$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json) Hash identifier: 65tTkZ8a9+r5umxabJhQXdTcGSR8uwM6+ZXYaF5NLWM= Subject key identifier: 78:9A:FD:90:C3:B0:8E:DC:ED:48:D4:B4:08:7C:EC:1A:70:D7:F7:50 Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Certificate serial: 04D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft Manifest number: 04CD Signing time: Sat 19 Jul 2025 00:14:28 +0000 Manifest this update: Sat 19 Jul 2025 00:14:28 +0000 Manifest next update: Sat 26 Jul 2025 00:14:28 +0000 Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: Tsz3pVnB1YlNF6/M8pQFhBwrEebH3aRx6wl0mt2BBnM=) 2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: OEZzXzknZfZ5+s266LCfZPiCa3g7F7GJ2hmeU6hbgO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1238 (0x4d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Validity Not Before: Jul 19 00:14:28 2025 GMT Not After : Jul 26 00:14:28 2025 GMT Subject: CN=687ae364-8616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:60:40:52:28:ec:f4:7e:a6:6d:47:6e:7e: 39:fd:be:37:a7:5b:b2:4e:be:c4:88:1e:3e:4f:05: 5e:18:fb:dc:9f:d4:29:ee:3e:fa:26:ec:c9:d8:07: b1:93:93:5d:5f:f6:da:23:8f:31:c8:b5:28:23:1f: 13:23:0d:3f:6d:78:96:92:fd:4c:ba:67:07:ac:b1: e2:40:98:43:46:9e:39:67:b2:9c:04:8b:94:8a:80: 11:f1:48:b4:af:2e:2a:b8:20:d6:15:2f:af:6b:24: a8:b6:d6:9c:a0:5e:08:77:a4:f5:c1:64:f1:e5:bd: c2:9c:70:94:18:a4:a8:f8:4e:9b:f1:1c:7b:fa:aa: 7f:e9:18:37:a0:fa:78:91:97:d4:e2:86:e1:fd:fc: 13:19:dd:c0:6a:7c:bc:31:5c:57:60:ba:50:06:ac: 45:fc:3d:bd:ba:8d:13:0c:b0:f8:5c:38:e4:ea:c1: 20:3a:a3:dd:1f:94:7a:09:1d:01:60:2f:9c:70:8d: d3:82:52:b1:76:51:20:63:b5:65:12:a0:0c:d9:72: 1e:fc:ea:cd:12:30:c1:b1:b0:ce:e1:2b:55:51:fd: 2a:0d:28:29:ab:a6:23:24:7f:46:d4:ee:32:f5:1c: b4:69:1e:06:78:2e:90:09:1e:f1:84:56:71:af:7e: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9A:FD:90:C3:B0:8E:DC:ED:48:D4:B4:08:7C:EC:1A:70:D7:F7:50 X509v3 Authority Key Identifier: keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fa:39:f1:50:e9:10:07:0e:75:6c:74:66:a7:d1:91:0e:47: 0f:25:63:8b:7a:93:18:62:b7:1e:7a:2e:85:31:d1:8f:7b:81: 5e:ec:14:cf:14:29:43:0f:0c:73:3d:a9:11:c5:0b:7a:b1:40: d0:12:a5:b7:b4:e6:34:f9:d3:21:8f:da:a5:be:9d:0f:13:e6: b1:74:93:46:2e:63:42:a9:f6:4b:c6:82:2a:22:46:24:85:7e: 4c:91:4b:08:d6:6b:96:a7:50:7a:e3:ae:cb:04:1f:42:cf:8d: e0:e5:61:1b:fa:83:01:84:de:8d:9c:8f:cd:b3:33:7d:64:b1: 40:10:4c:c7:30:1c:f8:84:67:3d:38:07:c1:f9:6d:a8:19:1b: b2:0c:bf:4d:c0:39:f5:db:16:e6:53:8d:ef:17:b0:08:29:df: 13:ec:5d:a1:b5:a6:20:e9:5e:db:bd:b4:9e:6e:e0:d1:66:9f: 6f:76:ef:de:03:42:bb:ef:b1:ae:6a:64:42:df:91:d9:e1:d6: 72:aa:b5:c8:5a:5b:c2:e1:82:fe:d0:bd:74:11:e4:a2:ad:b3: f5:08:7e:82:28:aa:6b:6e:57:5b:1b:3a:ee:f1:63:5c:aa:fa: ab:06:19:69:05:87:d4:f2:ac:39:8f:64:ce:cc:fa:7d:b5:1f: c9:11:7f:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwOTkxMTAvBgNVBAUTKEIwRjQ3QTY5NkFDRDc3Qzc0QTM0NzNDNENEMTcxREEz NzIxQ0VDRDAwHhcNMjUwNzE5MDAxNDI4WhcNMjUwNzI2MDAxNDI4WjAYMRYwFAYD VQQDEw02ODdhZTM2NC04NjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroJgQFIo7PR+pm1Hbn45/b43p1uyTr7EiB4+TwVeGPvcn9Qp7j76JuzJ2Aex k5NdX/baI48xyLUoIx8TIw0/bXiWkv1MumcHrLHiQJhDRp45Z7KcBIuUioAR8Ui0 ry4quCDWFS+vaySottacoF4Id6T1wWTx5b3CnHCUGKSo+E6b8Rx7+qp/6Rg3oPp4 kZfU4obh/fwTGd3Aany8MVxXYLpQBqxF/D29uo0TDLD4XDjk6sEgOqPdH5R6CR0B YC+ccI3TglKxdlEgY7VlEqAM2XIe/OrNEjDBsbDO4StVUf0qDSgpq6YjJH9G1O4y 9Ry0aR4GeC6QCR7xhFZxr37/oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHia/ZDD sI7c7UjUtAh87Bpw1/dQMB8GA1UdIwQYMBaAFLD0emlqzXfHSjRzxM0XHaNyHOzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA5OS9FQjRFRkJDNjMx NUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4ZEtOSFBFelJjZG8zSWM3 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NQUjZhV3JOZDhkS05IUEV6UmNkbzNJYzdOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA5OS9FQjRFRkJDNjMxNUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4 ZEtOSFBFelJjZG8zSWM3TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd+jnxUOkQBw51bHRmp9GRDkcPJWOLepMYYrceei6FMdGPe4Fe7BTP FClDDwxzPakRxQt6sUDQEqW3tOY0+dMhj9qlvp0PE+axdJNGLmNCqfZLxoIqIkYk hX5MkUsI1muWp1B6467LBB9Cz43g5WEb+oMBhN6NnI/NszN9ZLFAEEzHMBz4hGc9 OAfB+W2oGRuyDL9NwDn12xbmU43vF7AIKd8T7F2htaYg6V7bvbSebuDRZp9vdu/e A0K777GuamRC35HZ4dZyqrXIWlvC4YL+0L10EeSirbP1CH6CKKprbldbGzru8WNc qvqrBhlpBYfU8qw5j2TOzPp9tR/JEX8K -----END CERTIFICATE-----Generated at Sun Jul 20 11:45:30 2025 by rpki-client