$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: fOaKRfq6dwu3eJ8Ekm/REFfwVVsMDbpU0uOxViZP/uU= Subject key identifier: F4:6B:71:0A:1A:5F:51:19:A7:87:98:7E:C8:60:F2:0E:70:84:74:86 Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: 7B Signing time: Mon 21 Jul 2025 06:59:54 +0000 Manifest this update: Mon 21 Jul 2025 06:59:54 +0000 Manifest next update: Mon 28 Jul 2025 06:59:54 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: VrVYLcU6l+w3wp/ian0dUOZtFxnaLN8BX+VQhYS1hpw=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Jul 21 06:59:54 2025 GMT Not After : Jul 28 06:59:54 2025 GMT Subject: CN=687de56a-d551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c7:fd:65:25:e1:22:ad:5a:2a:5f:d9:64:24: 92:dd:e8:1a:91:10:f4:aa:de:f3:5b:6d:fa:ac:89: ac:6e:84:30:da:58:a5:85:73:70:4d:a9:21:58:ea: 25:b8:f2:e9:8e:db:54:4e:3f:ea:1e:86:f9:ba:8c: 74:ad:81:42:65:33:da:59:8d:31:ca:db:0c:a3:5b: d2:32:37:b7:f9:63:1b:a7:98:2d:36:f4:e7:25:93: dc:2a:87:16:36:c8:b6:cc:58:67:0f:04:5e:98:14: 17:35:03:2f:f4:17:b2:37:af:36:1a:d3:eb:1d:e6: 01:65:21:b9:53:66:ed:ec:d2:de:c0:e8:58:4f:00: 1e:b0:4c:f9:66:4f:a1:3f:98:dd:5a:aa:11:9f:6a: 23:49:30:dd:1b:01:b6:d4:76:91:b3:75:89:9d:8f: 2f:92:a1:68:2a:bb:13:fa:0f:f4:e8:88:3f:db:97: d5:ae:25:80:4b:28:ed:1d:7c:a1:4e:46:82:00:99: 55:09:92:ca:64:3b:8d:5a:b5:2a:5c:a1:ed:26:6e: 53:f7:51:bd:59:f1:ea:5b:1b:da:9b:6c:8a:5d:c4: b1:6c:2b:3a:02:13:3b:0c:81:72:ba:96:12:46:d0: bd:39:28:79:5a:82:24:a4:48:48:b7:19:1d:01:bf: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6B:71:0A:1A:5F:51:19:A7:87:98:7E:C8:60:F2:0E:70:84:74:86 X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:eb:88:1c:4d:32:aa:39:32:27:64:07:f8:0c:2f:11:46:29: 23:32:bc:9c:2c:19:40:e7:79:f8:ff:d7:64:e4:23:fd:78:58: 24:30:4b:b1:a1:d5:87:94:3f:e7:8c:8e:89:1a:32:ce:6b:fc: eb:78:94:47:5e:30:b5:83:3a:16:38:1b:63:ec:ff:73:02:13: 5b:ea:b3:1a:39:58:25:d9:0b:21:4d:06:76:77:a8:cf:b7:a5: 27:13:43:8a:b6:1b:c5:96:b6:6e:8f:8c:8c:3b:95:1d:3f:db: a0:f6:5f:1c:9e:77:82:cc:56:a5:62:fa:b4:7e:77:e9:df:8f: e9:e0:05:58:77:57:f0:cf:ec:0f:9c:ca:e1:4b:82:7d:b9:21: 2f:7d:14:62:37:6a:7e:e1:61:97:18:65:ab:b0:dd:18:b0:bc: d7:62:b2:95:e2:98:32:0f:97:15:ef:e9:34:35:b6:35:ac:1d: 6c:06:99:c1:8e:36:bd:3e:45:a4:c6:5f:c8:4a:55:76:40:80: ae:0c:28:55:e9:0f:c1:2f:7f:28:15:e9:bb:de:73:06:3a:e4: fc:eb:e1:a1:f1:73:49:cb:59:c2:83:e7:b1:8e:70:14:e3:c4: b4:9c:2f:c5:68:10:15:74:69:47:da:a1:b2:48:3c:d5:ad:d7: 40:32:3c:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTRDNTg5Qjg5M0QyNzI4OUNGODQ2REYwNUFERkI1OTYw MzY0MjhGRDAeFw0yNTA3MjEwNjU5NTRaFw0yNTA3MjgwNjU5NTRaMBgxFjAUBgNV BAMTDTY4N2RlNTZhLWQ1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcx/1lJeEirVoqX9lkJJLd6BqREPSq3vNbbfqsiaxuhDDaWKWFc3BNqSFY6iW4 8umO21ROP+oehvm6jHStgUJlM9pZjTHK2wyjW9IyN7f5YxunmC029Oclk9wqhxY2 yLbMWGcPBF6YFBc1Ay/0F7I3rzYa0+sd5gFlIblTZu3s0t7A6FhPAB6wTPlmT6E/ mN1aqhGfaiNJMN0bAbbUdpGzdYmdjy+SoWgquxP6D/ToiD/bl9WuJYBLKO0dfKFO RoIAmVUJkspkO41atSpcoe0mblP3Ub1Z8epbG9qbbIpdxLFsKzoCEzsMgXK6lhJG 0L05KHlagiSkSEi3GR0BvxtpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9GtxChpf URmnh5h+yGDyDnCEdIYwHwYDVR0jBBgwFoAU5MWJuJPSconPhG3wWt+1lgNkKP0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0UxMkQxMDUyQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU1XSnVKUFNjb25QaEczd1d0LTFsZ05rS1AwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0UxMkQxMDUyQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29u UGhHM3dXdC0xbGdOa0tQMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAADriBxNMqo5MidkB/gMLxFGKSMyvJwsGUDnefj/12TkI/14WCQwS7Gh 1YeUP+eMjokaMs5r/Ot4lEdeMLWDOhY4G2Ps/3MCE1vqsxo5WCXZCyFNBnZ3qM+3 pScTQ4q2G8WWtm6PjIw7lR0/26D2Xxyed4LMVqVi+rR+d+nfj+ngBVh3V/DP7A+c yuFLgn25IS99FGI3an7hYZcYZauw3RiwvNdispXimDIPlxXv6TQ1tjWsHWwGmcGO Nr0+RaTGX8hKVXZAgK4MKFXpD8EvfygV6bvecwY65Pzr4aHxc0nLWcKD57GOcBTj xLScL8VoEBV0aUfaobJIPNWt10AyPOg= -----END CERTIFICATE-----Generated at Tue Jul 22 00:04:04 2025 by rpki-client