$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft File: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft (raw, json) Hash identifier: VDudPM2yHDrVpvq9NIdDfTV4CftVBE5F3neE6kO5j78= Subject key identifier: 92:E0:39:FF:AB:E4:FC:3A:F6:B5:0F:FD:B2:76:28:30:FA:7D:7C:F5 Authority key identifier: AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A Certificate issuer: /CN=A91B5BD4/serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft Manifest number: 01E7 Signing time: Tue 01 Jul 2025 03:00:21 +0000 Manifest this update: Tue 01 Jul 2025 03:00:21 +0000 Manifest next update: Tue 08 Jul 2025 03:00:21 +0000 Files and hashes: 1: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl (hash: 3l0Rv2K0hVzNRbNaRJxWA+98AwB42ZrfzNVeY/LHDZk=) 2: C248DFA26DBB11EDB3635D28C4F9AE02.roa (hash: gQzK7hVZPrZ6aKsXhdiMNjPzCoQYQhoW/DlG0FlsTCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5BD4, serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A Validity Not Before: Jul 1 03:00:21 2025 GMT Not After : Jul 8 03:00:21 2025 GMT Subject: CN=68634f45-1cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:79:c6:8a:3d:9a:38:ea:b7:6c:91:f3:d2: 81:91:68:c0:3b:fa:93:29:7a:31:59:26:e4:10:bf: 48:bf:4e:84:dc:8b:d2:b1:af:3d:68:aa:cf:4f:78: 1f:34:fe:00:af:70:ac:53:1b:d5:2e:34:99:13:6c: 7f:73:4e:3e:e7:10:51:77:49:c0:6c:a2:b2:e0:38: e8:b8:af:15:4d:46:c7:ef:86:3f:be:ac:c6:ca:d0: 17:fd:9d:6c:eb:cd:be:19:3b:b5:35:30:a4:8d:3d: af:3b:88:72:e3:63:9d:6e:89:77:19:01:bd:21:8c: a4:34:25:d6:32:54:a9:b0:9e:b8:b6:5d:1e:bd:11: 29:ea:47:35:0d:5c:50:c3:a6:db:60:19:04:b9:bd: b2:3f:37:8c:2e:95:63:4b:a7:07:e6:9e:3f:22:0a: a9:5e:a3:a6:58:02:5f:4a:89:7c:c4:10:fc:59:c0: ad:cf:57:fe:a8:54:b1:f4:8a:b9:d4:2b:e4:94:1d: 4a:e2:32:f3:97:53:3d:cb:b7:eb:54:c1:d4:80:33: af:cb:c0:2f:bb:ae:fa:0e:40:5c:84:09:47:19:4c: 40:47:3f:15:50:f6:d4:80:82:6e:01:a4:e0:26:b7: 5f:d7:cb:3a:85:82:be:28:8a:95:4b:aa:e3:e2:5c: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E0:39:FF:AB:E4:FC:3A:F6:B5:0F:FD:B2:76:28:30:FA:7D:7C:F5 X509v3 Authority Key Identifier: keyid:AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:4e:ba:57:72:d4:47:57:11:20:ca:f2:17:d7:a9:b9:f1:1f: 9f:a5:e3:de:0b:8c:40:e4:55:75:be:58:48:66:34:24:12:52: b6:fa:6e:1b:4a:0c:03:ca:02:0a:19:ae:19:4c:a2:12:c7:a7: 54:2b:0d:a0:3e:53:10:6e:bf:8d:7f:56:92:45:01:27:52:b5: 49:de:38:2b:b9:42:0d:a1:20:8e:b8:d2:0d:2b:9f:c0:07:ae: 92:db:4c:4d:8d:a3:7e:a1:40:2b:26:09:31:00:ff:1e:56:3a: 2a:de:00:47:3c:22:f4:e8:32:b6:68:25:e7:9e:4e:36:fc:22: a4:f7:a2:eb:0d:fc:3b:75:df:94:c4:d3:e1:d6:c3:ca:16:11: f4:cf:3f:da:98:e3:4e:a8:c3:b6:9b:0b:31:9b:ed:4e:58:bc: 86:19:91:9c:dc:2f:75:e5:01:07:a5:91:2d:0a:ae:a5:60:b7: 85:f4:20:39:16:dc:99:d3:88:d7:f4:c2:65:98:41:2e:4b:8c: 64:e6:c7:5b:74:2f:7f:df:c7:ef:ae:29:ff:5b:a1:40:69:99: 2b:12:2b:58:98:36:a5:97:32:b5:70:44:96:69:da:d9:d9:3f: 60:e9:e2:ed:23:35:6c:61:54:bb:43:e8:96:50:98:80:04:d6: cd:6c:13:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVCRDQxMTAvBgNVBAUTKEFENDFGQjgyN0Y5MzEwNEI4OUZBNkZBNzg1RjIxMTUw QkU2Rjk3OUEwHhcNMjUwNzAxMDMwMDIxWhcNMjUwNzA4MDMwMDIxWjAYMRYwFAYD VQQDEw02ODYzNGY0NS0xY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvj15xoo9mjjqt2yR89KBkWjAO/qTKXoxWSbkEL9Iv06E3IvSsa89aKrPT3gf NP4Ar3CsUxvVLjSZE2x/c04+5xBRd0nAbKKy4DjouK8VTUbH74Y/vqzGytAX/Z1s 682+GTu1NTCkjT2vO4hy42Odbol3GQG9IYykNCXWMlSpsJ64tl0evREp6kc1DVxQ w6bbYBkEub2yPzeMLpVjS6cH5p4/IgqpXqOmWAJfSol8xBD8WcCtz1f+qFSx9Iq5 1CvklB1K4jLzl1M9y7frVMHUgDOvy8Avu676DkBchAlHGUxARz8VUPbUgIJuAaTg Jrdf18s6hYK+KIqVS6rj4lzM+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLgOf+r 5Pw69rUP/bJ2KDD6fXz1MB8GA1UdIwQYMBaAFK1B+4J/kxBLifpvp4XyEVC+b5ea MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUJENC8wOEFENkQyMjZE QjgxMUVEODgzM0ZBMERDNEY5QUUwMi9yVUg3Z24tVEVFdUotbS1uaGZJUlVMNXZs NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVSDdnbi1URUV1Si1tLW5oZklSVUw1dmw1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUJENC8wOEFENkQyMjZEQjgxMUVEODgzM0ZBMERDNEY5QUUwMi9yVUg3Z24tVEVF dUotbS1uaGZJUlVMNXZsNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjTrpXctRHVxEgyvIX16m58R+fpePeC4xA5FV1vlhIZjQkElK2+m4b SgwDygIKGa4ZTKISx6dUKw2gPlMQbr+Nf1aSRQEnUrVJ3jgruUINoSCOuNINK5/A B66S20xNjaN+oUArJgkxAP8eVjoq3gBHPCL06DK2aCXnnk42/CKk96LrDfw7dd+U xNPh1sPKFhH0zz/amONOqMO2mwsxm+1OWLyGGZGc3C915QEHpZEtCq6lYLeF9CA5 FtyZ04jX9MJlmEEuS4xk5sdbdC9/38fvrin/W6FAaZkrEitYmDallzK1cESWadrZ 2T9g6eLtIzVsYVS7Q+iWUJiABNbNbBPc -----END CERTIFICATE-----Generated at Tue Jul 1 05:15:00 2025 by rpki-client