$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft File: w5bB5QN9M19zQcouz4ImEwDN_pU.mft (raw, json) Hash identifier: JZmiIf77BBGDmguSA7o4XxA8b4simIPE6m08SfcZEZs= Subject key identifier: DA:13:BA:CE:53:A1:08:9A:63:64:30:C9:21:CE:C7:1D:6F:BE:2B:07 Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 Certificate issuer: /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft Manifest number: 04BF Signing time: Tue 01 Jul 2025 00:24:08 +0000 Manifest this update: Tue 01 Jul 2025 00:24:07 +0000 Manifest next update: Tue 08 Jul 2025 00:24:07 +0000 Files and hashes: 1: w5bB5QN9M19zQcouz4ImEwDN_pU.crl (hash: cB8EyFiwHD0g5ehkbPfcoP5vX3B0SZvPjFwvkAhyXxw=) 2: FCF7126E310711ECBFFF5E62C4F9AE02.roa (hash: F3pgM3DGI+wP2jrjrPXa65ZGlXf9TnXpF1OSKK2H5GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Validity Not Before: Jul 1 00:24:07 2025 GMT Not After : Jul 8 00:24:07 2025 GMT Subject: CN=68632aa7-14a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:53:a0:ee:60:9e:c1:42:1c:14:1a:f7:7a: 81:3b:eb:a6:a3:92:12:4d:59:e0:77:ea:80:0f:56: 1f:87:2d:60:ef:e2:b3:50:1f:0d:e1:ba:5a:28:df: 33:ad:0c:2e:95:81:bb:ae:b7:2b:18:01:71:e8:79: 15:00:96:7e:f2:82:3a:3d:cb:41:d4:b7:4b:ee:74: 82:03:ac:d7:0d:b4:c4:e2:df:54:26:95:4c:a7:1f: d0:fc:08:aa:96:eb:ff:3a:4b:40:85:44:f9:78:1a: 90:8d:d8:01:13:ad:34:54:57:ff:70:5d:df:c6:18: 7e:ca:23:a3:b2:76:ca:61:50:1a:69:e7:dd:89:8a: e4:da:2d:e2:73:6a:8b:71:bd:65:4f:73:fb:4d:59: d4:2e:38:29:19:ca:14:53:65:06:90:e6:2c:87:68: 1e:9f:a8:d6:98:d1:92:5a:cf:56:b2:8b:22:c1:f4: 0b:99:5c:54:b3:33:52:b2:a9:1b:be:09:96:a5:f1: be:08:35:d7:34:94:34:83:1a:54:f4:4a:c7:f8:59: 12:f2:12:f3:e9:45:e0:92:42:f6:76:2f:fa:92:b1: 6a:35:da:50:db:86:0f:67:bb:bd:d3:1a:f4:d3:66: 82:20:37:c6:de:9e:88:b6:03:06:9b:2c:ac:25:e2: 3f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:13:BA:CE:53:A1:08:9A:63:64:30:C9:21:CE:C7:1D:6F:BE:2B:07 X509v3 Authority Key Identifier: keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d6:de:cb:1f:cc:d3:97:f3:b1:61:e9:19:35:d8:de:8f:40: 8a:52:0f:98:97:2b:3a:e9:81:60:8a:51:f2:5d:a9:3e:a9:71: 1c:27:6f:cd:0c:8b:28:7b:83:ac:1c:b4:23:4c:bb:99:77:89: 0e:ab:a9:63:c1:b9:d8:2f:a4:23:8e:f6:53:b3:64:ed:c1:2c: cb:31:55:ad:e7:d8:18:4a:53:ce:d3:61:9b:5a:41:ed:0e:89: 15:07:2b:fe:cb:22:a1:47:63:59:d7:db:75:ea:b9:e7:a0:ac: 44:65:14:af:ca:48:39:c5:b5:f3:a0:55:45:c6:bc:c4:38:f6: 2e:d3:26:c1:e3:0a:f6:e2:ca:6e:9c:0f:b7:27:99:00:c8:e5: 4d:a9:39:18:c1:fa:59:2e:4c:2c:ab:db:9e:b1:31:5f:9e:db: 2e:9e:ed:95:ed:58:4d:bc:cf:9a:13:19:1d:2d:43:17:ad:2b: 72:1d:b2:8a:39:73:85:b7:22:82:a0:8c:02:9d:d9:c7:6a:2d: 53:01:59:0f:7a:6e:d2:52:a0:30:95:56:6c:8d:37:82:c3:0a: cb:67:89:91:6a:fc:5a:93:0f:38:fc:20:0b:f0:76:92:4b:da: 64:73:1b:fd:5e:81:92:ce:ff:50:58:c4:07:b9:65:fd:dc:21: 59:8e:9b:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzOEMxMTAvBgNVBAUTKEMzOTZDMUU1MDM3RDMzNUY3MzQxQ0EyRUNGODIyNjEz MDBDREZFOTUwHhcNMjUwNzAxMDAyNDA3WhcNMjUwNzA4MDAyNDA3WjAYMRYwFAYD VQQDEw02ODYzMmFhNy0xNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhBToO5gnsFCHBQa93qBO+umo5ISTVngd+qAD1Yfhy1g7+KzUB8N4bpaKN8z rQwulYG7rrcrGAFx6HkVAJZ+8oI6PctB1LdL7nSCA6zXDbTE4t9UJpVMpx/Q/Aiq luv/OktAhUT5eBqQjdgBE600VFf/cF3fxhh+yiOjsnbKYVAaaefdiYrk2i3ic2qL cb1lT3P7TVnULjgpGcoUU2UGkOYsh2gen6jWmNGSWs9WsosiwfQLmVxUszNSsqkb vgmWpfG+CDXXNJQ0gxpU9ErH+FkS8hLz6UXgkkL2di/6krFqNdpQ24YPZ7u90xr0 02aCIDfG3p6ItgMGmyysJeI/UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoTus5T oQiaY2QwySHOxx1vvisHMB8GA1UdIwQYMBaAFMOWweUDfTNfc0HKLs+CJhMAzf6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzM4Qy84NzA0OERBQTMx MDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0xOXpRY291ejRJbUV3RE5f cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1YkI1UU45TTE5elFjb3V6NEltRXdETl9wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzM4Qy84NzA0OERBQTMxMDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0x OXpRY291ejRJbUV3RE5fcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp1t7LH8zTl/OxYekZNdjej0CKUg+Ylys66YFgilHyXak+qXEcJ2/N DIsoe4OsHLQjTLuZd4kOq6ljwbnYL6QjjvZTs2TtwSzLMVWt59gYSlPO02GbWkHt DokVByv+yyKhR2NZ19t16rnnoKxEZRSvykg5xbXzoFVFxrzEOPYu0ybB4wr24spu nA+3J5kAyOVNqTkYwfpZLkwsq9uesTFfntsunu2V7VhNvM+aExkdLUMXrStyHbKK OXOFtyKCoIwCndnHai1TAVkPem7SUqAwlVZsjTeCwwrLZ4mRavxakw84/CAL8HaS S9pkcxv9XoGSzv9QWMQHuWX93CFZjpso -----END CERTIFICATE-----Generated at Wed Jul 2 22:42:14 2025 by rpki-client