$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json) Hash identifier: JbUyRpxjU5a32WKo7ElGkrNOvBRrW/pbWU1rbEhl8Dc= Subject key identifier: 05:29:6D:B4:DC:5F:7F:A9:E2:B0:B9:92:16:EA:DB:17:68:48:BB:E7 Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Certificate serial: 1D23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft Manifest number: 1D18 Signing time: Mon 30 Jun 2025 16:18:15 +0000 Manifest this update: Mon 30 Jun 2025 16:18:15 +0000 Manifest next update: Mon 07 Jul 2025 16:18:15 +0000 Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: 7gV60UL607ffQ5n/hwAgbPoAaR6tv184ryRmHzZoDYM=) 2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: XU2BtSx1XPF+OETuBQTO4A3xSlkRLbVqfxk4yTT8ml4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7459 (0x1d23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Validity Not Before: Jun 30 16:18:15 2025 GMT Not After : Jul 7 16:18:15 2025 GMT Subject: CN=6862b8c7-b175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0a:52:1e:8c:ab:4d:1e:d5:50:7f:97:d1:c6: c5:69:42:89:ed:52:07:64:af:e6:70:d2:c1:d4:27: 97:09:1e:91:5e:d9:1c:7a:e1:a1:f4:3c:f6:e4:84: 70:2f:55:8a:25:cc:d3:49:93:b6:05:df:75:92:a3: 69:0e:39:0d:7a:ad:f0:ee:8a:42:e3:0f:59:d9:49: 78:5f:61:fb:47:ac:88:e8:de:77:b1:c6:78:65:45: 3c:25:2b:1e:58:89:f9:26:c0:92:92:6a:d9:50:97: ce:08:07:7a:54:75:dc:ed:11:05:34:00:04:42:e8: 28:47:c5:3f:bb:29:7e:e2:a2:d2:e1:f9:d3:b9:71: 13:59:54:fc:bd:dc:82:f8:c9:da:67:08:11:49:45: 4a:16:3c:23:1d:a2:be:2d:0f:77:f5:d1:dc:fe:d3: d8:de:f5:fc:11:e0:eb:61:a1:aa:d5:5d:d8:04:94: f6:71:b6:f9:6a:39:d7:a9:a4:97:2f:cf:b6:9c:b7: fb:a2:14:ad:1f:04:27:fd:a4:c9:bb:98:00:33:1c: 04:eb:98:43:39:a4:32:09:d4:3c:b8:20:f5:79:8f: fd:03:f9:84:b9:f0:35:c3:3a:db:0e:97:cc:34:f2: 5e:eb:81:8d:da:3b:76:1d:8e:ca:30:42:5a:36:cb: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:29:6D:B4:DC:5F:7F:A9:E2:B0:B9:92:16:EA:DB:17:68:48:BB:E7 X509v3 Authority Key Identifier: keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c0:be:eb:35:c8:e4:e1:0b:1f:c2:66:fc:0a:07:7c:cf:a4: 49:bb:a5:37:f5:bc:62:29:e9:69:69:10:8c:46:a7:21:e9:06: e2:64:f5:85:04:e8:36:8d:29:ad:6c:c0:ea:da:6f:60:2b:74: bb:43:c8:f7:6f:6f:4b:da:5c:f3:9d:cd:a2:95:ce:5a:b9:9c: ff:9b:8e:0f:0a:64:2f:1a:3a:09:57:09:c1:58:a3:97:88:db: e3:ca:3a:79:84:26:e6:a7:46:9e:ae:15:8e:b4:ab:c4:a0:18: 63:70:28:a7:4f:d6:62:d9:e6:87:92:e1:e4:ee:38:95:76:3d: d4:96:c9:43:4c:cd:ee:66:5e:29:a9:d4:29:cf:83:f5:68:07: fa:35:a6:2e:4c:73:39:46:b6:41:ae:a7:17:cb:b3:ef:fb:54: a3:0d:31:8f:11:1f:eb:0c:0e:02:c9:a8:f2:c7:fc:34:13:60: 58:b4:30:b5:02:1f:49:45:43:26:e8:ff:07:f6:ff:fb:1c:6a: 0a:c5:b0:41:8e:52:28:3b:ad:39:e8:75:65:25:08:01:97:81: 4f:5d:f6:c1:b0:ce:4d:f6:32:c4:8f:22:24:84:d8:38:7d:98: a5:85:0b:37:5a:11:fb:dc:d5:a2:40:59:02:d9:85:09:d5:84: 37:4d:d6:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3 NTIyNjM1MTIwHhcNMjUwNjMwMTYxODE1WhcNMjUwNzA3MTYxODE1WjAYMRYwFAYD VQQDEw02ODYyYjhjNy1iMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9wpSHoyrTR7VUH+X0cbFaUKJ7VIHZK/mcNLB1CeXCR6RXtkceuGh9Dz25IRw L1WKJczTSZO2Bd91kqNpDjkNeq3w7opC4w9Z2Ul4X2H7R6yI6N53scZ4ZUU8JSse WIn5JsCSkmrZUJfOCAd6VHXc7REFNAAEQugoR8U/uyl+4qLS4fnTuXETWVT8vdyC +MnaZwgRSUVKFjwjHaK+LQ939dHc/tPY3vX8EeDrYaGq1V3YBJT2cbb5ajnXqaSX L8+2nLf7ohStHwQn/aTJu5gAMxwE65hDOaQyCdQ8uCD1eY/9A/mEufA1wzrbDpfM NPJe64GN2jt2HY7KMEJaNsu+jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUpbbTc X3+p4rC5khbq2xdoSLvnMB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ1Qi8xNzAyRkMzRUJCNjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVE a05ha1RtcnRWNmQxSW1OUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcwL7rNcjk4Qsfwmb8Cgd8z6RJu6U39bxiKelpaRCMRqch6QbiZPWF BOg2jSmtbMDq2m9gK3S7Q8j3b29L2lzznc2ilc5auZz/m44PCmQvGjoJVwnBWKOX iNvjyjp5hCbmp0aerhWOtKvEoBhjcCinT9Zi2eaHkuHk7jiVdj3UlslDTM3uZl4p qdQpz4P1aAf6NaYuTHM5RrZBrqcXy7Pv+1SjDTGPER/rDA4Cyajyx/w0E2BYtDC1 Ah9JRUMm6P8H9v/7HGoKxbBBjlIoO6056HVlJQgBl4FPXfbBsM5N9jLEjyIkhNg4 fZilhQs3WhH73NWiQFkC2YUJ1YQ3Tdb3 -----END CERTIFICATE-----Generated at Wed Jul 2 05:08:42 2025 by rpki-client