$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: ILy5nrCzQjm8KysDLtGhqRVbrWqnp/FCa4R/daPyHP0= Subject key identifier: 0C:53:27:4F:5C:BD:D5:11:14:77:F0:FD:1E:2B:AC:98:14:C8:1E:D5 Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: D3 Signing time: Mon 21 Jul 2025 05:46:14 +0000 Manifest this update: Mon 21 Jul 2025 05:46:14 +0000 Manifest next update: Mon 28 Jul 2025 05:46:14 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: 1ImwEkv4NOyfCBHdt2FA6jMcWc/JVJqZytGdTGahOwQ=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: xNwwVLbU+ydl+nMnNKKzooZcZgz88s1ddBpMaFQs7IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: Jul 21 05:46:14 2025 GMT Not After : Jul 28 05:46:14 2025 GMT Subject: CN=687dd426-4b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:30:a2:82:17:a2:bd:e3:54:de:41:e2:23: e2:ae:cd:68:e3:49:9f:c5:70:74:35:6b:1e:92:aa: a4:a2:ae:a9:8a:88:78:c3:4f:fc:6a:33:84:45:a8: 7e:32:b7:bc:3b:68:39:47:9f:e8:6b:05:13:86:1f: c6:83:b3:8b:26:b9:7c:86:bf:dd:87:37:5d:9a:99: 87:b8:44:da:d7:47:70:6e:5a:9e:2a:a8:9a:c2:8d: be:18:cd:ad:10:8b:f4:44:90:55:40:ed:95:77:79: 31:c3:fd:aa:4a:65:db:48:01:43:70:a2:fe:ff:a5: c3:ce:ca:e3:03:58:c9:2f:2e:00:7e:b4:63:ff:58: 7f:a7:fe:bf:1a:e9:7c:5d:44:56:d2:a2:8e:bb:52: 9f:e9:18:09:2a:99:2c:a6:30:83:61:87:5c:0a:50: 19:43:bf:cb:1f:46:ff:ec:b2:6a:c8:bf:92:72:51: e6:c6:44:59:43:c7:1d:06:12:25:a1:d8:5f:cf:7e: 04:fb:0f:cf:0b:bb:dc:b3:e1:bf:fd:4d:18:8a:8f: a0:6f:7a:36:bf:b0:53:dc:5a:5a:e2:14:87:7c:22: 10:55:0a:4e:bb:f8:ea:b1:65:70:62:ce:4f:96:cf: a5:47:80:cb:af:dd:66:af:6a:de:e7:78:74:38:e4: e2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:53:27:4F:5C:BD:D5:11:14:77:F0:FD:1E:2B:AC:98:14:C8:1E:D5 X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9a:08:ae:26:18:36:c9:15:bb:d2:f7:e0:48:56:9b:63:37: 86:ea:d9:d7:33:bb:25:a0:20:1b:68:fc:3a:91:67:ac:6d:b1: 00:58:33:52:5f:f2:5d:90:5e:ca:64:70:84:e2:b1:34:fa:17: 34:9d:c5:b3:14:43:f5:b1:44:68:1f:fe:9d:11:13:97:71:a3: af:c4:ba:78:e8:ee:ad:9f:a7:0b:12:f2:c4:fb:c6:d3:26:65: c8:01:de:5a:5e:17:7a:e7:41:ca:35:fd:5c:32:2e:9b:1a:f4: f1:cb:b1:74:06:42:75:05:27:73:fd:23:f5:b4:90:be:71:1a: c1:52:25:d7:64:11:e6:90:7a:0f:bd:89:be:d0:0f:69:c4:c1: 51:28:33:61:c7:98:f4:e2:4e:09:3c:5a:7a:aa:a6:46:f6:6c: 7d:01:ec:0b:c3:a0:89:56:6b:98:e6:a0:99:cf:ed:6c:96:c5: bc:16:a5:85:08:03:ce:44:a9:1a:fa:3e:37:28:0b:49:32:9b: 16:dd:63:20:2e:e6:19:0a:39:a2:85:f3:59:ad:8c:9f:d1:02: ae:57:95:f2:61:86:42:43:0b:01:ca:2a:50:5f:c3:44:9f:b3: 7f:f2:74:fb:5f:26:45:29:05:aa:38:14:86:99:26:38:da:64: 06:b3:9b:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNUYxMTAvBgNVBAUTKDA5QzdEOUU3RjI2M0RCMEI4QjgyMDFFN0QyOTNDQURF Q0I5N0NGOEMwHhcNMjUwNzIxMDU0NjE0WhcNMjUwNzI4MDU0NjE0WjAYMRYwFAYD VQQDEw02ODdkZDQyNi00Yjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlswooIXor3jVN5B4iPirs1o40mfxXB0NWsekqqkoq6pioh4w0/8ajOERah+ Mre8O2g5R5/oawUThh/Gg7OLJrl8hr/dhzddmpmHuETa10dwblqeKqiawo2+GM2t EIv0RJBVQO2Vd3kxw/2qSmXbSAFDcKL+/6XDzsrjA1jJLy4AfrRj/1h/p/6/Gul8 XURW0qKOu1Kf6RgJKpkspjCDYYdcClAZQ7/LH0b/7LJqyL+SclHmxkRZQ8cdBhIl odhfz34E+w/PC7vcs+G//U0Yio+gb3o2v7BT3Fpa4hSHfCIQVQpOu/jqsWVwYs5P ls+lR4DLr91mr2re53h0OOTiIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxTJ09c vdURFHfw/R4rrJgUyB7VMB8GA1UdIwQYMBaAFAnH2efyY9sLi4IB59KTyt7Ll8+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE1Ri80QjU5MDZCODIz RUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3dUxnZ0huMHBQSzNzdVh6 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE1Ri80QjU5MDZCODIzRUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3 dUxnZ0huMHBQSzNzdVh6NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcmgiuJhg2yRW70vfgSFabYzeG6tnXM7sloCAbaPw6kWesbbEAWDNS X/JdkF7KZHCE4rE0+hc0ncWzFEP1sURoH/6dEROXcaOvxLp46O6tn6cLEvLE+8bT JmXIAd5aXhd650HKNf1cMi6bGvTxy7F0BkJ1BSdz/SP1tJC+cRrBUiXXZBHmkHoP vYm+0A9pxMFRKDNhx5j04k4JPFp6qqZG9mx9AewLw6CJVmuY5qCZz+1slsW8FqWF CAPORKka+j43KAtJMpsW3WMgLuYZCjmihfNZrYyf0QKuV5XyYYZCQwsByipQX8NE n7N/8nT7XyZFKQWqOBSGmSY42mQGs5sr -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:03 2025 by rpki-client