$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json) Hash identifier: 1YGx7DEQlxlNQNRDJd/JjEBRs9ZRhIeXZ94FE1KDm2c= Subject key identifier: 3A:D4:59:98:8B:48:69:C4:92:31:0A:64:85:9B:BB:72:AD:E3:05:1D Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft Manifest number: 01C4 Signing time: Mon 21 Jul 2025 03:01:34 +0000 Manifest this update: Mon 21 Jul 2025 03:01:33 +0000 Manifest next update: Mon 28 Jul 2025 03:01:33 +0000 Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: uZSSoXcClY57WJYQYw7OL/0p3+1sKWWHb3GcucpBsls=) 2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: db2NWeg4HG/QWHWjQkMvsucOm2s5WuaDwiakb3D08Rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Validity Not Before: Jul 21 03:01:33 2025 GMT Not After : Jul 28 03:01:33 2025 GMT Subject: CN=687dad8e-7ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b7:bb:94:cb:3d:68:7e:a2:c5:79:52:c7:62: 3d:6c:c3:72:79:79:8e:c6:49:96:5c:f1:a5:76:f0: f7:d2:17:68:cb:ab:ca:4c:02:c0:e9:2e:db:30:e7: a5:2d:4c:75:9c:34:c9:bd:2e:eb:3b:70:cd:be:08: 4f:7e:b0:25:1a:21:83:16:85:ab:6e:85:4b:8c:92: c9:3a:8e:43:3d:0c:70:39:c5:c8:4a:ba:8c:4b:f1: 88:a1:ec:f7:96:dd:9d:3b:de:2e:67:96:2d:5f:43: f9:24:9d:2d:a0:35:96:27:39:a9:52:0e:a9:eb:6c: f0:0d:9e:2b:05:65:ed:6a:43:de:df:ff:a3:62:60: 5e:18:20:8c:ce:1a:18:a1:08:8e:f2:fd:e0:73:77: b2:d4:bf:e3:d7:31:c2:ce:6d:e8:76:c9:e0:25:30: df:33:4f:44:ef:52:e1:e9:e1:8b:bf:82:f9:9d:0c: be:1b:a8:44:a7:7d:63:0d:aa:c9:28:9e:5f:b1:ea: c2:62:c8:a0:2d:24:4b:55:80:83:8d:8d:8c:35:d0: aa:21:5b:54:cf:33:1c:e6:a7:9c:c9:1b:18:6c:df: d1:b4:d1:a2:a3:25:c1:91:a7:cf:d9:d3:be:65:87: ad:ea:de:66:1d:14:d5:b7:f4:b9:59:a9:98:5a:30: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D4:59:98:8B:48:69:C4:92:31:0A:64:85:9B:BB:72:AD:E3:05:1D X509v3 Authority Key Identifier: keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:5f:80:64:bd:e2:d3:29:fe:cb:26:5d:8e:64:5b:ca:5c:df: 3a:ca:ba:4c:20:39:4d:df:96:62:85:f6:bd:53:19:fd:3e:ec: d4:2d:72:f3:25:e8:90:5f:d9:d5:3a:48:a0:38:59:6e:08:4e: e3:42:1c:18:10:93:a9:6a:21:de:a7:b5:fb:68:23:40:40:de: ec:b9:08:4a:6d:9d:e4:4c:41:97:d2:06:f0:77:cf:9d:b5:7c: 9c:bd:f8:ae:c4:21:82:cf:4c:48:bf:33:88:20:b3:36:b1:a6: e0:1c:d5:f7:b0:5b:dc:fa:04:08:45:78:2f:e3:10:05:60:b1: c2:c5:56:25:9c:e1:f5:20:10:30:05:49:92:da:c0:6f:25:c3: 8d:ff:02:a9:5a:cd:5e:4c:cc:22:78:f4:d9:a0:86:1c:89:5f: 97:d7:65:82:6e:5f:4a:42:b9:cc:d0:b8:5e:e3:5e:e8:f5:a0: 26:6c:20:34:20:61:f9:25:80:84:3b:db:c3:76:7b:9a:c5:5e: af:9f:b5:0d:82:7b:8d:71:99:bc:0c:2b:f2:19:00:0b:81:9f: 1d:86:76:15:5c:18:5c:3a:a1:83:ab:81:5e:33:ff:74:22:b7: 13:ef:4b:85:dd:8e:79:70:0d:e1:f2:4c:f5:68:90:da:e0:11: b8:95:b0:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3 NjlFNzEzNkIwHhcNMjUwNzIxMDMwMTMzWhcNMjUwNzI4MDMwMTMzWjAYMRYwFAYD VQQDEw02ODdkYWQ4ZS03YWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4be7lMs9aH6ixXlSx2I9bMNyeXmOxkmWXPGldvD30hdoy6vKTALA6S7bMOel LUx1nDTJvS7rO3DNvghPfrAlGiGDFoWrboVLjJLJOo5DPQxwOcXISrqMS/GIoez3 lt2dO94uZ5YtX0P5JJ0toDWWJzmpUg6p62zwDZ4rBWXtakPe3/+jYmBeGCCMzhoY oQiO8v3gc3ey1L/j1zHCzm3odsngJTDfM09E71Lh6eGLv4L5nQy+G6hEp31jDarJ KJ5fserCYsigLSRLVYCDjY2MNdCqIVtUzzMc5qecyRsYbN/RtNGioyXBkafP2dO+ ZYet6t5mHRTVt/S5WamYWjCMAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrUWZiL SGnEkjEKZIWbu3Kt4wUdMB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZDNi8yQ0FFQUQwNEIzM0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkot dnJoUThHMm5hbkoybm5FMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYX4BkveLTKf7LJl2OZFvKXN86yrpMIDlN35Zihfa9Uxn9PuzULXLz JeiQX9nVOkigOFluCE7jQhwYEJOpaiHep7X7aCNAQN7suQhKbZ3kTEGX0gbwd8+d tXycvfiuxCGCz0xIvzOIILM2sabgHNX3sFvc+gQIRXgv4xAFYLHCxVYlnOH1IBAw BUmS2sBvJcON/wKpWs1eTMwiePTZoIYciV+X12WCbl9KQrnM0Lhe417o9aAmbCA0 IGH5JYCEO9vDdnuaxV6vn7UNgnuNcZm8DCvyGQALgZ8dhnYVXBhcOqGDq4FeM/90 IrcT70uF3Y55cA3h8kz1aJDa4BG4lbAf -----END CERTIFICATE-----Generated at Mon Jul 21 13:09:54 2025 by rpki-client