$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft File: t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json) Hash identifier: D/S79lgFyB+YyMDzklpF6/aGim6tJ0u/lVmSblbEbfU= Subject key identifier: D7:0E:A4:D9:F5:CD:02:37:E9:37:90:61:7F:8B:37:98:ED:9D:CF:71 Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 Certificate issuer: /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft Manifest number: D0 Signing time: Thu 03 Jul 2025 05:50:20 +0000 Manifest this update: Thu 03 Jul 2025 05:50:20 +0000 Manifest next update: Thu 10 Jul 2025 05:50:20 +0000 Files and hashes: 1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: nwjXOMTaIA/NgXuhJz3uTQybZFTRByyI0v0OW8zNpiA=) 2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: h1iGqKYaoNj3rvyh2GNyWQUuRTq6Az6gkGmiqF75xZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Validity Not Before: Jul 3 05:50:20 2025 GMT Not After : Jul 10 05:50:20 2025 GMT Subject: CN=68661a1c-147e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:02:c0:78:33:9d:69:69:7d:e2:0a:5d:4a: 48:35:2c:1a:84:b5:2a:d5:58:df:81:32:cf:bf:79: 02:e5:af:39:5a:44:9e:55:f7:3a:03:00:e9:41:db: 21:dc:6f:40:4e:7e:17:98:4c:54:c0:72:8e:c4:11: 49:31:88:4d:45:8e:51:d0:52:09:1e:5a:76:36:f2: 27:0d:c8:36:fc:da:40:be:0a:94:af:af:97:84:57: ae:18:92:0f:8a:32:90:71:36:c1:df:c1:7e:bc:fc: 94:10:e7:86:bc:b3:09:2b:5b:9f:56:20:a3:24:29: f6:6d:e8:e3:65:c3:f7:52:35:af:c5:01:34:85:ff: a2:5a:04:af:3a:df:a5:3b:83:04:e7:1f:a6:5e:58: 19:be:17:3a:f4:fd:e8:d9:64:e7:f4:c9:6f:04:59: de:e6:f2:5f:5a:14:87:0b:e7:c5:44:96:54:86:a2: 07:f1:41:b5:72:a6:76:3d:38:5e:b8:19:b0:55:93: ea:eb:88:94:e7:ed:89:7f:21:b6:45:08:ea:e1:b4: 7f:20:f1:6f:02:6b:14:21:b5:7e:8e:ca:97:46:b6: 63:b0:e4:20:97:c5:6d:5e:ca:ee:32:17:8e:5c:29: b4:be:cc:11:ae:08:2c:a1:ca:6c:78:80:61:bd:08: 9a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0E:A4:D9:F5:CD:02:37:E9:37:90:61:7F:8B:37:98:ED:9D:CF:71 X509v3 Authority Key Identifier: keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:49:a6:47:ef:db:e1:6e:ef:c4:0e:6c:67:f9:b6:3d:c0:8c: 81:8a:74:a6:e4:c6:7d:9e:67:4b:ff:91:2c:c0:66:4b:0d:6c: 59:e7:14:85:02:5f:35:d8:f4:b6:b5:ca:90:63:98:08:6b:ee: 25:88:d6:58:e5:fb:12:6b:44:2f:4a:81:cc:0c:77:f7:6b:d4: bf:fa:0a:d3:8e:c7:a2:47:1e:3c:62:45:2f:f6:58:d4:18:58: 3a:6c:c4:a6:14:e8:6f:4f:ec:4a:5a:85:8a:1b:b4:15:e3:72: 50:7a:51:2b:66:fa:9f:24:f5:d2:a0:d1:36:43:6a:89:57:07: dc:4f:f1:ec:ec:2a:e6:21:10:ec:0b:88:bb:89:10:a7:7d:1f: 57:7b:df:bb:9a:35:f6:a6:e4:a0:7b:a1:95:91:fc:ba:5d:5b: 67:07:f9:6b:51:e6:ef:69:32:64:27:1d:6e:7e:c1:36:8f:b4: c7:22:6e:af:fe:13:89:70:53:6c:b4:11:d5:aa:b0:3c:45:04: 3a:72:f8:49:b6:d4:7a:94:9b:a7:eb:3b:f7:79:2e:2e:f2:6f: bf:14:ea:83:92:38:0d:b3:9b:a8:37:db:e2:6b:54:93:1d:e1: c0:fa:99:d1:be:84:7d:b9:bb:84:92:e2:99:65:7e:88:48:8f: 7c:09:ed:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMTExMTAvBgNVBAUTKEI3OTRGOTk3MzNFRUZDM0ZBMDAwM0Y2ODhGNjRDOUMz NTM5MjY2QjUwHhcNMjUwNzAzMDU1MDIwWhcNMjUwNzEwMDU1MDIwWjAYMRYwFAYD VQQDEw02ODY2MWExYy0xNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJsCwHgznWlpfeIKXUpINSwahLUq1VjfgTLPv3kC5a85WkSeVfc6AwDpQdsh 3G9ATn4XmExUwHKOxBFJMYhNRY5R0FIJHlp2NvInDcg2/NpAvgqUr6+XhFeuGJIP ijKQcTbB38F+vPyUEOeGvLMJK1ufViCjJCn2bejjZcP3UjWvxQE0hf+iWgSvOt+l O4ME5x+mXlgZvhc69P3o2WTn9MlvBFne5vJfWhSHC+fFRJZUhqIH8UG1cqZ2PThe uBmwVZPq64iU5+2JfyG2RQjq4bR/IPFvAmsUIbV+jsqXRrZjsOQgl8VtXsruMheO XCm0vswRrggsocpseIBhvQia7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcOpNn1 zQI36TeQYX+LN5jtnc9xMB8GA1UdIwQYMBaAFLeU+Zcz7vw/oAA/aI9kycNTkma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUxMS83QkNGODEyODFD QTgxMUVGQTUwMzBCNERDNEY5QUUwMi90NVQ1bHpQdV9ELWdBRDlvajJUSncxT1Na clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1VDVselB1X0QtZ0FEOW9qMlRKdzFPU1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUxMS83QkNGODEyODFDQTgxMUVGQTUwMzBCNERDNEY5QUUwMi90NVQ1bHpQdV9E LWdBRDlvajJUSncxT1NaclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3SaZH79vhbu/EDmxn+bY9wIyBinSm5MZ9nmdL/5EswGZLDWxZ5xSF Al812PS2tcqQY5gIa+4liNZY5fsSa0QvSoHMDHf3a9S/+grTjseiRx48YkUv9ljU GFg6bMSmFOhvT+xKWoWKG7QV43JQelErZvqfJPXSoNE2Q2qJVwfcT/Hs7CrmIRDs C4i7iRCnfR9Xe9+7mjX2puSge6GVkfy6XVtnB/lrUebvaTJkJx1ufsE2j7THIm6v /hOJcFNstBHVqrA8RQQ6cvhJttR6lJun6zv3eS4u8m+/FOqDkjgNs5uoN9via1ST HeHA+pnRvoR9ubuEkuKZZX6ISI98Ce2X -----END CERTIFICATE-----Generated at Fri Jul 4 18:26:07 2025 by rpki-client