$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: DVFoH06LzQ5Wv1GAjhSReuK1oATY5iMPtWCs6bZX2BY= Subject key identifier: 6B:B7:63:4C:0A:3A:D8:44:61:72:E6:82:82:0B:35:F2:11:F1:5B:66 Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: AA Signing time: Tue 15 Jul 2025 06:28:27 +0000 Manifest this update: Tue 15 Jul 2025 06:28:27 +0000 Manifest next update: Tue 22 Jul 2025 06:28:27 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: kWlE/xzJ9vw+H1CtF1B6ZCnVrBHIWvqSPBwOgAaWI2Q=) 2: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: lsJzZcQXucRSGsDa9fqzcB68LdkVMfXeXekEmDJWeX0=) 3: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: W9AbIPs04msR2L8j2qpbp6FWBUlEN2nJFHSFxYkcZYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 06:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Jul 15 06:28:27 2025 GMT Not After : Jul 22 06:28:27 2025 GMT Subject: CN=6875f50b-585c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:15:a4:9e:cf:e1:e6:0c:91:cd:43:2c:ce: ce:9d:0d:46:5c:88:1f:01:5a:ce:c4:2d:e2:02:6b: 3c:b1:a6:38:f7:ff:ef:ba:b1:6b:62:1e:60:87:2f: 8a:95:3c:5c:ec:51:a9:57:e8:b5:78:e5:ca:7b:1e: 39:5c:4a:1e:74:9d:85:94:22:d7:bb:67:d8:33:c0: b0:31:8f:56:0f:8d:cc:04:47:66:ec:79:bd:3f:e5: 89:aa:14:93:99:59:8e:0c:e3:23:9e:c1:19:a1:7f: f0:3d:12:57:4e:d2:5e:01:28:dc:bc:d0:b7:0c:21: 1b:f7:6a:9d:c9:7f:88:7b:06:c2:c7:3b:d3:95:e2: fe:66:8d:85:39:31:c0:38:4d:a4:7b:4c:3f:57:3b: 7f:8a:19:78:16:2e:25:b1:e3:f2:c5:93:1e:0b:81: d1:a4:60:0e:59:53:6e:d8:1a:78:e8:09:b8:30:2c: d2:6c:22:30:78:1d:80:28:db:b6:77:4d:77:2b:7c: 8a:85:95:4a:89:d2:fa:27:b9:ec:aa:f0:a2:1b:f4: 32:8c:87:ad:3b:cf:bf:c8:c3:ba:ea:a1:5d:6c:a7: ab:13:c1:06:36:c7:c7:ef:5e:09:a7:61:49:6e:62: f7:f8:f9:47:87:4e:f0:2e:fc:88:29:83:25:67:07: 9b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B7:63:4C:0A:3A:D8:44:61:72:E6:82:82:0B:35:F2:11:F1:5B:66 X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:7b:ce:fd:ee:a8:df:4c:19:3b:f7:4d:f9:5a:8d:d4:01:4c: 37:9f:f6:c1:b7:f3:0d:03:34:a5:e9:e8:06:0d:9c:2a:39:cb: eb:01:4a:b6:f3:65:3b:99:77:b9:d6:49:12:b5:cd:eb:31:d9: a2:5a:79:b7:c1:90:65:d7:ad:e6:bf:e9:34:9e:6f:4b:a3:12: 90:e5:b4:bb:07:54:5c:b9:fd:c6:5c:f7:1a:e8:c9:73:17:01: 86:53:99:44:bc:45:1f:4b:33:8b:54:2f:65:32:99:20:74:1f: 2f:7a:19:f5:4e:d4:43:a2:17:e9:2b:20:79:42:85:2d:b3:45: 60:a7:3d:29:99:25:3b:ce:a2:ca:61:f9:6d:25:0d:53:a4:a1: 01:0a:b7:73:58:83:d9:70:66:f7:57:01:39:da:46:a2:8b:d1: 05:36:bc:33:dc:03:c3:67:a0:cf:46:7f:63:e8:16:ad:ab:6c: c8:51:d5:6d:ed:7c:81:20:64:e7:54:9d:eb:87:66:ce:16:ea: f3:41:2e:46:f5:41:a4:0b:f5:f9:2b:89:d3:52:d3:6b:43:60: fe:ae:c8:1f:a9:bc:06:b0:88:08:60:ad:db:30:c8:7c:d1:b4: 67:6b:61:d3:0e:9c:2e:c4:bd:51:84:c9:0e:71:f2:4b:3f:62: 36:01:ee:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDcyNTc5MjNENjc3MEM1Njc4OTE5QjA3Q0JDRkE4QUY4 QjlDNTA1M0YwHhcNMjUwNzE1MDYyODI3WhcNMjUwNzIyMDYyODI3WjAYMRYwFAYD VQQDEw02ODc1ZjUwYi01ODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxAVpJ7P4eYMkc1DLM7OnQ1GXIgfAVrOxC3iAms8saY49//vurFrYh5ghy+K lTxc7FGpV+i1eOXKex45XEoedJ2FlCLXu2fYM8CwMY9WD43MBEdm7Hm9P+WJqhST mVmODOMjnsEZoX/wPRJXTtJeASjcvNC3DCEb92qdyX+IewbCxzvTleL+Zo2FOTHA OE2ke0w/Vzt/ihl4Fi4lsePyxZMeC4HRpGAOWVNu2Bp46Am4MCzSbCIweB2AKNu2 d013K3yKhZVKidL6J7nsqvCiG/QyjIetO8+/yMO66qFdbKerE8EGNsfH714Jp2FJ bmL3+PlHh07wLvyIKYMlZwebiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGu3Y0wK OthEYXLmgoILNfIR8VtmMB8GA1UdIwQYMBaAFHJXkj1ncMVniRmwfLz6ivi5xQU/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9FOUEwOTJCODY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hXZUpHYkI4dlBxSy1MbkZC VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9FOUEwOTJCODY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hX ZUpHYkI4dlBxSy1MbkZCVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBme8797qjfTBk79035Wo3UAUw3n/bBt/MNAzSl6egGDZwqOcvrAUq2 82U7mXe51kkStc3rMdmiWnm3wZBl163mv+k0nm9LoxKQ5bS7B1Rcuf3GXPca6Mlz FwGGU5lEvEUfSzOLVC9lMpkgdB8vehn1TtRDohfpKyB5QoUts0Vgpz0pmSU7zqLK YfltJQ1TpKEBCrdzWIPZcGb3VwE52kaii9EFNrwz3APDZ6DPRn9j6Batq2zIUdVt 7XyBIGTnVJ3rh2bOFurzQS5G9UGkC/X5K4nTUtNrQ2D+rsgfqbwGsIgIYK3bMMh8 0bRna2HTDpwuxL1RhMkOcfJLP2I2Ae7q -----END CERTIFICATE-----Generated at Wed Jul 16 23:09:54 2025 by rpki-client