$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json) Hash identifier: P7uxFvZkGvsqdCaPWxsHJSYmlAfP97IUk4YNAGt6srI= Subject key identifier: 90:D0:89:D3:EE:B1:D9:F3:50:24:1D:E3:A2:B9:22:0D:0D:B2:51:0D Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft Manifest number: 58 Signing time: Tue 01 Jul 2025 07:58:30 +0000 Manifest this update: Tue 01 Jul 2025 07:58:30 +0000 Manifest next update: Tue 08 Jul 2025 07:58:30 +0000 Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: 6wmBbwLN2OSCBx/Dz3M9/YuCu2ixLHjOnnnE2/cZPZ8=) 2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: LnJzBzEfTxjLgTZtBUJIJtCnRzaftx7eCk4WGWWItX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Validity Not Before: Jul 1 07:58:30 2025 GMT Not After : Jul 8 07:58:30 2025 GMT Subject: CN=68639526-ad9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:69:0e:f6:a7:be:f7:44:8b:cf:08:f4:ea:87: 8f:97:2d:99:3e:57:3b:60:7a:52:dd:df:1a:e3:91: 51:42:99:25:dc:15:0e:bc:ea:15:30:42:e4:56:a1: 90:47:40:74:3e:4f:a2:e1:54:9b:eb:f1:7f:ea:45: bf:e6:a1:7d:71:fd:aa:0e:6f:b7:fc:24:f0:c2:d4: ce:53:fb:71:11:fa:7b:12:74:dc:bb:14:c6:80:0e: 47:36:d8:70:43:8c:77:ab:13:3d:cd:cf:b7:b9:50: 18:63:eb:79:2b:99:b0:07:46:45:92:2d:a3:e9:3f: 4d:3f:35:42:41:dd:3e:55:2c:6f:07:2a:dc:23:33: 91:48:4c:89:76:8d:3b:ce:69:19:54:ae:6a:ea:cc: 5c:dd:56:b7:f0:63:5b:ce:58:dc:fa:42:bc:ad:1f: 27:b3:29:af:fc:39:30:45:f9:09:74:81:46:06:7c: c9:83:9a:b7:57:3d:07:3a:84:0c:60:8c:bb:2b:a2: bd:19:7d:35:aa:84:5a:5b:9d:cc:0b:4f:82:12:cd: 1d:fd:82:1a:af:a0:18:eb:35:cc:fc:77:f4:db:98: c5:26:d9:04:f0:21:ca:9c:93:78:52:38:b0:61:99: 6e:96:df:e9:32:93:a9:73:55:63:49:7d:34:5a:f1: 34:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D0:89:D3:EE:B1:D9:F3:50:24:1D:E3:A2:B9:22:0D:0D:B2:51:0D X509v3 Authority Key Identifier: keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:03:23:61:ce:12:89:bf:c0:40:c3:bc:de:5b:f0:e8:af:09: f5:f0:ef:4d:34:ab:ba:a5:ad:cd:02:97:8e:9e:e3:80:59:f0: 05:13:ae:d1:e6:e1:e1:6c:b5:c7:d4:65:3c:84:d1:90:33:05: d8:c5:b5:40:59:0a:57:cc:ac:a4:2f:86:a6:0e:05:c2:76:17: e1:2b:27:be:8d:de:a1:e7:94:6a:7c:f4:55:2b:40:62:4b:8b: a1:f9:83:6d:d1:ac:09:6a:c2:da:ec:c5:da:f5:0f:1b:a2:8c: 88:9d:cb:92:33:2f:71:eb:e8:a0:c5:6a:b5:3e:16:b7:29:73: 97:0a:ba:66:68:a0:11:55:31:d9:79:25:c7:fe:40:ee:70:9a: e6:b6:4a:c8:df:c7:34:5a:b4:d7:b1:bb:c3:37:03:63:0c:d5: 99:1f:c2:43:d6:c7:ea:09:77:4b:07:39:1b:1f:72:35:42:18: ce:7b:7c:a5:73:9a:f6:9d:f1:79:bb:79:09:1f:92:e8:f3:ba: fc:61:53:c4:21:d7:94:56:cc:7d:1a:90:77:b7:1e:79:04:25: af:00:5f:21:bf:28:6d:59:f3:aa:4a:f3:99:b0:2e:a3:d5:e0: 38:20:ce:ce:6d:fd:54:80:97:7c:20:c6:0c:88:21:1e:e9:1a: 7f:92:f8:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkQ5MzExMC8GA1UEBRMoRkJBRTREQjkzOTJDODE5MzIxQUY1MTFEQzZCMkI1QUE4 OTk4MTlGQTAeFw0yNTA3MDEwNzU4MzBaFw0yNTA3MDgwNzU4MzBaMBgxFjAUBgNV BAMTDTY4NjM5NTI2LWFkOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPaQ72p773RIvPCPTqh4+XLZk+VztgelLd3xrjkVFCmSXcFQ686hUwQuRWoZBH QHQ+T6LhVJvr8X/qRb/moX1x/aoOb7f8JPDC1M5T+3ER+nsSdNy7FMaADkc22HBD jHerEz3Nz7e5UBhj63krmbAHRkWSLaPpP00/NUJB3T5VLG8HKtwjM5FITIl2jTvO aRlUrmrqzFzdVrfwY1vOWNz6QrytHyezKa/8OTBF+Ql0gUYGfMmDmrdXPQc6hAxg jLsror0ZfTWqhFpbncwLT4ISzR39ghqvoBjrNcz8d/TbmMUm2QTwIcqck3hSOLBh mW6W3+kyk6lzVWNJfTRa8TRJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkNCJ0+6x 2fNQJB3jorkiDQ2yUQ0wHwYDVR0jBBgwFoAU+65NuTksgZMhr1EdxrK1qomYGfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRDkzLzgxOEZEQjc4RDQ0 RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pNaHIxRWR4cksxcW9tWUdm by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTY1TnVUa3NnWk1ocjFFZHhySzFxb21ZR2ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RDkzLzgxOEZEQjc4RDQ0RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pN aHIxRWR4cksxcW9tWUdmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8DI2HOEom/wEDDvN5b8OivCfXw7000q7qlrc0Cl46e44BZ8AUTrtHm 4eFstcfUZTyE0ZAzBdjFtUBZClfMrKQvhqYOBcJ2F+ErJ76N3qHnlGp89FUrQGJL i6H5g23RrAlqwtrsxdr1DxuijIidy5IzL3Hr6KDFarU+Frcpc5cKumZooBFVMdl5 Jcf+QO5wmua2SsjfxzRatNexu8M3A2MM1ZkfwkPWx+oJd0sHORsfcjVCGM57fKVz mvad8Xm7eQkfkujzuvxhU8Qh15RWzH0akHe3HnkEJa8AXyG/KG1Z86pK85mwLqPV 4Dggzs5t/VSAl3wgxgyIIR7pGn+S+H4= -----END CERTIFICATE-----Generated at Thu Jul 3 07:10:25 2025 by rpki-client