$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json) Hash identifier: P74X/BZESZJ4mOamqS1tH2GMWV6uAWhLIXjTe6VNHSA= Subject key identifier: CE:C4:90:2C:0C:B8:A6:20:A6:77:19:61:48:B0:A4:97:36:37:F6:59 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft Manifest number: 051A Signing time: Mon 30 Jun 2025 16:32:32 +0000 Manifest this update: Mon 30 Jun 2025 16:32:32 +0000 Manifest next update: Mon 07 Jul 2025 16:32:32 +0000 Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: iQ7tggacLHZL0+6QLA8Dl1o8w9uL5pcpOj8IS0G4+GE=) 2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: yR/rS2v+MnuPsp4IAeWDDgPbPiNnjwU9wDh4QYZV4SU=) 3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: qkuJyiuag7r0VmHzzxIeNNPZvE1YemZEbkXs9TYwx5o=) 4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: YZwNutRVemyQTlte1eEv/AcDXWm1xtlx4204L/kTObo=) 5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: ACLXZnrak+BWFZVdvvziA50vZItebg8EqCvB342Th1I=) 6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: Cywfb2Rnt+MB9wFrcD0/BbNel0gnNnVhinHv2K8l9OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Jun 30 16:32:32 2025 GMT Not After : Jul 7 16:32:32 2025 GMT Subject: CN=6862bc20-0f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:cc:d0:cc:05:32:3a:c0:19:da:53:0a:f4: 5f:94:0a:d8:e4:9d:01:c4:5b:15:66:d5:c2:1e:db: ab:1f:42:7c:9d:52:5b:4f:9f:61:80:87:1e:eb:db: 61:23:e2:a0:45:a7:73:5f:53:e4:69:03:c8:fb:d4: e0:4d:81:11:9b:51:06:98:a2:d0:8e:24:3d:fa:d7: 08:f4:2f:22:ac:d0:6e:7b:63:ff:01:a0:b1:05:26: 10:71:05:31:7c:02:7d:82:ee:40:58:15:37:62:11: d8:7f:bc:dd:be:4f:02:eb:b4:68:1c:35:33:ef:a2: 3f:ad:5a:16:ff:49:8d:4f:b7:be:14:00:8d:95:14: 60:14:8b:9b:c4:ee:7e:78:9c:3e:f3:3f:25:e1:e8: f1:7c:eb:c8:4b:fe:88:19:99:c1:2a:91:17:50:36: e3:59:a2:cf:ab:2f:e9:c3:8d:df:5e:7c:aa:b8:d3: ee:a9:b5:09:0c:f8:d0:c6:4c:30:d3:56:89:7d:d1: 4d:17:f5:f2:8b:ce:6f:56:5a:8a:49:60:dc:70:2b: c5:86:72:c9:8c:f8:fe:ad:5d:b6:92:7b:f8:f7:30: f6:f5:e6:91:7a:60:6c:f0:64:0a:11:60:bd:55:e5: 3f:02:8f:87:2d:5a:4d:d6:eb:74:58:63:b4:a9:dc: e5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C4:90:2C:0C:B8:A6:20:A6:77:19:61:48:B0:A4:97:36:37:F6:59 X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:dd:52:4d:a3:8c:5b:3c:68:ba:70:25:ed:4b:6a:2e:f6:a5: b5:93:0b:bc:bc:3e:48:1d:f2:7b:e5:15:a6:1d:74:ef:55:93: ac:22:80:76:4d:c2:a3:8d:e3:94:40:cf:0d:cd:d3:3c:8f:8e: c2:a5:a5:f6:0c:a2:85:19:5c:ae:4c:a5:8d:b3:c5:4b:49:89: a5:5b:ee:55:ce:6a:97:dc:1f:4e:06:87:93:71:34:75:82:ad: 6e:67:81:b7:ed:c2:31:22:05:83:b6:d1:67:4d:73:a4:f3:58: cc:5e:8b:1b:fc:0c:66:d4:d9:c4:35:96:0b:20:42:d3:26:4c: 65:b2:28:cf:e4:ee:57:73:58:7f:1b:29:57:6d:f9:8f:dc:7a: 8e:d5:8e:66:8e:7d:83:57:99:7e:83:a0:f4:e2:90:d9:9d:1f: eb:38:2d:5a:72:08:72:9d:68:cf:96:52:71:b6:1f:d9:5f:2b: ef:fe:7c:d0:00:53:e2:b1:0b:06:d6:de:51:71:a6:8a:8f:06: d5:a3:b2:f3:e7:99:46:10:8f:83:46:de:4c:5a:26:d2:b6:03: 52:ec:4f:13:35:57:e6:5b:53:ca:7c:b1:5d:4c:b0:52:85:93: 53:f6:14:cc:d4:b0:32:56:ac:31:67:f1:fd:d3:1b:d9:89:28: 54:53:c8:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUwNjMwMTYzMjMyWhcNMjUwNzA3MTYzMjMyWjAYMRYwFAYD VQQDEw02ODYyYmMyMC0wZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzDM0MwFMjrAGdpTCvRflArY5J0BxFsVZtXCHturH0J8nVJbT59hgIce69th I+KgRadzX1PkaQPI+9TgTYERm1EGmKLQjiQ9+tcI9C8irNBue2P/AaCxBSYQcQUx fAJ9gu5AWBU3YhHYf7zdvk8C67RoHDUz76I/rVoW/0mNT7e+FACNlRRgFIubxO5+ eJw+8z8l4ejxfOvIS/6IGZnBKpEXUDbjWaLPqy/pw43fXnyquNPuqbUJDPjQxkww 01aJfdFNF/Xyi85vVlqKSWDccCvFhnLJjPj+rV22knv49zD29eaRemBs8GQKEWC9 VeU/Ao+HLVpN1ut0WGO0qdzl/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7EkCwM uKYgpncZYUiwpJc2N/ZZMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1 blpxT3NxNXkwOERGVUVVNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM3VJNo4xbPGi6cCXtS2ou9qW1kwu8vD5IHfJ75RWmHXTvVZOsIoB2 TcKjjeOUQM8NzdM8j47CpaX2DKKFGVyuTKWNs8VLSYmlW+5VzmqX3B9OBoeTcTR1 gq1uZ4G37cIxIgWDttFnTXOk81jMXosb/Axm1NnENZYLIELTJkxlsijP5O5Xc1h/ GylXbfmP3HqO1Y5mjn2DV5l+g6D04pDZnR/rOC1acghynWjPllJxth/ZXyvv/nzQ AFPisQsG1t5RcaaKjwbVo7Lz55lGEI+DRt5MWibStgNS7E8TNVfmW1PKfLFdTLBS hZNT9hTM1LAyVqwxZ/H90xvZiShUU8h9 -----END CERTIFICATE-----Generated at Tue Jul 1 16:54:56 2025 by rpki-client