$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft File: C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json) Hash identifier: hr8B190LO6OjcW2cqeLl08kdQif2uyqXfe44S9v+YBg= Subject key identifier: 9D:C2:63:78:4F:12:20:A7:94:C2:AB:AE:57:C6:03:6A:D0:12:AE:DE Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C Certificate issuer: /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Certificate serial: 0AC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft Manifest number: 0AB5 Signing time: Wed 02 Jul 2025 19:45:42 +0000 Manifest this update: Wed 02 Jul 2025 19:45:41 +0000 Manifest next update: Wed 09 Jul 2025 19:45:41 +0000 Files and hashes: 1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: t3zcJ+xF0dmqqgBcwe8/mkrHRuC6HLmR+UNUVOoWG0Y=) 2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: mPyJyn/hNgsJM5dLLqcQiKjGiDQ28uU6I1BenfIYNic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2756 (0xac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Validity Not Before: Jul 2 19:45:41 2025 GMT Not After : Jul 9 19:45:41 2025 GMT Subject: CN=68658c66-e94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:9e:5b:90:d6:cb:33:dd:84:a9:af:18:ef: 14:7c:d6:93:4d:e0:9b:31:48:34:18:88:06:d6:cc: 53:1a:12:8c:ca:52:e7:11:ce:b8:64:8f:9b:39:ad: 6d:76:9e:52:b1:ac:79:fe:0c:49:21:62:18:d4:82: 1e:fc:02:12:b1:0f:90:7b:45:6b:8e:67:be:8e:7d: 8c:df:2e:77:f9:9c:e9:87:e1:48:b8:5a:fd:a1:2d: 04:0e:ef:e1:dd:9b:e2:19:e3:7e:5e:3c:10:3c:b1: b1:f7:d4:9a:31:e8:eb:ca:90:31:da:4c:5b:81:95: af:71:85:4e:93:ef:00:cf:35:f1:e1:5b:82:fd:07: 67:99:3a:17:64:06:45:93:2f:ec:4f:d6:ea:26:24: 51:49:da:89:d3:47:40:9c:8f:38:4c:38:1f:92:5a: 1b:17:dc:a9:de:06:5c:fd:44:df:d2:0d:cc:d8:1e: df:0f:31:7d:e4:32:aa:7e:c7:9a:a7:d6:90:65:13: d2:f0:85:60:b9:69:4d:5e:f8:26:e5:06:8e:00:ac: 1b:78:74:66:4c:31:26:cb:33:95:f4:3e:e2:12:77: 1d:b6:66:42:60:1b:41:eb:d9:5b:c7:ba:aa:cd:e0: 2f:c7:5d:d6:c8:b1:6a:36:38:31:b0:be:59:a4:80: 8e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C2:63:78:4F:12:20:A7:94:C2:AB:AE:57:C6:03:6A:D0:12:AE:DE X509v3 Authority Key Identifier: keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:7b:1a:2e:2a:b1:df:67:d5:02:c7:44:04:c7:c5:1f:6f:fa: d7:42:bc:ae:96:0b:3f:17:a5:33:f4:cf:2d:19:8c:08:4e:b9: d0:27:20:a9:9a:88:a0:e6:4b:a8:ba:c6:18:f9:8c:5a:26:16: 87:66:76:1e:c7:2d:67:20:45:d6:df:4c:85:e9:5c:89:a9:45: b9:f1:17:6c:09:f9:fe:92:34:11:67:80:3c:c6:30:55:76:23: dd:57:46:91:56:b3:60:ff:b2:75:2d:cc:ac:91:45:f0:48:f8: 75:ef:48:4b:3f:80:75:72:e4:46:8d:7e:f7:e8:d5:d3:be:e5: 93:40:71:30:b9:95:3a:be:11:2e:7c:c4:b2:4a:1c:0a:ab:a0: 86:0b:5a:68:e9:01:95:f2:24:bf:e2:f3:18:ca:ee:a1:c4:28: 45:23:8e:15:64:50:c7:8b:d9:e8:49:2d:26:04:50:ef:f9:38: 3a:1a:f0:39:50:ec:31:a5:5d:f4:07:85:90:76:ee:bd:5e:1e: c7:50:48:83:f8:dc:f7:60:ba:b2:13:84:4a:0c:f1:ed:2e:20: 81:90:77:81:58:83:b4:6f:08:6f:71:4c:27:54:34:d5:db:51: c9:5e:2f:4e:50:1f:0f:19:98:84:e3:68:3e:8c:8b:76:a8:f8: f3:44:2b:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFMUYxMTAvBgNVBAUTKDBCQkQ3MDU4OTBGMjc4RTFENTkzRTk4QTc0RjAzNDcw Rjc5NEZFNUMwHhcNMjUwNzAyMTk0NTQxWhcNMjUwNzA5MTk0NTQxWjAYMRYwFAYD VQQDEw02ODY1OGM2Ni1lOTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs96eW5DWyzPdhKmvGO8UfNaTTeCbMUg0GIgG1sxTGhKMylLnEc64ZI+bOa1t dp5Ssax5/gxJIWIY1IIe/AISsQ+Qe0Vrjme+jn2M3y53+Zzph+FIuFr9oS0EDu/h 3ZviGeN+XjwQPLGx99SaMejrypAx2kxbgZWvcYVOk+8AzzXx4VuC/QdnmToXZAZF ky/sT9bqJiRRSdqJ00dAnI84TDgfklobF9yp3gZc/UTf0g3M2B7fDzF95DKqfsea p9aQZRPS8IVguWlNXvgm5QaOAKwbeHRmTDEmyzOV9D7iEncdtmZCYBtB69lbx7qq zeAvx13WyLFqNjgxsL5ZpICOLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3CY3hP EiCnlMKrrlfGA2rQEq7eMB8GA1UdIwQYMBaAFAu9cFiQ8njh1ZPpinTwNHD3lP5c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUUxRi8wMUY3RDZDQTU4 NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVPSFZrLW1LZFBBMGNQZVVf bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3MXdXSkR5ZU9IVmstbUtkUEEwY1BlVV9sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUUxRi8wMUY3RDZDQTU4NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVP SFZrLW1LZFBBMGNQZVVfbHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJexouKrHfZ9UCx0QEx8Ufb/rXQryulgs/F6Uz9M8tGYwITrnQJyCp moig5kuousYY+YxaJhaHZnYexy1nIEXW30yF6VyJqUW58RdsCfn+kjQRZ4A8xjBV diPdV0aRVrNg/7J1LcyskUXwSPh170hLP4B1cuRGjX736NXTvuWTQHEwuZU6vhEu fMSyShwKq6CGC1po6QGV8iS/4vMYyu6hxChFI44VZFDHi9noSS0mBFDv+Tg6GvA5 UOwxpV30B4WQdu69Xh7HUEiD+Nz3YLqyE4RKDPHtLiCBkHeBWIO0bwhvcUwnVDTV 21HJXi9OUB8PGZiE42g+jIt2qPjzRCtt -----END CERTIFICATE-----Generated at Wed Jul 2 21:39:51 2025 by rpki-client