$ rpki-client -vvf rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft File: acVuJtdk8a5PRoYo5XUx03NKwCc.mft (raw, json) Hash identifier: KwsNb5uUWS1br/oCHMGCJamVO+LF4/VZmQRt5Yob9TE= Subject key identifier: 25:D3:56:89:88:14:0C:3B:2A:C9:09:61:31:33:32:0B:83:3A:F4:66 Authority key identifier: 69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27 Certificate issuer: /CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft Manifest number: 01BD Signing time: Tue 01 Jul 2025 03:28:27 +0000 Manifest this update: Tue 01 Jul 2025 03:28:27 +0000 Manifest next update: Tue 08 Jul 2025 03:28:27 +0000 Files and hashes: 1: acVuJtdk8a5PRoYo5XUx03NKwCc.crl (hash: tg/tf3YW/lqxNPvp4zQUlyl9gE4o8Z1fCjBbBB1Qkqs=) 2: 3D93BEB65E6611EEA526DB11C4F9AE02.roa (hash: rj/BOYyadeyH55DESWaHfqSsiGriCli8KPof7zAigo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91105F6, serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027 Validity Not Before: Jul 1 03:28:27 2025 GMT Not After : Jul 8 03:28:27 2025 GMT Subject: CN=686355db-550b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:77:7c:38:e7:6f:2d:bd:c2:25:1e:ce:e8:45: 77:c5:d8:39:9e:d7:d9:cd:5e:3a:89:73:ba:a1:68: df:d8:7c:86:f8:49:82:2f:75:4e:cd:f5:3b:81:bd: 66:84:f8:f4:f2:65:93:48:41:47:a9:95:0b:a9:1f: b0:31:4f:a3:7f:d9:62:55:b3:54:e0:eb:df:b3:6b: a3:20:93:81:2d:e2:bc:ac:65:9d:ab:f3:f0:05:e9: 93:e0:8b:f7:da:f8:a3:48:08:6f:df:dd:58:55:21: 04:aa:06:d3:23:bf:ec:84:a0:eb:53:13:58:b0:07: 0b:59:d7:9f:2f:a2:c4:8f:75:fb:ac:10:f9:29:90: 6b:1d:14:b0:3e:38:b3:cc:52:6c:69:dc:0b:27:92: c0:08:f4:d9:8e:81:c8:4e:54:59:53:dd:17:97:4b: 97:17:ca:b3:3e:aa:bb:05:8c:a3:c1:62:ea:fc:09: 5e:56:56:b3:dc:3b:67:02:1a:39:44:b2:78:b3:21: 93:72:0d:69:f6:49:62:1b:0b:f5:09:ba:2d:08:53: c3:8e:10:37:02:bc:8c:0e:73:2a:e2:9a:36:e0:9f: 05:5e:af:3b:ff:ff:46:af:cd:3c:ed:5e:78:8b:31: 4f:9f:28:73:3f:ec:3c:d7:42:fe:91:22:64:d3:6e: 8d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D3:56:89:88:14:0C:3B:2A:C9:09:61:31:33:32:0B:83:3A:F4:66 X509v3 Authority Key Identifier: keyid:69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:19:a5:a7:75:98:63:c0:33:da:98:f0:87:ac:a1:9f:80:cb: 41:d9:d3:c7:3e:93:33:c1:f4:0d:77:36:ae:e0:0e:24:3d:46: eb:14:a8:2c:9f:25:9c:07:d2:4a:5f:79:39:8e:8b:bc:69:26: 83:83:0c:b2:36:5e:1e:68:71:4e:61:75:64:47:f4:a3:ed:c5: 23:41:95:be:45:f4:e5:a7:60:b5:79:3a:35:88:90:64:67:80: 0e:cd:83:14:17:1e:a3:ad:56:cf:dd:b8:c0:5a:bb:96:b7:21: 81:64:57:c4:90:83:d2:ed:45:1e:95:ca:0a:77:68:a9:12:6d: 7d:98:69:c7:4c:e8:16:9b:60:f2:26:7e:ac:58:f8:6e:83:8b: 15:d9:fb:e1:4a:78:a7:09:68:08:4d:92:79:a4:a2:d3:af:7b: 72:b6:ee:cc:4d:81:32:66:76:9d:6e:95:4e:b7:ac:41:27:22: 5a:39:a1:59:64:95:19:7f:8b:ee:07:cd:ee:2a:5b:b6:a8:25: 8e:7b:80:68:fd:5e:b7:cb:43:28:f7:f0:3c:4b:e5:fe:ef:fb: 27:87:86:95:96:d1:7a:10:f4:8a:a9:64:d5:db:c4:18:2a:f3: 05:6f:cb:cf:b5:64:16:b2:a8:89:4f:17:ab:2c:49:b8:a1:71: 46:4a:68:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1RjYxMTAvBgNVBAUTKDY5QzU2RTI2RDc2NEYxQUU0RjQ2ODYyOEU1NzUzMUQz NzM0QUMwMjcwHhcNMjUwNzAxMDMyODI3WhcNMjUwNzA4MDMyODI3WjAYMRYwFAYD VQQDEw02ODYzNTVkYi01NTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33d8OOdvLb3CJR7O6EV3xdg5ntfZzV46iXO6oWjf2HyG+EmCL3VOzfU7gb1m hPj08mWTSEFHqZULqR+wMU+jf9liVbNU4Ovfs2ujIJOBLeK8rGWdq/PwBemT4Iv3 2vijSAhv391YVSEEqgbTI7/shKDrUxNYsAcLWdefL6LEj3X7rBD5KZBrHRSwPjiz zFJsadwLJ5LACPTZjoHITlRZU90Xl0uXF8qzPqq7BYyjwWLq/AleVlaz3DtnAho5 RLJ4syGTcg1p9kliGwv1CbotCFPDjhA3AryMDnMq4po24J8FXq87//9Gr8087V54 izFPnyhzP+w810L+kSJk026NpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXTVomI FAw7KskJYTEzMguDOvRmMB8GA1UdIwQYMBaAFGnFbibXZPGuT0aGKOV1MdNzSsAn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDVGNi9FODIwMDI2QUIz RkIxMUVEQkJEQjMwMjJDNEY5QUUwMi9hY1Z1SnRkazhhNVBSb1lvNVhVeDAzTkt3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjVnVKdGRrOGE1UFJvWW81WFV4MDNOS3dDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDVGNi9FODIwMDI2QUIzRkIxMUVEQkJEQjMwMjJDNEY5QUUwMi9hY1Z1SnRkazhh NVBSb1lvNVhVeDAzTkt3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWGaWndZhjwDPamPCHrKGfgMtB2dPHPpMzwfQNdzau4A4kPUbrFKgs nyWcB9JKX3k5jou8aSaDgwyyNl4eaHFOYXVkR/Sj7cUjQZW+RfTlp2C1eTo1iJBk Z4AOzYMUFx6jrVbP3bjAWruWtyGBZFfEkIPS7UUelcoKd2ipEm19mGnHTOgWm2Dy Jn6sWPhug4sV2fvhSninCWgITZJ5pKLTr3tytu7MTYEyZnadbpVOt6xBJyJaOaFZ ZJUZf4vuB83uKlu2qCWOe4Bo/V63y0Mo9/A8S+X+7/snh4aVltF6EPSKqWTV28QY KvMFb8vPtWQWsqiJTxerLEm4oXFGSmiC -----END CERTIFICATE-----Generated at Tue Jul 1 15:08:08 2025 by rpki-client