$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json) Hash identifier: vVJktEpM/JysiDXs+3iAnz8QLsGJAWJIbQJMf5p5Wg8= Subject key identifier: 1F:EC:AE:DC:D6:21:A1:DC:1B:47:0C:66:C0:EE:B2:3E:7F:67:3F:90 Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft Manifest number: 91 Signing time: Sat 19 Jul 2025 06:43:17 +0000 Manifest this update: Sat 19 Jul 2025 06:43:17 +0000 Manifest next update: Sat 26 Jul 2025 06:43:17 +0000 Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: w8B3iKTJyGvY7M0fNODhebFYzl9AmSLnb7nc4eZqpv8=) 2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: cHJy1BLtElHS3p1bo+4QsrHmfc/col4vczERE1sjyMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Validity Not Before: Jul 19 06:43:17 2025 GMT Not After : Jul 26 06:43:17 2025 GMT Subject: CN=687b3e85-1dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:59:9f:5a:5e:bf:14:7e:50:c2:b2:9a:3c: 46:35:42:05:ed:96:c9:bd:03:0a:a9:47:59:ea:b1: 1f:be:04:63:9d:bb:dd:aa:76:56:c3:0d:f6:f5:6e: 39:eb:af:99:8d:2b:6a:69:bb:6d:20:c5:b1:ca:47: 2e:93:4e:aa:8c:48:e3:95:2e:2c:44:2d:8a:f1:bb: 5c:c2:a1:00:e2:86:cb:64:dc:8a:82:40:92:0e:be: 0a:eb:fa:3f:78:77:83:5e:a7:81:1d:90:ca:be:8d: f0:f5:d4:70:0e:37:7e:b2:7b:02:3e:5b:64:91:f4: 2a:f0:84:90:fa:a7:78:81:c3:4f:db:97:4e:de:25: 24:db:a2:ee:44:85:54:fd:38:5e:ef:95:1a:0f:3f: 05:3d:a3:6e:17:9c:0c:f2:cc:61:6e:9a:02:22:5c: d8:0a:9d:6d:b5:ca:88:f7:e4:6a:9d:3f:7b:f5:e3: 34:ff:86:dc:a5:f9:7a:a5:83:bc:c3:59:a6:69:e9: fa:8a:2a:2a:59:32:f0:73:65:9f:73:31:53:e1:ab: 8e:e3:87:d6:e4:a2:c2:7a:cb:3f:5b:5b:e6:45:4a: 65:b7:9b:31:0e:d8:c9:59:b7:b1:34:2d:9d:bc:87: 97:b4:2d:53:95:03:b1:30:c2:70:ef:8e:4a:86:e9: d2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EC:AE:DC:D6:21:A1:DC:1B:47:0C:66:C0:EE:B2:3E:7F:67:3F:90 X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:04:0e:65:61:b2:9e:a8:cb:46:ef:14:90:af:51:51:32:1b: 69:e5:be:b6:14:d2:05:37:26:b3:04:9a:59:fc:50:53:52:9d: 8b:4f:e9:23:6b:fe:46:d8:8f:a3:39:65:1f:b3:26:82:0c:11: 3b:7c:e6:42:57:b5:2d:cf:4c:0f:67:f7:3d:d0:aa:51:b4:22: 83:de:06:f0:83:37:4f:e9:cf:62:e9:b1:67:f5:5c:3c:1f:92: aa:a4:8f:86:a4:1c:24:6c:72:54:14:86:be:06:6e:68:c1:3e: e1:02:ae:68:1c:74:14:7c:68:c1:c2:3c:be:c8:75:da:1a:88: 7a:f2:46:f7:41:63:62:46:03:18:db:1a:db:af:19:76:8c:9a: 0b:82:a4:29:e6:fc:02:97:6c:88:89:dc:cf:f9:57:15:64:d1: e8:ce:80:3b:03:74:cb:29:74:31:84:be:eb:21:0f:e5:0b:48: 12:67:bc:83:29:4c:61:34:9d:32:3d:ce:68:21:80:52:9b:bd: f8:68:3d:7f:ee:88:ac:fc:d1:cd:62:8c:bb:9e:85:82:7f:2b: ad:43:30:22:2a:94:fc:93:fd:9f:ea:1a:1b:78:38:ea:a1:0e: 6d:76:89:8a:d1:d4:a5:91:3a:ca:c5:32:e1:d0:fd:28:cc:0e: 86:a5:98:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKEFFMEU0QkVDNTY4RkU2RkVFNDkyRjcyRTREM0FDQjky OEQ5QzFFNEYwHhcNMjUwNzE5MDY0MzE3WhcNMjUwNzI2MDY0MzE3WjAYMRYwFAYD VQQDEw02ODdiM2U4NS0xZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc9Zn1pevxR+UMKymjxGNUIF7ZbJvQMKqUdZ6rEfvgRjnbvdqnZWww329W45 66+ZjStqabttIMWxykcuk06qjEjjlS4sRC2K8btcwqEA4obLZNyKgkCSDr4K6/o/ eHeDXqeBHZDKvo3w9dRwDjd+snsCPltkkfQq8ISQ+qd4gcNP25dO3iUk26LuRIVU /The75UaDz8FPaNuF5wM8sxhbpoCIlzYCp1ttcqI9+RqnT979eM0/4bcpfl6pYO8 w1mmaen6iioqWTLwc2WfczFT4auO44fW5KLCess/W1vmRUplt5sxDtjJWbexNC2d vIeXtC1TlQOxMMJw745KhunSBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/srtzW IaHcG0cMZsDusj5/Zz+QMB8GA1UdIwQYMBaAFK4OS+xWj+b+5JL3Lk06y5KNnB5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80MTQ4NTA3MDhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2N2trdmN1VFRyTGtvMmNI azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwQy80MTQ4NTA3MDhDNUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2 N2trdmN1VFRyTGtvMmNIazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPBA5lYbKeqMtG7xSQr1FRMhtp5b62FNIFNyazBJpZ/FBTUp2LT+kj a/5G2I+jOWUfsyaCDBE7fOZCV7Utz0wPZ/c90KpRtCKD3gbwgzdP6c9i6bFn9Vw8 H5KqpI+GpBwkbHJUFIa+Bm5owT7hAq5oHHQUfGjBwjy+yHXaGoh68kb3QWNiRgMY 2xrbrxl2jJoLgqQp5vwCl2yIidzP+VcVZNHozoA7A3TLKXQxhL7rIQ/lC0gSZ7yD KUxhNJ0yPc5oIYBSm734aD1/7ois/NHNYoy7noWCfyutQzAiKpT8k/2f6hobeDjq oQ5tdomK0dSlkTrKxTLh0P0ozA6GpZjB -----END CERTIFICATE-----Generated at Mon Jul 21 03:05:30 2025 by rpki-client