$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json) Hash identifier: 3R8GFY94jWUwM1JbzeIUA0rx9PVlgU8ZE1e+s3ADZPw= Subject key identifier: 84:63:8A:27:A5:89:B7:47:2D:31:89:E6:DC:68:C6:CC:35:23:68:37 Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Certificate serial: 0551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft Manifest number: 0549 Signing time: Wed 02 Jul 2025 23:44:34 +0000 Manifest this update: Wed 02 Jul 2025 23:44:34 +0000 Manifest next update: Wed 09 Jul 2025 23:44:34 +0000 Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: ZJ9oFz/4E8UjI+gPYsgLDzZP90LWybN8Vj8ITvpo3IA=) 2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: IJTuUd/n8OCJ5dJ8YqUV7DdTVdb9JOIyqBQaxiAGn2k=) 3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: ZpRAboF0Zy0eld2L5SbNx4a1RdCdtnze/MEYgH64xko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Validity Not Before: Jul 2 23:44:34 2025 GMT Not After : Jul 9 23:44:34 2025 GMT Subject: CN=6865c462-7406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:22:dd:55:1d:5d:f6:57:03:97:cf:70:48: 68:e5:df:6b:8e:57:a8:0d:29:c4:6a:83:b3:20:f5: ff:83:ff:4a:27:e9:14:cd:00:64:08:6e:e1:db:3c: 93:68:15:ac:38:88:c5:b0:63:c7:41:c9:21:e0:b0: ee:a3:4d:c8:bc:a1:99:28:e6:92:d9:6a:79:d0:38: 7c:99:57:46:92:a3:f4:6b:b3:49:f9:74:4b:90:02: bb:b6:31:43:e2:a7:ef:b3:10:80:fc:24:c6:3b:d8: 2f:fe:a1:d8:6f:e3:9d:1e:e7:0e:b3:c6:05:77:f2: 8e:45:54:eb:e1:f8:ea:39:12:f0:ae:b4:b0:45:49: 4a:82:76:63:95:27:64:d1:cc:b0:cf:3f:22:82:c6: 05:5b:dc:30:74:80:87:92:ea:f1:8b:4a:88:c9:ec: 0c:9a:30:b5:55:47:ce:21:02:c7:ad:b8:7f:26:a9: 17:0b:bf:43:e9:e5:a2:2a:3d:9f:b2:fe:aa:6a:3e: 51:1b:60:1b:f6:a8:f7:39:df:5c:ee:11:10:f6:26: 6f:1a:3f:b4:4d:06:ad:22:62:bb:67:19:ba:ce:3b: 8a:27:1b:a0:57:38:d6:b3:e9:73:e9:3a:f2:ac:d3: 96:ea:9f:0c:b1:e3:4e:24:32:06:b9:06:45:e4:33: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:63:8A:27:A5:89:B7:47:2D:31:89:E6:DC:68:C6:CC:35:23:68:37 X509v3 Authority Key Identifier: keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:dd:75:6a:d8:9c:53:78:ca:3d:10:57:d0:05:03:e3:f9:c6: 37:a9:fd:0a:63:f9:26:8c:ea:b7:f8:ed:b8:c4:e3:05:08:13: 5b:67:20:8d:76:86:4f:e3:2d:88:8b:6b:5d:12:82:23:c1:3d: 03:9a:0a:81:82:6f:ec:8b:93:7e:10:43:6b:36:33:a4:4f:5e: 8e:fc:68:bc:b2:ac:50:bf:e0:9d:b5:fd:89:e3:4f:4b:0c:d0: d2:9b:d2:eb:49:ba:f4:d8:6e:07:ff:8b:4e:45:39:b3:a2:e5: ff:c1:80:7b:99:a9:3f:10:af:cd:1b:ce:e9:37:a3:9a:33:c3: 4b:46:e2:f6:76:d9:3d:85:95:9e:ea:9b:51:21:ba:65:ba:23: 22:e0:32:b7:7a:46:eb:ee:79:b0:65:0c:63:ff:c6:de:0e:cc: 7b:0c:1f:46:d5:4a:1a:5c:5d:ac:24:6f:2c:1f:42:b2:ab:86: f1:f5:cc:f2:9e:9e:47:b4:b1:62:f7:00:8e:14:1b:28:cd:71: f8:13:84:5b:9b:6a:de:84:14:b0:26:de:52:26:00:50:a9:c8: 17:9e:59:d8:5e:d0:2e:67:85:b3:0b:4a:2d:94:4d:8a:01:fa: 93:57:37:a5:62:d0:11:6b:18:03:77:08:3a:f7:0f:30:50:6a: fd:fd:00:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyNTExMTAvBgNVBAUTKDUzRDVEQjg3MEU1Q0NENDhFOThENzM1NjBEQkQ1RTY1 OTQ2QzJERDQwHhcNMjUwNzAyMjM0NDM0WhcNMjUwNzA5MjM0NDM0WjAYMRYwFAYD VQQDEw02ODY1YzQ2Mi03NDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaAi3VUdXfZXA5fPcEho5d9rjleoDSnEaoOzIPX/g/9KJ+kUzQBkCG7h2zyT aBWsOIjFsGPHQckh4LDuo03IvKGZKOaS2Wp50Dh8mVdGkqP0a7NJ+XRLkAK7tjFD 4qfvsxCA/CTGO9gv/qHYb+OdHucOs8YFd/KORVTr4fjqORLwrrSwRUlKgnZjlSdk 0cywzz8igsYFW9wwdICHkurxi0qIyewMmjC1VUfOIQLHrbh/JqkXC79D6eWiKj2f sv6qaj5RG2Ab9qj3Od9c7hEQ9iZvGj+0TQatImK7Zxm6zjuKJxugVzjWs+lz6Try rNOW6p8MseNOJDIGuQZF5DP/qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRjiiel ibdHLTGJ5txoxsw1I2g3MB8GA1UdIwQYMBaAFFPV24cOXM1I6Y1zVg29XmWUbC3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTI1MS9EOTNENzk2MEY3 NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pVanBqWE5XRGIxZVpaUnNM ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U5WGJodzVjelVqcGpYTldEYjFlWlpSc0xkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTI1MS9EOTNENzk2MEY3NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pV anBqWE5XRGIxZVpaUnNMZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH3XVq2JxTeMo9EFfQBQPj+cY3qf0KY/kmjOq3+O24xOMFCBNbZyCN doZP4y2Ii2tdEoIjwT0DmgqBgm/si5N+EENrNjOkT16O/Gi8sqxQv+Cdtf2J409L DNDSm9LrSbr02G4H/4tORTmzouX/wYB7mak/EK/NG87pN6OaM8NLRuL2dtk9hZWe 6ptRIbpluiMi4DK3ekbr7nmwZQxj/8beDsx7DB9G1UoaXF2sJG8sH0Kyq4bx9czy np5HtLFi9wCOFBsozXH4E4Rbm2rehBSwJt5SJgBQqcgXnlnYXtAuZ4WzC0otlE2K AfqTVzelYtARaxgDdwg69w8wUGr9/QC9 -----END CERTIFICATE-----Generated at Thu Jul 3 10:47:26 2025 by rpki-client