$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft File: slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json) Hash identifier: hbfRkdFmJtGcCx4vQAE+a+VfYzFK7GZHfSFAJsCgy8U= Subject key identifier: 2A:40:6F:35:70:2B:C2:77:49:28:24:71:92:C7:25:31:EC:F5:BC:7C Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft Manifest number: AF Signing time: Sat 19 Jul 2025 06:14:53 +0000 Manifest this update: Sat 19 Jul 2025 06:14:52 +0000 Manifest next update: Sat 26 Jul 2025 06:14:52 +0000 Files and hashes: 1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: OkveAEecSi3qcCNAwSsayRJeJ+FGN2JSnCyxfAt2G0I=) 2: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (hash: u07sFp3Yqjqw6LAiuoDt1givQlP2Rg/DNRW12Og3/70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Validity Not Before: Jul 19 06:14:52 2025 GMT Not After : Jul 26 06:14:52 2025 GMT Subject: CN=687b37dd-5f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:39:bd:8e:da:d9:71:4b:30:51:3f:e2:2f: 2b:a8:a0:df:03:99:64:51:6e:18:b3:3e:f3:ae:43: b0:02:d2:30:27:77:61:b1:00:0b:7c:05:fd:90:4a: 82:2b:a7:da:ff:25:87:fc:56:b9:49:32:50:57:6f: a1:4a:0f:cd:d5:1c:4d:8f:78:a8:10:4b:3f:f0:fc: bd:24:21:f9:ee:f3:1f:16:78:fa:cc:cc:da:a1:35: 1d:b7:92:af:28:0a:44:3d:15:97:3a:44:90:a6:76: 39:b9:74:6c:12:c2:9c:55:7e:1f:88:9b:19:82:8e: f4:c7:95:92:34:a5:d4:c6:74:7f:48:a8:11:83:8e: c4:5f:90:2f:6e:7c:39:a8:f9:61:da:fa:68:6d:39: bb:90:d6:de:9d:1c:01:2a:c3:40:5f:d3:40:f9:33: bd:aa:b1:1d:40:38:cd:c8:75:f9:d0:d6:7d:96:bd: 92:1d:f4:b9:c6:0f:32:f7:43:e3:5b:f9:75:99:96: f0:41:71:d1:95:22:10:37:a0:2b:d6:14:37:a1:2d: 3c:b7:ad:dc:0e:c0:18:44:dc:9c:2c:a3:3b:44:e6: 41:0e:c6:88:bb:79:24:64:f2:a4:04:bf:79:b2:c4: b8:fc:27:de:c4:47:fc:2f:3d:b0:92:f6:7a:7f:f6: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:40:6F:35:70:2B:C2:77:49:28:24:71:92:C7:25:31:EC:F5:BC:7C X509v3 Authority Key Identifier: keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:aa:2c:d7:c9:77:77:4d:be:9d:ac:80:b5:64:33:4b:8e:81: 20:ef:a9:f8:bf:80:48:b9:25:74:9a:88:c6:d8:1c:3d:ae:85: ad:c7:c3:f4:a0:e3:e2:8f:34:aa:3f:98:5b:1d:1e:5b:ea:05: b6:6a:8b:d5:bb:4d:3c:f2:31:c9:a4:d6:12:33:43:2d:1e:74: 27:ab:d6:08:7d:3c:08:35:a7:3c:eb:73:f0:c3:e5:86:7f:e3: 06:04:9c:45:d8:26:cb:68:68:72:50:19:02:3f:00:9e:e3:10: e0:d9:95:31:3d:90:7d:9e:af:04:8a:36:5f:cc:57:13:07:96: 94:72:13:98:c3:17:0c:63:b2:64:18:c4:c2:cc:54:73:f8:9c: 50:76:03:0a:34:d8:1f:b1:cb:99:17:c8:7d:1b:b3:f4:54:94: 8c:76:68:19:ad:ac:2b:53:d6:91:45:4b:2e:1c:67:f2:77:5d: ed:20:d3:1a:a7:55:a8:1c:cc:7d:7a:08:45:2b:cb:5e:31:87: 67:6b:7a:50:0c:59:e2:9d:c8:87:2c:d0:87:a4:db:ec:44:08: a0:bb:2b:5c:58:76:b3:26:31:9e:d6:08:3b:35:85:78:64:1f: 86:7b:fc:9c:8f:71:32:14:fb:5b:4d:83:47:d3:64:a7:ff:0d: 53:7d:04:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3ODYxMTAvBgNVBAUTKEIyNTUyQjM4QjhDNUNCMDkzNUM5NDBGQTYwOTgwRUE2 RjUxMENGODYwHhcNMjUwNzE5MDYxNDUyWhcNMjUwNzI2MDYxNDUyWjAYMRYwFAYD VQQDEw02ODdiMzdkZC01ZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSQ5vY7a2XFLMFE/4i8rqKDfA5lkUW4Ysz7zrkOwAtIwJ3dhsQALfAX9kEqC K6fa/yWH/Fa5STJQV2+hSg/N1RxNj3ioEEs/8Py9JCH57vMfFnj6zMzaoTUdt5Kv KApEPRWXOkSQpnY5uXRsEsKcVX4fiJsZgo70x5WSNKXUxnR/SKgRg47EX5Avbnw5 qPlh2vpobTm7kNbenRwBKsNAX9NA+TO9qrEdQDjNyHX50NZ9lr2SHfS5xg8y90Pj W/l1mZbwQXHRlSIQN6Ar1hQ3oS08t63cDsAYRNycLKM7ROZBDsaIu3kkZPKkBL95 ssS4/CfexEf8Lz2wkvZ6f/Yi/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpAbzVw K8J3SSgkcZLHJTHs9bx8MB8GA1UdIwQYMBaAFLJVKzi4xcsJNclA+mCYDqb1EM+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc4Ni9FNTc3MTM4MDVB RTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3azF5VUQ2WUpnT3B2VVF6 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NsVXJPTGpGeXdrMXlVRDZZSmdPcHZVUXo0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc4Ni9FNTc3MTM4MDVBRTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3 azF5VUQ2WUpnT3B2VVF6NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIqizXyXd3Tb6drIC1ZDNLjoEg76n4v4BIuSV0mojG2Bw9roWtx8P0 oOPijzSqP5hbHR5b6gW2aovVu0088jHJpNYSM0MtHnQnq9YIfTwINac863Pww+WG f+MGBJxF2CbLaGhyUBkCPwCe4xDg2ZUxPZB9nq8EijZfzFcTB5aUchOYwxcMY7Jk GMTCzFRz+JxQdgMKNNgfscuZF8h9G7P0VJSMdmgZrawrU9aRRUsuHGfyd13tINMa p1WoHMx9eghFK8teMYdna3pQDFninciHLNCHpNvsRAiguytcWHazJjGe1gg7NYV4 ZB+Ge/ycj3EyFPtbTYNH02Sn/w1TfQSu -----END CERTIFICATE-----Generated at Sun Jul 20 08:01:47 2025 by rpki-client