$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json) Hash identifier: CpPLaha9nz3Uw4sjqspl4+22HSQEA7mHbbB/x9xHNVY= Subject key identifier: 3E:D8:0C:B8:6F:06:65:48:CA:1E:F5:5E:DB:01:C9:88:EA:8F:D8:85 Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft Manifest number: B5 Signing time: Thu 03 Jul 2025 06:10:47 +0000 Manifest this update: Thu 03 Jul 2025 06:10:47 +0000 Manifest next update: Thu 10 Jul 2025 06:10:47 +0000 Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: Ioi50mGk+HT8P1SZ9bLRcoJJyr1bXuLczWatnqtfrH0=) 2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: dwidYpMLAJTM9jddkunL1qdnHKOnW/Pf1EZaeXyq6Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Validity Not Before: Jul 3 06:10:47 2025 GMT Not After : Jul 10 06:10:47 2025 GMT Subject: CN=68661ee7-c22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:51:1e:53:3a:01:10:b1:49:53:c4:72:f0: 27:07:bf:46:e7:13:7a:2b:91:0c:c4:39:e8:eb:5a: d3:2b:27:45:e7:12:8f:9a:2b:f2:52:f1:cd:b3:84: da:90:49:27:79:7d:08:d8:37:05:1e:cd:f1:4a:5a: 66:3d:1f:1d:7f:9c:2c:c6:30:0e:7c:17:6e:ca:9b: 52:53:f8:be:b1:fe:20:28:c7:f4:b1:35:56:d2:1f: af:49:68:00:da:15:b7:e1:60:89:f6:a8:66:ea:87: 6a:eb:80:08:28:c8:1b:6e:0b:bf:d6:51:23:17:fe: 97:8f:f1:f8:fa:b6:5c:54:59:36:36:45:d9:2c:53: 66:3e:aa:52:49:4f:3f:b7:92:45:c1:d2:31:82:92: 89:70:35:2e:f2:10:d0:29:cc:bf:26:25:18:15:1c: 43:f3:61:f8:ea:5e:07:16:ba:5e:fb:74:17:35:b6: 56:a5:f0:e0:1e:c4:14:9f:e6:90:31:3f:ed:ed:05: f5:5c:46:8e:b9:72:4f:5e:07:88:b5:f3:98:3f:75: ee:6f:2e:ed:07:ea:4a:a0:f6:58:a8:e1:c3:b3:3f: 5c:03:43:bf:76:da:f7:f0:ba:94:b7:12:07:90:32: 69:68:f2:18:2a:ab:52:9f:3d:d9:31:e4:74:53:03: 69:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D8:0C:B8:6F:06:65:48:CA:1E:F5:5E:DB:01:C9:88:EA:8F:D8:85 X509v3 Authority Key Identifier: keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b9:1f:93:5b:e2:a3:1f:92:61:4b:d9:46:40:29:53:f7:f1: 35:ef:ad:4b:2e:a2:1b:30:81:48:1e:5f:a2:da:9a:40:df:90: 02:5d:56:68:d1:4a:b5:5c:75:a9:0c:4f:25:4e:de:07:34:cb: 72:ae:66:b8:ac:75:b4:e5:5a:6b:46:7b:2c:c4:34:b0:8f:2f: 7a:b9:be:7e:2f:cb:ae:21:6c:11:d2:e1:ac:5b:34:68:4e:8c: 52:b3:f0:e7:f2:dc:ea:65:b6:48:d2:55:72:54:fe:4d:f0:b6: ce:ca:c0:0c:01:c4:88:61:a0:e9:5e:ce:7b:10:a5:0d:11:af: 20:1b:03:93:6a:46:8d:c8:dd:5b:0a:5e:fe:a4:27:11:4e:c5: a7:93:7d:bc:ce:d6:2f:e3:6a:b1:e4:80:1f:f9:32:3b:af:82: 4f:dc:79:d0:79:14:eb:a7:56:f0:db:82:38:a4:b4:c3:bf:4c: 71:a2:ea:21:33:14:4b:68:af:d2:26:df:8a:f5:10:6d:0f:d0: 68:6f:85:12:6c:39:07:ef:95:bc:f4:7a:8d:15:b2:21:a7:e8: 70:44:fb:9a:0f:ad:ee:c8:96:99:7f:1d:dd:50:39:cd:50:7b: 1b:86:a0:cc:36:03:3d:a2:4d:e6:4b:0f:06:2b:15:cc:97:27: 06:5a:96:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKDA3MjQ0QTk5NENEQzRCOTM4MDc0NzExQzQyNDhENDlG OUQ1MEQ4MjcwHhcNMjUwNzAzMDYxMDQ3WhcNMjUwNzEwMDYxMDQ3WjAYMRYwFAYD VQQDEw02ODY2MWVlNy1jMjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/lRHlM6ARCxSVPEcvAnB79G5xN6K5EMxDno61rTKydF5xKPmivyUvHNs4Ta kEkneX0I2DcFHs3xSlpmPR8df5wsxjAOfBduyptSU/i+sf4gKMf0sTVW0h+vSWgA 2hW34WCJ9qhm6odq64AIKMgbbgu/1lEjF/6Xj/H4+rZcVFk2NkXZLFNmPqpSSU8/ t5JFwdIxgpKJcDUu8hDQKcy/JiUYFRxD82H46l4HFrpe+3QXNbZWpfDgHsQUn+aQ MT/t7QX1XEaOuXJPXgeItfOYP3Xuby7tB+pKoPZYqOHDsz9cA0O/dtr38LqUtxIH kDJpaPIYKqtSnz3ZMeR0UwNp9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7YDLhv BmVIyh71XtsByYjqj9iFMB8GA1UdIwQYMBaAFAckSplM3EuTgHRxHEJI1J+dUNgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS9GQzY2RjVBRTQ1 QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1T0FkSEVjUWtqVW41MVEy Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5UkttVXpjUzVPQWRIRWNRa2pVbjUxUTJDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS9GQzY2RjVBRTQ1QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1 T0FkSEVjUWtqVW41MVEyQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsuR+TW+KjH5JhS9lGQClT9/E1761LLqIbMIFIHl+i2ppA35ACXVZo 0Uq1XHWpDE8lTt4HNMtyrma4rHW05VprRnssxDSwjy96ub5+L8uuIWwR0uGsWzRo ToxSs/Dn8tzqZbZI0lVyVP5N8LbOysAMAcSIYaDpXs57EKUNEa8gGwOTakaNyN1b Cl7+pCcRTsWnk328ztYv42qx5IAf+TI7r4JP3HnQeRTrp1bw24I4pLTDv0xxouoh MxRLaK/SJt+K9RBtD9Bob4USbDkH75W89HqNFbIhp+hwRPuaD63uyJaZfx3dUDnN UHsbhqDMNgM9ok3mSw8GKxXMlycGWpY0 -----END CERTIFICATE-----Generated at Thu Jul 3 19:43:25 2025 by rpki-client