$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft File: aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft (raw, json) Hash identifier: lJvQhjOJpoXAtOHlHk3NQ6UfSNMiRy6gcLUMOE2rZE0= Subject key identifier: 5B:E0:20:E1:7A:71:6A:65:8B:92:C4:D0:CD:B5:12:14:7D:DF:86:ED Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA Certificate issuer: /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft Manifest number: 53 Signing time: Thu 03 Jul 2025 07:33:14 +0000 Manifest this update: Thu 03 Jul 2025 07:33:13 +0000 Manifest next update: Thu 10 Jul 2025 07:33:13 +0000 Files and hashes: 1: aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl (hash: GnG8J6y0JFq8GZJ9KD3iPO1anCs4+uuT//CQ8BjOJto=) 2: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (hash: C95CWdcWS0/9Z9oU15qyADSExZ8oTkF5cAIWUUfMLiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA Validity Not Before: Jul 3 07:33:13 2025 GMT Not After : Jul 10 07:33:13 2025 GMT Subject: CN=68663239-6169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:d3:da:29:21:50:e3:90:0d:66:6c:c9:ee: f4:4a:50:1b:af:1a:49:cc:c8:ac:7e:ee:bf:b9:cf: b0:ad:de:18:a0:a3:d3:2b:0f:66:03:52:7a:a0:95: 42:b5:39:33:21:34:6f:d5:dc:52:95:d7:55:56:f7: 71:ee:39:c3:76:a2:31:c5:ef:b5:bc:da:4a:1b:a0: f1:c5:ae:cb:f3:a2:b5:17:c2:c6:61:1b:20:f9:8d: fc:2f:ed:40:1d:04:15:36:3a:ef:c9:54:a0:78:e1: b6:ff:46:07:f7:c9:e3:24:6c:a0:4d:1f:7d:92:a1: 48:e7:63:4b:23:3f:50:5c:00:ed:47:0f:18:53:70: 86:ac:84:3a:a4:7a:e3:cd:15:e7:db:3a:cc:b0:5a: cb:cb:98:a1:08:5e:25:37:37:e8:34:d7:86:9e:19: c9:e7:fc:d8:ee:0d:aa:83:e1:34:15:0b:a7:69:39: a1:0a:b2:8d:39:a6:96:c8:dc:5f:51:29:2a:72:07: be:2d:bf:94:c4:71:9b:d6:7d:f3:fe:53:50:e4:c9: 1c:cd:bf:11:2a:da:ba:b3:55:f0:8f:fa:de:70:b0: c8:21:1d:f0:df:a3:82:cb:c9:8e:f3:46:10:fd:ad: 8e:4e:82:b5:97:dd:ff:ae:68:64:de:10:37:92:d6: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E0:20:E1:7A:71:6A:65:8B:92:C4:D0:CD:B5:12:14:7D:DF:86:ED X509v3 Authority Key Identifier: keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ae:e5:07:7f:19:94:6a:1d:6c:e6:27:20:a4:5d:4d:5d:65: 71:1a:12:ae:5d:78:d8:d8:79:c8:dc:be:c3:b7:af:2b:3d:07: 3a:97:03:40:cc:9a:4e:f7:c2:d6:bc:a0:08:b3:e0:fb:93:77: 50:62:7f:cb:fe:b2:b4:f6:b7:82:6c:38:58:3c:57:80:56:77: 90:63:cc:a8:a7:5b:87:f0:10:e2:89:e6:d9:44:0f:c8:85:c4: ec:1d:4a:2d:83:33:0f:dd:c6:a4:d4:a8:1f:6b:66:98:1b:4d: aa:52:7a:cb:b6:12:c5:44:e0:02:77:1e:95:6a:67:e2:65:68: f1:0f:49:03:25:eb:f5:f3:ca:e9:03:6e:0a:59:77:91:7c:88: 4c:13:26:23:e9:e0:f6:14:01:39:2b:cb:56:3a:41:a0:0b:06: 56:d5:b4:d4:b8:b1:98:17:ea:42:27:00:61:7a:1a:84:bc:bb: 7f:06:04:2c:6f:ee:be:a5:a0:47:87:d4:0b:92:5f:73:f1:15: 03:25:7a:8d:85:7e:7e:27:ac:0f:21:a0:0f:88:73:09:da:39: c2:22:98:52:e7:25:fb:8b:9c:6d:a4:f2:3f:aa:e9:78:cf:12: 35:34:e5:63:d8:1f:f3:26:0a:38:c9:ca:1a:2c:51:d0:4d:40: c1:27:e2:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTIwODExMC8GA1UEBRMoNjhBRDBEMDQ3MEY2QUM2RjE5QzY0RUVGNDA5NEVFMEJC NTg3MUVEQTAeFw0yNTA3MDMwNzMzMTNaFw0yNTA3MTAwNzMzMTNaMBgxFjAUBgNV BAMTDTY4NjYzMjM5LTYxNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE8NPaKSFQ45ANZmzJ7vRKUBuvGknMyKx+7r+5z7Ct3higo9MrD2YDUnqglUK1 OTMhNG/V3FKV11VW93HuOcN2ojHF77W82koboPHFrsvzorUXwsZhGyD5jfwv7UAd BBU2Ou/JVKB44bb/Rgf3yeMkbKBNH32SoUjnY0sjP1BcAO1HDxhTcIashDqkeuPN FefbOsywWsvLmKEIXiU3N+g014aeGcnn/NjuDaqD4TQVC6dpOaEKso05ppbI3F9R KSpyB74tv5TEcZvWffP+U1DkyRzNvxEq2rqzVfCP+t5wsMghHfDfo4LLyY7zRhD9 rY5OgrWX3f+uaGTeEDeS1r4BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW+Ag4Xpx amWLksTQzbUSFH3fhu0wHwYDVR0jBBgwFoAUaK0NBHD2rG8Zxk7vQJTuC7WHHtow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1MjA4LzlFMjg1NTdFRTRF RTExRUZCMUVENzYwRUM0RjlBRTAyL2FLME5CSEQyckc4WnhrN3ZRSlR1QzdXSEh0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUswTkJIRDJyRzhaeGs3dlFKVHVDN1dISHRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 MjA4LzlFMjg1NTdFRTRFRTExRUZCMUVENzYwRUM0RjlBRTAyL2FLME5CSEQyckc4 WnhrN3ZRSlR1QzdXSEh0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEOu5Qd/GZRqHWzmJyCkXU1dZXEaEq5deNjYecjcvsO3rys9BzqXA0DM mk73wta8oAiz4PuTd1Bif8v+srT2t4JsOFg8V4BWd5BjzKinW4fwEOKJ5tlED8iF xOwdSi2DMw/dxqTUqB9rZpgbTapSesu2EsVE4AJ3HpVqZ+JlaPEPSQMl6/XzyukD bgpZd5F8iEwTJiPp4PYUATkry1Y6QaALBlbVtNS4sZgX6kInAGF6GoS8u38GBCxv 7r6loEeH1AuSX3PxFQMleo2Ffn4nrA8hoA+IcwnaOcIimFLnJfuLnG2k8j+q6XjP EjU05WPYH/MmCjjJyhosUdBNQMEn4lQ= -----END CERTIFICATE-----Generated at Sat Jul 5 05:34:53 2025 by rpki-client