$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft File: w5bB5QN9M19zQcouz4ImEwDN_pU.mft (raw, json) Hash identifier: carLUsW/Tj2uyKD22z3vsgF25AWTrcw/jrXYpbU2j5w= Subject key identifier: 71:58:DC:D4:87:41:1C:54:82:B0:DB:26:26:89:84:41:AF:B3:30:65 Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 Certificate issuer: /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Certificate serial: 04CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft Manifest number: 04C9 Signing time: Mon 21 Jul 2025 00:04:23 +0000 Manifest this update: Mon 21 Jul 2025 00:04:22 +0000 Manifest next update: Mon 28 Jul 2025 00:04:22 +0000 Files and hashes: 1: w5bB5QN9M19zQcouz4ImEwDN_pU.crl (hash: L8egShN80m2IDtkrT+uw3vnRXW8YM2Fz4lDyaRK0daU=) 2: FCF7126E310711ECBFFF5E62C4F9AE02.roa (hash: F3pgM3DGI+wP2jrjrPXa65ZGlXf9TnXpF1OSKK2H5GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Validity Not Before: Jul 21 00:04:22 2025 GMT Not After : Jul 28 00:04:22 2025 GMT Subject: CN=687d8407-730d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:4f:26:cb:c9:56:f2:b0:9e:b9:f5:27:ce: 8b:67:69:98:7c:f0:96:04:a4:0b:70:74:4d:8f:82: b9:e0:6d:36:6b:41:d3:ef:8b:6f:25:18:a1:bd:5c: 9d:de:1e:b8:da:87:08:59:e0:c8:0f:0b:c5:31:87: e6:80:f1:47:86:58:d2:bd:08:89:a9:0e:a4:3b:b0: 86:bd:2d:c7:4f:bf:3d:47:8f:84:2b:47:f1:4d:dc: d7:c6:c1:03:bb:a8:14:f8:8c:1b:00:c2:1b:09:57: b2:6e:f8:51:18:db:c5:16:4f:db:b5:0c:b0:ba:bf: 28:c0:d7:5a:83:66:80:60:03:f6:dd:62:46:b1:4b: d5:15:6d:8c:46:ca:b5:9d:b2:7b:ca:ad:2e:6a:0f: 31:2f:e5:6b:71:30:76:cf:e4:a0:72:8f:1a:e7:5c: 61:02:fd:96:f4:7f:8d:3a:dc:5d:f8:da:f4:ce:72: 6a:da:ae:fe:0a:3d:74:22:ac:ad:c5:95:4a:b1:29: 3e:5a:3d:0a:e4:41:2a:42:f3:24:86:73:23:c5:c1: 81:3f:42:27:9b:56:06:96:44:86:7a:ea:7b:f2:bd: ee:d5:ed:bc:fb:9f:a4:a5:6b:ba:58:a2:4c:e6:da: 70:bb:b0:36:7f:9d:f3:0c:cc:d2:08:de:13:09:08: de:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:58:DC:D4:87:41:1C:54:82:B0:DB:26:26:89:84:41:AF:B3:30:65 X509v3 Authority Key Identifier: keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:00:f2:6f:89:1e:e5:cd:ac:57:11:b2:66:05:10:09:f3:f5: f2:c9:dc:b3:92:27:82:64:8d:44:87:dc:c5:32:01:48:56:33: 17:e7:0c:55:94:ee:a1:67:c9:98:57:be:12:d0:4d:92:02:41: 4f:13:ca:0b:77:d0:22:a8:cf:07:86:50:05:64:97:40:c5:6e: 91:33:d2:14:73:22:a7:90:d9:d0:81:76:82:96:99:70:25:10: 1c:0b:05:50:89:1e:b7:4e:a7:4c:62:94:16:a1:7e:83:9a:12: 01:46:03:5f:ea:15:74:16:83:85:50:46:26:0c:bd:cc:f5:58: d0:c4:69:d6:02:70:e0:f1:a2:53:17:96:c1:fe:19:59:65:d4: 53:35:75:f3:b1:31:10:f7:34:84:91:8c:e2:dd:cd:ff:0b:c1: fc:57:05:bd:e6:e0:31:44:08:2a:34:19:a0:f0:95:2a:34:93: e4:d7:78:ea:23:4d:7f:97:54:8a:e0:0f:1c:79:39:c4:06:cd: a8:47:dd:3c:3e:04:45:e2:62:7e:4b:84:26:2c:d0:be:f7:ae: f6:10:0a:30:1e:33:79:0d:36:c7:ec:f5:f2:b5:13:e2:a9:1f: 27:a9:fa:5d:cc:d0:32:f9:c5:30:08:9e:43:11:f5:02:61:df: 19:25:2a:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzOEMxMTAvBgNVBAUTKEMzOTZDMUU1MDM3RDMzNUY3MzQxQ0EyRUNGODIyNjEz MDBDREZFOTUwHhcNMjUwNzIxMDAwNDIyWhcNMjUwNzI4MDAwNDIyWjAYMRYwFAYD VQQDEw02ODdkODQwNy03MzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrdPJsvJVvKwnrn1J86LZ2mYfPCWBKQLcHRNj4K54G02a0HT74tvJRihvVyd 3h642ocIWeDIDwvFMYfmgPFHhljSvQiJqQ6kO7CGvS3HT789R4+EK0fxTdzXxsED u6gU+IwbAMIbCVeybvhRGNvFFk/btQywur8owNdag2aAYAP23WJGsUvVFW2MRsq1 nbJ7yq0uag8xL+VrcTB2z+Sgco8a51xhAv2W9H+NOtxd+Nr0znJq2q7+Cj10Iqyt xZVKsSk+Wj0K5EEqQvMkhnMjxcGBP0Inm1YGlkSGeup78r3u1e28+5+kpWu6WKJM 5tpwu7A2f53zDMzSCN4TCQjewwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFY3NSH QRxUgrDbJiaJhEGvszBlMB8GA1UdIwQYMBaAFMOWweUDfTNfc0HKLs+CJhMAzf6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzM4Qy84NzA0OERBQTMx MDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0xOXpRY291ejRJbUV3RE5f cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1YkI1UU45TTE5elFjb3V6NEltRXdETl9wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzM4Qy84NzA0OERBQTMxMDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0x OXpRY291ejRJbUV3RE5fcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZAPJviR7lzaxXEbJmBRAJ8/XyydyzkieCZI1Eh9zFMgFIVjMX5wxV lO6hZ8mYV74S0E2SAkFPE8oLd9AiqM8HhlAFZJdAxW6RM9IUcyKnkNnQgXaClplw JRAcCwVQiR63TqdMYpQWoX6DmhIBRgNf6hV0FoOFUEYmDL3M9VjQxGnWAnDg8aJT F5bB/hlZZdRTNXXzsTEQ9zSEkYzi3c3/C8H8VwW95uAxRAgqNBmg8JUqNJPk13jq I01/l1SK4A8ceTnEBs2oR908PgRF4mJ+S4QmLNC+9672EAowHjN5DTbH7PXytRPi qR8nqfpdzNAy+cUwCJ5DEfUCYd8ZJSrm -----END CERTIFICATE-----Generated at Mon Jul 21 08:05:06 2025 by rpki-client