$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: LuDFYTVHiXwdBf8vcipGt2uR6/QIerKufn4XQnZzNZ0= Subject key identifier: 1F:2C:9A:37:47:66:11:7D:18:44:8A:AA:EA:F8:26:9B:32:A7:30:6A Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 09D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 09D1 Signing time: Wed 02 Jul 2025 20:10:28 +0000 Manifest this update: Wed 02 Jul 2025 20:10:27 +0000 Manifest next update: Wed 09 Jul 2025 20:10:27 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: uhpPYHqemQ8HM9K0WU08+dePGmoLvP9woF9tcezXJmk=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Jul 2 20:10:27 2025 GMT Not After : Jul 9 20:10:27 2025 GMT Subject: CN=68659234-3fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:6d:6d:53:48:5a:f0:d5:98:7f:e7:11:1f: 57:0d:be:ce:10:50:99:77:da:c9:f6:53:5d:a7:06: b6:c9:d0:51:e7:6a:23:1f:92:b4:95:0b:37:46:b0: 30:ef:41:13:fa:c9:15:ef:e6:54:22:4d:62:a0:8a: 33:d8:12:aa:52:c0:f4:37:93:5c:b0:8f:a6:0c:4c: 4a:7d:56:a8:75:1e:0f:30:91:a2:8c:a4:5e:d0:c2: 0b:1a:1f:02:08:3d:5b:2e:eb:37:18:96:15:2b:76: e6:8d:63:d7:85:7e:89:b9:b6:c2:74:a8:03:6b:b7: 65:a5:ab:21:48:ca:f0:ac:1a:a1:59:d3:35:23:0b: 9e:71:bc:8b:06:57:21:72:bd:03:6d:c2:81:8c:0c: 81:18:f1:fb:ba:2c:ac:2b:b1:c2:b6:06:dc:78:51: 2e:87:80:5b:13:33:81:8c:12:94:a8:8d:66:00:21: c1:dc:78:27:b1:ee:2e:67:8d:4a:1b:3b:95:0f:76: 14:68:ac:cb:73:8f:07:f2:11:bc:d6:73:10:84:d4: 24:cd:da:27:93:af:06:bf:c5:64:d0:6e:88:c9:4d: 1f:75:b4:21:2d:14:3e:52:de:50:f9:d6:e5:1b:1c: 52:5d:46:55:ed:76:6b:1a:48:91:5f:71:91:df:a7: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2C:9A:37:47:66:11:7D:18:44:8A:AA:EA:F8:26:9B:32:A7:30:6A X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a5:8d:09:17:db:a4:c1:9a:e0:88:a2:fa:1d:6b:10:72:51: 66:3b:20:4c:d6:fe:b7:2a:8d:56:4f:c2:83:9e:0e:9c:22:a6: 8e:98:c7:14:b6:37:bd:21:10:89:7f:e8:b9:c8:fa:35:28:2c: 71:27:24:50:fa:e5:4d:61:d8:09:a9:b1:25:9a:c1:86:11:77: fd:b8:22:78:72:34:b2:7a:23:2b:0b:7d:cc:88:ed:da:87:10: 43:4f:0b:be:a1:6b:2d:22:41:3d:14:9c:dd:7d:89:e0:75:1c: d5:ae:46:f8:44:e5:cd:79:0a:5f:dc:d0:07:32:f4:55:11:f4: 7a:7c:7b:d1:69:8e:4f:7e:00:e9:b4:9e:e6:ef:25:aa:f1:f9: 15:ca:63:a4:00:b3:fe:43:1a:55:0e:c7:18:3a:88:7e:b9:22: 1a:7c:95:e5:49:9f:14:da:5a:30:fc:7b:b8:5d:7b:f3:08:3d: ab:ff:c9:90:2f:67:df:02:cb:d4:6a:2d:52:bf:e6:cb:13:56: 0d:7b:52:05:51:d4:1a:9a:ca:3a:72:fa:fb:1e:7c:55:da:42: 65:4e:2d:c0:82:28:60:04:23:a4:de:e2:3a:96:1b:32:87:47: f2:ae:77:08:29:b5:d3:f7:1e:66:b7:89:ee:0b:a0:a6:4b:27: 2f:29:8e:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUwNzAyMjAxMDI3WhcNMjUwNzA5MjAxMDI3WjAYMRYwFAYD VQQDEw02ODY1OTIzNC0zZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYNtbVNIWvDVmH/nER9XDb7OEFCZd9rJ9lNdpwa2ydBR52ojH5K0lQs3RrAw 70ET+skV7+ZUIk1ioIoz2BKqUsD0N5NcsI+mDExKfVaodR4PMJGijKRe0MILGh8C CD1bLus3GJYVK3bmjWPXhX6JubbCdKgDa7dlpashSMrwrBqhWdM1IwuecbyLBlch cr0DbcKBjAyBGPH7uiysK7HCtgbceFEuh4BbEzOBjBKUqI1mACHB3Hgnse4uZ41K GzuVD3YUaKzLc48H8hG81nMQhNQkzdonk68Gv8Vk0G6IyU0fdbQhLRQ+Ut5Q+dbl GxxSXUZV7XZrGkiRX3GR36fTfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8smjdH ZhF9GESKqur4JpsypzBqMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcpY0JF9ukwZrgiKL6HWsQclFmOyBM1v63Ko1WT8KDng6cIqaOmMcU tje9IRCJf+i5yPo1KCxxJyRQ+uVNYdgJqbElmsGGEXf9uCJ4cjSyeiMrC33MiO3a hxBDTwu+oWstIkE9FJzdfYngdRzVrkb4ROXNeQpf3NAHMvRVEfR6fHvRaY5PfgDp tJ7m7yWq8fkVymOkALP+QxpVDscYOoh+uSIafJXlSZ8U2low/Hu4XXvzCD2r/8mQ L2ffAsvUai1Sv+bLE1YNe1IFUdQamso6cvr7HnxV2kJlTi3AgihgBCOk3uI6lhsy h0fyrncIKbXT9x5mt4nuC6CmSycvKY77 -----END CERTIFICATE-----Generated at Fri Jul 4 17:52:25 2025 by rpki-client