$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json) Hash identifier: HKgFU4P5zy+hd/gQn5I2Z2RBRMHnsY3/XQueXHyqqGU= Subject key identifier: C2:CD:37:B0:42:EB:EF:A3:6F:E7:3A:1E:21:E9:7C:76:15:C5:D6:CD Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft Manifest number: 0C5C Signing time: Fri 18 Jul 2025 18:33:29 +0000 Manifest this update: Fri 18 Jul 2025 18:33:29 +0000 Manifest next update: Fri 25 Jul 2025 18:33:29 +0000 Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: 1kxqcJv3fcrD2vV9wRYgLuor7si/xIYchO8DbhSi73w=) 2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: kzRNRyDp5yy+6xuR6mT9mG0c89/n8LtjaHr1+0MkgX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Validity Not Before: Jul 18 18:33:29 2025 GMT Not After : Jul 25 18:33:29 2025 GMT Subject: CN=687a9379-1d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:01:45:ad:f1:d4:48:fa:b1:f4:34:fd:5e: d1:d2:6a:d1:e0:82:67:9f:d2:1b:94:03:93:c1:53: dd:87:84:f2:ff:94:30:a0:b0:df:e2:47:cd:02:7d: 31:5e:e8:36:5a:93:a5:88:de:d4:ad:cc:67:7f:fd: f6:62:df:53:83:c7:3d:50:7f:43:d5:97:7e:8c:c5: 12:83:c4:7b:2e:ce:91:da:c7:6b:2c:eb:c9:2d:92: 8e:7c:cb:41:83:e4:bd:e0:ec:7e:8c:b8:3b:e6:0f: a6:d9:1c:f6:54:b1:3d:dc:d8:e0:e6:4b:a0:86:b2: 2a:ec:cb:13:55:e0:ed:90:2f:02:fb:9d:aa:1c:5c: bb:f9:9b:6d:5c:6b:f4:89:88:6f:3f:0d:bd:42:0d: 5e:9f:0d:70:c2:95:20:8a:a4:70:11:7f:db:74:58: 06:a2:c7:f3:aa:86:8e:7a:ad:df:bd:0b:4b:ab:29: 4a:ed:00:6e:cb:5d:c7:19:a8:5a:25:da:a7:e8:e5: ff:de:78:d5:7d:37:b4:2a:f2:fa:5f:b6:20:9d:f7: 09:b0:98:1e:4c:65:a4:aa:eb:be:8f:a3:d0:bd:56: 16:97:db:70:9d:19:58:93:e9:f2:ac:49:63:b5:66: 00:cb:88:1c:0e:b7:d3:eb:4d:3b:90:98:28:13:1c: 85:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CD:37:B0:42:EB:EF:A3:6F:E7:3A:1E:21:E9:7C:76:15:C5:D6:CD X509v3 Authority Key Identifier: keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:59:23:b6:63:86:aa:07:3a:7b:82:23:90:a5:9e:60:d4:28: ed:d5:ef:ca:d8:78:4c:bd:f5:e9:8a:e5:fa:89:b8:a6:97:7d: 2f:0e:7a:18:8b:e9:1e:b5:30:1c:eb:96:68:f8:d0:da:5b:61: db:ee:02:87:a5:a5:fa:20:19:24:99:9e:53:0a:44:db:01:c6: bc:88:f9:61:a8:bc:08:d4:a9:29:1e:c2:19:ed:81:dc:83:8e: 79:44:63:c7:79:46:29:2b:dc:1e:42:4f:92:16:ff:35:37:8b: ac:21:ba:66:a2:29:45:b3:56:85:95:94:5b:ed:d6:72:5a:86: 5a:bf:f5:fa:81:bd:ab:6d:3c:8b:22:2f:f6:0b:7f:61:12:30: ee:9f:e5:dc:2c:a9:80:50:9e:53:e1:47:e4:af:b6:7a:96:11: 43:c2:0e:8e:1c:f4:94:ed:81:e3:9b:da:2a:9e:e1:88:4c:47: 86:c2:4a:a2:0b:ba:13:fd:d6:90:43:14:84:db:1e:77:92:ce: 02:91:14:7b:3e:58:09:2e:91:12:64:c6:14:d6:4a:19:4a:6c: 25:82:ab:4a:b9:89:18:b2:ba:9a:9f:68:47:32:c8:18:4b:a2: 9b:c9:17:50:61:5b:a9:52:07:de:fe:20:3d:fb:3b:8a:83:08: fc:e0:93:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1 NzkyRUUwNEIwHhcNMjUwNzE4MTgzMzI5WhcNMjUwNzI1MTgzMzI5WjAYMRYwFAYD VQQDEw02ODdhOTM3OS0xZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaIBRa3x1Ej6sfQ0/V7R0mrR4IJnn9IblAOTwVPdh4Ty/5QwoLDf4kfNAn0x Xug2WpOliN7Urcxnf/32Yt9Tg8c9UH9D1Zd+jMUSg8R7Ls6R2sdrLOvJLZKOfMtB g+S94Ox+jLg75g+m2Rz2VLE93Njg5kughrIq7MsTVeDtkC8C+52qHFy7+ZttXGv0 iYhvPw29Qg1enw1wwpUgiqRwEX/bdFgGosfzqoaOeq3fvQtLqylK7QBuy13HGaha Jdqn6OX/3njVfTe0KvL6X7YgnfcJsJgeTGWkquu+j6PQvVYWl9twnRlYk+nyrElj tWYAy4gcDrfT6007kJgoExyF8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLNN7BC 6++jb+c6HiHpfHYVxdbNMB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0 RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8xODgyM0M4QzA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1t VUtZV3NTRFk1YjVYa3U0RXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3WSO2Y4aqBzp7giOQpZ5g1Cjt1e/K2HhMvfXpiuX6ibiml30vDnoY i+ketTAc65Zo+NDaW2Hb7gKHpaX6IBkkmZ5TCkTbAca8iPlhqLwI1KkpHsIZ7YHc g455RGPHeUYpK9weQk+SFv81N4usIbpmoilFs1aFlZRb7dZyWoZav/X6gb2rbTyL Ii/2C39hEjDun+XcLKmAUJ5T4Ufkr7Z6lhFDwg6OHPSU7YHjm9oqnuGITEeGwkqi C7oT/daQQxSE2x53ks4CkRR7PlgJLpESZMYU1koZSmwlgqtKuYkYsrqan2hHMsgY S6KbyRdQYVupUgfe/iA9+zuKgwj84JOO -----END CERTIFICATE-----Generated at Sun Jul 20 18:50:35 2025 by rpki-client