$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json) Hash identifier: Jr3gZF5RrfxbGHKfAu5CBpDfmbht3jrjrJ+g8TcQCco= Subject key identifier: E6:D2:45:C4:71:91:F5:A0:26:AD:D5:12:5F:75:23:FE:7C:65:F5:F1 Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Certificate serial: 05EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft Manifest number: 05E9 Signing time: Wed 02 Jul 2025 23:15:08 +0000 Manifest this update: Wed 02 Jul 2025 23:15:07 +0000 Manifest next update: Wed 09 Jul 2025 23:15:07 +0000 Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: VBI4cA2gK02wDTFSVFm31RQPCWPlnbGu/VVLmrpkqC0=) 2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: IADvK+KgV5vnYxJ4wHU1Xtz8TSGee8Bm5ZckrfzrChM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1518 (0x5ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Validity Not Before: Jul 2 23:15:07 2025 GMT Not After : Jul 9 23:15:07 2025 GMT Subject: CN=6865bd7c-69df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e6:b8:e4:7b:f9:db:46:b3:df:7d:de:b0:df: c2:91:21:f6:7e:d6:92:99:8c:5b:76:bf:b3:22:c0: 7b:c0:3b:16:0d:00:ba:8a:ec:8a:84:50:e0:77:90: 27:04:1f:1e:ac:8c:8b:e9:16:7c:54:36:ac:83:9a: 2e:3e:9e:69:b2:0d:b7:68:12:c2:89:8f:05:f0:77: af:3a:61:6c:1d:ab:b8:8f:98:e2:06:60:24:56:c5: e9:07:ed:30:c4:d4:77:df:d0:4b:73:21:09:ab:a6: 33:21:f7:09:33:57:ea:a0:f5:a5:33:38:7f:92:85: 81:e7:a7:61:41:28:84:e2:60:c4:0c:42:c2:ea:27: 74:8e:dd:0f:5b:90:91:7b:8d:b5:e6:74:fa:7b:45: 4d:a3:a7:20:c2:b2:8c:44:0a:da:17:c1:b1:c2:16: d9:ae:09:7e:1e:5e:14:2b:ba:5f:2b:fe:7e:38:61: 49:03:cd:06:7c:53:ac:76:74:89:12:3d:aa:20:07: 44:09:61:5b:34:99:5a:e9:98:40:2b:d7:16:47:91: 13:1e:ed:a0:70:4e:26:14:3a:3f:30:8b:ae:a5:de: 38:6c:bc:f0:d7:1c:f6:0e:43:29:76:17:a2:2e:85: 78:43:71:d9:95:26:1d:50:1a:30:5c:d6:ae:c5:a3: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D2:45:C4:71:91:F5:A0:26:AD:D5:12:5F:75:23:FE:7C:65:F5:F1 X509v3 Authority Key Identifier: keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a7:88:1c:21:56:0e:b2:ea:38:f3:79:47:e1:51:b9:79:4e: 06:47:22:5a:42:9c:97:9e:c2:10:ed:f8:78:a4:c5:c8:ed:71: 42:2d:0d:f6:67:19:2c:a4:2a:18:fe:52:10:25:c7:b4:64:fb: b2:f7:a2:f6:fa:29:31:98:7f:61:49:ac:21:e9:03:1d:c7:90: 5f:38:06:9d:f1:d4:a4:76:d5:96:fc:8d:e1:c4:9e:35:ff:b6: 6b:ef:52:76:1f:dc:cb:8f:ca:a9:00:cf:2e:df:83:34:45:e6: 95:3b:13:47:5c:90:a1:92:94:85:e4:8d:20:3e:e7:0b:f2:d6: d3:64:ef:7d:65:9f:ff:30:7f:8a:49:65:9c:bf:1b:57:fa:38: ed:20:e0:c9:1b:3f:16:39:61:ac:1f:6b:e5:b0:c0:0f:94:a1: 14:84:eb:c8:7e:87:1d:2e:f9:c3:57:a4:50:99:46:90:b9:3d: 02:93:d3:25:c9:35:53:a9:08:4b:c0:d9:fc:b1:30:79:55:a8: 02:9c:9c:b3:e5:f5:e3:99:15:75:5a:c3:18:fc:36:36:ac:84: bf:a0:7a:2a:51:c1:4c:f4:f3:20:de:53:5c:6d:16:08:10:2e: bc:cc:52:de:55:ad:d7:c8:3b:9d:62:6f:6e:17:26:2a:7c:0b: 7e:1a:9a:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz ODEyNkRDOUYwHhcNMjUwNzAyMjMxNTA3WhcNMjUwNzA5MjMxNTA3WjAYMRYwFAYD VQQDEw02ODY1YmQ3Yy02OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ea45Hv520az333esN/CkSH2ftaSmYxbdr+zIsB7wDsWDQC6iuyKhFDgd5An BB8erIyL6RZ8VDasg5ouPp5psg23aBLCiY8F8HevOmFsHau4j5jiBmAkVsXpB+0w xNR339BLcyEJq6YzIfcJM1fqoPWlMzh/koWB56dhQSiE4mDEDELC6id0jt0PW5CR e4215nT6e0VNo6cgwrKMRAraF8GxwhbZrgl+Hl4UK7pfK/5+OGFJA80GfFOsdnSJ Ej2qIAdECWFbNJla6ZhAK9cWR5ETHu2gcE4mFDo/MIuupd44bLzw1xz2DkMpdhei LoV4Q3HZlSYdUBowXNauxaPUHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObSRcRx kfWgJq3VEl91I/58ZfXxMB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5 NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhCNS8zRUJDRDFEQUI5NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81 anRHemNqTkRGems0RW0zSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJp4gcIVYOsuo483lH4VG5eU4GRyJaQpyXnsIQ7fh4pMXI7XFCLQ32 ZxkspCoY/lIQJce0ZPuy96L2+ikxmH9hSawh6QMdx5BfOAad8dSkdtWW/I3hxJ41 /7Zr71J2H9zLj8qpAM8u34M0ReaVOxNHXJChkpSF5I0gPucL8tbTZO99ZZ//MH+K SWWcvxtX+jjtIODJGz8WOWGsH2vlsMAPlKEUhOvIfocdLvnDV6RQmUaQuT0Ck9Ml yTVTqQhLwNn8sTB5VagCnJyz5fXjmRV1WsMY/DY2rIS/oHoqUcFM9PMg3lNcbRYI EC68zFLeVa3XyDudYm9uFyYqfAt+Gpr6 -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:29 2025 by rpki-client