$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json) Hash identifier: UNZer44smXHybwYgNy5fYZnG8NRqPqOA98m4nEDWEBM= Subject key identifier: 7E:52:AA:B4:4A:3B:D0:52:4C:AE:AD:03:47:40:79:30:0C:6D:35:80 Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Certificate serial: 106D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft Manifest number: 1065 Signing time: Sun 20 Jul 2025 17:24:09 +0000 Manifest this update: Sun 20 Jul 2025 17:24:08 +0000 Manifest next update: Sun 27 Jul 2025 17:24:08 +0000 Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: jaWtBLyshwj3zzfC/Vr0TPG3uff78360tDZrepHdSss=) 2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: P8zT0PniKGyPQKuaO/6cEK/Iz5vptBwIg6UXjylLbdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4205 (0x106d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Validity Not Before: Jul 20 17:24:08 2025 GMT Not After : Jul 27 17:24:08 2025 GMT Subject: CN=687d2638-6b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3a:85:c2:88:67:76:ed:af:c5:b7:bd:b2:d5: a1:74:c7:b9:1c:4b:a7:62:e6:87:dc:dd:29:94:fd: 6b:1b:fc:21:21:29:be:05:6d:5b:d8:44:fe:8f:14: 53:22:8b:c6:99:f1:5a:39:36:d2:06:f4:04:dd:c1: 2f:a4:9d:91:37:5a:a9:ad:c5:80:17:1c:45:56:7a: 3d:42:a4:e3:ed:0b:d1:55:ac:8c:b7:69:e3:93:26: 06:ed:bd:30:f3:e2:db:84:6a:62:a1:36:8e:91:c9: c6:67:85:b2:ce:03:3a:84:74:3d:4c:ce:67:f9:fd: 6b:4f:53:a3:3b:56:36:b7:94:df:97:4f:0f:d5:c3: 26:46:fe:d8:a7:27:d9:47:b1:08:bb:5c:1f:76:fd: 05:13:21:d3:c9:a4:0c:e4:45:d3:a1:0b:a1:34:de: 7b:02:1e:72:31:ac:32:74:a8:3a:c9:c7:2e:db:43: 23:18:67:75:70:b4:a3:fd:0c:ef:90:c1:4a:cc:24: ed:fb:79:c6:82:4d:b5:15:87:7c:60:07:9a:fc:74: 28:6f:bc:de:f6:d2:22:d9:e0:72:fb:b1:a3:a6:8f: 5b:7d:87:f2:a8:fe:e9:86:77:5e:3b:92:69:92:4b: c7:08:e3:fa:ee:f2:ed:97:9f:02:a5:38:f0:f7:21: 54:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:52:AA:B4:4A:3B:D0:52:4C:AE:AD:03:47:40:79:30:0C:6D:35:80 X509v3 Authority Key Identifier: keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:5d:d9:5d:05:4c:80:bc:d5:f9:e0:b0:3b:d1:81:13:9f:6b: 61:a5:aa:76:4c:96:15:f1:8a:4d:83:b0:af:82:4e:fe:5c:d5: 33:37:74:5a:9d:40:fe:ed:ca:5c:73:f6:1c:44:c0:78:9c:fb: bf:fb:af:cc:5f:6c:a4:65:77:e6:c5:b9:db:0b:ae:10:b6:ea: 3f:e3:34:37:de:bf:a2:00:4c:df:04:ea:13:a9:9e:b5:3a:cd: 60:07:6b:d8:91:71:b6:cb:62:a4:67:c6:ce:43:44:00:7a:c8: 86:f6:6e:78:cd:1b:3a:6c:05:66:34:2f:20:01:f1:6a:a1:cd: 52:b2:58:0c:60:d5:0f:d7:fb:b3:b7:c5:5a:35:a5:49:5a:f8: 77:97:ac:6c:a1:1b:8f:07:b2:a0:fa:21:0e:f2:5e:31:7b:9a: fc:c4:9f:d3:18:3f:27:dd:38:c3:1a:c5:f0:82:ea:75:4a:f8: b2:b8:7a:56:5c:af:c2:76:57:d8:85:a8:e1:92:14:f6:54:03: 1c:29:8a:5d:12:5e:92:29:a0:e5:02:33:a9:80:b9:84:2b:86: 50:14:93:64:a9:ed:c8:74:80:7f:40:78:3e:2f:99:e3:a7:18: 02:ce:19:2b:bd:36:13:77:7d:08:79:67:63:ee:37:01:11:87: 98:fb:7d:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxQTcxMTAvBgNVBAUTKDZBQzc3OTc0REZFNDUwODA3MzVDREI5MDY2QTdFMjQ2 OTYwNDkyQjcwHhcNMjUwNzIwMTcyNDA4WhcNMjUwNzI3MTcyNDA4WjAYMRYwFAYD VQQDEw02ODdkMjYzOC02YjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzqFwohndu2vxbe9stWhdMe5HEunYuaH3N0plP1rG/whISm+BW1b2ET+jxRT IovGmfFaOTbSBvQE3cEvpJ2RN1qprcWAFxxFVno9QqTj7QvRVayMt2njkyYG7b0w 8+LbhGpioTaOkcnGZ4WyzgM6hHQ9TM5n+f1rT1OjO1Y2t5Tfl08P1cMmRv7YpyfZ R7EIu1wfdv0FEyHTyaQM5EXToQuhNN57Ah5yMawydKg6yccu20MjGGd1cLSj/Qzv kMFKzCTt+3nGgk21FYd8YAea/HQob7ze9tIi2eBy+7Gjpo9bfYfyqP7phndeO5Jp kkvHCOP67vLtl58CpTjw9yFUIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5SqrRK O9BSTK6tA0dAeTAMbTWAMB8GA1UdIwQYMBaAFGrHeXTf5FCAc1zbkGan4kaWBJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFBNy83QjBCNjc4NDM5 QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJQnpYTnVRWnFmaVJwWUVr cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzZDVkTl9rVUlCelhOdVFacWZpUnBZRWtyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzFBNy83QjBCNjc4NDM5QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJ QnpYTnVRWnFmaVJwWUVrcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwXdldBUyAvNX54LA70YETn2thpap2TJYV8YpNg7Cvgk7+XNUzN3Ra nUD+7cpcc/YcRMB4nPu/+6/MX2ykZXfmxbnbC64Qtuo/4zQ33r+iAEzfBOoTqZ61 Os1gB2vYkXG2y2KkZ8bOQ0QAesiG9m54zRs6bAVmNC8gAfFqoc1SslgMYNUP1/uz t8VaNaVJWvh3l6xsoRuPB7Kg+iEO8l4xe5r8xJ/TGD8n3TjDGsXwgup1SviyuHpW XK/CdlfYhajhkhT2VAMcKYpdEl6SKaDlAjOpgLmEK4ZQFJNkqe3IdIB/QHg+L5nj pxgCzhkrvTYTd30IeWdj7jcBEYeY+315 -----END CERTIFICATE-----Generated at Tue Jul 22 05:10:33 2025 by rpki-client