$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: kkmNexK3iVVolAzp13JBrR0sa98sI0TFSKY+LjtWyWQ= Subject key identifier: 87:D0:BB:96:71:05:38:93:AB:2E:02:E6:CE:75:EA:84:37:61:02:3D Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 08BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 08AF Signing time: Wed 02 Jul 2025 20:46:42 +0000 Manifest this update: Wed 02 Jul 2025 20:46:41 +0000 Manifest next update: Wed 09 Jul 2025 20:46:41 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: 4l7oo6IhZryjSPnv9HY6JYEtFWORMEoQ+SZ4spGihMs=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: JY394gUy9qqM6BqtEt3A+TeeEC3ZSaP+KRzIxp12INs=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2234 (0x8ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Jul 2 20:46:41 2025 GMT Not After : Jul 9 20:46:41 2025 GMT Subject: CN=68659ab2-fe38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:57:21:22:be:1d:a4:9c:ec:45:ee:89:00:30: 91:45:56:5e:8f:52:58:bd:c7:c3:3f:6a:d0:0f:bb: 42:5f:11:7f:f2:86:70:15:b9:08:7c:16:30:e1:38: 41:8b:c2:54:c3:6f:3d:2e:f2:f5:45:a9:60:db:1a: af:fa:65:12:2e:bc:f2:51:9f:49:ea:e7:4a:37:b6: 2c:e5:2c:c7:2c:1c:f5:1e:1a:b7:e9:9c:ad:f9:91: 60:ae:49:e4:38:89:72:a4:dd:4d:46:e2:a3:a0:da: db:83:6a:b9:2b:03:2f:df:c2:c1:88:2f:19:5e:d4: e4:c3:d8:3a:2a:d7:f4:b7:7f:ab:97:06:73:df:c6: b6:3c:10:e6:0c:2d:9b:ad:c0:67:97:b7:c2:98:4d: dc:ab:e0:4e:aa:1c:c8:54:13:e2:81:57:69:bf:9d: e2:d0:eb:fc:ef:6f:2c:3b:5a:aa:1e:6b:bc:5b:27: 33:95:e7:f1:c3:9d:2a:50:96:e9:b8:ff:a1:96:31: f0:65:a7:c0:9e:64:3d:d2:ec:e6:fc:16:07:43:77: da:b1:84:2c:45:67:e4:cc:ae:bc:de:c9:3e:b2:d0: 3e:67:52:d5:c2:f9:64:49:ac:cd:cc:10:11:3e:ce: 6d:b9:e5:1b:37:31:8a:90:1a:62:fb:9d:e1:63:63: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D0:BB:96:71:05:38:93:AB:2E:02:E6:CE:75:EA:84:37:61:02:3D X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b0:4b:d8:81:f9:bf:0f:66:48:bd:dd:67:d8:3c:3b:de:03: 0f:7f:63:0f:54:05:cb:a9:13:66:a3:bd:6c:e6:f6:07:d3:d2: 05:9f:ca:b6:e8:3a:68:43:75:b9:11:65:91:5e:24:4f:71:38: 7c:ae:62:82:58:01:d8:60:bb:ac:05:73:ce:43:04:c9:b5:a5: de:b4:e9:3a:1c:e7:53:85:fa:e1:ff:73:f2:f7:5e:64:d5:94: d5:1e:41:9f:3e:fa:1c:72:49:08:97:6f:81:a6:1b:f4:b1:48: 7a:a1:37:fe:35:f4:3c:3f:7f:9f:ac:8f:ff:a7:92:32:be:6c: 9e:ff:5f:c4:ab:08:6b:42:49:62:ee:68:f0:00:16:d2:da:a5: 5c:4f:c8:bc:ba:ac:11:79:a0:7e:15:b6:92:67:31:e5:97:2c: 46:73:5f:05:fa:7c:c1:c3:0c:5a:34:75:33:19:d0:6e:6a:02: 89:61:2a:a4:4e:f8:cd:fb:eb:fb:00:0d:34:74:89:72:2b:3c: 07:ea:cc:1f:4f:1c:e6:a0:58:03:ed:b5:7e:9c:eb:83:a2:26: 6d:11:eb:19:04:ff:eb:1a:55:14:fb:91:c4:85:b7:0c:48:f3: 34:29:05:19:fc:ad:9a:02:0e:fa:9a:10:5d:0c:7f:08:46:35: c9:a9:47:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUwNzAyMjA0NjQxWhcNMjUwNzA5MjA0NjQxWjAYMRYwFAYD VQQDEw02ODY1OWFiMi1mZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFchIr4dpJzsRe6JADCRRVZej1JYvcfDP2rQD7tCXxF/8oZwFbkIfBYw4ThB i8JUw289LvL1Ralg2xqv+mUSLrzyUZ9J6udKN7Ys5SzHLBz1Hhq36Zyt+ZFgrknk OIlypN1NRuKjoNrbg2q5KwMv38LBiC8ZXtTkw9g6Ktf0t3+rlwZz38a2PBDmDC2b rcBnl7fCmE3cq+BOqhzIVBPigVdpv53i0Ov8728sO1qqHmu8Wyczlefxw50qUJbp uP+hljHwZafAnmQ90uzm/BYHQ3fasYQsRWfkzK683sk+stA+Z1LVwvlkSazNzBAR Ps5tueUbNzGKkBpi+53hY2NwLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfQu5Zx BTiTqy4C5s516oQ3YQI9MB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhsEvYgfm/D2ZIvd1n2Dw73gMPf2MPVAXLqRNmo71s5vYH09IFn8q2 6DpoQ3W5EWWRXiRPcTh8rmKCWAHYYLusBXPOQwTJtaXetOk6HOdThfrh/3Py915k 1ZTVHkGfPvocckkIl2+Bphv0sUh6oTf+NfQ8P3+frI//p5Iyvmye/1/EqwhrQkli 7mjwABbS2qVcT8i8uqwReaB+FbaSZzHllyxGc18F+nzBwwxaNHUzGdBuagKJYSqk TvjN++v7AA00dIlyKzwH6swfTxzmoFgD7bV+nOuDoiZtEesZBP/rGlUU+5HEhbcM SPM0KQUZ/K2aAg76mhBdDH8IRjXJqUcJ -----END CERTIFICATE-----Generated at Thu Jul 3 23:57:40 2025 by rpki-client