$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft File: S1wWI_uzPZaiQas12w8L3rXDnLA.mft (raw, json) Hash identifier: tgZ/28adGWfrCQSE+HB6+iz4CZrlQmnoX9Hm/9/Db1Q= Subject key identifier: C0:EA:13:F5:4F:C9:02:3D:C5:DE:54:05:06:8D:45:20:99:E7:6A:9D Authority key identifier: 4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0 Certificate issuer: /CN=A91BD614/serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft Manifest number: 01BF Signing time: Mon 07 Jul 2025 03:14:50 +0000 Manifest this update: Mon 07 Jul 2025 03:14:49 +0000 Manifest next update: Mon 14 Jul 2025 03:14:49 +0000 Files and hashes: 1: S1wWI_uzPZaiQas12w8L3rXDnLA.crl (hash: MXAGlWm1CSKhKYaSmSLVH8CJ1O011p5bNgahy9gUSOc=) 2: FBDB9F4A57F911F0B7986D41C4F9AE02.roa (hash: m14z6Uh4ysiLxJ7zkokYHBwiwVXoe+55LfJcOc7XaG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Jul 2025 03:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614, serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0 Validity Not Before: Jul 7 03:14:49 2025 GMT Not After : Jul 14 03:14:49 2025 GMT Subject: CN=686b3ba9-8187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:0e:bf:2a:fa:24:a9:ee:43:57:aa:ed:ac: b8:27:ba:b0:d5:39:fd:cb:0e:19:86:69:c7:88:45: 13:c6:b6:aa:e9:bc:7e:57:01:2a:2e:b5:48:4c:dc: d1:f9:09:1e:ad:00:c3:94:6c:8b:ac:9e:b9:3b:28: d4:ef:79:42:0e:1e:bc:b8:66:8a:76:0f:80:b8:a5: ea:c6:db:a2:8a:e2:17:eb:6a:c7:72:08:8c:b3:37: 63:1c:8e:ff:56:04:be:bf:0b:da:4f:d1:4f:59:6e: 23:6c:bf:48:7b:13:2a:34:05:0d:32:b1:a8:4f:02: 70:3a:69:51:31:fe:bd:f7:12:29:6a:e8:b8:ad:a2: 89:9b:e9:12:23:04:8f:66:4b:8b:d9:39:44:50:4d: de:03:74:e7:8e:c0:d7:b2:54:70:69:ee:a0:eb:05: a6:22:32:2d:3e:2e:0e:b2:08:b7:db:b9:73:8f:72: c6:36:1e:0c:66:b2:2d:2c:bb:ce:c7:47:48:2e:2d: ac:24:b3:91:ed:bb:7e:fc:d3:67:49:e7:81:e3:49: 91:08:ea:c6:28:e3:a7:c7:a8:e2:37:0c:44:60:dc: 56:65:66:3f:12:95:e3:23:29:d8:ca:ff:46:d2:69: 54:1b:95:32:de:64:c2:fd:fc:27:c8:ad:97:e5:f0: a2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EA:13:F5:4F:C9:02:3D:C5:DE:54:05:06:8D:45:20:99:E7:6A:9D X509v3 Authority Key Identifier: keyid:4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c1:5a:38:e6:31:39:d4:b5:1e:4e:67:e9:a3:3b:ff:0b:23: af:bc:b9:3a:bb:a7:1e:8f:78:c3:96:07:1f:83:4c:cd:da:6d: ea:7c:33:6c:14:5f:52:cc:69:99:c0:03:92:79:17:8e:ed:6c: c8:de:2c:13:1f:17:fa:09:df:25:33:a1:fb:48:ec:e9:c6:f9: ba:f3:af:92:84:25:87:76:86:01:be:0c:a8:19:25:6e:ba:aa: 74:ce:e6:b1:42:e9:85:05:d7:51:83:71:aa:1d:fb:42:6e:f8: 15:23:b0:b6:59:19:2e:41:61:82:34:6a:0d:3d:52:45:8b:6a: 7f:d8:be:ab:3f:47:4a:f7:e6:86:d4:76:ab:a4:f1:f1:d8:ec: 60:75:2f:7c:9c:58:31:b8:1e:6a:3f:3c:96:6f:49:d5:6f:96: 98:93:1d:a3:9a:fa:7d:0e:23:3c:67:8c:be:d2:ef:f9:00:bc: c7:91:55:07:24:92:9b:99:2b:84:f2:2f:67:b8:0e:6e:d4:db: dd:ea:eb:80:fb:11:72:2d:7d:7e:c6:f3:23:27:d3:8d:29:a3: c3:05:4e:97:fb:f3:d2:8a:4f:78:7c:d0:61:f2:a2:1a:b6:28: 7f:42:e6:b7:c6:2c:8e:32:c7:40:a6:45:e2:57:0d:93:95:46: 78:f7:8c:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDYxNDExMC8GA1UEBRMoNEI1QzE2MjNGQkIzM0Q5NkEyNDFBQjM1REIwRjBCREVC NUMzOUNCMDAeFw0yNTA3MDcwMzE0NDlaFw0yNTA3MTQwMzE0NDlaMBgxFjAUBgNV BAMTDTY4NmIzYmE5LTgxODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxSg6/Kvokqe5DV6rtrLgnurDVOf3LDhmGaceIRRPGtqrpvH5XASoutUhM3NH5 CR6tAMOUbIusnrk7KNTveUIOHry4Zop2D4C4perG26KK4hfrasdyCIyzN2Mcjv9W BL6/C9pP0U9ZbiNsv0h7Eyo0BQ0ysahPAnA6aVEx/r33Eilq6Litoomb6RIjBI9m S4vZOURQTd4DdOeOwNeyVHBp7qDrBaYiMi0+Lg6yCLfbuXOPcsY2Hgxmsi0su87H R0guLawks5Htu37802dJ54HjSZEI6sYo46fHqOI3DERg3FZlZj8SleMjKdjK/0bS aVQblTLeZML9/CfIrZfl8KIdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwOoT9U/J Aj3F3lQFBo1FIJnnap0wHwYDVR0jBBgwFoAUS1wWI/uzPZaiQas12w8L3rXDnLAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJENjE0LzFERjA3NUUyQkVE QzExRUQ4RTBBREQ4MEM0RjlBRTAyL1Mxd1dJX3V6UFphaVFhczEydzhMM3JYRG5M QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzF3V0lfdXpQWmFpUWFzMTJ3OEwzclhEbkxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE NjE0LzFERjA3NUUyQkVEQzExRUQ4RTBBREQ4MEM0RjlBRTAyL1Mxd1dJX3V6UFph aVFhczEydzhMM3JYRG5MQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIfBWjjmMTnUtR5OZ+mjO/8LI6+8uTq7px6PeMOWBx+DTM3abep8M2wU X1LMaZnAA5J5F47tbMjeLBMfF/oJ3yUzoftI7OnG+brzr5KEJYd2hgG+DKgZJW66 qnTO5rFC6YUF11GDcaod+0Ju+BUjsLZZGS5BYYI0ag09UkWLan/Yvqs/R0r35obU dquk8fHY7GB1L3ycWDG4Hmo/PJZvSdVvlpiTHaOa+n0OIzxnjL7S7/kAvMeRVQck kpuZK4TyL2e4Dm7U293q64D7EXItfX7G8yMn040po8MFTpf789KKT3h80GHyohq2 KH9C5rfGLI4yx0CmReJXDZOVRnj3jCU= -----END CERTIFICATE-----Generated at Mon Jul 7 09:36:23 2025 by rpki-client