$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft File: up0rragmh4TwCuhYcC744p5ytLw.mft (raw, json) Hash identifier: Mvjog2UBDogxwbmJSD1sKAFKgxS03rfUZUS2dUKGsS8= Subject key identifier: 51:79:55:24:71:B4:BB:33:0F:56:9B:54:E4:FA:AB:5F:79:63:BE:F7 Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC Certificate issuer: /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft Manifest number: 34A9 Signing time: Wed 02 Jul 2025 14:30:14 +0000 Manifest this update: Wed 02 Jul 2025 14:30:13 +0000 Manifest next update: Wed 09 Jul 2025 14:30:13 +0000 Files and hashes: 1: up0rragmh4TwCuhYcC744p5ytLw.crl (hash: 0r71Mw0/+4sX8aRj5aHp8slFzXTu5YgEDKOp8YZV0Ag=) 2: 58D5764A683311ECB9C17757C4F9AE02.roa (hash: 9sEgtc+Sp4Uok1SqtxGHbFLBelwmukEEkeYE5w5yi/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Validity Not Before: Jul 2 14:30:13 2025 GMT Not After : Jul 9 14:30:13 2025 GMT Subject: CN=68654275-e78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:8f:60:37:04:5a:fe:ca:6a:b7:76:80:84: 6b:13:20:c9:b9:e3:22:ea:c0:23:38:59:17:fe:34: e1:cd:70:ac:6f:25:84:7f:84:ca:3f:a9:79:44:ae: 68:ea:e7:1c:2d:39:af:48:55:9c:8c:1e:c2:80:e2: 7e:13:2a:10:2e:f3:86:7c:76:8e:94:a8:93:66:22: 00:4d:ca:98:09:73:0a:20:03:05:4c:25:8f:3d:5b: 91:ae:05:b6:2c:ec:20:6b:3c:ed:5f:f2:16:b8:87: 3a:04:e8:d6:83:de:e6:97:ee:a0:cd:41:c0:d4:b1: 87:41:ba:00:f8:be:73:36:f2:b8:0b:c9:3c:d0:8c: 3a:0c:14:82:bc:4a:5e:1d:69:62:dd:4c:24:c2:20: 6c:da:b2:23:c1:9f:d4:ea:2c:7f:1a:96:54:7d:7b: b7:8e:b7:97:30:94:fd:12:aa:10:1a:4a:2a:4c:7a: 22:83:67:44:72:70:71:ab:66:b6:e3:41:df:df:78: 63:71:fa:52:5b:a9:74:f7:db:42:08:90:55:8c:34: 6f:3d:72:4a:15:a7:4a:71:d8:ab:56:1b:07:16:d3: 08:2d:d6:6e:28:80:c2:09:1f:4c:d6:90:0d:6f:0d: 36:e2:6d:bd:c2:33:09:14:47:b7:57:0d:92:7e:57: b2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:79:55:24:71:B4:BB:33:0F:56:9B:54:E4:FA:AB:5F:79:63:BE:F7 X509v3 Authority Key Identifier: keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:97:46:df:1d:5a:8e:c6:a2:99:23:e0:97:1c:e6:c1:05:08: fc:05:5c:e0:41:0f:f4:98:d8:2e:99:56:c6:bb:fa:26:a5:49: fb:9d:b8:47:5b:2e:f2:73:31:15:1e:1a:4e:7b:b3:ef:92:94: ec:fe:94:80:5f:44:d3:b8:68:44:cb:ae:8f:63:e2:7b:ea:ff: 0e:f2:50:dc:a8:44:be:54:07:6e:a9:aa:0a:80:96:53:5f:cf: c9:a9:cf:dc:b5:e5:af:4d:19:9e:8d:ce:88:3e:b4:a8:49:81: bb:bb:10:62:6c:ff:fa:59:0c:c8:a9:3d:dd:d4:f6:6e:a0:84: 4b:42:51:45:84:18:f5:bc:da:ea:ca:e4:10:91:47:8c:73:1c: 7a:df:fc:dd:a0:6c:ab:1b:24:97:63:a7:c9:44:f5:cb:e9:65: 6b:58:a4:03:7b:fd:fc:f3:a0:ce:fe:0e:47:21:ca:19:eb:6c: f5:31:86:d8:75:25:cf:69:5f:14:c8:b9:61:b5:bb:0c:93:5b: a9:fb:00:52:d8:6e:84:be:ff:66:e8:f9:a0:2a:f5:07:a3:4b: 81:09:f4:d7:a9:92:17:bb:df:69:9c:97:fa:1e:10:e6:8f:72: 50:69:82:9e:f5:31:09:03:39:72:4d:7f:f6:03:37:1e:f5:b0: 82:4a:7d:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFRTIxMTAvBgNVBAUTKEJBOUQyQkFEQTgyNjg3ODRGMDBBRTg1ODcwMkVGOEUy OUU3MkI0QkMwHhcNMjUwNzAyMTQzMDEzWhcNMjUwNzA5MTQzMDEzWjAYMRYwFAYD VQQDEw02ODY1NDI3NS1lNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt82PYDcEWv7Kard2gIRrEyDJueMi6sAjOFkX/jThzXCsbyWEf4TKP6l5RK5o 6uccLTmvSFWcjB7CgOJ+EyoQLvOGfHaOlKiTZiIATcqYCXMKIAMFTCWPPVuRrgW2 LOwgazztX/IWuIc6BOjWg97ml+6gzUHA1LGHQboA+L5zNvK4C8k80Iw6DBSCvEpe HWli3UwkwiBs2rIjwZ/U6ix/GpZUfXu3jreXMJT9EqoQGkoqTHoig2dEcnBxq2a2 40Hf33hjcfpSW6l099tCCJBVjDRvPXJKFadKcdirVhsHFtMILdZuKIDCCR9M1pAN bw024m29wjMJFEe3Vw2SfleyCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF5VSRx tLszD1abVOT6q195Y773MB8GA1UdIwQYMBaAFLqdK62oJoeE8AroWHAu+OKecrS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUVFMi82NDMyNEREODFE ODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0VHdDdWhZY0M3NDRwNXl0 THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMHJyYWdtaDRUd0N1aFljQzc0NHA1eXRMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUVFMi82NDMyNEREODFEODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0 VHdDdWhZY0M3NDRwNXl0THcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpl0bfHVqOxqKZI+CXHObBBQj8BVzgQQ/0mNgumVbGu/ompUn7nbhH Wy7yczEVHhpOe7PvkpTs/pSAX0TTuGhEy66PY+J76v8O8lDcqES+VAduqaoKgJZT X8/Jqc/cteWvTRmejc6IPrSoSYG7uxBibP/6WQzIqT3d1PZuoIRLQlFFhBj1vNrq yuQQkUeMcxx63/zdoGyrGySXY6fJRPXL6WVrWKQDe/3886DO/g5HIcoZ62z1MYbY dSXPaV8UyLlhtbsMk1up+wBS2G6Evv9m6PmgKvUHo0uBCfTXqZIXu99pnJf6HhDm j3JQaYKe9TEJAzlyTX/2Azce9bCCSn2Z -----END CERTIFICATE-----Generated at Thu Jul 3 07:11:05 2025 by rpki-client