$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: pMTEf0RQXb0Ltck+o6uJDOtdMMI19xWHbdthk3WomlA= Subject key identifier: 67:2A:A9:79:57:DB:DA:AF:36:23:12:7F:32:8C:10:21:1D:BE:3B:D2 Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: AC Signing time: Sat 19 Jul 2025 06:24:41 +0000 Manifest this update: Sat 19 Jul 2025 06:24:40 +0000 Manifest next update: Sat 26 Jul 2025 06:24:40 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: OkBKy4T5jcLqgFR440yV0ALERsxxyEJ2Tvm1oCiQqW8=) 2: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: lsJzZcQXucRSGsDa9fqzcB68LdkVMfXeXekEmDJWeX0=) 3: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: W9AbIPs04msR2L8j2qpbp6FWBUlEN2nJFHSFxYkcZYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Jul 19 06:24:40 2025 GMT Not After : Jul 26 06:24:40 2025 GMT Subject: CN=687b3a29-d5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:6a:3b:31:05:a8:7b:37:74:80:cb:3a:20: 43:bb:d2:13:8a:29:c2:f3:ba:9c:35:78:15:4b:c2: 37:5b:d5:4b:35:ca:7e:0a:49:b5:d9:7d:0b:d9:67: 95:55:22:a6:e0:cd:ed:d9:68:c1:9a:a4:5c:55:ea: b3:9a:0c:2f:d9:d1:0f:ae:44:71:8d:e9:cd:a0:dd: 2b:ce:b3:20:77:af:99:23:63:c3:c2:40:ce:4b:fc: 60:8c:83:87:04:57:a5:ee:35:f1:34:33:87:cd:3c: 00:c6:a0:20:f1:45:4f:3f:a7:47:45:60:1d:4a:fc: 9c:73:94:7f:04:d1:94:7a:f7:4e:e2:81:00:5d:5b: be:c5:a6:75:b9:e8:c8:ec:74:a2:0e:41:d3:90:d8: dc:96:67:1f:78:f2:0c:e0:b8:68:9e:dd:80:e0:77: 99:4c:67:f4:f9:a3:d4:ca:10:0b:38:43:0c:8d:b0: f5:3e:58:99:b0:85:90:4f:ea:26:5e:6c:c9:01:25: f5:07:71:75:ca:4c:21:53:46:5c:5d:b4:16:29:a6: 8b:f1:f7:97:a4:2c:b5:c2:0a:ae:31:35:38:2f:eb: d6:8e:8d:64:af:15:71:e4:c2:e0:07:d1:2c:02:20: 85:d5:d8:26:3a:eb:ab:4d:a7:42:83:43:d9:0b:3f: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2A:A9:79:57:DB:DA:AF:36:23:12:7F:32:8C:10:21:1D:BE:3B:D2 X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:3a:d6:bf:d9:aa:fb:0a:60:b0:c6:1c:8e:68:ba:83:97:19: db:1d:dd:75:4d:d4:5e:aa:75:b6:9e:a1:df:6b:b2:1a:36:17: 85:77:9a:f6:0e:9a:de:1c:a5:a7:21:26:87:ed:cc:3b:4a:2a: 80:a0:3a:d9:06:2e:a9:0e:c5:12:51:fc:07:6c:6d:9c:e4:84: 96:ef:76:94:a9:ce:80:31:23:d5:ec:46:db:97:5f:b9:22:32: f5:08:59:32:b3:08:ac:da:89:1e:25:90:0b:85:30:c1:cd:cd: 6b:7d:96:75:0f:1b:eb:7a:63:24:dd:1d:b6:c0:4b:c2:e3:87: e1:ae:85:84:93:53:7d:1b:6c:42:f0:a1:8b:de:bb:20:86:ed: 36:33:03:4d:75:51:34:71:c7:93:92:13:94:71:9d:5d:e4:9c: cf:0a:3e:64:0c:86:6d:bb:49:c3:43:46:af:2b:f7:51:6f:53: e4:32:cd:13:6e:b7:ac:9c:8d:e5:40:ac:04:e7:c7:cc:8a:d8: cd:70:2a:fd:1d:49:0a:9e:0c:bc:84:7d:ea:c5:f7:9b:53:c1: 1b:1f:bf:2f:07:21:d8:83:74:e0:2b:78:8f:7b:48:41:11:d1: b6:59:9d:7e:02:c8:8d:63:0c:4a:c0:43:e1:a5:5e:45:61:b7: 72:71:28:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDcyNTc5MjNENjc3MEM1Njc4OTE5QjA3Q0JDRkE4QUY4 QjlDNTA1M0YwHhcNMjUwNzE5MDYyNDQwWhcNMjUwNzI2MDYyNDQwWjAYMRYwFAYD VQQDEw02ODdiM2EyOS1kNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYlqOzEFqHs3dIDLOiBDu9ITiinC87qcNXgVS8I3W9VLNcp+Ckm12X0L2WeV VSKm4M3t2WjBmqRcVeqzmgwv2dEPrkRxjenNoN0rzrMgd6+ZI2PDwkDOS/xgjIOH BFel7jXxNDOHzTwAxqAg8UVPP6dHRWAdSvycc5R/BNGUevdO4oEAXVu+xaZ1uejI 7HSiDkHTkNjclmcfePIM4Lhont2A4HeZTGf0+aPUyhALOEMMjbD1PliZsIWQT+om XmzJASX1B3F1ykwhU0ZcXbQWKaaL8feXpCy1wgquMTU4L+vWjo1krxVx5MLgB9Es AiCF1dgmOuurTadCg0PZCz/HlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcqqXlX 29qvNiMSfzKMECEdvjvSMB8GA1UdIwQYMBaAFHJXkj1ncMVniRmwfLz6ivi5xQU/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9FOUEwOTJCODY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hXZUpHYkI4dlBxSy1MbkZC VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9FOUEwOTJCODY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hX ZUpHYkI4dlBxSy1MbkZCVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Ota/2ar7CmCwxhyOaLqDlxnbHd11TdReqnW2nqHfa7IaNheFd5r2 DpreHKWnISaH7cw7SiqAoDrZBi6pDsUSUfwHbG2c5ISW73aUqc6AMSPV7Ebbl1+5 IjL1CFkyswis2okeJZALhTDBzc1rfZZ1DxvremMk3R22wEvC44fhroWEk1N9G2xC 8KGL3rsghu02MwNNdVE0cceTkhOUcZ1d5JzPCj5kDIZtu0nDQ0avK/dRb1PkMs0T bresnI3lQKwE58fMitjNcCr9HUkKngy8hH3qxfebU8EbH78vByHYg3TgK3iPe0hB EdG2WZ1+AsiNYwxKwEPhpV5FYbdycSij -----END CERTIFICATE-----Generated at Sun Jul 20 18:38:35 2025 by rpki-client