$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json) Hash identifier: b4rRCRr9gN5PFUwuuck2G726lfbNDp8v8jzupLs1OEk= Subject key identifier: 13:D7:E1:96:BC:3B:BE:4F:04:5A:4C:2B:1B:6A:E8:99:AA:33:E2:99 Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Certificate serial: 04A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft Manifest number: 049C Signing time: Fri 18 Jul 2025 21:03:15 +0000 Manifest this update: Fri 18 Jul 2025 21:03:14 +0000 Manifest next update: Fri 25 Jul 2025 21:03:14 +0000 Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: drzST8NUA4RexDldoW5JQrh7QGNiA0yS0eSkv/1OB5U=) 2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: Ao2xYTosLdprmQ1iWk+n5IxTYfK7aKOeNtfro7ROk4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Validity Not Before: Jul 18 21:03:14 2025 GMT Not After : Jul 25 21:03:14 2025 GMT Subject: CN=687ab692-6f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:2b:e2:8c:db:f2:9d:2c:8f:c3:56:8c:bf: e7:16:cb:30:8e:7b:14:92:b7:aa:72:f0:14:2d:26: ff:d1:2d:bb:95:40:39:30:bc:1f:a8:86:86:b3:3e: e1:c8:05:64:d7:19:62:a1:ec:b9:4c:a8:74:d6:16: 3b:e5:fb:bc:c9:03:1e:62:2d:0a:c3:e8:b2:f0:d3: fb:ee:5d:15:83:25:e1:e6:69:8a:79:d5:fd:c6:64: 7c:c5:33:de:d4:cc:e6:56:2b:63:f9:25:06:ab:a8: 63:b2:12:22:f3:9a:8a:58:fa:13:e9:ec:31:06:54: 9e:a5:68:13:99:ca:83:cc:3d:38:7c:cc:b4:e9:63: 51:82:a2:4e:af:15:34:5e:ba:76:e4:7a:25:09:7e: e3:40:fc:6c:e6:1b:eb:d5:56:27:d3:8a:a6:6b:21: 3a:be:ec:17:ec:fc:d2:f9:e4:8d:cf:cb:5d:45:5b: 29:f7:d8:8f:13:49:01:d0:86:b9:33:5f:f9:6d:04: 73:61:6c:96:ff:0a:bd:fb:bd:3f:ae:06:c5:ae:fd: a2:b9:01:21:07:34:a1:eb:1c:75:0d:af:fd:73:4f: bf:35:1d:1c:f8:34:ce:9b:40:5e:b3:95:46:9b:c2: 35:d4:76:14:65:c9:e7:a3:1b:15:f9:7c:96:99:9f: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D7:E1:96:BC:3B:BE:4F:04:5A:4C:2B:1B:6A:E8:99:AA:33:E2:99 X509v3 Authority Key Identifier: keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:df:2e:0b:d0:00:08:13:bc:2b:0f:67:c6:6f:7e:1f:af:3d: 5e:37:38:f3:92:b6:90:d5:de:d9:74:0b:8e:d1:6e:a8:40:10: d3:62:d2:80:d0:41:83:b9:03:6d:42:40:a6:76:e1:0b:f6:27: 12:22:71:8b:17:69:7b:04:97:35:34:61:4e:b7:cf:3c:70:6e: 2d:d8:7a:cc:bc:3b:a4:ad:d5:e0:dd:b5:0c:c9:23:ef:74:fb: 9a:b9:cb:95:2c:98:94:06:58:ab:24:3e:85:c9:50:19:8e:90: 00:12:98:ee:2d:c3:ea:9e:f9:9b:ba:34:56:3b:79:41:ec:8f: b0:27:6f:5b:c3:8b:b8:f8:67:e3:bd:87:47:86:fb:13:15:0d: d6:67:8c:76:72:79:2a:a7:39:27:cd:76:e5:a1:46:aa:e6:e7: a8:9e:4a:8a:80:c9:33:f9:b3:60:3c:b6:42:c4:46:fa:9c:4f: b9:7d:dd:74:ca:43:89:99:37:10:41:3c:ef:62:61:15:2e:d6: 8e:b0:58:62:f4:95:ae:ec:b8:c2:bb:67:62:cd:87:a8:98:64: f8:a2:eb:9e:7f:23:c3:de:15:40:cc:66:99:e5:ad:af:0b:82: d1:27:d6:10:d6:1f:3c:06:4f:07:58:49:1e:0a:86:7f:21:fa: d3:69:c9:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3 RkVEQzAzOUEwHhcNMjUwNzE4MjEwMzE0WhcNMjUwNzI1MjEwMzE0WjAYMRYwFAYD VQQDEw02ODdhYjY5Mi02ZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQIr4ozb8p0sj8NWjL/nFsswjnsUkreqcvAULSb/0S27lUA5MLwfqIaGsz7h yAVk1xlioey5TKh01hY75fu8yQMeYi0Kw+iy8NP77l0VgyXh5mmKedX9xmR8xTPe 1MzmVitj+SUGq6hjshIi85qKWPoT6ewxBlSepWgTmcqDzD04fMy06WNRgqJOrxU0 Xrp25HolCX7jQPxs5hvr1VYn04qmayE6vuwX7PzS+eSNz8tdRVsp99iPE0kB0Ia5 M1/5bQRzYWyW/wq9+70/rgbFrv2iuQEhBzSh6xx1Da/9c0+/NR0c+DTOm0Bes5VG m8I11HYUZcnnoxsV+XyWmZ/CEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPX4Za8 O75PBFpMKxtq6JmqM+KZMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3 RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA33y4L0AAIE7wrD2fGb34frz1eNzjzkraQ1d7ZdAuO0W6oQBDTYtKA 0EGDuQNtQkCmduEL9icSInGLF2l7BJc1NGFOt888cG4t2HrMvDukrdXg3bUMySPv dPuaucuVLJiUBlirJD6FyVAZjpAAEpjuLcPqnvmbujRWO3lB7I+wJ29bw4u4+Gfj vYdHhvsTFQ3WZ4x2cnkqpzknzXbloUaq5ueonkqKgMkz+bNgPLZCxEb6nE+5fd10 ykOJmTcQQTzvYmEVLtaOsFhi9JWu7LjCu2dizYeomGT4ouuefyPD3hVAzGaZ5a2v C4LRJ9YQ1h88Bk8HWEkeCoZ/IfrTacn3 -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:36 2025 by rpki-client