$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft File: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft (raw, json) Hash identifier: FBseBTUf3lZ2dM21fmUb7H0POQzv7eahcGBa9xMMfCk= Subject key identifier: A8:9B:4C:46:59:7B:60:E2:87:A6:56:E6:A2:F7:47:B9:75:05:FA:FB Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft Manifest number: 069E Signing time: Wed 02 Jul 2025 22:32:30 +0000 Manifest this update: Wed 02 Jul 2025 22:32:29 +0000 Manifest next update: Wed 09 Jul 2025 22:32:29 +0000 Files and hashes: 1: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl (hash: 2nDWWIajD+Y2Mg1IdDiQb6tcynHNStmKpugoh0P0o9Q=) 2: DE7B831C37DA11EDBEF9D050C4F9AE02.roa (hash: +kKylmkca6+FAx4sOYGqHKzwXEhQ+5JcXHkL0UhejKI=) 3: E959541EB28511ED8893C51CC4F9AE02.roa (hash: UcfQbjt5pGDSOZCx5IzeUlVnX3YAZQw3ib/ytvODV4c=) 4: DDC1A87037DA11EDBEF9D050C4F9AE02.roa (hash: JPtWkJd9tKQ9YS8DsRPubKSCxL1JQ7cieCqKgCXkh+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Jul 2 22:32:29 2025 GMT Not After : Jul 9 22:32:29 2025 GMT Subject: CN=6865b37e-a853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:69:b9:0b:25:7b:7a:3b:50:b4:55:e9:84: ca:0e:63:c5:f8:89:6f:c3:49:de:08:16:e8:1d:4e: 0c:52:f1:74:13:92:30:03:f9:38:99:32:c3:27:c7: a6:4e:a6:af:6f:cb:12:1c:38:c9:88:57:67:2f:1b: 4b:4e:a3:87:f6:84:0f:b7:6f:81:ae:d0:88:41:20: 9e:1d:c7:ce:ab:22:fb:9d:51:e1:8e:9b:9b:fb:b1: da:a3:be:79:ac:2a:f6:98:e2:ff:70:73:5c:c8:69: 41:34:af:4c:8d:01:9a:b6:da:e0:2c:13:03:eb:8d: 05:c3:7f:f7:d8:99:be:2a:d8:a2:9f:95:03:85:78: e9:61:b0:22:22:e9:c9:9d:f0:40:44:a2:7d:3d:61: 9c:ef:18:7b:97:64:14:ce:b8:72:8a:3a:90:13:a7: fd:3f:8e:f2:6b:aa:60:bd:8e:69:7b:94:86:77:33: 71:2d:22:18:f9:97:f2:e3:4c:b6:3f:76:93:80:a1: 48:74:3c:f9:76:2b:44:9c:30:bf:e8:4d:77:1a:12: df:3b:9e:5d:47:24:2b:b0:ad:c6:d0:59:65:e7:05: 6c:ad:39:0a:1e:e9:c9:57:b5:42:2e:ac:4b:51:fe: e6:c6:8d:bd:85:27:51:27:45:56:b7:9e:0b:b7:05: b6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9B:4C:46:59:7B:60:E2:87:A6:56:E6:A2:F7:47:B9:75:05:FA:FB X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:fa:1d:33:3f:37:f4:fd:86:f4:ca:1b:b4:8a:51:d5:5c:c9: 70:44:76:53:bf:04:90:3b:16:99:e1:f1:fa:f8:13:19:39:7f: 9a:5e:a0:64:3b:c5:7f:f1:42:9a:2a:c0:5a:86:82:24:02:88: 05:db:bf:39:9e:4d:d4:f9:35:84:7a:18:da:37:03:a7:33:a2: ec:42:6d:7b:25:91:11:c5:25:ec:a2:6b:42:94:cd:97:64:7b: 01:33:5f:e8:08:30:b2:9b:95:15:b8:0b:fb:aa:f8:aa:1e:fa: f5:00:72:54:c2:c3:03:91:a9:4a:52:84:6c:8c:79:ba:40:52: 16:e7:80:d3:c3:4b:e8:1c:4d:6f:d4:01:46:3a:f2:48:58:f2: f8:13:14:05:40:51:51:be:25:44:df:fd:d8:3e:df:38:92:01: af:ba:67:73:79:57:33:af:cd:80:f4:7d:8a:8d:7a:d5:16:5a: b1:0c:1a:17:93:86:da:88:0b:d9:9c:b7:21:e3:12:37:e5:ce: 29:36:6f:85:a3:a7:79:0b:2e:e7:68:10:79:3e:32:df:1d:19: c4:86:57:3f:75:a5:43:d0:b7:0c:7c:f8:cd:c0:d2:26:27:86: 75:3c:ee:99:4d:22:b2:af:d9:6b:0b:cf:6c:87:68:8d:bc:3a: c8:ae:74:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjUwNzAyMjIzMjI5WhcNMjUwNzA5MjIzMjI5WjAYMRYwFAYD VQQDEw02ODY1YjM3ZS1hODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOBpuQsle3o7ULRV6YTKDmPF+Ilvw0neCBboHU4MUvF0E5IwA/k4mTLDJ8em Tqavb8sSHDjJiFdnLxtLTqOH9oQPt2+BrtCIQSCeHcfOqyL7nVHhjpub+7Hao755 rCr2mOL/cHNcyGlBNK9MjQGattrgLBMD640Fw3/32Jm+Ktiin5UDhXjpYbAiIunJ nfBARKJ9PWGc7xh7l2QUzrhyijqQE6f9P47ya6pgvY5pe5SGdzNxLSIY+Zfy40y2 P3aTgKFIdDz5ditEnDC/6E13GhLfO55dRyQrsK3G0Fll5wVsrTkKHunJV7VCLqxL Uf7mxo29hSdRJ0VWt54LtwW2aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKibTEZZ e2Dih6ZW5qL3R7l1Bfr7MB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REIzNy81NzY0NzM3QTc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpq V0J4Y1FfVDhmTUxQYU5hU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5+h0zPzf0/Yb0yhu0ilHVXMlwRHZTvwSQOxaZ4fH6+BMZOX+aXqBk O8V/8UKaKsBahoIkAogF2785nk3U+TWEehjaNwOnM6LsQm17JZERxSXsomtClM2X ZHsBM1/oCDCym5UVuAv7qviqHvr1AHJUwsMDkalKUoRsjHm6QFIW54DTw0voHE1v 1AFGOvJIWPL4ExQFQFFRviVE3/3YPt84kgGvumdzeVczr82A9H2KjXrVFlqxDBoX k4baiAvZnLch4xI35c4pNm+Fo6d5Cy7naBB5PjLfHRnEhlc/daVD0LcMfPjNwNIm J4Z1PO6ZTSKyr9lrC89sh2iNvDrIrnSQ -----END CERTIFICATE-----Generated at Thu Jul 3 18:01:59 2025 by rpki-client