$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: LDrMElQ7MODdCBs03A++cnB00Ozmca5YdePLFBfdWUo= Subject key identifier: B8:AD:02:AB:D8:B2:53:73:92:9A:BC:F6:92:6C:CF:E4:D5:05:CE:DB Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 094A Signing time: Fri 04 Jul 2025 20:35:15 +0000 Manifest this update: Fri 04 Jul 2025 20:35:14 +0000 Manifest next update: Fri 11 Jul 2025 20:35:14 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: EacKBWr63lYVPajxs3CKBbgX405iRVV0N3pm75PZHO0=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2386 (0x952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Jul 4 20:35:14 2025 GMT Not After : Jul 11 20:35:14 2025 GMT Subject: CN=68683b02-d3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5a:84:1c:11:8c:2a:fa:69:d4:47:08:79:e4: 65:b7:ba:f5:31:ac:18:25:c1:20:3a:db:8b:4e:90: bf:75:32:8a:d8:c4:94:94:2e:06:91:5c:6c:e8:08: 84:11:03:d3:b8:3b:7c:73:da:53:03:0f:2b:ee:4c: ba:49:5b:de:b3:3b:7f:64:fc:51:f1:f6:65:68:4d: 8e:8c:cc:4f:80:70:7a:ed:f8:7d:be:de:2f:97:91: c6:f3:75:9f:de:2c:51:ea:e3:08:e5:e4:56:1b:ad: 1b:c7:b8:a2:46:78:34:84:40:e2:3f:fd:23:b9:6d: 1e:89:c9:1a:6b:d6:ce:c2:62:fc:aa:87:ca:34:37: a9:42:cc:bb:bb:51:f6:07:9f:ac:53:f9:24:38:54: 36:37:f6:e4:2c:e3:cd:76:31:f5:c1:71:63:f5:d9: 76:a8:61:62:d2:cd:9b:a5:36:cc:6b:a8:7f:ed:e7: bb:d2:c8:ac:88:6c:98:6c:58:bd:ee:a4:84:2b:2b: 8e:18:c8:23:95:bb:b9:ac:8c:02:2e:ad:4f:71:c8: c9:11:85:06:43:f6:7a:42:96:f9:b4:17:53:70:19: 7a:23:6e:d6:86:61:6e:5a:57:f3:25:8f:6e:31:d0: f2:86:5f:eb:5f:8d:4a:c1:22:45:9e:6a:6b:c8:26: be:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AD:02:AB:D8:B2:53:73:92:9A:BC:F6:92:6C:CF:E4:D5:05:CE:DB X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:c0:f0:68:17:76:b1:b8:8c:5d:72:fa:7d:43:3a:b9:11:c6: cb:69:6d:13:a2:b6:b6:00:c3:c4:37:92:d1:97:17:fa:48:7f: c1:17:a7:c6:9d:86:f1:25:75:e8:2a:8a:80:02:5d:22:b3:63: f5:d7:cf:4b:23:b6:42:8c:53:00:7b:a8:53:0c:3f:e1:29:5f: 63:be:6d:f0:8a:9c:54:42:ed:5b:24:cc:b5:76:66:24:3b:f2: 12:2a:43:77:7a:a9:18:1e:92:37:53:e7:0b:ae:6a:3a:9d:dc: 29:88:a5:22:d3:d2:e6:28:d1:93:ba:47:ab:1c:1d:eb:e8:92: fe:74:a1:de:05:39:75:47:c2:36:1b:76:bf:fc:5b:fe:45:b7: 1f:95:98:a1:34:92:be:5b:89:d7:b9:ae:a4:ad:de:07:c3:59: 13:9e:10:71:2f:0a:bc:e7:c3:f8:4b:ff:94:3e:7d:1d:d2:cb: 2b:a9:9a:e1:6f:da:27:12:9a:c1:66:3d:0e:c9:80:10:f1:be: 9c:09:d2:45:ca:43:e8:a1:24:3a:6f:00:3d:71:ae:9d:d1:fb: 71:03:da:6f:da:de:23:a2:1c:88:c9:b6:30:c8:c6:d4:d3:80: 71:26:b3:39:a2:ba:8c:a6:9e:98:d2:1b:bc:2f:78:bf:08:c0: d4:d2:fc:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUwNzA0MjAzNTE0WhcNMjUwNzExMjAzNTE0WjAYMRYwFAYD VQQDEw02ODY4M2IwMi1kM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVqEHBGMKvpp1EcIeeRlt7r1MawYJcEgOtuLTpC/dTKK2MSUlC4GkVxs6AiE EQPTuDt8c9pTAw8r7ky6SVveszt/ZPxR8fZlaE2OjMxPgHB67fh9vt4vl5HG83Wf 3ixR6uMI5eRWG60bx7iiRng0hEDiP/0juW0eickaa9bOwmL8qofKNDepQsy7u1H2 B5+sU/kkOFQ2N/bkLOPNdjH1wXFj9dl2qGFi0s2bpTbMa6h/7ee70sisiGyYbFi9 7qSEKyuOGMgjlbu5rIwCLq1PccjJEYUGQ/Z6Qpb5tBdTcBl6I27WhmFuWlfzJY9u MdDyhl/rX41KwSJFnmpryCa+5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLitAqvY slNzkpq89pJsz+TVBc7bMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBwPBoF3axuIxdcvp9Qzq5EcbLaW0Tora2AMPEN5LRlxf6SH/BF6fG nYbxJXXoKoqAAl0is2P1189LI7ZCjFMAe6hTDD/hKV9jvm3wipxUQu1bJMy1dmYk O/ISKkN3eqkYHpI3U+cLrmo6ndwpiKUi09LmKNGTukerHB3r6JL+dKHeBTl1R8I2 G3a//Fv+RbcflZihNJK+W4nXua6krd4Hw1kTnhBxLwq858P4S/+UPn0d0ssrqZrh b9onEprBZj0OyYAQ8b6cCdJFykPooSQ6bwA9ca6d0ftxA9pv2t4johyIybYwyMbU 04BxJrM5orqMpp6Y0hu8L3i/CMDU0vyH -----END CERTIFICATE-----Generated at Sat Jul 5 02:21:04 2025 by rpki-client