$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft File: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json) Hash identifier: /rKTKvqPeDEIK7k1FOE1PuHiimTvQ90w3vNo95OMyCE= Subject key identifier: 6C:1B:EC:55:88:7A:2C:80:49:58:A6:2A:BA:F1:E7:AF:87:C6:6C:36 Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 Certificate issuer: /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft Manifest number: 0520 Signing time: Fri 18 Jul 2025 23:56:32 +0000 Manifest this update: Fri 18 Jul 2025 23:56:31 +0000 Manifest next update: Fri 25 Jul 2025 23:56:31 +0000 Files and hashes: 1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: h6AimVt0nbW/IzRb0AUxFKtbszxWGSg9UaHicMnbFes=) 2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: OdV4BW1AypHn4SWRXVNRSTTOuuILOVr+n5WSk2uAXqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Validity Not Before: Jul 18 23:56:31 2025 GMT Not After : Jul 25 23:56:31 2025 GMT Subject: CN=687adf2f-763f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:42:a5:30:72:fb:76:21:09:0a:9e:54:6e: a2:f7:6a:c5:1e:cf:e0:50:92:63:0c:69:dc:fd:b5: da:fe:73:a3:78:33:67:9f:3d:b6:79:40:8a:98:87: 06:43:04:84:51:d4:ea:68:75:2f:0f:09:5f:c4:92: c3:4e:1a:00:62:ec:98:b7:e6:01:db:0a:1a:43:80: 14:23:0f:42:95:91:cb:8d:01:86:b1:f2:71:74:5c: 68:63:16:6e:60:8f:4b:7b:e0:0a:5c:3e:80:a5:35: f2:01:92:9d:ea:d9:38:33:5f:21:51:b0:c8:f0:9f: 3e:fb:6a:14:81:4a:a8:64:52:9a:a1:21:38:9a:06: b4:81:a1:99:54:7e:7f:a7:76:49:0f:56:89:c8:c3: cd:f0:39:7a:7d:42:a7:0e:f7:97:a3:3a:2b:d4:c4: 15:82:9f:43:ca:7c:80:8a:2c:cc:05:63:95:9b:b4: 68:65:a6:41:1e:60:82:b6:ff:f0:20:d1:52:c8:43: 6e:59:33:37:4f:d6:7b:35:5c:44:64:3b:43:a6:e4: 6c:cb:1d:d3:27:6a:79:2c:a4:de:ff:01:e3:00:64: 88:fe:79:54:d3:0e:19:33:c6:8a:ff:d5:f0:02:46: 48:51:ac:a1:9a:98:2f:d6:53:7b:08:ac:6c:42:5c: 6a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1B:EC:55:88:7A:2C:80:49:58:A6:2A:BA:F1:E7:AF:87:C6:6C:36 X509v3 Authority Key Identifier: keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:28:b6:56:21:5d:82:56:10:6e:0d:45:1a:8d:64:f0:cf:95: 1d:5d:ab:4a:d6:e2:02:2a:71:94:16:2e:6a:f8:b0:37:fe:12: 75:57:c9:5a:ee:58:a2:34:31:2d:f4:81:12:8b:8c:00:49:0e: c3:cc:e0:b0:f6:4d:bc:29:30:7a:cd:19:e0:cd:fb:d6:06:bb: 4d:5c:b8:e3:e4:ee:44:e2:ce:c2:cb:5e:02:20:0a:a1:0a:c5: 24:e4:99:52:cc:f4:1c:a5:11:83:86:a0:95:c0:54:46:67:c8: 7a:26:5a:6e:91:e5:b2:81:60:86:f9:5f:3b:8b:fc:04:fd:93: 45:25:73:21:0c:bf:31:06:9b:49:53:eb:17:d4:f5:a9:95:06: a1:44:66:c0:a7:0c:48:e8:fa:ed:a1:b0:d3:b4:67:43:66:ca: e9:f7:71:f9:80:f6:a9:ef:be:cf:6a:60:fb:de:fa:29:98:a1: ec:84:2f:4d:97:c8:c5:27:4f:7f:7b:08:b7:1c:3d:da:4b:fc: 81:d7:68:fc:b5:7c:be:24:f3:92:72:94:61:18:44:f5:5f:b8: de:e1:d3:fe:01:39:a2:c3:72:de:c5:0a:01:be:1f:55:eb:ef: fe:ad:a9:d7:b5:df:7a:99:71:9b:20:aa:cf:06:b8:75:eb:c2: dc:b7:e9:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdBQzkxMTAvBgNVBAUTKDMyNkU1NUU3NEIwNkNEODNGOTk0Q0MxREE2NjU2NTQy MUNDOUUyMTkwHhcNMjUwNzE4MjM1NjMxWhcNMjUwNzI1MjM1NjMxWjAYMRYwFAYD VQQDEw02ODdhZGYyZi03NjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyRCpTBy+3YhCQqeVG6i92rFHs/gUJJjDGnc/bXa/nOjeDNnnz22eUCKmIcG QwSEUdTqaHUvDwlfxJLDThoAYuyYt+YB2woaQ4AUIw9ClZHLjQGGsfJxdFxoYxZu YI9Le+AKXD6ApTXyAZKd6tk4M18hUbDI8J8++2oUgUqoZFKaoSE4mga0gaGZVH5/ p3ZJD1aJyMPN8Dl6fUKnDveXozor1MQVgp9DynyAiizMBWOVm7RoZaZBHmCCtv/w INFSyENuWTM3T9Z7NVxEZDtDpuRsyx3TJ2p5LKTe/wHjAGSI/nlU0w4ZM8aK/9Xw AkZIUayhmpgv1lN7CKxsQlxqSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwb7FWI eiyASVimKrrx56+Hxmw2MB8GA1UdIwQYMBaAFDJuVedLBs2D+ZTMHaZlZUIcyeIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0FDOS8wRDlGNDBFNjBD NUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZUDVsTXdkcG1WbFFoeko0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tNVY1MHNHellQNWxNd2RwbVZsUWh6SjRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0FDOS8wRDlGNDBFNjBDNUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZ UDVsTXdkcG1WbFFoeko0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzKLZWIV2CVhBuDUUajWTwz5UdXatK1uICKnGUFi5q+LA3/hJ1V8la 7liiNDEt9IESi4wASQ7DzOCw9k28KTB6zRngzfvWBrtNXLjj5O5E4s7Cy14CIAqh CsUk5JlSzPQcpRGDhqCVwFRGZ8h6JlpukeWygWCG+V87i/wE/ZNFJXMhDL8xBptJ U+sX1PWplQahRGbApwxI6PrtobDTtGdDZsrp93H5gPap777PamD73vopmKHshC9N l8jFJ09/ewi3HD3aS/yB12j8tXy+JPOScpRhGET1X7je4dP+ATmiw3LexQoBvh9V 6+/+ranXtd96mXGbIKrPBrh168Lct+nA -----END CERTIFICATE-----Generated at Sun Jul 20 03:48:49 2025 by rpki-client