$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json) Hash identifier: FXxuuguVqMwews2a8KUnhIBzLtFD/lzoDmZj+qO1sM4= Subject key identifier: 48:93:DE:A5:8C:59:FC:8B:9B:E7:AB:D8:0C:86:78:90:3C:5D:61:1F Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft Manifest number: 3D Signing time: Thu 03 Jul 2025 07:47:11 +0000 Manifest this update: Thu 03 Jul 2025 07:47:11 +0000 Manifest next update: Thu 10 Jul 2025 07:47:11 +0000 Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: S3QxGQG6+nw2SRzZm6lpoW0wGKE/on4atkAHbDg9XWI=) 2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: pyDccoxQQCInnCAtVt40DDMgxlsFoS9iakn/+FoSyug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Validity Not Before: Jul 3 07:47:11 2025 GMT Not After : Jul 10 07:47:11 2025 GMT Subject: CN=6866357f-c29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6a:04:e7:74:a0:1a:10:c4:68:a4:2e:94:b5: 4c:f6:d7:7a:4e:0b:30:4a:93:22:be:52:b0:d4:69: bc:a6:77:68:bc:09:b7:59:b1:f2:ae:35:bc:69:a3: 42:8b:42:a4:f5:e5:fd:97:40:7b:c0:40:aa:19:ce: 59:51:e4:b8:a9:c5:d9:1e:a0:99:8d:6a:3f:e9:d0: 04:a6:43:6f:42:5a:ba:b1:b0:e6:a4:44:91:02:be: 43:bd:ae:68:9c:7b:d1:87:cc:61:b8:2e:86:87:83: 5f:73:93:88:19:9d:66:73:51:46:04:73:a2:ba:f7: b0:8d:bf:61:07:d7:b3:3b:ba:44:bd:d2:24:f3:ff: af:58:4f:68:84:38:f1:61:f3:93:b4:ce:da:cc:c5: 1f:58:85:c4:09:33:66:8b:df:1a:5c:a2:e9:f9:48: 1d:bb:1a:82:d3:1e:a1:64:4d:14:e5:5a:0f:5c:f8: 1d:22:12:82:34:55:9f:13:fa:4b:a9:1f:4c:58:2b: 22:22:ed:61:9b:25:df:3b:b7:01:34:12:f1:14:9e: cf:9e:77:f8:02:8b:bc:a7:bd:d5:fb:6e:7d:fb:f2: 51:8e:01:ab:ad:6f:54:b0:27:9e:e6:c8:0c:89:66: 6f:4e:48:78:9a:4e:6b:14:85:29:ae:bc:3d:73:ce: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:93:DE:A5:8C:59:FC:8B:9B:E7:AB:D8:0C:86:78:90:3C:5D:61:1F X509v3 Authority Key Identifier: keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:5f:b0:fb:d1:05:e7:bf:e5:f7:65:6c:9b:1d:a9:99:4b:36: 0b:ff:f1:f4:d8:b2:bf:d3:6e:7d:8c:23:a2:2a:fc:dc:88:8b: 30:d3:d3:64:ca:57:e9:4a:61:ef:88:8e:79:df:38:63:36:06: 2d:a0:15:6b:8e:86:50:f1:f9:ac:b3:bf:62:5e:4e:0d:75:71: 53:d6:bd:61:e0:66:bd:a7:ef:e1:28:99:81:54:36:c7:1c:de: 89:a9:15:06:a3:3b:e4:9f:88:bf:f2:0e:3f:9c:0a:c6:42:c8: 42:78:51:84:5b:eb:ba:c0:6b:45:76:84:de:10:47:a4:44:78: f8:25:4c:ae:03:83:a1:38:27:aa:a1:ed:d3:ca:39:c9:b4:4c: 63:1e:26:68:5c:0a:a2:d1:2b:04:64:f1:b2:db:6f:33:25:21: e2:0d:9d:29:18:aa:c0:d6:06:ef:f9:c7:99:ce:b9:af:d0:3e: 13:81:98:17:80:10:be:d1:00:28:fd:11:db:69:cb:49:b3:50: ac:eb:a8:79:19:b0:99:8a:99:72:37:87:00:ea:5b:a5:ac:b5: 9c:1b:cf:fb:52:05:c2:63:0f:8a:77:10:83:24:06:56:fb:ee: 70:21:2b:d4:88:26:70:99:2c:fc:77:58:a2:a1:12:11:0a:5a: 73:64:05:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoQzFFRTY5QUE2QUExQUNCQTMyRTE2NzY0REE4MUJGN0E0 MTY4QTYwRDAeFw0yNTA3MDMwNzQ3MTFaFw0yNTA3MTAwNzQ3MTFaMBgxFjAUBgNV BAMTDTY4NjYzNTdmLWMyOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoagTndKAaEMRopC6UtUz213pOCzBKkyK+UrDUabymd2i8CbdZsfKuNbxpo0KL QqT15f2XQHvAQKoZzllR5LipxdkeoJmNaj/p0ASmQ29CWrqxsOakRJECvkO9rmic e9GHzGG4LoaHg19zk4gZnWZzUUYEc6K697CNv2EH17M7ukS90iTz/69YT2iEOPFh 85O0ztrMxR9YhcQJM2aL3xpcoun5SB27GoLTHqFkTRTlWg9c+B0iEoI0VZ8T+kup H0xYKyIi7WGbJd87twE0EvEUns+ed/gCi7ynvdX7bn378lGOAautb1SwJ57myAyJ Zm9OSHiaTmsUhSmuvD1zzn6ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSJPepYxZ /Iub56vYDIZ4kDxdYR8wHwYDVR0jBBgwFoAUwe5pqmqhrLoy4Wdk2oG/ekFopg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzc1QTkyMjMwRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxveTRXZGsyb0dfZWtGb3Bn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2U1cHFtcWhyTG95NFdkazJvR19la0ZvcGcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzc1QTkyMjMwRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxv eTRXZGsyb0dfZWtGb3BnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABlfsPvRBee/5fdlbJsdqZlLNgv/8fTYsr/Tbn2MI6Iq/NyIizDT02TK V+lKYe+IjnnfOGM2Bi2gFWuOhlDx+ayzv2JeTg11cVPWvWHgZr2n7+EomYFUNscc 3ompFQajO+SfiL/yDj+cCsZCyEJ4UYRb67rAa0V2hN4QR6REePglTK4Dg6E4J6qh 7dPKOcm0TGMeJmhcCqLRKwRk8bLbbzMlIeINnSkYqsDWBu/5x5nOua/QPhOBmBeA EL7RACj9Edtpy0mzUKzrqHkZsJmKmXI3hwDqW6WstZwbz/tSBcJjD4p3EIMkBlb7 7nAhK9SIJnCZLPx3WKKhEhEKWnNkBW8= -----END CERTIFICATE-----Generated at Thu Jul 3 23:10:40 2025 by rpki-client