$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft File: r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json) Hash identifier: gzmTbJHbpxi28SLdcUaF1vLom6JSZYJv5dvgnz6pmbo= Subject key identifier: 31:00:75:9B:E4:0C:DF:A6:70:6C:25:71:CB:34:62:A3:3C:03:9A:FD Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 Certificate issuer: /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft Manifest number: 05E3 Signing time: Wed 02 Jul 2025 23:17:21 +0000 Manifest this update: Wed 02 Jul 2025 23:17:21 +0000 Manifest next update: Wed 09 Jul 2025 23:17:21 +0000 Files and hashes: 1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: +E2iJoiPQi9JOELY0jdHSlYD4E6KAqa8vmcPfPqychA=) 2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: LpIzyfQvDqArXC9hZJ5ZqGifDCSL9ldak3ZwH8S2NRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Validity Not Before: Jul 2 23:17:21 2025 GMT Not After : Jul 9 23:17:21 2025 GMT Subject: CN=6865be01-a86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:b3:81:e2:6b:61:a3:35:e7:93:f6:3f:c4: c6:e1:d1:7a:c6:7f:d0:d0:a5:7d:83:63:a6:88:39: cf:d3:b1:e0:39:c3:45:37:fc:57:fe:40:14:e4:57: 17:1c:4d:d3:47:8d:74:15:7d:55:30:2b:6e:6c:f9: 7c:c9:5d:cb:90:61:2d:7e:c2:67:89:f2:84:3f:d8: cc:6f:63:de:6b:aa:ea:16:6a:17:03:01:a1:50:bb: 55:87:8d:b5:58:f5:28:65:02:d5:55:71:4d:8c:55: 8a:22:bc:1c:fb:f8:99:c7:d8:3c:f9:a0:41:20:36: 68:2c:85:68:31:08:6e:59:e5:87:e6:1b:2e:0a:40: 61:c7:2c:3d:82:5f:3b:0b:eb:a2:66:f2:99:3d:e3: 3d:a5:ea:7b:70:c4:66:e6:96:a5:d3:87:c7:1c:d3: 66:28:cf:b1:1a:4f:48:70:97:ea:c9:28:6e:88:f0: 55:bc:9c:0f:e8:43:c4:83:56:3c:da:3c:f5:bc:1e: 21:27:f6:e1:41:d5:ed:c8:ae:74:26:79:61:dc:d4: 07:6f:43:fb:d9:df:27:89:d6:90:69:f3:f5:3e:ac: c0:6d:26:e6:bb:61:44:4d:17:f5:20:eb:4f:67:f5: f2:9a:ad:7f:17:54:db:96:e0:e0:48:e1:6a:de:7a: 9e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:00:75:9B:E4:0C:DF:A6:70:6C:25:71:CB:34:62:A3:3C:03:9A:FD X509v3 Authority Key Identifier: keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:54:a1:ef:8d:75:38:e8:91:69:6b:1b:c9:4f:ae:f2:85:59: 7d:eb:8b:86:cb:80:28:49:b5:7d:7d:12:a0:b4:ac:42:63:5b: a0:9a:54:f8:e1:bd:59:a0:9b:18:ec:f4:66:7b:aa:c3:ef:ad: 6f:74:7a:84:09:9c:5b:30:59:7b:b6:6f:6a:11:da:05:73:d9: e8:b4:75:43:27:57:b8:17:38:77:e0:b8:43:c4:cb:42:80:75: 1f:88:8d:00:62:e0:5e:50:34:08:2a:09:fd:a4:90:04:0c:bb: 1a:62:67:ff:76:af:7a:90:bd:4e:8e:57:a9:1a:ad:50:6b:fb: 31:0e:de:31:04:01:2a:36:3b:ba:c8:78:6b:f9:02:0f:c7:95: dd:0d:a7:70:b0:91:5c:88:a5:bb:ff:c5:a8:4b:da:35:aa:41: 6c:0a:f0:f2:35:0e:13:20:60:02:77:f7:2c:84:f8:09:d3:52: 8b:fd:17:31:96:73:b9:6a:f5:9a:17:db:36:7f:a5:60:55:8d: b2:25:0e:e3:86:01:e9:64:d8:60:ba:3b:d2:23:b4:0b:f5:88: ba:cd:97:10:ac:0d:4b:0b:f7:3d:74:8d:82:fb:fe:97:eb:f3: 14:90:c2:a9:19:7a:6a:af:cc:83:4b:95:8b:86:b1:ea:11:0e: 0b:d3:9c:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGMkQxMTAvBgNVBAUTKEFGRUVGN0EyRjgzMUE5NzU1QjEzQjM3RUI2RTlCOTFE ODFFOEE5RTgwHhcNMjUwNzAyMjMxNzIxWhcNMjUwNzA5MjMxNzIxWjAYMRYwFAYD VQQDEw02ODY1YmUwMS1hODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/+zgeJrYaM155P2P8TG4dF6xn/Q0KV9g2OmiDnP07HgOcNFN/xX/kAU5FcX HE3TR410FX1VMCtubPl8yV3LkGEtfsJnifKEP9jMb2Pea6rqFmoXAwGhULtVh421 WPUoZQLVVXFNjFWKIrwc+/iZx9g8+aBBIDZoLIVoMQhuWeWH5hsuCkBhxyw9gl87 C+uiZvKZPeM9pep7cMRm5pal04fHHNNmKM+xGk9IcJfqyShuiPBVvJwP6EPEg1Y8 2jz1vB4hJ/bhQdXtyK50Jnlh3NQHb0P72d8nidaQafP1PqzAbSbmu2FETRf1IOtP Z/Xymq1/F1TbluDgSOFq3nqehQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEAdZvk DN+mcGwlccs0YqM8A5r9MB8GA1UdIwQYMBaAFK/u96L4Mal1WxOzfrbpuR2B6Kno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC9GRDg2MEY2OEJD NkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFYVmJFN04tdHVtNUhZSG9x ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItNzNvdmd4cVhWYkU3Ti10dW01SFlIb3FlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkYyRC9GRDg2MEY2OEJDNkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFY VmJFN04tdHVtNUhZSG9xZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUVKHvjXU46JFpaxvJT67yhVl964uGy4AoSbV9fRKgtKxCY1ugmlT4 4b1ZoJsY7PRme6rD761vdHqECZxbMFl7tm9qEdoFc9notHVDJ1e4Fzh34LhDxMtC gHUfiI0AYuBeUDQIKgn9pJAEDLsaYmf/dq96kL1OjlepGq1Qa/sxDt4xBAEqNju6 yHhr+QIPx5XdDadwsJFciKW7/8WoS9o1qkFsCvDyNQ4TIGACd/cshPgJ01KL/Rcx lnO5avWaF9s2f6VgVY2yJQ7jhgHpZNhgujvSI7QL9Yi6zZcQrA1LC/c9dI2C+/6X 6/MUkMKpGXpqr8yDS5WLhrHqEQ4L05zD -----END CERTIFICATE-----Generated at Thu Jul 3 00:53:10 2025 by rpki-client