$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json) Hash identifier: KIHo3CMsIZn8nr4ZPh9UrI2zkTtnbXGiWV7WmPDF6So= Subject key identifier: FB:D2:DC:5F:02:90:0B:97:A7:13:52:07:D7:7E:7D:FE:6F:B3:9F:BB Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft Manifest number: 01DA Signing time: Wed 23 Jul 2025 03:01:32 +0000 Manifest this update: Wed 23 Jul 2025 03:01:31 +0000 Manifest next update: Wed 30 Jul 2025 03:01:31 +0000 Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: fc/gYNP+NOn0HwtKTDNPGsOUsvTDiXgqRC30etaJv8I=) 2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ksp6qBpZ5kB0EysEaPobcR9QCXbiquNMVXrarPKPN4A=) 3: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: xgTk5QLU2Vm82iRKTqkbO5V1pNHv+/+0qFa5a4D2Fm4=) 4: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: 5cknTz/azpX9sHHI7VxRFMrA+eqmREBfLXzZWKlWnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Validity Not Before: Jul 23 03:01:31 2025 GMT Not After : Jul 30 03:01:31 2025 GMT Subject: CN=6880508b-f103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:ad:0c:9c:b8:59:62:0a:1a:c7:63:b2:83: 8d:34:f5:8e:2a:e1:4d:a4:74:f2:12:28:3e:fb:c8: 4d:ac:c5:c6:dc:5a:9e:99:65:47:60:46:5d:0a:55: 79:1f:95:c3:aa:02:10:a1:c7:4d:ee:e5:46:7b:ba: 6d:90:46:94:09:9f:2d:1b:fa:47:f4:ff:0a:c4:6b: 76:d7:d2:1a:76:6b:fb:88:10:8d:9e:8c:33:b0:10: 7c:b6:c4:48:78:52:d1:0c:36:a1:ed:ad:e0:1b:5f: 41:e7:27:ac:43:83:b8:62:ba:e6:fa:4d:ed:61:13: 92:2a:90:f8:59:7b:e2:ab:60:28:a7:52:d8:6f:4a: 0d:6e:eb:1b:67:2c:c9:95:f7:f8:76:6d:3e:1b:20: b5:eb:8f:2d:6d:50:0e:1a:8b:d5:60:04:d4:64:2a: a7:72:37:60:4f:78:cc:f4:e9:16:3f:e6:63:ca:97: 31:38:4c:f1:5d:83:e5:97:4a:0c:80:7d:d1:7c:87: d2:93:3e:20:47:44:6a:7d:a3:93:d9:96:ad:c3:c9: f4:9d:59:89:53:a4:67:1c:92:b3:57:20:39:a3:88: 2c:95:7b:ee:7e:2f:c0:3b:3a:57:b6:7f:86:87:f5: 7c:ca:d3:d8:69:a5:1f:4f:cf:7f:d6:ef:e9:ce:4b: f7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D2:DC:5F:02:90:0B:97:A7:13:52:07:D7:7E:7D:FE:6F:B3:9F:BB X509v3 Authority Key Identifier: keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:80:6d:e1:9f:81:bb:54:48:55:fe:5a:74:49:0e:81:10:39: f0:ba:7d:38:b1:a6:7c:b7:50:40:7d:d0:4d:30:21:9f:f3:59: b4:0b:77:b4:26:ab:7d:40:da:dc:ae:25:63:e5:b2:d8:0e:e3: 69:31:07:ac:31:72:75:74:54:8d:dc:75:17:4b:f6:ee:6c:7e: 02:ae:d1:9c:4b:1a:23:2e:c4:1c:6a:70:21:7a:6b:3f:76:95: 42:14:6a:22:83:1b:e8:6f:1f:af:a6:7f:01:9c:85:b2:2a:e5: 96:56:36:54:3c:3b:1a:34:df:cb:76:19:3d:c6:7c:70:63:fa: a2:59:de:56:db:cb:ee:06:fe:0e:4b:a8:87:eb:c4:5a:81:32: fe:4c:e8:d0:41:63:c1:11:31:48:d3:34:6a:6f:73:5a:8c:f8: 6d:62:f6:d4:cf:be:b2:52:85:f1:32:96:8c:28:32:51:d3:52: 3b:de:1f:d5:41:b4:7d:8f:31:52:92:27:f9:fc:f9:0a:cd:49: e2:64:95:68:3d:29:82:6e:58:1f:9e:65:00:b4:ae:0a:c6:71: db:c2:a8:4c:48:25:64:33:f8:11:5d:77:69:20:ef:1b:cd:47: 64:f2:9d:19:68:42:c5:0c:48:be:d2:aa:9a:7c:1d:0d:d7:9e: b4:5d:b2:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE MkFBRUU0QjkwHhcNMjUwNzIzMDMwMTMxWhcNMjUwNzMwMDMwMTMxWjAYMRYwFAYD VQQDEw02ODgwNTA4Yi1mMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCWtDJy4WWIKGsdjsoONNPWOKuFNpHTyEig++8hNrMXG3FqemWVHYEZdClV5 H5XDqgIQocdN7uVGe7ptkEaUCZ8tG/pH9P8KxGt219Iadmv7iBCNnowzsBB8tsRI eFLRDDah7a3gG19B5yesQ4O4Yrrm+k3tYROSKpD4WXviq2Aop1LYb0oNbusbZyzJ lff4dm0+GyC1648tbVAOGovVYATUZCqncjdgT3jM9OkWP+ZjypcxOEzxXYPll0oM gH3RfIfSkz4gR0RqfaOT2Zatw8n0nVmJU6RnHJKzVyA5o4gslXvufi/AOzpXtn+G h/V8ytPYaaUfT89/1u/pzkv3IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvS3F8C kAuXpxNSB9d+ff5vs5+7MB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2 MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1 TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD cDZIazJrc3NCdnJTcXU1TGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZgG3hn4G7VEhV/lp0SQ6BEDnwun04saZ8t1BAfdBNMCGf81m0C3e0 Jqt9QNrcriVj5bLYDuNpMQesMXJ1dFSN3HUXS/bubH4CrtGcSxojLsQcanAhems/ dpVCFGoigxvobx+vpn8BnIWyKuWWVjZUPDsaNN/Ldhk9xnxwY/qiWd5W28vuBv4O S6iH68RagTL+TOjQQWPBETFI0zRqb3NajPhtYvbUz76yUoXxMpaMKDJR01I73h/V QbR9jzFSkif5/PkKzUniZJVoPSmCblgfnmUAtK4KxnHbwqhMSCVkM/gRXXdpIO8b zUdk8p0ZaELFDEi+0qqafB0N1560XbJk -----END CERTIFICATE-----Generated at Thu Jul 24 12:12:54 2025 by rpki-client