$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft File: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json) Hash identifier: KJJkups3TABkdWm0gJOKH+G/25Ir9F3D8cTuivOh8FU= Subject key identifier: 81:A4:56:EE:46:5A:CF:D3:56:39:95:0B:1A:23:A0:E7:71:9C:94:C7 Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Certificate serial: 0746 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft Manifest number: 0740 Signing time: Fri 04 Jul 2025 22:07:09 +0000 Manifest this update: Fri 04 Jul 2025 22:07:09 +0000 Manifest next update: Fri 11 Jul 2025 22:07:09 +0000 Files and hashes: 1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: 709/cHsxWb7FQzk6c9Vip2PZhoPWKiKPQHqNkAaJ6Cw=) 2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: eouLcn6xbW+smuD9alEZOIdw6JtJlwl4bM7bG8MTvHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1862 (0x746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Validity Not Before: Jul 4 22:07:09 2025 GMT Not After : Jul 11 22:07:09 2025 GMT Subject: CN=6868508d-45f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:d6:2f:a2:55:95:02:c0:9e:fc:16:8e:52: 8e:84:44:8d:41:36:2c:9c:4a:dc:21:fe:e7:dd:5f: b7:87:59:b0:b1:03:9d:a5:09:2a:43:bb:98:07:e1: f4:2c:0f:52:99:02:24:c0:08:65:6f:92:72:e9:3d: 8b:dd:1a:a7:10:38:ca:04:fd:2f:1e:71:b8:48:a0: 4a:63:92:94:8a:c5:0a:3c:28:30:00:ad:8a:97:bb: 37:fe:0a:03:e3:c7:42:af:76:91:f8:4d:a0:32:e3: e7:04:a4:3a:22:cb:33:83:21:db:a3:79:e7:1c:43: ca:ea:19:53:43:7e:fd:b0:47:0b:57:0a:5d:75:ed: 28:a9:fe:77:f4:b5:62:17:38:21:17:b6:c1:b7:04: f2:46:62:9e:9c:3f:ef:0c:85:01:6e:c4:85:4e:49: a6:f9:0a:0c:20:5e:bb:d9:c4:ed:e1:a2:24:23:b3: 4a:d3:df:dd:79:25:28:7f:f8:ad:ee:90:3f:37:56: 6d:b9:3d:f0:5a:0f:d4:35:db:69:b4:16:2b:bb:d7: dc:ca:5c:d1:0b:f6:07:22:13:23:7c:aa:c3:d8:39: 91:30:9d:d2:76:9c:01:36:89:81:86:39:80:af:8e: 03:e8:22:09:44:8e:8d:7a:96:f1:5d:b9:14:4e:19: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A4:56:EE:46:5A:CF:D3:56:39:95:0B:1A:23:A0:E7:71:9C:94:C7 X509v3 Authority Key Identifier: keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:97:22:d4:7a:3a:ee:83:fb:4b:b7:51:51:be:97:0e:51:6c: 26:2c:1e:6d:57:16:00:a6:e8:ed:5d:79:51:f8:3d:bd:e4:0f: c1:20:cf:93:c0:93:2b:8b:10:8d:e5:8c:9f:7d:39:3b:85:8c: 75:ac:b0:29:cb:65:5a:52:8c:91:ef:bd:ec:c5:61:4e:6d:0e: ad:e1:65:af:44:81:7f:fa:57:e4:74:bf:e3:65:2a:6e:8c:2d: 63:15:86:18:30:f6:75:74:53:86:5b:3e:e1:26:3a:f6:0d:ba: 66:9f:2c:8b:e3:ef:8f:84:2d:c9:4f:2b:4b:99:a9:78:4e:e6: b4:67:a6:b6:d2:fe:8e:04:2c:31:22:1d:c9:bd:1f:ec:c0:2d: d2:5d:68:65:c6:68:b3:44:7e:b0:94:b4:85:82:6a:21:7f:f6: ae:07:2b:db:a8:fe:3d:88:c5:1d:8e:dd:5c:9b:2e:2d:35:82: d2:59:8f:fd:c7:02:7d:59:08:a5:cf:4d:80:1b:c9:fb:66:64: 20:f4:bd:8b:21:a4:7d:4e:7a:0c:af:e1:7b:38:8f:f1:54:72: 2e:0b:8f:85:f2:b6:20:fc:26:97:36:4a:26:09:7e:c3:64:ba: 97:13:e4:9b:aa:4d:53:b5:b4:b0:03:eb:d5:66:6b:ac:5c:b7: 93:2b:60:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw NzhGMUU4ODEwHhcNMjUwNzA0MjIwNzA5WhcNMjUwNzExMjIwNzA5WjAYMRYwFAYD VQQDEw02ODY4NTA4ZC00NWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArt/WL6JVlQLAnvwWjlKOhESNQTYsnErcIf7n3V+3h1mwsQOdpQkqQ7uYB+H0 LA9SmQIkwAhlb5Jy6T2L3RqnEDjKBP0vHnG4SKBKY5KUisUKPCgwAK2Kl7s3/goD 48dCr3aR+E2gMuPnBKQ6IsszgyHbo3nnHEPK6hlTQ379sEcLVwpdde0oqf539LVi FzghF7bBtwTyRmKenD/vDIUBbsSFTkmm+QoMIF672cTt4aIkI7NK09/deSUof/it 7pA/N1ZtuT3wWg/UNdtptBYru9fcylzRC/YHIhMjfKrD2DmRMJ3SdpwBNomBhjmA r44D6CIJRI6NepbxXbkUThntnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGkVu5G Ws/TVjmVCxojoOdxnJTHMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My9BRkI2QkY3NjMzNDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxO VDd2eUdJVzlyMjBIang2SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTlyLUejrug/tLt1FRvpcOUWwmLB5tVxYApujtXXlR+D295A/BIM+T wJMrixCN5YyffTk7hYx1rLApy2VaUoyR773sxWFObQ6t4WWvRIF/+lfkdL/jZSpu jC1jFYYYMPZ1dFOGWz7hJjr2DbpmnyyL4++PhC3JTytLmal4Tua0Z6a20v6OBCwx Ih3JvR/swC3SXWhlxmizRH6wlLSFgmohf/auByvbqP49iMUdjt1cmy4tNYLSWY/9 xwJ9WQilz02AG8n7ZmQg9L2LIaR9TnoMr+F7OI/xVHIuC4+F8rYg/CaXNkomCX7D ZLqXE+Sbqk1TtbSwA+vVZmusXLeTK2BB -----END CERTIFICATE-----Generated at Sun Jul 6 01:36:52 2025 by rpki-client