$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: i3IWYCGrQDRe21zqirt916bI8mnxqB1reTJFteUUi0w= Subject key identifier: F9:84:03:5E:37:D9:E6:50:87:9B:1E:D9:2F:4A:1A:0D:07:F9:BB:F0 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: EF Signing time: Tue 01 Jul 2025 05:57:39 +0000 Manifest this update: Tue 01 Jul 2025 05:57:38 +0000 Manifest next update: Tue 08 Jul 2025 05:57:38 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: S62CIMR+0maudOqJmjORRHY/hn/7GbcC25SDqBnGrbI=) 2: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: AU3yamyux9/p0ToAAMhAyNL8bseyjrWTlbYkE9w/k9M=) 3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: mPhmdB3u77MjPIXuTMC6SqVuUpltsogHZVo7FcoDq+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Jul 1 05:57:38 2025 GMT Not After : Jul 8 05:57:38 2025 GMT Subject: CN=686378d2-5bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a2:a3:8c:21:c5:e1:0b:86:91:a3:24:5f:0b: 85:5e:31:a6:13:a5:b1:ab:a5:8b:04:9c:b3:8b:91: 44:f8:70:8c:0e:f6:c5:d3:83:cd:3a:35:ab:43:1a: ae:bd:cb:19:95:8c:dd:ad:e4:d2:09:7a:d4:1d:d3: 00:73:ed:1e:91:eb:69:8a:4f:43:9f:ca:19:30:f7: 95:cc:2d:a0:39:28:4a:b3:77:ad:f1:1f:50:34:21: 18:3b:f3:56:02:fb:3d:66:8b:bb:12:7b:d7:b1:ee: 96:cb:64:4e:ea:91:21:6d:3e:35:61:65:71:de:89: c6:9b:80:d8:b3:5e:d1:ed:f6:c3:78:02:1d:0b:a1: a1:d8:21:b1:64:cf:15:be:aa:1f:a2:84:7c:4c:eb: e8:65:db:a2:c5:f1:09:79:36:e4:70:a8:7d:73:29: 08:e2:67:2b:19:ae:3c:a3:e8:80:4a:a6:b4:4a:b1: 70:23:80:87:30:7a:c1:8b:7f:3e:9f:c4:49:7b:09: 68:09:f4:a1:d7:d4:09:ef:20:80:5e:97:c7:b8:d5: 80:11:d1:3f:6f:d5:0a:c6:e5:cd:44:e1:7d:ad:87: b0:5a:7b:0b:31:47:7e:4b:8e:c7:d6:d5:53:1d:d3: 0a:76:f6:f9:90:a2:48:ba:4b:6f:aa:de:9d:aa:2f: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:84:03:5E:37:D9:E6:50:87:9B:1E:D9:2F:4A:1A:0D:07:F9:BB:F0 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:37:e0:ca:4f:cb:ea:c1:db:ef:82:b7:58:38:72:0a:09:3a: 59:1e:9f:5e:25:b4:51:5e:f9:04:a4:f3:70:7b:77:a7:55:8e: 4e:12:5f:8d:07:2c:da:69:fd:59:cc:ff:04:7f:1b:80:88:16: 83:67:93:5e:f4:12:29:f8:bd:30:7f:1a:aa:26:c4:45:2c:d9: 30:64:7a:1c:63:86:32:6f:bb:f6:11:28:5f:e5:82:02:8b:11: a4:7e:77:19:cf:cc:70:60:6e:d8:42:c0:09:5e:b2:13:a6:74: 8e:04:eb:fa:0b:f8:ae:be:a0:bf:15:6c:05:3b:ab:1a:68:83: 8b:b1:b0:2e:55:06:06:0b:d9:84:97:c2:85:25:07:63:b9:c4: 9c:bc:11:5a:0b:38:59:98:9b:7b:39:26:f9:09:f1:2d:1e:c2: 3c:ec:66:d4:8c:07:6b:9d:80:ce:69:5d:31:04:1c:e9:db:cb: 9b:22:93:fa:80:c9:9b:2e:f3:5b:70:16:ff:ca:4a:90:97:80: 75:39:17:0f:5b:c4:b8:66:5b:92:98:d1:a0:5d:c8:ab:1a:97: 15:81:d2:54:da:14:b6:a2:47:e3:5f:e5:12:37:0f:c3:f1:10: 12:fb:46:d4:df:7c:5d:35:d3:7f:a2:f8:03:f3:e4:64:03:f0: b7:80:61:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUwNzAxMDU1NzM4WhcNMjUwNzA4MDU1NzM4WjAYMRYwFAYD VQQDEw02ODYzNzhkMi01YmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7qKjjCHF4QuGkaMkXwuFXjGmE6Wxq6WLBJyzi5FE+HCMDvbF04PNOjWrQxqu vcsZlYzdreTSCXrUHdMAc+0eketpik9Dn8oZMPeVzC2gOShKs3et8R9QNCEYO/NW Avs9Zou7EnvXse6Wy2RO6pEhbT41YWVx3onGm4DYs17R7fbDeAIdC6Gh2CGxZM8V vqofooR8TOvoZduixfEJeTbkcKh9cykI4mcrGa48o+iASqa0SrFwI4CHMHrBi38+ n8RJewloCfSh19QJ7yCAXpfHuNWAEdE/b9UKxuXNROF9rYewWnsLMUd+S47H1tVT HdMKdvb5kKJIuktvqt6dqi+81QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmEA143 2eZQh5se2S9KGg0H+bvwMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3N+DKT8vqwdvvgrdYOHIKCTpZHp9eJbRRXvkEpPNwe3enVY5OEl+N Byzaaf1ZzP8EfxuAiBaDZ5Ne9BIp+L0wfxqqJsRFLNkwZHocY4Yyb7v2EShf5YIC ixGkfncZz8xwYG7YQsAJXrITpnSOBOv6C/iuvqC/FWwFO6saaIOLsbAuVQYGC9mE l8KFJQdjucScvBFaCzhZmJt7OSb5CfEtHsI87GbUjAdrnYDOaV0xBBzp28ubIpP6 gMmbLvNbcBb/ykqQl4B1ORcPW8S4ZluSmNGgXcirGpcVgdJU2hS2okfjX+USNw/D 8RAS+0bU33xdNdN/ovgD8+RkA/C3gGGq -----END CERTIFICATE-----Generated at Tue Jul 1 13:54:36 2025 by rpki-client