$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft File: 53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json) Hash identifier: V7VfN7M8fwZU414D2yRqZ22fvjKy1iUofooXHFojeIA= Subject key identifier: 37:33:EB:13:7A:04:44:E4:B5:84:FE:64:7C:01:07:DF:97:33:D2:6B Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C Certificate issuer: /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft Manifest number: 73 Signing time: Sat 19 Jul 2025 07:07:43 +0000 Manifest this update: Sat 19 Jul 2025 07:07:43 +0000 Manifest next update: Sat 26 Jul 2025 07:07:43 +0000 Files and hashes: 1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: H97nFSRDRus0lWd6Te2Cz/Mu19KCUfjQMo/IO9yPeCY=) 2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: PmWdGEFbgxUM5JARv+3955i+yLCgnSi8KLnrb7A4Hd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914530B, serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C Validity Not Before: Jul 19 07:07:43 2025 GMT Not After : Jul 26 07:07:43 2025 GMT Subject: CN=687b443f-521d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7a:a6:50:7c:f9:8a:1e:a3:72:b4:47:6f:36: 84:e5:23:8a:f5:81:7f:eb:28:54:55:41:a0:33:42: 11:6f:b0:38:6e:24:b9:24:6d:f4:36:bb:ff:c0:85: 58:8b:8f:a0:47:3f:aa:d5:c3:8a:b5:29:2f:cc:e9: ef:ca:b0:ab:e1:77:3e:25:a4:ca:fe:9f:13:0d:f2: 5d:1d:8f:d4:22:bf:75:5f:4c:13:a1:c6:ec:d2:d4: 50:2b:10:c1:8d:6e:fd:c3:4e:b1:05:ca:8f:8f:38: f5:b3:64:8b:fe:f5:e0:08:4b:90:58:4b:93:f9:ae: 29:05:c0:e3:22:b9:8e:ee:3c:30:6c:5b:07:fa:38: 51:b0:c1:e1:b0:b9:e9:90:62:51:ee:30:a1:64:67: c5:37:5d:48:67:41:1f:36:1c:46:7e:ba:07:05:51: c5:18:2f:41:e4:c8:53:5d:64:3c:dd:ee:23:88:09: 14:6e:7a:3f:c7:7c:3a:62:4d:b7:08:10:67:5f:54: 30:fc:f3:ba:2f:e7:fa:5b:28:6a:10:a4:35:4b:a5: 8b:f9:c7:a4:1e:4a:f5:d8:a9:cf:d7:b9:37:c7:57: 54:94:bc:66:e3:0d:c0:89:f5:ab:65:8e:c8:79:c4: d8:3d:cb:eb:c3:23:be:dd:37:42:9f:5e:ed:f8:01: 23:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:33:EB:13:7A:04:44:E4:B5:84:FE:64:7C:01:07:DF:97:33:D2:6B X509v3 Authority Key Identifier: keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:94:df:2d:d3:cf:33:5d:2a:0d:e9:4e:87:9a:fe:b8:d6:70: c3:ca:83:0d:73:d1:ee:87:35:f7:00:0b:7a:b9:f4:d1:be:af: a8:9b:ea:00:78:d0:e0:75:74:b3:a3:9b:01:40:e1:2b:23:04: 90:b9:f9:ea:54:db:6d:73:20:69:f1:82:7b:44:1b:4f:8d:45: 9a:cb:97:04:aa:e5:b6:bf:eb:04:17:da:69:a5:3b:61:dc:b1: cd:2f:b9:ca:7d:85:18:07:72:34:3c:1c:20:86:85:67:4d:5c: 64:1f:32:eb:df:a9:b3:bf:47:e8:1d:a5:2f:8f:ac:b0:f5:18: d8:98:2c:b3:c6:e0:8d:53:2e:fd:f9:eb:23:de:ab:0e:48:cc: 56:52:8d:04:b1:1c:5e:ca:9f:e5:6a:2d:fa:f7:ca:51:7b:45: 19:16:7b:34:1e:f8:d2:5d:97:45:9c:ef:ae:4d:84:75:6e:5c: c4:69:e3:4a:07:d8:b0:02:bb:9b:16:28:9b:2c:67:ca:b2:02: 0c:26:2b:ce:b2:51:8e:e3:a5:c0:df:58:82:0d:3c:f1:e6:c0: bc:ac:0d:22:34:04:dd:8a:72:ed:44:75:0f:89:68:6e:4d:29: c8:da:05:a7:40:6e:83:82:0e:d5:63:f5:34:d2:b7:f0:f7:e0: 7d:e3:4a:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTMwQjExMC8GA1UEBRMoRTc3QTc5ODQxOUIzRjM4QzhCMDI1OTBBMjk0QzdCMzVG N0MzNDQ0QzAeFw0yNTA3MTkwNzA3NDNaFw0yNTA3MjYwNzA3NDNaMBgxFjAUBgNV BAMTDTY4N2I0NDNmLTUyMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDReqZQfPmKHqNytEdvNoTlI4r1gX/rKFRVQaAzQhFvsDhuJLkkbfQ2u//AhViL j6BHP6rVw4q1KS/M6e/KsKvhdz4lpMr+nxMN8l0dj9Qiv3VfTBOhxuzS1FArEMGN bv3DTrEFyo+POPWzZIv+9eAIS5BYS5P5rikFwOMiuY7uPDBsWwf6OFGwweGwuemQ YlHuMKFkZ8U3XUhnQR82HEZ+ugcFUcUYL0HkyFNdZDzd7iOICRRuej/HfDpiTbcI EGdfVDD887ov5/pbKGoQpDVLpYv5x6QeSvXYqc/XuTfHV1SUvGbjDcCJ9atljsh5 xNg9y+vDI77dN0KfXu34ASO3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNzPrE3oE ROS1hP5kfAEH35cz0mswHwYDVR0jBBgwFoAU53p5hBmz84yLAlkKKUx7NffDREww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1MzBCLzlFNzVEREI2Qjc5 QTExRUZBMEQ2OTc1REM0RjlBRTAyLzUzcDVoQm16ODR5TEFsa0tLVXg3TmZmRFJF dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNTNwNWhCbXo4NHlMQWxrS0tVeDdOZmZEUkV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 MzBCLzlFNzVEREI2Qjc5QTExRUZBMEQ2OTc1REM0RjlBRTAyLzUzcDVoQm16ODR5 TEFsa0tLVXg3TmZmRFJFdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALiU3y3TzzNdKg3pToea/rjWcMPKgw1z0e6HNfcAC3q59NG+r6ib6gB4 0OB1dLOjmwFA4SsjBJC5+epU221zIGnxgntEG0+NRZrLlwSq5ba/6wQX2mmlO2Hc sc0vucp9hRgHcjQ8HCCGhWdNXGQfMuvfqbO/R+gdpS+PrLD1GNiYLLPG4I1TLv35 6yPeqw5IzFZSjQSxHF7Kn+VqLfr3ylF7RRkWezQe+NJdl0Wc765NhHVuXMRp40oH 2LACu5sWKJssZ8qyAgwmK86yUY7jpcDfWIINPPHmwLysDSI0BN2Kcu1EdQ+JaG5N KcjaBadAboOCDtVj9TTSt/D34H3jSjA= -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:48 2025 by rpki-client