$ rpki-client -vvf rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft File: ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft (raw, json) Hash identifier: Gnrg5unTjhlL+12sW1PFFm8+Gr7KdGHVSZqkTON4cvI= Subject key identifier: 95:3A:E7:EC:02:42:9F:F5:3E:AB:77:FC:6E:D7:EA:FD:3B:48:7C:6B Authority key identifier: 76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC Certificate issuer: /CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft Manifest number: 0247 Signing time: Sat 05 Jul 2025 02:26:16 +0000 Manifest this update: Sat 05 Jul 2025 02:26:15 +0000 Manifest next update: Sat 12 Jul 2025 02:26:15 +0000 Files and hashes: 1: ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl (hash: IMmzDVUkJZUfoCfBfL2HUd0CF9zxwdUXAEYgskFXbyo=) 2: 150C1686283511EDABF49D69C4F9AE02.roa (hash: cp/g3c614sxIJhG7+W0sfcuIudQc0T60lgeLxpTEn7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F26F1, serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Validity Not Before: Jul 5 02:26:15 2025 GMT Not After : Jul 12 02:26:15 2025 GMT Subject: CN=68688d47-9cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a9:5d:09:42:2b:d9:a9:35:ce:c9:66:36:a3: 56:f1:bc:6c:65:cb:4e:eb:10:3f:d5:45:5e:3a:ec: a8:40:40:cc:3b:c8:ea:97:24:b2:79:64:57:5c:a6: 4b:4e:0b:0f:bc:a0:50:b9:7d:92:bc:58:be:1b:2b: 6a:c6:c9:4a:34:4c:24:fc:48:5b:25:ee:15:96:46: bd:2e:1c:11:bc:52:c8:f3:a8:e5:33:70:a0:26:d6: 27:07:8d:d7:4b:5e:4f:ba:c4:7c:53:2d:fc:c2:a6: 58:d6:c6:e9:d6:c4:d4:a2:c9:be:99:0f:97:dd:4e: 91:6c:da:ca:f9:0f:a0:9d:b7:f2:4a:db:70:12:1d: 80:4b:33:f4:65:2d:2c:1b:7b:51:c7:b0:a9:8e:a2: 0a:ec:ce:77:a6:ef:57:72:a0:41:31:df:63:99:4f: c8:2f:6a:6a:17:bf:c6:10:97:fa:80:97:eb:47:c5: 92:77:20:cb:0e:c9:69:6a:02:f1:4f:00:ef:a6:ae: a9:ec:cb:65:7f:be:d8:37:c6:3a:fd:02:eb:71:f4: 60:f9:fc:17:03:96:89:8f:7a:3d:14:27:10:a3:36: 65:1b:4f:48:84:d5:bf:2c:9b:0d:91:1e:f6:5e:70: 5d:86:d7:df:ed:85:0a:59:d6:f2:91:34:1b:38:0a: 9e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3A:E7:EC:02:42:9F:F5:3E:AB:77:FC:6E:D7:EA:FD:3B:48:7C:6B X509v3 Authority Key Identifier: keyid:76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:80:70:b0:3c:d9:7d:7c:d2:9c:c7:25:0c:e5:60:4f:95:e9: 1e:85:9e:53:00:8b:40:76:ad:8d:c3:cc:6d:fe:18:5d:c8:ec: 67:74:34:39:ab:5b:9f:31:ab:59:d1:f2:f9:09:30:d1:8a:c4: 73:5b:38:31:86:c4:56:0a:c5:db:b1:ac:42:4f:ac:2e:64:b1: 45:1a:54:ea:da:f5:4b:16:2b:1e:99:64:1d:d3:67:f4:fd:69: 2f:d4:7f:e0:89:dd:da:47:ea:fb:bd:01:77:83:03:ea:36:d7: 21:98:67:fe:06:3b:20:c6:74:0b:42:53:a1:91:8a:86:fd:f9: e4:21:85:0b:b5:67:f5:df:99:43:2f:53:50:ed:33:ad:92:7d: 7b:57:79:df:f4:02:53:31:4d:06:29:63:13:8b:b6:06:18:28: 39:ef:f3:1b:88:f1:7f:db:00:5b:b4:36:e9:2e:5a:0f:57:e4: ac:97:6b:65:e0:b6:f8:8d:6d:c6:c4:8e:89:91:99:e6:fd:ef: 73:83:c9:2e:c7:ac:93:6c:4c:64:f0:cc:e8:b7:94:40:84:62: d1:0c:b6:5b:87:6a:f4:f1:45:9e:d3:16:f6:ad:25:19:10:0c: 10:51:60:f9:41:f2:26:72:48:11:42:c6:4e:64:a4:b9:c1:9f: 2e:86:24:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI2RjExMTAvBgNVBAUTKDc2Q0QxMkFEOUU2MDhDQUEyQzE5OTdCNjM2RjQ1MDU3 N0JFOTM3QkMwHhcNMjUwNzA1MDIyNjE1WhcNMjUwNzEyMDIyNjE1WjAYMRYwFAYD VQQDEw02ODY4OGQ0Ny05Y2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8aldCUIr2ak1zslmNqNW8bxsZctO6xA/1UVeOuyoQEDMO8jqlySyeWRXXKZL TgsPvKBQuX2SvFi+GytqxslKNEwk/EhbJe4Vlka9LhwRvFLI86jlM3CgJtYnB43X S15PusR8Uy38wqZY1sbp1sTUosm+mQ+X3U6RbNrK+Q+gnbfySttwEh2ASzP0ZS0s G3tRx7CpjqIK7M53pu9XcqBBMd9jmU/IL2pqF7/GEJf6gJfrR8WSdyDLDslpagLx TwDvpq6p7Mtlf77YN8Y6/QLrcfRg+fwXA5aJj3o9FCcQozZlG09IhNW/LJsNkR72 XnBdhtff7YUKWdbykTQbOAqePwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJU65+wC Qp/1Pqt3/G7X6v07SHxrMB8GA1UdIwQYMBaAFHbNEq2eYIyqLBmXtjb0UFd76Te8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjZGMS84OEYxQzc4NDI4 MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pLb3NHWmUyTnZSUVYzdnBO N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMFNyWjVnaktvc0daZTJOdlJRVjN2cE43dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjZGMS84OEYxQzc4NDI4MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pL b3NHWmUyTnZSUVYzdnBON3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIgHCwPNl9fNKcxyUM5WBPlekehZ5TAItAdq2Nw8xt/hhdyOxndDQ5 q1ufMatZ0fL5CTDRisRzWzgxhsRWCsXbsaxCT6wuZLFFGlTq2vVLFisemWQd02f0 /Wkv1H/gid3aR+r7vQF3gwPqNtchmGf+BjsgxnQLQlOhkYqG/fnkIYULtWf135lD L1NQ7TOtkn17V3nf9AJTMU0GKWMTi7YGGCg57/MbiPF/2wBbtDbpLloPV+Ssl2tl 4Lb4jW3GxI6JkZnm/e9zg8kux6yTbExk8Mzot5RAhGLRDLZbh2r08UWe0xb2rSUZ EAwQUWD5QfImckgRQsZOZKS5wZ8uhiRK -----END CERTIFICATE-----Generated at Sat Jul 5 22:31:39 2025 by rpki-client