$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json) Hash identifier: PGT5RlYGM0mOHfy0Z3pQnCSKCWtbVXsbkg1MREsyC50= Subject key identifier: 46:B8:A9:14:65:CA:E3:45:F8:62:81:DF:25:B8:EB:B9:9D:56:06:72 Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Certificate serial: 0377 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft Manifest number: 036B Signing time: Thu 03 Jul 2025 01:17:25 +0000 Manifest this update: Thu 03 Jul 2025 01:17:25 +0000 Manifest next update: Thu 10 Jul 2025 01:17:25 +0000 Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: 6hhlqzgf0eFgby/tmZhjzoBxGr1u1Gvke+uqsJMWwy8=) 2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: U+TSb4gwFFQAjrhJgD02yjkinWTnlvFp6oUJxouw0Y4=) 3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: +CW3v5l7R9gMqeCZZxElin+bWDGaYeldrsVB5lTI+Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 887 (0x377) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Validity Not Before: Jul 3 01:17:25 2025 GMT Not After : Jul 10 01:17:25 2025 GMT Subject: CN=6865da25-7b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:61:16:49:f0:28:d4:76:da:3e:4a:f2:20: 27:bb:b7:a3:39:d5:c9:52:82:a1:12:50:33:78:f8: 39:95:e6:f8:2e:8b:99:70:dc:39:e0:85:21:58:42: 77:fd:f6:1d:77:e7:63:67:e4:6a:31:f2:15:a9:75: cf:d0:72:16:5f:9e:c2:05:e5:dc:b6:64:f2:12:77: 92:7b:8f:2d:ec:1c:0e:73:4b:de:c3:db:2c:0e:19: 9f:bb:01:55:7d:fa:1e:53:65:b7:6e:6c:26:c9:e6: 75:87:81:2d:44:05:a8:b4:0b:31:e5:20:14:60:8b: 82:8a:11:90:53:b2:7a:27:9a:d1:67:e0:e8:cb:07: f8:21:bc:66:7c:fa:cf:23:18:bc:3c:af:0e:d9:cf: ba:00:1a:d5:0f:67:be:9b:d9:52:82:3a:44:56:82: e3:34:25:a0:f5:7d:47:78:18:c1:d0:4e:3f:24:8a: 14:76:26:b4:c8:78:9a:bd:1e:82:22:8c:ef:1e:25: 42:0e:d9:77:18:59:e5:b6:28:fc:c9:be:a9:65:b7: 76:2e:ee:42:f1:d8:cc:ff:25:dc:06:06:6e:18:64: c4:a4:21:9d:d6:e8:aa:ca:21:8e:c4:d8:6f:3f:c8: d3:89:92:92:2d:03:cb:69:c1:22:69:39:b7:0a:6c: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B8:A9:14:65:CA:E3:45:F8:62:81:DF:25:B8:EB:B9:9D:56:06:72 X509v3 Authority Key Identifier: keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:58:0f:52:f7:fd:91:d8:40:6a:f4:71:92:8e:13:bb:72:87: a4:ab:b4:56:43:db:db:73:52:ee:12:c3:cb:60:b2:b0:02:5e: 31:51:28:4c:a6:a4:c0:db:e2:fc:18:3e:95:fc:77:dd:6f:10: 7a:0b:50:89:f8:b0:0b:c4:47:84:0c:73:74:0e:25:07:2e:0c: 7d:d9:2a:3b:0e:13:e2:58:76:f4:e4:53:b4:7a:c6:14:26:4d: d5:e3:63:0d:1d:bc:b8:52:17:9c:6d:7b:3c:76:10:45:17:1e: 6d:80:88:91:04:d2:ea:d6:02:a4:cb:42:11:0b:69:13:ce:db: ba:b4:21:3e:e2:90:e1:d0:63:db:8b:92:05:90:42:bd:5d:7f: 83:9a:85:47:2e:d2:16:ff:d5:c5:de:1d:fe:a3:df:f5:69:83: f9:e7:82:64:d9:f8:af:b3:28:a6:ae:f1:c6:dc:0e:d8:7e:9d: a7:08:2e:e4:bb:d6:b2:00:a6:74:0c:9a:01:91:b8:a6:a0:02: 5d:8c:f5:ae:15:b2:8a:b8:cb:30:68:77:98:e6:4c:4e:4f:70: 07:bf:e8:ee:f7:07:0f:90:20:e1:71:2d:6d:45:27:3c:50:bf: b3:00:96:56:13:1d:67:16:cb:4d:bb:83:bd:65:b6:00:33:a3: 5e:68:f7:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4 Mjc5ODE0QTkwHhcNMjUwNzAzMDExNzI1WhcNMjUwNzEwMDExNzI1WjAYMRYwFAYD VQQDEw02ODY1ZGEyNS03YjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLJhFknwKNR22j5K8iAnu7ejOdXJUoKhElAzePg5leb4LouZcNw54IUhWEJ3 /fYdd+djZ+RqMfIVqXXP0HIWX57CBeXctmTyEneSe48t7BwOc0vew9ssDhmfuwFV ffoeU2W3bmwmyeZ1h4EtRAWotAsx5SAUYIuCihGQU7J6J5rRZ+Doywf4IbxmfPrP Ixi8PK8O2c+6ABrVD2e+m9lSgjpEVoLjNCWg9X1HeBjB0E4/JIoUdia0yHiavR6C IozvHiVCDtl3GFnltij8yb6pZbd2Lu5C8djM/yXcBgZuGGTEpCGd1uiqyiGOxNhv P8jTiZKSLQPLacEiaTm3CmyPDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEa4qRRl yuNF+GKB3yW467mdVgZyMB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2 NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO SUoyMFBjYUEtM2lDZVlGS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSWA9S9/2R2EBq9HGSjhO7coekq7RWQ9vbc1LuEsPLYLKwAl4xUShM pqTA2+L8GD6V/HfdbxB6C1CJ+LALxEeEDHN0DiUHLgx92So7DhPiWHb05FO0esYU Jk3V42MNHby4UhecbXs8dhBFFx5tgIiRBNLq1gKky0IRC2kTztu6tCE+4pDh0GPb i5IFkEK9XX+DmoVHLtIW/9XF3h3+o9/1aYP554Jk2fivsyimrvHG3A7Yfp2nCC7k u9ayAKZ0DJoBkbimoAJdjPWuFbKKuMswaHeY5kxOT3AHv+ju9wcPkCDhcS1tRSc8 UL+zAJZWEx1nFstNu4O9ZbYAM6NeaPe5 -----END CERTIFICATE-----Generated at Thu Jul 3 03:52:51 2025 by rpki-client