$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json) Hash identifier: fI9OGH88ORJiUogHMIRbkFgao9vWK8ZMXwTjCn+/7f4= Subject key identifier: D4:59:9B:C1:AF:DB:3C:30:29:7A:9C:C3:6F:C3:BC:66:17:89:D8:3E Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft Manifest number: 45 Signing time: Sat 19 Jul 2025 07:42:07 +0000 Manifest this update: Sat 19 Jul 2025 07:42:07 +0000 Manifest next update: Sat 26 Jul 2025 07:42:07 +0000 Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: R2Cp4Wjd0dupYokeqzWaMMcdxfr/WanRWMR3ppaCjjk=) 2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: pyDccoxQQCInnCAtVt40DDMgxlsFoS9iakn/+FoSyug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Validity Not Before: Jul 19 07:42:07 2025 GMT Not After : Jul 26 07:42:07 2025 GMT Subject: CN=687b4c4f-b2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:a4:3b:2b:b8:cf:da:a8:ce:3c:c0:e0:6e: a3:4b:50:e7:2f:bf:0d:12:38:fe:04:95:8a:d3:e5: 91:dc:e3:91:11:62:cc:76:05:c9:69:ef:8d:59:81: 61:9f:9e:16:1c:c7:5d:70:77:c0:84:63:cf:25:5f: f9:42:d5:27:69:13:fb:78:fd:ff:fd:91:ba:fb:ca: d8:71:f9:86:f8:a4:0c:89:03:12:e5:ef:24:f2:ad: 66:26:95:7f:bf:cc:6f:0d:26:c0:57:38:11:b5:aa: 5e:92:05:d7:eb:d4:bd:a8:ba:d2:c2:3f:9e:f3:c5: 16:70:c4:56:db:ee:95:b8:2c:51:5a:d9:5e:88:8c: 6e:32:20:34:98:5c:f9:df:33:3b:ed:95:80:d4:20: 36:6f:13:f1:c7:3d:b6:83:2f:46:3c:0a:73:b1:ed: db:ec:d4:c6:19:14:4f:3f:e7:e1:20:cf:47:63:93: c6:65:60:a6:de:86:06:a0:d7:9c:de:03:de:dd:b5: da:28:44:d9:b9:32:54:d6:92:db:3e:85:68:fa:e0: 63:a5:97:4b:73:5b:ff:41:06:35:ab:a7:72:c9:75: 5f:64:9b:34:80:9b:52:60:dd:36:01:3d:d8:88:bf: c8:88:be:f2:80:21:54:11:30:8a:0c:6c:74:11:e7: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:59:9B:C1:AF:DB:3C:30:29:7A:9C:C3:6F:C3:BC:66:17:89:D8:3E X509v3 Authority Key Identifier: keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:55:6e:ab:9a:1a:40:9f:15:4a:03:29:92:8f:4a:aa:7c:1c: 82:cb:2b:a2:dd:14:bc:b5:6c:71:eb:e9:74:45:1d:87:8f:a0: 29:aa:3c:80:3a:03:f6:25:d0:f6:76:af:44:85:69:85:b9:6c: d7:c1:da:ca:05:24:8d:ea:08:1c:2e:5e:b8:e5:44:11:e2:5b: 19:32:40:fb:f9:60:fe:a8:72:98:1e:74:a1:72:e3:6e:5a:db: 98:b9:0d:db:26:4d:92:c1:de:04:22:55:bf:52:7f:a9:33:a0: 23:3a:f0:99:f4:1d:f9:54:a6:9c:bc:d0:e2:70:2d:0e:9a:f4: a3:4c:be:3e:59:40:c8:a8:cd:93:a2:39:ad:ed:7b:0f:f9:e1: 73:a0:d5:06:b7:9e:f2:a1:ca:04:68:30:54:a2:f1:50:c2:27: 1f:46:18:70:5c:2f:4f:e4:80:25:fd:e9:5c:cd:6f:28:e4:1e: 83:5d:21:e5:4e:7c:da:08:08:e8:56:0e:29:8e:e6:02:4c:8b: 6d:bf:ec:08:5d:ed:67:f8:05:7b:cd:f6:4a:29:12:0f:75:cc: ec:00:1c:7c:df:ef:e6:9b:58:14:fb:c5:55:f9:d7:ae:c5:1f: 0c:de:47:9e:35:0d:b6:7b:a7:9e:61:13:6a:92:44:92:ea:c4: 18:d3:5e:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoQzFFRTY5QUE2QUExQUNCQTMyRTE2NzY0REE4MUJGN0E0 MTY4QTYwRDAeFw0yNTA3MTkwNzQyMDdaFw0yNTA3MjYwNzQyMDdaMBgxFjAUBgNV BAMTDTY4N2I0YzRmLWIyYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3V6Q7K7jP2qjOPMDgbqNLUOcvvw0SOP4ElYrT5ZHc45ERYsx2Bclp741ZgWGf nhYcx11wd8CEY88lX/lC1SdpE/t4/f/9kbr7ythx+Yb4pAyJAxLl7yTyrWYmlX+/ zG8NJsBXOBG1ql6SBdfr1L2outLCP57zxRZwxFbb7pW4LFFa2V6IjG4yIDSYXPnf MzvtlYDUIDZvE/HHPbaDL0Y8CnOx7dvs1MYZFE8/5+Egz0djk8ZlYKbehgag15ze A97dtdooRNm5MlTWkts+hWj64GOll0tzW/9BBjWrp3LJdV9kmzSAm1Jg3TYBPdiI v8iIvvKAIVQRMIoMbHQR58rlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1Fmbwa/b PDApepzDb8O8ZheJ2D4wHwYDVR0jBBgwFoAUwe5pqmqhrLoy4Wdk2oG/ekFopg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzc1QTkyMjMwRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxveTRXZGsyb0dfZWtGb3Bn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2U1cHFtcWhyTG95NFdkazJvR19la0ZvcGcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzc1QTkyMjMwRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxv eTRXZGsyb0dfZWtGb3BnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIJVbquaGkCfFUoDKZKPSqp8HILLK6LdFLy1bHHr6XRFHYePoCmqPIA6 A/Yl0PZ2r0SFaYW5bNfB2soFJI3qCBwuXrjlRBHiWxkyQPv5YP6ocpgedKFy425a 25i5DdsmTZLB3gQiVb9Sf6kzoCM68Jn0HflUppy80OJwLQ6a9KNMvj5ZQMiozZOi Oa3tew/54XOg1Qa3nvKhygRoMFSi8VDCJx9GGHBcL0/kgCX96VzNbyjkHoNdIeVO fNoICOhWDimO5gJMi22/7Ahd7Wf4BXvN9kopEg91zOwAHHzf7+abWBT7xVX5167F HwzeR541DbZ7p55hE2qSRJLqxBjTXu4= -----END CERTIFICATE-----Generated at Sun Jul 20 18:38:48 2025 by rpki-client