$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: aGNJJLId9W/nVQP0UFa4OopiDRzd/Qe+ZIY629pfsFg= Subject key identifier: 64:EB:62:1D:90:DB:C2:AA:8A:55:6D:7F:63:B8:A6:CE:F8:68:7C:76 Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 015E Signing time: Thu 03 Jul 2025 04:07:15 +0000 Manifest this update: Thu 03 Jul 2025 04:07:14 +0000 Manifest next update: Thu 10 Jul 2025 04:07:14 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: R92AE+qyJCupDNJGZIcR2VzitRqdwfa6z19cNcAkPZw=) 2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: wUxQPb5MXG1WoNfvu2qlWFFygupmyl9Dg9T+dYAheO4=) 3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: 7+kogSfoA5KHnVdL5HUL3JnEUIAqvGpgOMdM8vTSlLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: Jul 3 04:07:14 2025 GMT Not After : Jul 10 04:07:14 2025 GMT Subject: CN=686601f3-6b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:03:39:6a:c7:62:2c:7a:1e:80:cf:e0:01: 7a:3a:ae:a8:c5:00:72:3e:d5:02:7b:45:8d:0f:32: 48:7c:63:17:9a:06:00:7f:c0:22:8d:ee:e3:16:f3: 8b:0e:cb:e0:a1:26:a7:b9:c4:8e:44:4b:8a:c9:a2: b9:86:d1:5e:a3:7a:70:63:a8:81:a5:bb:52:65:88: 14:19:f5:32:aa:dd:a1:c1:64:cf:17:77:f8:48:fd: d3:60:8a:81:c0:e6:0a:16:08:2f:bb:90:b8:ff:84: 64:1c:06:48:37:d2:24:7c:a1:b3:1f:dc:7d:01:24: f4:b8:cf:0d:3b:42:bd:4c:5d:cb:23:9e:57:eb:83: 2f:d0:e6:49:9e:b6:d4:7e:d1:9a:96:1b:3b:ff:7a: 79:3c:aa:14:c6:98:5e:64:44:d0:83:d7:c1:01:38: e8:29:4c:4c:64:b3:52:bb:82:af:6f:77:0b:d2:90: c4:67:75:13:81:77:66:f9:f8:54:4b:a0:57:f4:5f: 86:82:f0:13:b4:51:40:fe:4c:7d:76:3e:3d:6a:78: c7:78:7a:d7:95:d4:51:93:b7:84:c3:04:67:41:d4: 92:a7:c1:ab:fc:e7:d7:80:34:da:68:63:d1:68:49: 94:f5:4e:8c:03:d8:a2:f6:49:ee:b2:5a:2a:af:a6: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EB:62:1D:90:DB:C2:AA:8A:55:6D:7F:63:B8:A6:CE:F8:68:7C:76 X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:8d:c5:48:89:cf:90:7c:93:ee:94:cc:29:42:d0:17:7b:c8: ff:4a:56:f4:d1:84:49:8f:c8:8f:f7:cb:a7:ef:23:78:b4:96: b0:99:f4:de:af:ce:42:ac:37:a5:9e:9c:e6:a8:aa:44:3d:61: ec:42:c3:27:5e:05:94:d6:fa:5f:fe:79:41:87:b1:e3:81:13: 79:b7:8b:93:55:0b:b5:e9:bf:0a:fa:00:da:05:7e:a7:a4:7b: 0d:dc:d4:78:c3:cf:d4:54:04:db:0e:a4:64:45:4e:ce:c9:ce: 50:be:b3:bd:a6:ee:f5:cf:dd:19:27:07:f1:e9:4d:0f:86:9a: c8:e1:5b:17:93:4c:ed:26:5c:07:5b:ae:23:88:3f:ac:40:ce: 36:39:3e:9d:02:69:f7:18:8f:85:1c:ff:1d:23:16:3c:38:b6: 3d:e9:a0:44:87:b3:9f:65:4f:6e:9e:8f:f6:45:e7:8c:b2:e4: c9:1b:b5:a4:aa:d3:5a:ae:60:37:cb:6e:8c:2f:04:ce:d2:e9: d6:8f:98:0a:b0:57:bf:c5:e4:ab:8c:e7:8a:9b:e7:d6:04:7a: cf:09:93:03:d3:b7:95:5e:e5:97:c9:31:b1:b7:e2:df:69:f0: 60:15:a9:37:c3:0e:83:70:18:f0:ea:cf:e7:93:e6:eb:9f:60: ec:be:d3:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjUwNzAzMDQwNzE0WhcNMjUwNzEwMDQwNzE0WjAYMRYwFAYD VQQDEw02ODY2MDFmMy02YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8QDOWrHYix6HoDP4AF6Oq6oxQByPtUCe0WNDzJIfGMXmgYAf8Aije7jFvOL DsvgoSanucSOREuKyaK5htFeo3pwY6iBpbtSZYgUGfUyqt2hwWTPF3f4SP3TYIqB wOYKFggvu5C4/4RkHAZIN9IkfKGzH9x9AST0uM8NO0K9TF3LI55X64Mv0OZJnrbU ftGalhs7/3p5PKoUxpheZETQg9fBATjoKUxMZLNSu4Kvb3cL0pDEZ3UTgXdm+fhU S6BX9F+GgvATtFFA/kx9dj49anjHeHrXldRRk7eEwwRnQdSSp8Gr/OfXgDTaaGPR aEmU9U6MA9ii9knusloqr6Z+mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTrYh2Q 28KqilVtf2O4ps74aHx2MB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjjcVIic+QfJPulMwpQtAXe8j/Slb00YRJj8iP98un7yN4tJawmfTe r85CrDelnpzmqKpEPWHsQsMnXgWU1vpf/nlBh7HjgRN5t4uTVQu16b8K+gDaBX6n pHsN3NR4w8/UVATbDqRkRU7Oyc5QvrO9pu71z90ZJwfx6U0PhprI4VsXk0ztJlwH W64jiD+sQM42OT6dAmn3GI+FHP8dIxY8OLY96aBEh7OfZU9uno/2ReeMsuTJG7Wk qtNarmA3y26MLwTO0unWj5gKsFe/xeSrjOeKm+fWBHrPCZMD07eVXuWXyTGxt+Lf afBgFak3ww6DcBjw6s/nk+brn2DsvtMM -----END CERTIFICATE-----Generated at Thu Jul 3 10:12:13 2025 by rpki-client