$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: i0nBudEEO/L04cpzXM49c+WFAwt+BbLIqUwEqXQur44= Subject key identifier: E0:29:4B:C2:3B:79:C7:F9:56:4C:01:88:86:9A:2C:7A:72:61:E3:34 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 014C Signing time: Thu 03 Jul 2025 04:18:38 +0000 Manifest this update: Thu 03 Jul 2025 04:18:37 +0000 Manifest next update: Thu 10 Jul 2025 04:18:37 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: OAsR2g9MrHfh6qG1R67YKwkH86VLI9RB8/UWfQkgTuk=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: 5Y7qsAaq9WIcozANz4ZXMikS+vaHk2RGINX/W4ZA3l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Jul 3 04:18:37 2025 GMT Not After : Jul 10 04:18:37 2025 GMT Subject: CN=6866049e-d47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:6c:cb:fd:18:b9:1d:af:21:d6:1d:b6:78: 72:40:70:c4:4c:4a:64:e3:59:95:2b:55:63:ef:c8: fb:09:92:c6:fa:3e:94:93:98:98:b7:99:28:aa:d4: 41:cf:6e:c5:70:92:7c:ce:8d:62:e0:d7:05:95:b1: f0:06:86:2d:98:df:cc:2e:14:cf:58:54:70:56:71: f5:cb:46:95:13:35:93:b4:fd:f0:b4:90:a7:92:7d: 79:8b:eb:c3:a1:d3:96:e4:c7:92:c8:4a:bc:b0:12: 21:e8:04:a9:50:cf:07:be:6d:b8:bd:9b:f3:b3:24: 41:4d:7e:a1:94:22:2b:35:19:0e:e8:9b:f2:1d:f6: 04:bf:c9:93:f9:bd:e7:7f:74:41:9c:85:c6:5a:71: ac:00:a4:2f:4b:92:8c:f7:f2:48:ec:98:a8:ef:29: 9e:95:30:f2:02:97:e2:d3:79:c0:c9:eb:8b:f5:37: 8b:6f:45:c2:23:1a:20:55:2f:d2:12:7c:55:58:eb: 09:46:2a:80:7e:4a:59:f8:44:92:5a:89:ed:ab:8e: 20:93:58:c2:92:be:24:2d:87:8d:02:ae:ab:3c:a9: 53:3c:84:d0:a9:21:2c:0e:bf:15:69:0c:2b:68:52: 0e:29:35:e6:13:74:cb:5c:a6:6b:14:89:78:f4:e1: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:29:4B:C2:3B:79:C7:F9:56:4C:01:88:86:9A:2C:7A:72:61:E3:34 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:57:c3:27:8c:aa:fe:db:7c:e9:1f:29:a8:03:2a:f3:ab:75: 28:8a:7f:e8:0b:7e:64:d9:37:b4:51:00:f4:a8:90:3f:38:81: 3f:6d:e5:58:e8:6b:08:f2:a1:34:f1:90:6f:7a:b9:a2:f3:b6: a9:5d:38:99:c6:95:db:1e:0c:33:cb:cb:30:9e:44:57:8b:00: 98:a7:be:f2:cd:d7:a7:5f:d7:f0:36:54:ef:fc:f2:94:b0:22: 7c:37:02:dc:14:f0:81:54:c2:16:c8:96:95:25:77:b2:2f:eb: df:db:21:b6:e5:63:84:8a:4a:ef:a9:9d:fa:c1:22:58:c5:8f: 2c:49:af:c7:ff:e7:77:f3:df:68:ac:fd:03:99:83:49:fa:26: 6f:83:37:17:72:3d:e0:5a:0f:44:68:dc:2f:93:d6:81:32:aa: b6:09:63:1a:8a:10:43:08:25:12:8b:07:09:f7:0a:51:70:13: 87:8a:18:3b:66:fb:bd:44:9d:3a:73:97:19:92:40:dc:47:df: c7:d5:ff:5b:3f:d0:a0:98:f6:fd:00:02:85:0b:d6:82:ee:e3: 39:8e:85:04:5b:90:36:4e:74:1a:4f:69:94:76:0f:21:0d:0a: 31:02:ea:af:40:10:97:29:2d:52:8b:7a:9b:da:0e:79:3f:8e: 80:87:ff:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUwNzAzMDQxODM3WhcNMjUwNzEwMDQxODM3WjAYMRYwFAYD VQQDEw02ODY2MDQ5ZS1kNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/xsy/0YuR2vIdYdtnhyQHDETEpk41mVK1Vj78j7CZLG+j6Uk5iYt5koqtRB z27FcJJ8zo1i4NcFlbHwBoYtmN/MLhTPWFRwVnH1y0aVEzWTtP3wtJCnkn15i+vD odOW5MeSyEq8sBIh6ASpUM8Hvm24vZvzsyRBTX6hlCIrNRkO6JvyHfYEv8mT+b3n f3RBnIXGWnGsAKQvS5KM9/JI7Jio7ymelTDyApfi03nAyeuL9TeLb0XCIxogVS/S EnxVWOsJRiqAfkpZ+ESSWontq44gk1jCkr4kLYeNAq6rPKlTPITQqSEsDr8VaQwr aFIOKTXmE3TLXKZrFIl49OGH8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOApS8I7 ecf5VkwBiIaaLHpyYeM0MB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtV8MnjKr+23zpHymoAyrzq3Uoin/oC35k2Te0UQD0qJA/OIE/beVY 6GsI8qE08ZBvermi87apXTiZxpXbHgwzy8swnkRXiwCYp77yzdenX9fwNlTv/PKU sCJ8NwLcFPCBVMIWyJaVJXeyL+vf2yG25WOEikrvqZ36wSJYxY8sSa/H/+d3899o rP0DmYNJ+iZvgzcXcj3gWg9EaNwvk9aBMqq2CWMaihBDCCUSiwcJ9wpRcBOHihg7 Zvu9RJ06c5cZkkDcR9/H1f9bP9CgmPb9AAKFC9aC7uM5joUEW5A2TnQaT2mUdg8h DQoxAuqvQBCXKS1Si3qb2g55P46Ah/93 -----END CERTIFICATE-----Generated at Thu Jul 3 08:04:42 2025 by rpki-client