$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json) Hash identifier: Fj2boTz9ie/D01oxOKxl6u5krEgMOlYtYabmcEuAHCc= Subject key identifier: 5F:51:0C:17:BA:6F:DA:8B:C2:10:F4:C6:E5:F8:AF:06:D6:CC:5B:9B Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1E3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft Manifest number: 1DB4 Signing time: Wed 02 Jul 2025 16:15:18 +0000 Manifest this update: Wed 02 Jul 2025 16:15:18 +0000 Manifest next update: Wed 09 Jul 2025 16:15:18 +0000 Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: qwa9oNIVvCXvPRekiWlvP97c134riSuqDSJ9um7zWSk=) 2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: ErQUIZBQOuclNYifsKsmx5/Jnr/1hpU5xKibhIO600k=) 3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: JDAGe4IksOtjrzlmQZ9zVBIzM1ZKwteeQYN9TBrAsPk=) 4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: FW9NYXvHGiXVfFykPHyKhdOjK9fS+NAvHhqmtmC3mxY=) 5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: KptRM9OhZOY+IAnuIj6dKpgRtL+UG95HSLHK6SbwluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7738 (0x1e3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: Jul 2 16:15:18 2025 GMT Not After : Jul 9 16:15:18 2025 GMT Subject: CN=68655b16-737f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:d3:d2:6e:16:80:48:6d:27:7d:a2:44:aa: 62:38:43:45:46:13:30:9b:cb:df:75:f9:8f:78:44: 90:d2:d8:6d:47:48:50:8c:5d:ce:1e:5c:b1:4b:70: 3d:0e:3f:42:61:76:a7:06:8d:b9:11:31:53:45:2c: 16:eb:cc:df:80:29:98:1f:b4:24:e0:f0:cc:2b:c5: 63:dc:37:e8:40:61:42:7f:3e:a8:fa:59:00:43:9a: a4:63:7f:72:f8:9a:44:39:bf:ee:85:8e:0a:28:3b: 16:e8:bd:bf:89:f1:a7:81:47:17:f9:fb:24:f3:5e: 4f:06:e3:96:b7:f5:75:fc:ff:9a:e1:ea:44:b1:29: 97:90:9b:e9:79:91:a6:e1:85:8f:81:12:dc:3f:3e: 99:0a:14:ee:46:93:1f:be:92:05:a9:b2:a6:00:46: 3b:eb:ed:c2:b5:dc:ab:a2:fb:18:92:af:cd:bb:ec: d2:59:cc:1d:f1:0e:f8:43:f5:ff:db:f7:26:c7:10: be:ac:84:7a:28:f0:5a:9d:6d:ce:f3:b3:0c:13:75: ee:b9:31:4d:70:10:8d:d0:fa:f8:67:e3:0e:b2:91: 29:d6:af:91:c2:d9:bb:c9:43:ab:37:f1:b4:00:ad: 57:9a:d1:10:8d:8d:cb:56:a4:29:6e:85:a3:96:51: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:51:0C:17:BA:6F:DA:8B:C2:10:F4:C6:E5:F8:AF:06:D6:CC:5B:9B X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e3:6d:68:b6:f2:48:06:a1:de:a0:7d:c6:d1:83:81:bb:87: 5d:c4:80:02:2f:44:a3:86:a9:70:e1:dc:2a:7c:9e:3c:e0:eb: a5:60:f2:43:06:d3:fc:a9:0f:ce:69:8a:8a:1b:f8:26:2a:8d: 8a:a5:04:15:3c:82:0a:80:97:35:a5:9f:7c:6b:e4:d5:25:04: 03:4b:e0:ac:e0:75:7c:2e:24:9a:44:98:38:2b:b1:3c:20:9b: af:8e:d5:5e:63:97:a9:94:7d:ab:cf:a5:23:38:d0:16:bc:79: 73:35:96:96:42:64:57:32:6e:78:03:81:b0:f4:54:89:ce:18: 61:c8:18:12:c1:87:db:8a:a8:4d:7f:41:6a:36:0e:b1:bf:4d: b8:47:ac:dc:2a:9a:51:0c:ee:20:84:1a:b4:f7:01:2f:81:5f: d2:9f:4b:80:df:88:fb:7c:5d:e8:e5:f6:f0:72:d7:31:69:72: c6:ea:00:8d:0f:14:b1:bd:be:69:10:af:de:c3:7f:d1:e2:88: 59:14:29:3d:73:95:f3:f9:84:a0:fe:d8:e6:cc:c9:e8:6b:4e: 68:84:4a:02:bf:0a:14:66:20:38:f4:7f:94:be:20:e1:6f:7d: d4:4f:e6:86:9a:0e:8e:3e:1c:b3:fe:39:62:d5:a0:1d:c5:3b: 38:e4:36:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjUwNzAyMTYxNTE4WhcNMjUwNzA5MTYxNTE4WjAYMRYwFAYD VQQDEw02ODY1NWIxNi03MzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugHT0m4WgEhtJ32iRKpiOENFRhMwm8vfdfmPeESQ0thtR0hQjF3OHlyxS3A9 Dj9CYXanBo25ETFTRSwW68zfgCmYH7Qk4PDMK8Vj3DfoQGFCfz6o+lkAQ5qkY39y +JpEOb/uhY4KKDsW6L2/ifGngUcX+fsk815PBuOWt/V1/P+a4epEsSmXkJvpeZGm 4YWPgRLcPz6ZChTuRpMfvpIFqbKmAEY76+3CtdyrovsYkq/Nu+zSWcwd8Q74Q/X/ 2/cmxxC+rIR6KPBanW3O87MME3XuuTFNcBCN0Pr4Z+MOspEp1q+Rwtm7yUOrN/G0 AK1XmtEQjY3LVqQpboWjllEWnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9RDBe6 b9qLwhD0xuX4rwbWzFubMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf QlJVbi1sTTlSNmtYQjM1akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH421otvJIBqHeoH3G0YOBu4ddxIACL0Sjhqlw4dwqfJ484OulYPJD BtP8qQ/OaYqKG/gmKo2KpQQVPIIKgJc1pZ98a+TVJQQDS+Cs4HV8LiSaRJg4K7E8 IJuvjtVeY5eplH2rz6UjONAWvHlzNZaWQmRXMm54A4Gw9FSJzhhhyBgSwYfbiqhN f0FqNg6xv024R6zcKppRDO4ghBq09wEvgV/Sn0uA34j7fF3o5fbwctcxaXLG6gCN DxSxvb5pEK/ew3/R4ohZFCk9c5Xz+YSg/tjmzMnoa05ohEoCvwoUZiA49H+UviDh b33UT+aGmg6OPhyz/jli1aAdxTs45Db4 -----END CERTIFICATE-----Generated at Thu Jul 3 15:10:56 2025 by rpki-client