$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: TzJnUzdSZoen3Vuo3xJSfp3Mz1jv5JHca5V9pDxNXX0= Subject key identifier: BD:86:72:A4:CF:A6:0E:C8:40:08:F4:B5:C8:BB:3D:7C:03:89:DD:C1 Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 0633 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 062B Signing time: Wed 02 Jul 2025 23:05:07 +0000 Manifest this update: Wed 02 Jul 2025 23:05:07 +0000 Manifest next update: Wed 09 Jul 2025 23:05:07 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: 58Rgfr3XOYxPIVfbHUAtwgqAejQoMVRi/eQEvlrhobE=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: qCXzkeKuPVL2AFCLekUycL2ac1PSk1oLXnC7v+nyDIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Jul 2 23:05:07 2025 GMT Not After : Jul 9 23:05:07 2025 GMT Subject: CN=6865bb23-8972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:bb:76:ec:88:d7:4d:32:33:9a:17:6e:84: aa:24:f2:b8:55:95:c9:f2:8a:13:71:fd:68:2c:9d: 4e:40:97:e0:0b:2b:f6:a5:31:d6:01:dc:0e:33:a7: 03:d3:e8:b8:4d:18:d5:55:88:67:9d:62:2a:34:d1: 66:39:0f:61:24:e2:a5:2a:89:ff:15:95:94:7f:41: 5c:78:7d:9c:7c:a9:85:c8:60:b3:b9:8b:94:65:f1: 3f:49:bf:10:e4:d0:9b:19:39:2a:8b:62:fe:54:91: b6:20:be:37:c5:b3:e5:ac:d1:d1:b1:12:50:64:3c: 63:86:be:01:ee:fb:92:4b:cf:9f:2f:08:7c:e6:41: 30:8b:32:ae:60:0a:b4:d7:1b:2e:dc:03:cb:46:ff: 05:33:9e:74:03:05:8f:a4:06:db:fe:79:1b:f0:4e: b2:45:51:db:c1:a2:97:48:34:e2:9b:e4:3f:04:5d: 01:de:46:83:58:80:06:ac:fc:12:e8:be:b8:fc:a5: a7:40:dc:f3:48:6b:2b:17:ad:fd:d7:a5:d4:ed:42: f9:a8:90:0f:8b:71:15:30:16:d5:c9:e7:39:1f:34: 74:9d:30:53:be:2d:79:46:0d:e1:33:35:48:69:32: c0:59:92:81:c9:23:88:25:68:1d:fc:1d:ae:6c:9c: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:86:72:A4:CF:A6:0E:C8:40:08:F4:B5:C8:BB:3D:7C:03:89:DD:C1 X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:eb:d5:e4:eb:0e:76:0c:f6:b0:30:7a:16:da:26:2e:5a:f5: c2:91:5d:81:e2:6e:a4:3d:6b:96:79:ab:16:e8:ad:52:16:0d: 43:08:66:3d:fe:ff:6f:2e:0e:93:c8:7e:6d:96:5a:e4:7c:3a: 5b:5a:6b:d1:e4:86:03:31:40:fa:89:d3:25:36:86:d9:be:9f: 4c:b8:6b:08:13:c4:da:bc:30:01:ae:11:0b:8f:88:cf:c6:97: 58:4a:90:cd:34:30:5e:8c:9b:41:1e:28:37:be:72:59:af:42: 27:fa:f7:83:f5:84:cf:7d:db:fd:ad:76:30:79:e4:82:d7:cd: 3f:cc:e0:c9:1e:5f:d7:a0:07:bf:2b:79:0a:a2:5e:98:fc:79: de:ac:48:15:64:13:ae:81:21:8a:e7:ed:82:1b:e1:57:82:40: 41:50:23:8b:0e:13:d7:80:a9:24:66:16:a1:76:69:94:05:42: 94:2e:ae:71:f5:11:07:90:34:d1:58:5a:1b:56:4a:15:c4:f0: 3f:53:0a:23:28:c8:aa:a7:65:d1:70:89:71:04:a5:67:9e:37: 00:da:b9:55:fb:52:6a:40:89:f4:16:34:34:2f:28:a9:74:ab: d9:40:cf:94:1c:b7:79:a3:ef:a2:8f:52:88:b8:0c:d8:cc:b6: a7:c9:d8:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUwNzAyMjMwNTA3WhcNMjUwNzA5MjMwNTA3WjAYMRYwFAYD VQQDEw02ODY1YmIyMy04OTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1De7duyI100yM5oXboSqJPK4VZXJ8ooTcf1oLJ1OQJfgCyv2pTHWAdwOM6cD 0+i4TRjVVYhnnWIqNNFmOQ9hJOKlKon/FZWUf0FceH2cfKmFyGCzuYuUZfE/Sb8Q 5NCbGTkqi2L+VJG2IL43xbPlrNHRsRJQZDxjhr4B7vuSS8+fLwh85kEwizKuYAq0 1xsu3APLRv8FM550AwWPpAbb/nkb8E6yRVHbwaKXSDTim+Q/BF0B3kaDWIAGrPwS 6L64/KWnQNzzSGsrF63916XU7UL5qJAPi3EVMBbVyec5HzR0nTBTvi15Rg3hMzVI aTLAWZKBySOIJWgd/B2ubJxKUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2GcqTP pg7IQAj0tci7PXwDid3BMB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP69Xk6w52DPawMHoW2iYuWvXCkV2B4m6kPWuWeasW6K1SFg1DCGY9 /v9vLg6TyH5tllrkfDpbWmvR5IYDMUD6idMlNobZvp9MuGsIE8TavDABrhELj4jP xpdYSpDNNDBejJtBHig3vnJZr0In+veD9YTPfdv9rXYweeSC180/zODJHl/XoAe/ K3kKol6Y/HnerEgVZBOugSGK5+2CG+FXgkBBUCOLDhPXgKkkZhahdmmUBUKULq5x 9REHkDTRWFobVkoVxPA/UwojKMiqp2XRcIlxBKVnnjcA2rlV+1JqQIn0FjQ0Lyip dKvZQM+UHLd5o++ij1KIuAzYzLanydgC -----END CERTIFICATE-----Generated at Thu Jul 3 07:02:29 2025 by rpki-client