+Z9o8SbHZGCoKch4oWXkmM0CsVUxpv2we+Y59sMe1vyXhbmK3d 2rgg7UqutG0Kpkf0d2TW4tHu3oQYaMI5pR5El3Ld6xD/AzTz2YouJq07QI2r+5Lj YiurNddgM09JUhQ0+9elCfzHWHZHS4BIB3M7qU7WVP6Ia4vZidxzSeyZ0A45lQrn EkeQs2gDd4/HmtZG1Zt+ecjsvNMnymxRWlzWBE69lp9UnBnbG4OxkTXeEbt6CVMa /Q3eTC44WiuTWK17xPMyCQSRf5o68Px2kBYD0cVDbmOLf4U7Z6+wW3IEPQB3wxDa sr11PuEXL20H7m6VZqShXpbS1ucH4aWg -----END CERTIFICATE-----Generated at Wed Jul 23 18:54:40 2025 by rpki-client