$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft File: i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json) Hash identifier: BEp/gz1bHKEsVfvpjVz39iS58unc16o70qkdgHV+H1E= Subject key identifier: EE:09:7F:06:1E:58:7C:8E:53:E6:B1:68:63:DA:9C:A6:DF:06:26:38 Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 Certificate issuer: /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Certificate serial: 065D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft Manifest number: 0658 Signing time: Wed 02 Jul 2025 22:48:21 +0000 Manifest this update: Wed 02 Jul 2025 22:48:21 +0000 Manifest next update: Wed 09 Jul 2025 22:48:21 +0000 Files and hashes: 1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: REEW9rhMgUUkG2WVVaPp5x4alhEI/9wIP5ABBFnjCj8=) 2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: am0gLM47UswkhQ7d8ve9CDz5IVO8+0wgLFBI3jyuYpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Validity Not Before: Jul 2 22:48:21 2025 GMT Not After : Jul 9 22:48:21 2025 GMT Subject: CN=6865b735-9102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:f4:db:72:ce:fc:f8:93:a3:3e:07:b2:34: d3:c1:82:f1:00:54:50:28:fd:8b:ff:65:c5:d8:bd: 3e:01:12:6d:3d:22:cf:16:de:d9:55:1c:95:5b:07: da:0b:8d:a8:46:23:04:ca:c3:c1:cd:3d:69:c2:7a: d1:bc:a9:cb:48:0f:29:8e:d6:d3:0b:83:c2:77:ba: 17:33:4d:09:3f:50:58:28:06:08:9f:f7:40:99:76: e4:58:64:cb:f5:b5:0e:88:75:5c:c0:4e:b4:08:b8: 37:f4:7c:15:e7:bc:98:aa:88:6d:af:e3:2d:b0:4b: bc:5a:ad:2c:cd:13:5c:b7:c6:d4:54:8d:c1:7c:b7: bf:01:49:24:46:cd:8e:36:41:ee:24:60:84:50:9c: bf:68:15:ec:14:f1:ae:9c:a4:0f:d8:ee:a4:72:29: 35:9d:ef:e4:de:1a:b0:e7:2c:73:24:88:68:ed:8b: c3:19:6d:22:f6:89:1b:42:8b:46:e3:7e:5b:a9:0e: f7:e7:b1:35:e1:5d:57:9f:e1:36:ee:d3:a2:58:fd: 07:d0:eb:eb:bc:72:6f:8f:92:00:4d:af:4a:6a:0a: 23:b6:d8:d9:3a:91:e9:1e:eb:ac:4f:75:b2:ba:74: 6a:4f:04:45:5d:91:0d:3b:6e:a3:3a:3a:85:07:7a: 93:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:09:7F:06:1E:58:7C:8E:53:E6:B1:68:63:DA:9C:A6:DF:06:26:38 X509v3 Authority Key Identifier: keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:53:65:2b:c7:6b:f2:8b:f1:da:b7:ea:f5:87:74:b7:8a:5c: 21:2a:8c:4f:cd:c1:39:5d:89:d6:fc:3c:98:9f:9f:7f:6d:1c: 7a:ab:f6:a1:b0:a0:12:29:75:93:f1:7b:fb:c3:d0:ec:cc:c6: f7:1b:44:47:de:56:1a:c8:f0:2e:cf:ea:69:40:81:be:82:92: 9d:b1:33:52:14:be:3f:bc:e6:e3:0b:de:68:ed:de:0f:4b:4d: 29:6c:49:7b:be:f1:c2:c9:a8:ef:61:47:a1:b4:f6:3f:83:5f: 91:6f:73:22:2e:f6:a6:3e:55:2d:15:cf:20:09:4c:f0:64:dc: 79:ea:09:75:2a:82:d3:19:eb:18:76:af:d0:ac:5c:a5:7c:fb: 2c:f2:82:2b:bf:bb:24:c2:5a:98:51:0e:5f:c0:b8:fc:a0:0f: f2:23:c2:ec:57:f5:de:8c:5d:4a:a3:d7:60:7d:c5:e0:5c:13: e0:c3:e7:d5:63:6b:20:9c:01:5d:86:50:1e:ca:f7:bb:50:5a: 75:da:33:67:ec:94:d1:4b:a8:42:1a:a8:db:20:3a:e7:91:87: d6:1e:6e:69:ed:cd:3d:8e:3f:fe:cd:17:06:50:e3:85:4f:34: d4:73:fc:14:55:e1:e5:64:e9:9d:05:b4:9a:fe:a4:a3:e1:f9: 62:3e:ba:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz QkY1QzVEMTQwHhcNMjUwNzAyMjI0ODIxWhcNMjUwNzA5MjI0ODIxWjAYMRYwFAYD VQQDEw02ODY1YjczNS05MTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcv023LO/PiToz4HsjTTwYLxAFRQKP2L/2XF2L0+ARJtPSLPFt7ZVRyVWwfa C42oRiMEysPBzT1pwnrRvKnLSA8pjtbTC4PCd7oXM00JP1BYKAYIn/dAmXbkWGTL 9bUOiHVcwE60CLg39HwV57yYqohtr+MtsEu8Wq0szRNct8bUVI3BfLe/AUkkRs2O NkHuJGCEUJy/aBXsFPGunKQP2O6kcik1ne/k3hqw5yxzJIho7YvDGW0i9okbQotG 435bqQ7357E14V1Xn+E27tOiWP0H0OvrvHJvj5IATa9KagojttjZOpHpHuusT3Wy unRqTwRFXZENO26jOjqFB3qTTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4JfwYe WHyOU+axaGPanKbfBiY4MB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDMxRS83QTg0ODE5NjhDNjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlm RmU3bWRVZUJqaVk3OWNYUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBU2Urx2vyi/Hat+r1h3S3ilwhKoxPzcE5XYnW/DyYn59/bRx6q/ah sKASKXWT8Xv7w9DszMb3G0RH3lYayPAuz+ppQIG+gpKdsTNSFL4/vObjC95o7d4P S00pbEl7vvHCyajvYUehtPY/g1+Rb3MiLvamPlUtFc8gCUzwZNx56gl1KoLTGesY dq/QrFylfPss8oIrv7skwlqYUQ5fwLj8oA/yI8LsV/XejF1Ko9dgfcXgXBPgw+fV Y2sgnAFdhlAeyve7UFp12jNn7JTRS6hCGqjbIDrnkYfWHm5p7c09jj/+zRcGUOOF TzTUc/wUVeHlZOmdBbSa/qSj4fliPrpZ -----END CERTIFICATE-----Generated at Thu Jul 3 03:43:28 2025 by rpki-client