$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft File: _U5c-75RNAFgOW1ZbhsySM_IHMQ.mft (raw, json) Hash identifier: vYtFqWlEYRLm1toF6q37R9/5HFQSgYl86URDgen/wrk= Subject key identifier: 41:32:B5:93:D1:8E:23:15:91:75:78:87:72:67:4E:1E:E0:1F:DC:7F Authority key identifier: FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 Certificate issuer: /CN=A91B5CEA/serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft Manifest number: 01EE Signing time: Sun 29 Jun 2025 01:44:20 +0000 Manifest this update: Sun 29 Jun 2025 01:44:19 +0000 Manifest next update: Sun 06 Jul 2025 01:44:19 +0000 Files and hashes: 1: _U5c-75RNAFgOW1ZbhsySM_IHMQ.crl (hash: UV3EHaHLIWtfKccx1XB+fQ2CsL+bFtf4oMt9hFq0Cyg=) 2: B42198DC64F211ED9AEC046FC4F9AE02.roa (hash: mfM+unwRd1y5KNLtchPVfnPJL1r2yUuTkpo8qV3b6dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Validity Not Before: Jun 29 01:44:19 2025 GMT Not After : Jul 6 01:44:19 2025 GMT Subject: CN=68609a74-b4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:3b:a2:9f:1d:06:f7:07:21:b5:42:86:54: 55:73:6e:79:d3:24:61:e9:b4:70:ee:64:f2:af:eb: f8:31:c9:26:03:51:fb:22:98:9f:f5:d5:ef:d0:76: 5d:11:14:cb:f9:cc:45:cc:b9:2f:4c:a2:c3:3a:50: 23:fb:a0:21:c7:ac:2d:99:7c:4b:35:f4:1d:2b:c5: 10:0d:47:76:60:72:cc:ca:de:00:24:8c:d5:8f:e7: c4:4c:e9:79:ab:6f:26:b1:08:9f:66:04:d0:47:2b: f3:89:6f:26:86:60:eb:07:42:ea:96:0f:5e:67:ad: ca:83:83:65:fb:fd:c9:e8:c7:78:73:50:36:d3:fd: 5b:42:16:73:e5:dd:19:8a:0d:f2:e4:90:67:66:eb: 80:0b:27:de:24:cb:e4:9b:84:56:68:f3:b1:32:7c: 42:4c:c4:f2:56:fd:8e:64:12:38:bb:51:26:dd:d5: d8:2b:13:38:2b:85:a1:17:2f:1e:1d:bf:3d:4a:5d: 79:80:34:b1:9f:92:19:c2:97:e4:cc:92:a3:cf:79: 11:f5:c8:07:e4:a9:49:3d:1a:4b:1b:a2:25:97:6c: 2f:5a:22:5a:96:71:c4:24:78:41:59:87:3d:55:fd: 89:f3:f6:3e:7b:95:ad:61:77:fa:82:a9:3f:63:8b: 71:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:32:B5:93:D1:8E:23:15:91:75:78:87:72:67:4E:1E:E0:1F:DC:7F X509v3 Authority Key Identifier: keyid:FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:7e:b8:38:83:52:ed:33:14:48:15:6a:b8:a5:8e:7b:f2:f2: 61:5c:d7:c5:24:1f:76:c6:79:94:14:ab:a4:6f:43:c7:14:53: d6:a8:cb:44:55:6c:99:96:1e:6b:c1:fd:2a:3b:49:89:77:a3: 5b:3e:b6:f6:08:0d:0f:f3:99:c8:24:70:d7:b9:21:d3:eb:90: 14:d5:9f:01:d3:c2:af:71:97:de:3b:77:7a:81:34:69:d6:c3: 9e:c2:10:9c:2f:f9:63:a8:2d:29:15:56:fa:73:86:30:0b:af: c3:68:b9:5f:bb:0c:b9:d3:68:fb:57:63:e8:83:89:fc:3b:dc: 01:db:e2:a7:11:63:73:68:30:6d:97:a7:32:09:b5:10:be:82: a0:e6:b4:01:3f:8b:2a:eb:ef:f6:ae:76:8d:76:a8:4b:82:22: 8b:55:43:36:9d:3d:00:ce:ca:1a:83:55:7c:79:a9:34:02:64: d0:4f:8c:ce:06:ac:f7:8b:77:0b:e0:f4:94:b1:b9:2f:40:d8: 1a:ff:cc:bc:08:07:9d:88:dc:df:38:79:e6:6f:34:ee:75:c0: ce:ee:c6:71:01:95:bf:67:55:4e:4e:24:78:df:a8:38:67:50: d0:99:94:76:c4:62:25:f3:22:e2:b6:d8:05:c8:59:11:b1:5e: 05:f6:b9:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKEZENEU1Q0ZCQkU1MTM0MDE2MDM5NkQ1OTZFMUIzMjQ4 Q0ZDODFDQzQwHhcNMjUwNjI5MDE0NDE5WhcNMjUwNzA2MDE0NDE5WjAYMRYwFAYD VQQDEw02ODYwOWE3NC1iNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuo07op8dBvcHIbVChlRVc2550yRh6bRw7mTyr+v4MckmA1H7Ipif9dXv0HZd ERTL+cxFzLkvTKLDOlAj+6Ahx6wtmXxLNfQdK8UQDUd2YHLMyt4AJIzVj+fETOl5 q28msQifZgTQRyvziW8mhmDrB0Lqlg9eZ63Kg4Nl+/3J6Md4c1A20/1bQhZz5d0Z ig3y5JBnZuuACyfeJMvkm4RWaPOxMnxCTMTyVv2OZBI4u1Em3dXYKxM4K4WhFy8e Hb89Sl15gDSxn5IZwpfkzJKjz3kR9cgH5KlJPRpLG6Ill2wvWiJalnHEJHhBWYc9 Vf2J8/Y+e5WtYXf6gqk/Y4txdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEytZPR jiMVkXV4h3JnTh7gH9x/MB8GA1UdIwQYMBaAFP1OXPu+UTQBYDltWW4bMkjPyBzE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8yOEE3N0I2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5BRmdPVzFaYmhzeVNNX0lI TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VNWMtNzVSTkFGZ09XMVpiaHN5U01fSUhNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8yOEE3N0I2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5B RmdPVzFaYmhzeVNNX0lITVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTfrg4g1LtMxRIFWq4pY578vJhXNfFJB92xnmUFKukb0PHFFPWqMtE VWyZlh5rwf0qO0mJd6NbPrb2CA0P85nIJHDXuSHT65AU1Z8B08KvcZfeO3d6gTRp 1sOewhCcL/ljqC0pFVb6c4YwC6/DaLlfuwy502j7V2Pog4n8O9wB2+KnEWNzaDBt l6cyCbUQvoKg5rQBP4sq6+/2rnaNdqhLgiKLVUM2nT0Azsoag1V8eak0AmTQT4zO Bqz3i3cL4PSUsbkvQNga/8y8CAediNzfOHnmbzTudcDO7sZxAZW/Z1VOTiR436g4 Z1DQmZR2xGIl8yLittgFyFkRsV4F9rlD -----END CERTIFICATE-----Generated at Tue Jul 1 02:39:35 2025 by rpki-client