$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: cpA/OYKKvVV6S/lcQ2eouKMquvJVTy8X7+c5cEIEH0M= Subject key identifier: 72:AC:DD:08:3A:DB:80:EC:BB:93:11:49:72:21:F4:14:8B:46:C2:48 Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 18E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 18C5 Signing time: Wed 02 Jul 2025 16:35:52 +0000 Manifest this update: Wed 02 Jul 2025 16:35:52 +0000 Manifest next update: Wed 09 Jul 2025 16:35:52 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: MmNq84W1N3jwtk+zjSi9tT/7Je1Z7/Z97r2GCd5XxBo=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: dkIdUkxS0d2PbrqHHzMK0XKv4nvJXGsXU3jrSo/hWKk=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: Bm6Hg3gh1j1a80wR2XX7xwyi1WY27Wumi8LE07BcSR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6371 (0x18e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Jul 2 16:35:52 2025 GMT Not After : Jul 9 16:35:52 2025 GMT Subject: CN=68655fe8-f5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:41:a8:cb:f6:1f:30:b2:89:0e:8b:5c:2b: b5:b1:42:a4:a8:ed:62:60:62:4a:52:c0:90:6d:65: f5:3c:e4:c7:b5:2b:f1:9b:46:bf:8a:98:9d:66:84: 20:f7:9a:83:54:e4:e2:6a:80:24:70:9b:4a:e0:9c: 21:03:f0:8e:7f:81:bf:90:31:33:60:c5:21:25:da: 24:e8:21:f0:b4:c4:5d:9c:0d:e8:15:5a:00:bd:bd: 0c:7d:c4:ab:28:22:ab:d7:8d:f3:91:3a:8b:0c:a8: 9c:8e:8b:97:70:b2:a6:fa:6d:80:25:d4:f6:46:b4: 6d:c6:79:86:b8:98:26:c0:d4:6e:75:d7:79:39:0c: 94:2a:32:05:91:ae:e0:d3:82:89:13:1e:23:34:47: 27:9c:54:ee:df:4f:79:89:11:05:4c:3b:30:17:6b: d4:bc:b9:37:e8:d3:3a:6f:0f:08:07:e0:24:3a:2d: 3a:59:63:fa:c5:e2:eb:68:82:4b:07:81:0f:bf:31: b7:bd:47:04:c7:ec:91:9d:43:df:a7:8f:a1:7d:4a: bc:0b:10:b0:82:0e:5a:d7:99:27:cd:c3:67:a8:28: 7e:76:16:8b:42:c0:bb:e3:12:d4:ef:49:67:96:04: 23:8b:9c:d1:b9:01:7d:d0:df:6c:65:86:13:42:2c: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AC:DD:08:3A:DB:80:EC:BB:93:11:49:72:21:F4:14:8B:46:C2:48 X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:0a:c7:18:78:25:99:76:5f:2c:4a:98:75:d1:8a:ce:f7:bc: e6:b3:97:9e:13:a3:a6:94:2e:82:fa:9d:72:61:3b:8f:6c:04: f9:38:6d:94:cb:99:b0:9b:2b:a7:76:0e:eb:8b:9e:43:4f:af: 3b:ce:db:06:2c:cd:f6:0d:56:16:48:7a:a5:b2:72:a8:41:d8: 48:67:a8:a3:f5:56:d7:5c:bf:a4:37:c4:6d:a0:09:81:0c:c4: 4d:7d:67:71:e5:92:92:b8:2b:09:8d:92:f4:a9:12:7c:01:1b: f4:74:51:20:3e:9b:ec:97:0e:ec:2b:12:87:3f:44:8e:9e:f0: 6e:bd:1a:fa:57:e8:04:1c:8a:2b:7f:c8:b6:3d:06:5d:07:0e: 6c:f5:8e:02:99:03:72:d9:f7:cf:ea:6f:0a:d6:b1:4d:f8:08: 1a:50:c8:c7:af:2c:fd:2d:c7:79:6e:11:2c:0a:57:69:31:3c: e7:8f:5c:5d:fe:33:f1:6b:01:91:8e:94:dd:25:43:db:d7:fa: 6e:5a:cb:cf:50:0c:59:eb:dd:0f:b0:b2:ae:3b:50:c7:71:d8: cc:3c:bb:f8:14:1c:2c:ea:5e:d9:c1:a8:8f:ac:23:9f:6c:e2: 46:c3:2a:25:2c:6e:28:bb:b0:33:64:87:ff:0c:9b:7f:3f:cd: b4:69:18:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjUwNzAyMTYzNTUyWhcNMjUwNzA5MTYzNTUyWjAYMRYwFAYD VQQDEw02ODY1NWZlOC1mNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsdBqMv2HzCyiQ6LXCu1sUKkqO1iYGJKUsCQbWX1POTHtSvxm0a/ipidZoQg 95qDVOTiaoAkcJtK4JwhA/COf4G/kDEzYMUhJdok6CHwtMRdnA3oFVoAvb0MfcSr KCKr143zkTqLDKicjouXcLKm+m2AJdT2RrRtxnmGuJgmwNRuddd5OQyUKjIFka7g 04KJEx4jNEcnnFTu3095iREFTDswF2vUvLk36NM6bw8IB+AkOi06WWP6xeLraIJL B4EPvzG3vUcEx+yRnUPfp4+hfUq8CxCwgg5a15knzcNnqCh+dhaLQsC74xLU70ln lgQji5zRuQF90N9sZYYTQiySgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKs3Qg6 24Dsu5MRSXIh9BSLRsJIMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgCscYeCWZdl8sSph10YrO97zms5eeE6OmlC6C+p1yYTuPbAT5OG2U y5mwmyundg7ri55DT687ztsGLM32DVYWSHqlsnKoQdhIZ6ij9VbXXL+kN8RtoAmB DMRNfWdx5ZKSuCsJjZL0qRJ8ARv0dFEgPpvslw7sKxKHP0SOnvBuvRr6V+gEHIor f8i2PQZdBw5s9Y4CmQNy2ffP6m8K1rFN+AgaUMjHryz9Lcd5bhEsCldpMTznj1xd /jPxawGRjpTdJUPb1/puWsvPUAxZ690PsLKuO1DHcdjMPLv4FBws6l7ZwaiPrCOf bOJGwyolLG4ou7AzZIf/DJt/P820aRha -----END CERTIFICATE-----Generated at Thu Jul 3 17:35:45 2025 by rpki-client