$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft File: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft (raw, json) Hash identifier: Yw70ApjFLbtKVSc/82umKt9OHtVlXbQmnv5UsYZv1Yk= Subject key identifier: DE:27:B4:9B:F0:69:76:41:E6:26:D8:9C:D5:33:D1:F1:50:7C:61:D0 Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft Manifest number: 028D Signing time: Thu 03 Jul 2025 02:05:57 +0000 Manifest this update: Thu 03 Jul 2025 02:05:57 +0000 Manifest next update: Thu 10 Jul 2025 02:05:57 +0000 Files and hashes: 1: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl (hash: ES8C0wbwNhOABOT71dZJ5O7lQ4YvPURowvO08Dk4z6E=) 2: 60A2CF98817811EE9E9A211DC4F9AE02.roa (hash: OBulHvX2B6jsIGrCSAsyqZYvuyIkHgMKG5wNVNk2ul8=) 3: 195EA596AC8711EEAC4B2427C4F9AE02.roa (hash: hhO5y4e/DFpdPdaj49uvYHcFr1O6lkR5HUgMp+6rOns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91447E7, serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Validity Not Before: Jul 3 02:05:57 2025 GMT Not After : Jul 10 02:05:57 2025 GMT Subject: CN=6865e585-2c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:37:c2:9e:99:61:64:00:ec:46:a7:1c:16: ec:52:f6:de:3f:d3:8b:bf:8e:4b:73:ff:69:b1:0f: 0f:6f:ef:69:ef:bd:2e:31:91:2a:d7:d3:38:e8:ff: c9:e1:3d:3e:cd:cb:26:a0:96:c4:62:ae:93:e6:23: 64:d7:47:ae:b4:70:b0:3b:2f:8c:3c:14:59:2c:9c: 0c:75:5b:7e:fa:9f:af:eb:8f:44:11:14:38:27:e7: e6:70:94:e5:d3:4d:9e:63:20:57:59:ec:38:7b:04: 7f:d6:cf:75:cc:ad:d9:8d:1d:87:72:c6:97:d1:00: 90:53:9d:cd:9b:04:75:65:2a:7c:e3:40:27:b7:f5: f6:d6:d7:2d:f2:6c:9d:11:96:78:42:d8:17:2a:1a: c7:6d:06:6a:fd:c1:f0:db:05:9a:62:42:65:65:dc: a4:6d:aa:fe:b8:5e:e6:02:72:d5:53:c5:55:de:23: 80:83:6d:58:a5:8b:a6:25:bc:b6:4e:08:4b:bf:b0: f3:64:91:85:59:54:1c:6d:94:b9:53:03:ef:03:e6: 3d:22:f4:99:8b:d0:23:65:9a:c2:c8:92:d7:b5:0f: d7:a6:93:5f:6d:65:f3:2b:54:ac:a3:90:1b:19:91: 18:bb:4f:0c:5b:28:f3:89:ec:24:97:fa:c0:0e:3a: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:27:B4:9B:F0:69:76:41:E6:26:D8:9C:D5:33:D1:F1:50:7C:61:D0 X509v3 Authority Key Identifier: keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5d:7f:01:e9:99:4c:6e:a6:46:49:44:c7:e0:9b:6d:00:35: fd:5a:12:7c:43:b4:cb:ce:7a:94:ef:aa:b5:2e:be:49:fd:57: eb:1a:ea:10:11:37:c9:bc:d5:96:6b:98:e2:4f:76:93:d7:01: ee:65:c9:ac:56:6b:c9:8d:5f:d2:32:a6:99:4b:21:4b:58:bf: 13:84:0e:14:52:ad:15:d4:e6:ae:4d:58:14:c7:75:f9:b6:0c: 7d:40:f9:a0:f2:53:a9:2d:a0:83:df:95:af:ce:b3:d7:bd:bc: 8f:1e:8d:87:91:08:d4:46:41:37:fe:49:e5:ba:16:2c:de:34: 75:6e:ec:c7:2b:f3:b1:03:c1:45:b1:4d:24:41:8f:2c:2e:1e: f0:a2:58:a4:ed:36:60:bf:c8:b8:e1:52:08:2d:5a:36:48:54: 50:71:29:6a:68:58:f2:78:f3:f6:ca:f2:15:00:32:ac:11:25: 6f:a7:db:d4:39:ae:82:30:13:4b:56:92:b1:fa:c1:e1:90:17: 51:55:f4:c3:22:c7:62:2c:b1:69:6b:16:d9:a3:8d:e4:aa:1a: ba:a1:cc:85:da:9c:cb:90:39:e0:ab:11:6e:78:29:54:bb:e6: b4:ea:a5:ff:fc:d9:f6:1f:86:d5:79:48:43:ae:1d:63:a7:72: 0d:ce:c2:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3RTcxMTAvBgNVBAUTKEU3N0I4NzE0NjgwNUUyNjA0QjQ5RUVGMkI0QTQzOENC RDJBNTE0MjQwHhcNMjUwNzAzMDIwNTU3WhcNMjUwNzEwMDIwNTU3WjAYMRYwFAYD VQQDEw02ODY1ZTU4NS0yYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvww3wp6ZYWQA7EanHBbsUvbeP9OLv45Lc/9psQ8Pb+9p770uMZEq19M46P/J 4T0+zcsmoJbEYq6T5iNk10eutHCwOy+MPBRZLJwMdVt++p+v649EERQ4J+fmcJTl 002eYyBXWew4ewR/1s91zK3ZjR2HcsaX0QCQU53NmwR1ZSp840Ant/X21tct8myd EZZ4QtgXKhrHbQZq/cHw2wWaYkJlZdykbar+uF7mAnLVU8VV3iOAg21YpYumJby2 TghLv7DzZJGFWVQcbZS5UwPvA+Y9IvSZi9AjZZrCyJLXtQ/XppNfbWXzK1Sso5Ab GZEYu08MWyjziewkl/rADjpsIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4ntJvw aXZB5ibYnNUz0fFQfGHQMB8GA1UdIwQYMBaAFOd7hxRoBeJgS0nu8rSkOMvSpRQk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDdFNy9GRTQ0NjlEMjEz MDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRtQkxTZTd5dEtRNHk5S2xG Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzdUhGR2dGNG1CTFNlN3l0S1E0eTlLbEZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDdFNy9GRTQ0NjlEMjEzMDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRt QkxTZTd5dEtRNHk5S2xGQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnXX8B6ZlMbqZGSUTH4JttADX9WhJ8Q7TLznqU76q1Lr5J/VfrGuoQ ETfJvNWWa5jiT3aT1wHuZcmsVmvJjV/SMqaZSyFLWL8ThA4UUq0V1OauTVgUx3X5 tgx9QPmg8lOpLaCD35WvzrPXvbyPHo2HkQjURkE3/knluhYs3jR1buzHK/OxA8FF sU0kQY8sLh7wolik7TZgv8i44VIILVo2SFRQcSlqaFjyePP2yvIVADKsESVvp9vU Oa6CMBNLVpKx+sHhkBdRVfTDIsdiLLFpaxbZo43kqhq6ocyF2pzLkDngqxFueClU u+a06qX//Nn2H4bVeUhDrh1jp3INzsLo -----END CERTIFICATE-----Generated at Thu Jul 3 10:20:31 2025 by rpki-client