$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft File: x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json) Hash identifier: J0AUqDF62yLbsfY/XYOqI9D1VUW7H/512UFMGlocTnQ= Subject key identifier: 11:75:66:75:90:2A:5E:17:C1:8A:55:69:F3:85:3B:A1:34:62:10:22 Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE Certificate issuer: /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft Manifest number: 073C Signing time: Wed 02 Jul 2025 22:04:21 +0000 Manifest this update: Wed 02 Jul 2025 22:04:21 +0000 Manifest next update: Wed 09 Jul 2025 22:04:21 +0000 Files and hashes: 1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: 5wtZHYlHcLbFs0W9MK4c6Ikv4tqCmlOHBQoATQu5qYs=) 2: 2E7B4F0CD45811EF908AFE44C4F9AE02.roa (hash: 0gWp5PyGmTihYDNzToQweag+/yXIgKytaRcZImh3PUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB9, serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Validity Not Before: Jul 2 22:04:21 2025 GMT Not After : Jul 9 22:04:21 2025 GMT Subject: CN=6865ace5-c039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:28:1f:d7:71:95:71:c9:75:47:0e:31:92: 9e:ec:51:14:13:7c:e6:ec:3b:48:ae:65:44:1e:3d: ae:a8:46:bc:6f:79:6e:f1:a1:15:15:35:3e:53:e8: 7d:4b:cf:97:dc:31:78:da:10:59:ee:f4:51:e7:e1: 8e:00:05:e0:e6:cd:87:80:4e:77:fa:92:c5:19:31: 17:7a:a6:32:6b:05:d8:c4:85:a1:20:7b:10:d7:06: 7c:ea:0a:02:eb:21:65:4e:7b:2d:6e:39:a1:f6:22: a0:b8:a0:8e:14:f8:88:cd:80:cd:66:f9:ac:73:b6: 9b:7f:21:2a:22:2d:74:62:d2:92:9f:c2:ff:24:96: 43:86:60:94:80:63:e6:ac:f5:49:3b:8b:61:34:71: e9:83:99:ab:02:82:3d:f8:e9:21:fa:02:b4:fe:be: 3f:85:19:df:9d:13:11:34:4a:72:50:04:42:1e:95: c6:41:63:4f:2c:fd:e0:a7:0d:12:bd:55:41:28:a4: e2:b5:28:9c:71:df:2b:d5:5a:32:9c:c2:88:18:d0: f2:04:ce:7e:ee:b4:c3:52:82:c9:2f:33:1e:9a:38: 8f:21:bc:fd:2b:93:49:c0:cc:77:85:d9:d8:a0:31: 07:60:3c:c1:fd:67:e7:8f:83:07:ef:4f:f9:d6:e6: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:75:66:75:90:2A:5E:17:C1:8A:55:69:F3:85:3B:A1:34:62:10:22 X509v3 Authority Key Identifier: keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:12:dd:c0:77:c6:d5:65:04:ea:69:e0:87:74:e6:7d:4e:94: 2d:13:4b:1f:9e:e6:6d:0c:93:c4:5e:6f:95:5b:dc:cb:49:f8: e5:75:5f:8a:5f:0b:a3:64:96:f0:b1:45:78:9c:02:e4:91:b4: b0:9d:75:e2:4b:80:3c:fd:8e:11:6c:3e:57:28:86:22:5c:96: a9:52:54:50:99:1d:f5:aa:23:99:9a:63:39:87:9a:31:86:7c: 73:72:c9:bb:af:aa:c5:3b:5a:db:a5:b8:5e:ea:e0:f4:db:9b: 84:b0:55:5f:92:3a:59:8c:04:b0:c8:42:03:7a:3c:dc:fb:69: 85:ce:39:13:bd:f2:d4:fd:46:fe:1e:26:25:fe:4d:7f:0c:85: c6:4a:f3:c7:76:28:ba:4f:27:5e:69:37:82:ff:25:f8:fe:c4: 26:64:2e:56:4c:7d:4a:cf:7f:a5:02:80:1c:1b:5d:31:99:0f: d6:bc:24:cb:67:92:22:26:db:6f:9e:26:9c:ad:43:b6:ab:41: ce:00:27:cd:44:10:76:aa:a0:55:88:fc:4d:67:21:bd:70:18: cb:47:9b:bf:48:7b:6a:e6:4e:de:f6:d5:dc:5e:c0:e0:ab:a8: d5:bb:ed:13:96:bf:ff:6b:dd:dc:a0:7f:00:d9:ca:c4:13:55: c0:6f:86:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjkxMTAvBgNVBAUTKEM3OTExMkM3QzVBQzM2NTgzMjIxRDFGOTQ2NzUxOTZD MjEzNkVBQkUwHhcNMjUwNzAyMjIwNDIxWhcNMjUwNzA5MjIwNDIxWjAYMRYwFAYD VQQDEw02ODY1YWNlNS1jMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz08oH9dxlXHJdUcOMZKe7FEUE3zm7DtIrmVEHj2uqEa8b3lu8aEVFTU+U+h9 S8+X3DF42hBZ7vRR5+GOAAXg5s2HgE53+pLFGTEXeqYyawXYxIWhIHsQ1wZ86goC 6yFlTnstbjmh9iKguKCOFPiIzYDNZvmsc7abfyEqIi10YtKSn8L/JJZDhmCUgGPm rPVJO4thNHHpg5mrAoI9+Okh+gK0/r4/hRnfnRMRNEpyUARCHpXGQWNPLP3gpw0S vVVBKKTitSiccd8r1VoynMKIGNDyBM5+7rTDUoLJLzMemjiPIbz9K5NJwMx3hdnY oDEHYDzB/Wfnj4MH70/51uYNFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBF1ZnWQ Kl4XwYpVafOFO6E0YhAiMB8GA1UdIwQYMBaAFMeREsfFrDZYMiHR+UZ1GWwhNuq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCOS82QkRFQUE3RTM5 MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05sZ3lJZEg1Um5VWmJDRTI2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1RVN4OFdzTmxneUlkSDVSblVaYkNFMjZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCOS82QkRFQUE3RTM5MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05s Z3lJZEg1Um5VWmJDRTI2cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfEt3Ad8bVZQTqaeCHdOZ9TpQtE0sfnuZtDJPEXm+VW9zLSfjldV+K XwujZJbwsUV4nALkkbSwnXXiS4A8/Y4RbD5XKIYiXJapUlRQmR31qiOZmmM5h5ox hnxzcsm7r6rFO1rbpbhe6uD025uEsFVfkjpZjASwyEIDejzc+2mFzjkTvfLU/Ub+ HiYl/k1/DIXGSvPHdii6TydeaTeC/yX4/sQmZC5WTH1Kz3+lAoAcG10xmQ/WvCTL Z5IiJttvniacrUO2q0HOACfNRBB2qqBViPxNZyG9cBjLR5u/SHtq5k7e9tXcXsDg q6jVu+0Tlr//a93coH8A2crEE1XAb4b/ -----END CERTIFICATE-----Generated at Fri Jul 4 18:37:04 2025 by rpki-client