$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: 85h996S7PpdG5HTwTy48stakCwQxNCEzZ107GKf21nc= Subject key identifier: 03:29:17:62:F9:BD:C9:4E:0C:FC:1E:5D:0F:89:BF:C7:46:B4:35:32 Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: 03 Signing time: Sat 19 Jul 2025 08:31:32 +0000 Manifest this update: Sat 19 Jul 2025 08:31:32 +0000 Manifest next update: Sat 26 Jul 2025 08:31:32 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: 8DK1M1R4OGYYdvFPunxKjEIm99V1tF3NK+zrOU/uAmY=) 2: D24370A6638211F087594469C4F9AE02.roa (hash: BC9hUQT1LjynnO8EIFYzWbutVI812gfFy3AK+b9ATvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Jul 19 08:31:32 2025 GMT Not After : Jul 26 08:31:32 2025 GMT Subject: CN=687b57e4-73dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:28:eb:5a:a2:bc:0f:6f:6f:bc:e8:e0:8e: 5d:77:a8:3e:5d:02:e7:3e:60:b2:19:b4:bf:56:ea: cc:27:24:44:aa:98:c5:f9:cc:27:b4:d6:eb:6e:3e: ed:6c:fe:d3:dc:20:67:13:13:a0:88:26:a6:9e:05: dc:de:2f:2f:f1:e5:73:83:0e:d8:4d:c4:2e:ea:83: 68:fe:4a:29:b9:91:f4:de:94:13:0e:0b:ef:4e:50: af:27:bc:e3:0c:a7:98:2e:4b:23:6d:c8:63:b8:14: 5a:fa:9f:ee:7a:fe:0e:af:38:e3:18:91:84:3c:14: 8f:c8:cb:36:9a:eb:e4:52:ba:21:95:8c:82:8c:dd: 2e:84:a8:92:82:4e:27:86:de:2d:d7:1a:ec:9e:4f: c5:9c:bf:bb:2a:7c:0c:43:ac:57:ac:00:c1:4e:75: b2:e2:c0:21:97:35:57:6b:d5:b6:c0:5d:a8:73:76: 9d:f9:b5:4f:73:f4:5e:c5:a1:9d:89:91:ae:ac:84: 7b:c6:dd:6a:55:72:f2:f3:ea:08:7a:33:05:d5:a3: 7c:54:47:de:1a:46:44:58:45:be:51:ba:c3:ad:80: 62:e1:c7:a8:bc:57:ed:8b:47:28:b1:eb:77:27:69: 73:68:48:72:a4:78:a2:6b:6f:e0:b8:91:b5:07:b9: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:29:17:62:F9:BD:C9:4E:0C:FC:1E:5D:0F:89:BF:C7:46:B4:35:32 X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:3a:d5:72:d1:2a:e4:47:cd:dd:a8:f4:90:91:d4:34:c9:85: 20:7a:72:75:90:80:cb:67:d2:df:30:12:69:51:1b:96:19:41: e8:46:a4:e5:71:fb:b9:31:4f:f0:ac:4e:3e:3d:91:4a:2f:79: bb:19:4b:67:31:c2:07:de:5c:27:4b:52:3e:26:86:90:e5:01: 0e:39:3f:45:8f:21:63:87:97:4d:e5:74:d7:26:95:72:23:c5: 60:e6:f6:00:3f:97:d2:47:86:43:0a:c6:2a:f7:0e:48:79:dc: c4:32:30:9a:e4:81:78:86:ac:7d:1c:82:d4:7a:34:ec:f7:c0: ef:b4:36:7b:25:db:b3:4c:5a:e2:1e:3b:ac:0a:67:6a:9e:5a: aa:f7:82:12:04:9c:79:e3:df:61:01:5d:a0:4d:d9:47:85:31: fc:ab:a4:1a:49:6d:66:95:70:4b:f0:ec:90:c1:e5:4b:b3:82: 2b:cb:04:45:61:98:4d:04:66:1d:d2:47:05:de:0b:6e:ff:99: d1:26:87:0d:0a:c1:6f:14:16:b2:57:b7:87:fd:0e:c1:17:1a: 6e:0f:87:a4:b6:76:c8:53:06:13:cb:c7:e2:ba:51:b0:db:11: 23:87:4d:8a:85:47:68:9b:61:3a:27:63:2f:39:3b:eb:e8:85: d9:2d:e8:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoOUI5RDM5NzI1QjI3RDQyMDI4MTM4NTE2MzQ5MkZGNzVG MTUxMTNEQTAeFw0yNTA3MTkwODMxMzJaFw0yNTA3MjYwODMxMzJaMBgxFjAUBgNV BAMTDTY4N2I1N2U0LTczZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClOijrWqK8D29vvOjgjl13qD5dAuc+YLIZtL9W6swnJESqmMX5zCe01utuPu1s /tPcIGcTE6CIJqaeBdzeLy/x5XODDthNxC7qg2j+Sim5kfTelBMOC+9OUK8nvOMM p5guSyNtyGO4FFr6n+56/g6vOOMYkYQ8FI/Iyzaa6+RSuiGVjIKM3S6EqJKCTieG 3i3XGuyeT8Wcv7sqfAxDrFesAMFOdbLiwCGXNVdr1bbAXahzdp35tU9z9F7FoZ2J ka6shHvG3WpVcvLz6gh6MwXVo3xUR94aRkRYRb5RusOtgGLhx6i8V+2LRyix63cn aXNoSHKkeKJrb+C4kbUHuY3FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAykXYvm9 yU4M/B5dD4m/x0a0NTIwHwYDVR0jBBgwFoAUm505clsn1CAoE4UWNJL/dfFRE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzYyMjZDOTM2NjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbTUwNWNsc24xQ0FvRTRVV05KTF9kZkZSRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzYyMjZDOTM2NjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNB b0U0VVdOSkxfZGZGUkU5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADQ61XLRKuRHzd2o9JCR1DTJhSB6cnWQgMtn0t8wEmlRG5YZQehGpOVx +7kxT/CsTj49kUovebsZS2cxwgfeXCdLUj4mhpDlAQ45P0WPIWOHl03ldNcmlXIj xWDm9gA/l9JHhkMKxir3Dkh53MQyMJrkgXiGrH0cgtR6NOz3wO+0Nnsl27NMWuIe O6wKZ2qeWqr3ghIEnHnj32EBXaBN2UeFMfyrpBpJbWaVcEvw7JDB5UuzgivLBEVh mE0EZh3SRwXeC27/mdEmhw0KwW8UFrJXt4f9DsEXGm4Ph6S2dshTBhPLx+K6UbDb ESOHTYqFR2ibYTonYy85O+vohdkt6J8= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:55 2025 by rpki-client