$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft File: U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json) Hash identifier: A1PTO+lmXb2W4XFblWbbAvvBO9Dc2LXT/dRnzTQqsms= Subject key identifier: AC:37:2C:2E:CF:83:92:CB:5C:D6:0D:A0:71:97:B8:9E:4E:ED:D9:CE Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 Certificate issuer: /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft Manifest number: 7A Signing time: Thu 03 Jul 2025 07:03:25 +0000 Manifest this update: Thu 03 Jul 2025 07:03:24 +0000 Manifest next update: Thu 10 Jul 2025 07:03:24 +0000 Files and hashes: 1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: /yhDchSlFxa0S8oEPkuRR3ciCzJGrGEAtWxxQF65dHg=) 2: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (hash: R1ZRqn0ylt//iP3Dpq4PDjSTmlLC/ZvrxfTWyncyjuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Validity Not Before: Jul 3 07:03:24 2025 GMT Not After : Jul 10 07:03:24 2025 GMT Subject: CN=68662b3c-7894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:26:76:46:8d:55:0b:4c:08:81:0a:f1:09: 88:ca:b7:09:04:90:2d:12:f9:f4:76:84:86:8e:db: 22:0a:2e:2a:25:65:ab:53:b1:8d:03:d9:07:c6:a4: dd:ad:a2:ad:ba:04:b8:bc:11:e6:f3:2c:87:f3:97: 88:98:03:81:b8:3e:88:bc:53:d9:71:26:de:a1:67: cc:00:a5:fb:e9:f6:3c:23:8c:51:36:4a:82:7c:0d: b0:60:68:75:6a:e8:ab:c7:c5:27:b1:36:90:16:4f: 74:26:12:a9:40:18:12:1d:bb:93:8b:21:f4:46:43: 0d:36:84:40:ad:65:b1:85:ce:12:1f:6d:2e:fc:48: 92:4e:01:66:1d:fa:9b:00:ed:1a:b1:84:94:e0:2d: a4:8d:5b:60:38:0e:e3:06:5b:87:66:72:31:f6:f4: 88:24:cf:9e:8b:61:7c:99:6e:d4:33:7b:18:51:07: a6:93:9a:eb:93:50:eb:04:a2:e0:92:96:a7:e8:ca: 25:ea:da:15:f5:34:8d:97:a4:d3:76:f0:73:ce:b6: 3c:3b:14:67:83:26:13:67:88:a9:23:a5:51:ea:a7: fe:45:73:e8:81:be:ae:58:0e:4e:17:14:bc:31:db: e7:23:45:19:83:0d:77:73:94:84:a6:2d:04:63:32: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:37:2C:2E:CF:83:92:CB:5C:D6:0D:A0:71:97:B8:9E:4E:ED:D9:CE X509v3 Authority Key Identifier: keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:72:b8:6e:54:d3:b5:0d:42:82:0a:02:71:64:66:b5:e5:e7: 0a:9d:e5:37:45:16:95:b8:f3:c0:d2:76:47:a9:0e:7b:68:e4: 45:c5:78:74:42:8e:7f:31:f2:4c:91:bb:2e:4b:ce:9e:b4:9e: cb:04:94:cc:da:7b:dd:75:28:37:ed:6e:71:d3:bb:7e:01:98: fd:9d:ea:62:86:8a:9a:e1:c7:f8:12:4c:42:82:e5:07:53:e8: e7:d2:d3:ae:e7:99:4c:16:dd:d5:9f:a7:17:fc:3b:13:6b:c9: b8:75:43:17:f0:7a:71:47:aa:fa:b8:80:8c:26:70:31:44:78: b3:19:e8:f8:45:f2:0c:e0:40:8c:5c:7f:15:19:f3:f2:e4:7b: d9:3d:99:51:0f:55:ba:c0:1a:f2:82:e1:a3:91:a1:66:e8:71: 3f:35:3e:a8:0a:55:48:7a:ae:e5:2a:42:0d:3b:96:8a:29:c1: 6e:4d:e0:31:d6:22:b9:ac:5d:c0:71:fc:27:0d:ef:99:e1:d3: 91:88:8c:69:e7:75:b7:7f:ad:f8:ac:84:10:70:c6:ca:22:82: f1:ee:da:93:69:62:c5:a6:99:18:2e:4f:88:71:8c:18:48:60: a7:b7:5f:1c:aa:da:a3:61:eb:48:eb:ad:a5:a2:a8:48:ba:58: 07:4a:01:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODFENTExMC8GA1UEBRMoNTM0NEQ2QkIzN0VBMENDMzkxRDEyNDIwN0FEOTk1RkNE NzdCOUU5NTAeFw0yNTA3MDMwNzAzMjRaFw0yNTA3MTAwNzAzMjRaMBgxFjAUBgNV BAMTDTY4NjYyYjNjLTc4OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+wSZ2Ro1VC0wIgQrxCYjKtwkEkC0S+fR2hIaO2yIKLiolZatTsY0D2QfGpN2t oq26BLi8EebzLIfzl4iYA4G4Poi8U9lxJt6hZ8wApfvp9jwjjFE2SoJ8DbBgaHVq 6KvHxSexNpAWT3QmEqlAGBIdu5OLIfRGQw02hECtZbGFzhIfbS78SJJOAWYd+psA 7RqxhJTgLaSNW2A4DuMGW4dmcjH29Igkz56LYXyZbtQzexhRB6aTmuuTUOsEouCS lqfoyiXq2hX1NI2XpNN28HPOtjw7FGeDJhNniKkjpVHqp/5Fc+iBvq5YDk4XFLwx 2+cjRRmDDXdzlISmLQRjMtdVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrDcsLs+D kstc1g2gcZe4nk7t2c4wHwYDVR0jBBgwFoAUU0TWuzfqDMOR0SQgetmV/Nd7npUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MUQ1LzY2NURCN0M2QTdD MDExRUY5OEJBNUUyQUM0RjlBRTAyL1UwVFd1emZxRE1PUjBTUWdldG1WX05kN25w VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTBUV3V6ZnFETU9SMFNRZ2V0bVZfTmQ3bnBVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MUQ1LzY2NURCN0M2QTdDMDExRUY5OEJBNUUyQUM0RjlBRTAyL1UwVFd1emZxRE1P UjBTUWdldG1WX05kN25wVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACVyuG5U07UNQoIKAnFkZrXl5wqd5TdFFpW488DSdkepDnto5EXFeHRC jn8x8kyRuy5Lzp60nssElMzae911KDftbnHTu34BmP2d6mKGiprhx/gSTEKC5QdT 6OfS067nmUwW3dWfpxf8OxNrybh1QxfwenFHqvq4gIwmcDFEeLMZ6PhF8gzgQIxc fxUZ8/Lke9k9mVEPVbrAGvKC4aORoWbocT81PqgKVUh6ruUqQg07loopwW5N4DHW IrmsXcBx/CcN75nh05GIjGnndbd/rfishBBwxsoigvHu2pNpYsWmmRguT4hxjBhI YKe3Xxyq2qNh60jrraWiqEi6WAdKASM= -----END CERTIFICATE-----Generated at Fri Jul 4 21:59:11 2025 by rpki-client