$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft File: x52oqmnxJno4UemSoGnAL1DoArw.mft (raw, json) Hash identifier: jgHk8gEDJxCaHvNmFyJmHDKXCdXYZ7TbX1v9slrQVwQ= Subject key identifier: 1D:77:1E:04:F1:CD:27:23:5A:53:67:DD:5B:58:BB:74:CB:FE:98:80 Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC Certificate issuer: /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft Manifest number: 016A Signing time: Tue 01 Jul 2025 04:20:37 +0000 Manifest this update: Tue 01 Jul 2025 04:20:36 +0000 Manifest next update: Tue 08 Jul 2025 04:20:36 +0000 Files and hashes: 1: x52oqmnxJno4UemSoGnAL1DoArw.crl (hash: eJRbtmfwjxsAeyduCQvcIB42adrLZGXJj60G4TXT51A=) 2: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (hash: ljYZPmOEJ2gVmqt+FLp/8ARO8gytp4GPuoxvLwL03ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC524, serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Validity Not Before: Jul 1 04:20:36 2025 GMT Not After : Jul 8 04:20:36 2025 GMT Subject: CN=68636215-cce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:3f:55:b6:42:b2:e7:8a:37:29:df:8f:f8: df:48:79:a5:da:9d:a4:79:ba:ef:bf:66:9b:24:d5: f0:0a:5f:4e:42:22:05:04:0f:e4:22:c3:5b:ae:38: 82:c6:0a:5f:71:65:75:d0:4e:17:5d:b6:00:42:bc: 42:96:ab:00:c2:63:ca:ff:b9:f9:be:bd:bf:cb:45: 51:8e:30:59:b7:0b:ff:b3:e8:cf:bb:c7:75:a1:cd: 52:27:94:98:0b:3d:5b:6b:1e:a3:ef:6c:b5:14:fa: cc:8e:6a:ae:66:ea:f8:5d:2b:c5:49:c8:30:b1:40: 3e:a3:0f:6e:8f:51:2f:9c:74:f8:59:08:38:16:0d: cd:5b:c6:16:10:67:53:95:f2:c2:f0:24:fa:0f:76: 9a:b5:f6:fb:c2:90:25:78:74:2b:74:7c:c9:4f:b8: 12:de:76:93:16:6d:79:ac:08:e6:a9:6b:9e:aa:d6: 71:b5:3d:59:49:21:b2:82:76:97:ec:21:aa:17:24: fc:15:f8:43:ff:68:f2:37:9e:3c:c8:03:b4:5e:33: 12:e1:34:78:e7:89:a3:98:9b:e1:5a:23:ae:e2:3b: 4b:6c:81:54:a5:a5:e3:38:09:25:10:53:11:cb:3d: 28:de:51:7e:11:4d:ba:d3:a4:d5:a6:5e:03:fe:26: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:77:1E:04:F1:CD:27:23:5A:53:67:DD:5B:58:BB:74:CB:FE:98:80 X509v3 Authority Key Identifier: keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:63:85:df:d3:b0:33:1f:86:42:16:19:09:55:48:a5:b2:74: 38:84:f3:b8:fd:9b:0a:32:8c:ba:20:01:95:b5:c1:47:71:4b: 5f:bb:cd:a7:d3:f1:db:9f:1c:48:23:55:5e:e3:75:45:f5:4b: f8:29:3b:b5:08:2b:84:59:e5:a2:3d:73:44:02:c8:3b:95:3e: 4a:11:61:54:e9:48:65:7c:44:07:f3:49:1b:22:4c:31:71:06: 2b:89:2a:90:e4:1e:79:1e:4e:53:15:ec:6d:82:76:b3:63:1b: c8:25:67:7d:0e:35:84:30:4b:60:34:11:2c:d9:2f:98:ce:5d: 7b:1a:44:e6:90:f1:a9:1d:f7:30:8a:a7:b1:da:e2:6f:7d:ca: 24:39:fd:04:3e:ab:45:39:ba:9c:7e:da:45:6f:41:43:e6:4d: 24:0e:8d:b9:f0:51:b8:df:4f:95:43:da:d1:f3:40:f6:4c:b7: f5:46:3b:50:fc:eb:c5:ff:47:07:78:7e:6b:6c:a5:0f:48:c0: 42:32:ba:5f:f4:3d:32:98:14:7e:06:d9:7a:27:ed:a9:e2:4d: c9:5d:5c:8b:1e:e7:ef:52:64:10:32:f2:d2:44:4c:b2:99:66: fd:47:93:57:f9:33:6d:fd:91:c2:33:81:db:a3:ba:5e:73:a6: 82:92:1c:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1MjQxMTAvBgNVBAUTKEM3OURBOEFBNjlGMTI2N0EzODUxRTk5MkEwNjlDMDJG NTBFODAyQkMwHhcNMjUwNzAxMDQyMDM2WhcNMjUwNzA4MDQyMDM2WjAYMRYwFAYD VQQDEw02ODYzNjIxNS1jY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwQ/VbZCsueKNynfj/jfSHml2p2kebrvv2abJNXwCl9OQiIFBA/kIsNbrjiC xgpfcWV10E4XXbYAQrxClqsAwmPK/7n5vr2/y0VRjjBZtwv/s+jPu8d1oc1SJ5SY Cz1bax6j72y1FPrMjmquZur4XSvFScgwsUA+ow9uj1EvnHT4WQg4Fg3NW8YWEGdT lfLC8CT6D3aatfb7wpAleHQrdHzJT7gS3naTFm15rAjmqWueqtZxtT1ZSSGygnaX 7CGqFyT8FfhD/2jyN548yAO0XjMS4TR454mjmJvhWiOu4jtLbIFUpaXjOAklEFMR yz0o3lF+EU2606TVpl4D/ianJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB13HgTx zScjWlNn3VtYu3TL/piAMB8GA1UdIwQYMBaAFMedqKpp8SZ6OFHpkqBpwC9Q6AK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzUyNC9CNUMyQjczNDJD NTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpubzRVZW1Tb0duQUwxRG9B cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1Mm9xbW54Sm5vNFVlbVNvR25BTDFEb0Fydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzUyNC9CNUMyQjczNDJDNTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpu bzRVZW1Tb0duQUwxRG9BcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlY4Xf07AzH4ZCFhkJVUilsnQ4hPO4/ZsKMoy6IAGVtcFHcUtfu82n 0/HbnxxII1Ve43VF9Uv4KTu1CCuEWeWiPXNEAsg7lT5KEWFU6UhlfEQH80kbIkwx cQYriSqQ5B55Hk5TFextgnazYxvIJWd9DjWEMEtgNBEs2S+Yzl17GkTmkPGpHfcw iqex2uJvfcokOf0EPqtFObqcftpFb0FD5k0kDo258FG430+VQ9rR80D2TLf1RjtQ /OvF/0cHeH5rbKUPSMBCMrpf9D0ymBR+Btl6J+2p4k3JXVyLHufvUmQQMvLSREyy mWb9R5NX+TNt/ZHCM4Hbo7pec6aCkhwx -----END CERTIFICATE-----Generated at Thu Jul 3 03:47:18 2025 by rpki-client