$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft File: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft (raw, json) Hash identifier: F3K8/yHO8I+vKgx023404ydVPkaEXqb6Bics9ZVwMog= Subject key identifier: 35:15:39:9C:D3:B7:D9:F4:4A:8E:8F:CD:18:73:B4:9D:DC:97:C7:6E Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 06B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft Manifest number: 06A6 Signing time: Fri 18 Jul 2025 22:30:58 +0000 Manifest this update: Fri 18 Jul 2025 22:30:58 +0000 Manifest next update: Fri 25 Jul 2025 22:30:58 +0000 Files and hashes: 1: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl (hash: zW/NVlto6Ol8l5RNVvNAtMYh6BXYwpKTBjj+d9/dW3w=) 2: DE7B831C37DA11EDBEF9D050C4F9AE02.roa (hash: +kKylmkca6+FAx4sOYGqHKzwXEhQ+5JcXHkL0UhejKI=) 3: E959541EB28511ED8893C51CC4F9AE02.roa (hash: UcfQbjt5pGDSOZCx5IzeUlVnX3YAZQw3ib/ytvODV4c=) 4: DDC1A87037DA11EDBEF9D050C4F9AE02.roa (hash: JPtWkJd9tKQ9YS8DsRPubKSCxL1JQ7cieCqKgCXkh+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Jul 18 22:30:58 2025 GMT Not After : Jul 25 22:30:58 2025 GMT Subject: CN=687acb22-5efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:4d:50:23:d9:e3:31:7a:d7:33:c2:9b:8a: 3f:0c:f7:80:e8:93:05:04:93:e5:fe:06:90:d7:18: 12:46:5d:17:d6:df:75:e6:ac:54:1d:15:13:d9:d3: 41:27:2d:13:56:7f:0f:96:7f:47:96:6f:02:0f:77: 31:c3:d2:dc:c4:6d:53:7d:9d:65:07:b6:54:af:b0: ec:60:87:45:3a:ae:ed:e6:c7:ce:f0:ff:a6:5f:2c: 10:c1:2e:20:85:04:5e:ff:d7:ab:e3:ed:55:5a:f7: 10:9d:8c:c7:81:d1:a2:7b:75:55:b9:df:86:56:10: ed:c9:10:15:01:cc:16:75:1a:6c:82:ad:10:4a:23: 82:d5:52:62:a2:32:63:1c:f5:25:b5:5d:67:7d:bb: f2:a9:bb:43:4b:5d:73:64:41:66:03:2a:ea:45:6e: 3b:31:38:0e:44:fc:6c:7b:72:7f:c7:c9:1d:d6:85: 4d:be:0a:98:4c:72:77:2b:34:f2:ac:96:b5:ca:bc: c2:e0:3b:90:fb:ff:4e:9b:9a:d8:53:6f:e8:c7:66: fc:b4:2a:63:72:a3:fa:64:d0:34:50:cb:30:fb:7a: 91:fb:94:78:aa:f4:88:bc:5d:cc:02:d2:2e:97:d5: cf:9a:58:94:ed:61:ff:65:4e:ef:9e:65:59:6e:9c: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:15:39:9C:D3:B7:D9:F4:4A:8E:8F:CD:18:73:B4:9D:DC:97:C7:6E X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:72:39:54:99:13:00:ba:ac:47:39:a5:4f:7e:03:d5:99:1e: 79:5f:5b:25:f4:92:29:2e:60:93:70:f5:80:fb:9a:33:ff:30: bd:68:cb:b2:77:1d:41:21:60:5c:30:91:43:a7:00:0e:38:96: 38:e9:be:96:8f:ec:0a:5f:2d:7c:6f:09:c5:52:ea:ab:2f:f0: ce:dc:d7:3f:12:c5:c8:b8:36:af:1e:50:78:1e:d1:f8:50:d7: c8:71:05:41:38:d2:0a:4b:74:02:e1:f9:b3:d2:1a:06:00:97: 5f:ed:45:ce:12:32:0f:4d:62:1d:dd:b2:71:67:60:e5:11:77: 46:5d:35:ac:91:69:fd:0c:80:60:fe:b1:61:70:62:d6:6d:85: 4f:13:82:dc:f1:a8:7f:82:7c:0a:ed:f3:08:08:cf:96:1a:20: 1e:ce:37:1a:d9:e9:27:d0:39:41:fd:02:7f:b4:b3:a0:cf:76: 0b:fb:0d:3d:1d:b2:1b:70:16:53:28:f9:a2:ac:8a:08:26:f2: 61:ca:a6:81:bf:77:87:92:4a:93:66:40:82:e2:0e:a7:c3:88: 22:ae:3d:eb:d0:ca:f0:8c:cd:7f:5b:df:54:1f:9b:47:d3:78: 7f:d0:df:17:8c:88:c6:63:4d:7f:7a:ef:bd:c8:72:20:7d:97: 2d:95:4b:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjUwNzE4MjIzMDU4WhcNMjUwNzI1MjIzMDU4WjAYMRYwFAYD VQQDEw02ODdhY2IyMi01ZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOtNUCPZ4zF61zPCm4o/DPeA6JMFBJPl/gaQ1xgSRl0X1t915qxUHRUT2dNB Jy0TVn8Pln9Hlm8CD3cxw9LcxG1TfZ1lB7ZUr7DsYIdFOq7t5sfO8P+mXywQwS4g hQRe/9er4+1VWvcQnYzHgdGie3VVud+GVhDtyRAVAcwWdRpsgq0QSiOC1VJiojJj HPUltV1nfbvyqbtDS11zZEFmAyrqRW47MTgORPxse3J/x8kd1oVNvgqYTHJ3KzTy rJa1yrzC4DuQ+/9Om5rYU2/ox2b8tCpjcqP6ZNA0UMsw+3qR+5R4qvSIvF3MAtIu l9XPmliU7WH/ZU7vnmVZbpz6lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUVOZzT t9n0So6PzRhztJ3cl8duMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REIzNy81NzY0NzM3QTc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpq V0J4Y1FfVDhmTUxQYU5hU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCucjlUmRMAuqxHOaVPfgPVmR55X1sl9JIpLmCTcPWA+5oz/zC9aMuy dx1BIWBcMJFDpwAOOJY46b6Wj+wKXy18bwnFUuqrL/DO3Nc/EsXIuDavHlB4HtH4 UNfIcQVBONIKS3QC4fmz0hoGAJdf7UXOEjIPTWId3bJxZ2DlEXdGXTWskWn9DIBg /rFhcGLWbYVPE4Lc8ah/gnwK7fMICM+WGiAezjca2ekn0DlB/QJ/tLOgz3YL+w09 HbIbcBZTKPmirIoIJvJhyqaBv3eHkkqTZkCC4g6nw4girj3r0MrwjM1/W99UH5tH 03h/0N8XjIjGY01/eu+9yHIgfZctlUto -----END CERTIFICATE-----Generated at Sun Jul 20 19:07:36 2025 by rpki-client