$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft File: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json) Hash identifier: y/rFpEwIncPgq8/j+rvm7wnwCCH+PbO38h/E8g5PMGU= Subject key identifier: D5:FD:CC:D3:34:FD:04:44:64:74:A4:AD:CC:94:E4:A5:FA:55:EF:39 Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft Manifest number: 34B3 Signing time: Sun 20 Jul 2025 15:07:22 +0000 Manifest this update: Sun 20 Jul 2025 15:07:22 +0000 Manifest next update: Sun 27 Jul 2025 15:07:22 +0000 Files and hashes: 1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: neBvG37yKAD+5HoxPKS/DTzQf85onSxLD18aduBMFMA=) 2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: d8SyVppxPlIuR4fpNFIkYTURn6Yx4CMf1TSPHGG+TtY=) 3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: 2HjZqBm6c0Bz0zik/PCkuHSNvhZSOIqG0dnIWyE0YeQ=) 4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: EbIaf/1Sy/3aBx9khl+6A1cQZxzTMmTyasNR7QqdjR8=) 5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: 0RxGIy0cRn46gMQ4a+LKJK3dXVABCl5t2jG6UZ82riU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: Jul 20 15:07:22 2025 GMT Not After : Jul 27 15:07:22 2025 GMT Subject: CN=687d062a-9df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:f6:7d:ad:ae:86:f1:d0:aa:f1:04:c3:c4: a5:41:67:f3:fe:6a:96:e4:f4:45:73:87:43:9f:c2: 00:cf:b5:f9:ef:66:55:a2:8a:c3:ec:ed:54:c6:44: 44:a7:f6:1a:e8:b7:5c:8c:a0:5b:09:1e:44:90:5f: 04:a9:db:3c:7c:23:1a:1e:e8:0a:5c:33:93:9e:7d: 68:27:ed:65:ea:4b:88:33:89:53:a1:50:19:31:53: 50:f3:10:dc:e0:22:98:3e:15:f1:84:08:24:17:a2: a6:f4:f2:f5:94:93:55:c7:9b:5b:32:85:af:55:a2: 66:1d:dd:5e:6f:10:26:72:9c:74:fa:de:f3:4d:6b: 63:a9:1d:65:26:47:0a:21:34:96:8d:7f:fc:c7:1a: 64:68:1d:b7:88:9c:a2:c7:6c:80:6b:87:b6:a5:0c: fb:c3:c4:51:71:ce:af:af:a3:89:74:fa:87:88:32: 15:8c:f4:1a:f8:23:c8:04:b2:3b:14:e5:c1:d3:09: 1f:31:91:0e:dc:dc:a2:0d:97:25:76:3f:01:9f:49: b4:b5:4d:92:e4:5f:5e:d3:11:0f:32:75:68:e9:9e: b0:31:cf:6b:ec:98:3f:1a:cc:d7:ba:ed:76:49:0b: c4:4f:f2:f6:a0:de:e7:ee:51:65:d2:68:4f:eb:81: f7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FD:CC:D3:34:FD:04:44:64:74:A4:AD:CC:94:E4:A5:FA:55:EF:39 X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:99:f4:fa:90:30:3d:0d:e0:f3:69:2e:7b:c3:60:de:bd:bc: ac:83:b8:00:59:c8:34:44:02:ea:3a:f2:88:fe:53:fd:bd:53: f1:e4:13:8a:32:3a:9b:1d:86:bd:08:04:8f:7b:d6:1b:d5:fb: 97:e2:6c:f5:1f:bc:ea:ed:45:50:e1:72:30:17:91:d4:a6:9b: 5c:72:dd:38:bf:ac:90:04:93:33:9d:6a:76:2d:7a:bd:d2:5c: 19:82:1f:03:6f:17:a9:a6:29:a9:78:c2:15:dd:6d:d3:53:6d: ec:9b:96:7d:d6:22:de:de:8b:2c:88:67:03:66:27:78:b2:7b: 2f:8b:4c:7e:eb:8f:7c:6a:a4:24:14:86:1f:8b:1f:7d:bf:fb: 55:a0:30:4a:f8:14:d4:19:bd:ad:a7:78:ca:e1:51:14:59:7a: 5d:16:7e:45:d5:0a:29:3e:4c:f1:49:32:66:de:6a:16:3b:26: 61:08:01:c1:97:7c:fe:d2:d6:c1:23:ae:e5:e4:88:f8:40:03: ad:21:13:b1:7b:3f:01:2b:db:6c:2b:cf:ce:f7:45:26:f7:fd: 68:38:a2:33:85:e3:8e:e2:9b:63:8b:1b:0f:1d:b8:ce:61:db: 5f:6b:b9:fe:cc:26:af:a5:97:94:c9:6f:f6:45:f0:d8:f3:b7: 7e:4b:15:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjUwNzIwMTUwNzIyWhcNMjUwNzI3MTUwNzIyWjAYMRYwFAYD VQQDEw02ODdkMDYyYS05ZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx72fa2uhvHQqvEEw8SlQWfz/mqW5PRFc4dDn8IAz7X572ZVoorD7O1UxkRE p/Ya6LdcjKBbCR5EkF8Eqds8fCMaHugKXDOTnn1oJ+1l6kuIM4lToVAZMVNQ8xDc 4CKYPhXxhAgkF6Km9PL1lJNVx5tbMoWvVaJmHd1ebxAmcpx0+t7zTWtjqR1lJkcK ITSWjX/8xxpkaB23iJyix2yAa4e2pQz7w8RRcc6vr6OJdPqHiDIVjPQa+CPIBLI7 FOXB0wkfMZEO3NyiDZcldj8Bn0m0tU2S5F9e0xEPMnVo6Z6wMc9r7Jg/GszXuu12 SQvET/L2oN7n7lFl0mhP64H3EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX9zNM0 /QREZHSkrcyU5KX6Ve85MB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUVCOC84RTBGMkNCNjFEQTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pL cHFnSHlCUWVPV1MxVWJ1VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUmfT6kDA9DeDzaS57w2Devbysg7gAWcg0RALqOvKI/lP9vVPx5BOK MjqbHYa9CASPe9Yb1fuX4mz1H7zq7UVQ4XIwF5HUpptcct04v6yQBJMznWp2LXq9 0lwZgh8DbxeppimpeMIV3W3TU23sm5Z91iLe3ossiGcDZid4snsvi0x+6498aqQk FIYfix99v/tVoDBK+BTUGb2tp3jK4VEUWXpdFn5F1QopPkzxSTJm3moWOyZhCAHB l3z+0tbBI67l5Ij4QAOtIROxez8BK9tsK8/O90Um9/1oOKIzheOO4ptjixsPHbjO Ydtfa7n+zCavpZeUyW/2RfDY87d+SxUe -----END CERTIFICATE-----Generated at Mon Jul 21 07:13:06 2025 by rpki-client