$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json) Hash identifier: wYVSlsO4ORw+PHlgLOXybnUCyng0bIGS6yrBsexrXQY= Subject key identifier: 8F:3E:42:05:A3:46:C5:F4:38:7B:21:44:48:B5:5C:3E:9C:CB:D0:A8 Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft Manifest number: 01BA Signing time: Tue 01 Jul 2025 03:28:13 +0000 Manifest this update: Tue 01 Jul 2025 03:28:12 +0000 Manifest next update: Tue 08 Jul 2025 03:28:12 +0000 Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: Ry+S7DsleJZ4nBRGHrl6RiViRtD4/UyfAHIL7WqYKz4=) 2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: db2NWeg4HG/QWHWjQkMvsucOm2s5WuaDwiakb3D08Rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Validity Not Before: Jul 1 03:28:12 2025 GMT Not After : Jul 8 03:28:12 2025 GMT Subject: CN=686355cc-039c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:44:ce:a0:97:22:39:54:b0:bc:c9:28:fb: 5c:63:97:f7:3e:02:2e:85:0b:30:01:ef:5d:ea:a4: 92:70:0c:b1:9f:5a:c3:38:dd:ee:98:4d:51:94:95: db:e8:74:41:47:37:fc:56:05:e5:be:73:82:f9:12: ba:e9:63:51:70:a7:60:5c:6d:6e:76:26:a0:5b:16: 4d:ea:04:c4:f4:95:41:db:ab:52:4a:31:84:4b:54: 09:90:2c:5e:00:ff:fe:37:5c:7a:16:d8:b7:38:1b: 65:37:7c:e3:11:3d:6e:0f:05:ed:bc:bc:c7:08:75: aa:2d:78:2f:3e:96:0c:72:ac:8d:03:c4:cf:af:4b: 13:8b:ac:44:a5:d3:3e:32:3c:a3:c4:88:26:ec:fe: 60:78:cf:ad:c3:b7:ab:e6:cd:b0:4b:a2:3b:3c:a4: 71:d8:70:d2:ab:f6:2f:b7:1d:f9:39:4f:d3:a2:69: 75:e7:80:1b:63:1f:36:02:9c:b9:c3:1d:44:f1:54: bd:75:ab:17:cf:46:9c:e5:0c:7a:58:2a:31:10:be: 3b:bc:dc:52:48:95:36:11:39:df:c7:5f:2d:b6:fb: 73:bd:0b:e3:16:31:a7:ba:fc:dd:de:93:52:6e:16: 8f:8e:df:cf:67:ca:ea:c4:24:1d:3a:a1:11:5d:11: 03:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3E:42:05:A3:46:C5:F4:38:7B:21:44:48:B5:5C:3E:9C:CB:D0:A8 X509v3 Authority Key Identifier: keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:56:bc:ee:6d:7c:3a:da:12:2d:76:19:73:d4:50:b4:a1:28: cf:49:b9:b9:67:80:d6:6b:b9:3b:a9:40:1e:84:e3:c2:66:b8: 99:79:bd:a1:06:74:34:01:77:be:a9:eb:05:82:5b:a2:d4:05: c7:3e:0d:de:fc:ff:93:6d:c2:f4:d7:c7:5e:3f:2d:b5:36:6b: 2c:bc:3e:c5:6d:c0:16:e1:6f:b0:00:40:42:09:f1:30:93:98: 95:78:07:54:be:3d:8f:dd:40:73:69:f9:87:a2:a4:f7:4e:28: 27:55:14:21:13:f5:66:38:5f:c9:7a:3a:df:f5:f2:19:e4:7f: e9:02:2d:74:31:ad:1d:1f:16:3d:fd:21:66:ee:54:93:b8:4d: bf:b6:39:a4:50:5b:53:40:91:0d:6b:f0:a1:8f:c6:e7:3d:70: 3c:a2:8c:ed:dc:e7:49:9e:3b:cc:07:ea:a5:be:33:09:06:e2: 17:aa:c9:a9:c2:3e:ec:59:79:78:01:cf:ab:5e:49:e3:ba:02: 18:a2:2e:ff:10:e1:b6:ff:5a:ff:f1:ec:5f:28:93:b7:b7:ee: 7b:1a:95:33:e9:de:e1:9c:f0:c4:8c:b8:2e:06:cf:0e:18:75: 0f:2c:2b:e0:56:c4:ec:bc:3e:86:db:dd:5f:1b:77:45:ce:92: da:86:2b:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3 NjlFNzEzNkIwHhcNMjUwNzAxMDMyODEyWhcNMjUwNzA4MDMyODEyWjAYMRYwFAYD VQQDEw02ODYzNTVjYy0wMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNlEzqCXIjlUsLzJKPtcY5f3PgIuhQswAe9d6qSScAyxn1rDON3umE1RlJXb 6HRBRzf8VgXlvnOC+RK66WNRcKdgXG1udiagWxZN6gTE9JVB26tSSjGES1QJkCxe AP/+N1x6Fti3OBtlN3zjET1uDwXtvLzHCHWqLXgvPpYMcqyNA8TPr0sTi6xEpdM+ MjyjxIgm7P5geM+tw7er5s2wS6I7PKRx2HDSq/Yvtx35OU/Toml154AbYx82Apy5 wx1E8VS9dasXz0ac5Qx6WCoxEL47vNxSSJU2ETnfx18ttvtzvQvjFjGnuvzd3pNS bhaPjt/PZ8rqxCQdOqERXREDBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8+QgWj RsX0OHshREi1XD6cy9CoMB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZDNi8yQ0FFQUQwNEIzM0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkot dnJoUThHMm5hbkoybm5FMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWVrzubXw62hItdhlz1FC0oSjPSbm5Z4DWa7k7qUAehOPCZriZeb2h BnQ0AXe+qesFglui1AXHPg3e/P+TbcL018dePy21NmssvD7FbcAW4W+wAEBCCfEw k5iVeAdUvj2P3UBzafmHoqT3TignVRQhE/VmOF/Jejrf9fIZ5H/pAi10Ma0dHxY9 /SFm7lSTuE2/tjmkUFtTQJENa/Chj8bnPXA8oozt3OdJnjvMB+qlvjMJBuIXqsmp wj7sWXl4Ac+rXknjugIYoi7/EOG2/1r/8exfKJO3t+57GpUz6d7hnPDEjLguBs8O GHUPLCvgVsTsvD6G291fG3dFzpLahivl -----END CERTIFICATE-----Generated at Wed Jul 2 05:07:52 2025 by rpki-client