$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json) Hash identifier: gXjV8adn/XlS2HNexTvDf/t5rzn/k7c+oE/UUcY6bzg= Subject key identifier: 92:01:D3:01:FB:49:6D:F8:D5:40:2C:67:E2:E6:F1:FC:55:0E:99:D5 Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Certificate serial: 1064 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft Manifest number: 105C Signing time: Wed 02 Jul 2025 17:34:58 +0000 Manifest this update: Wed 02 Jul 2025 17:34:58 +0000 Manifest next update: Wed 09 Jul 2025 17:34:58 +0000 Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: CQDFwgyK0SOha9hSwUA6H0AHzH9lMJWpT6PU4andE5M=) 2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: P8zT0PniKGyPQKuaO/6cEK/Iz5vptBwIg6UXjylLbdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4196 (0x1064) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Validity Not Before: Jul 2 17:34:58 2025 GMT Not After : Jul 9 17:34:58 2025 GMT Subject: CN=68656dc2-1534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:a9:a4:41:da:a4:4b:fa:81:a4:15:d1:9b: ec:63:ec:d4:31:af:45:14:43:f8:4b:5b:70:9b:dd: fe:f5:77:8e:b2:bc:4c:a5:39:85:36:5b:cc:6b:36: 9d:4b:a6:98:cc:f7:f3:cf:4d:df:cc:51:4d:22:49: c4:cf:9f:d6:4b:65:28:dd:7e:1a:64:fc:07:b4:34: ba:5b:b9:6f:f5:3f:8c:23:5c:b2:99:cd:09:7a:4d: 4a:90:78:70:aa:66:27:08:52:dc:e6:bf:80:41:3a: 94:8e:57:9e:b5:cf:31:71:c8:82:ce:a0:55:d0:4a: de:e7:69:de:a6:80:64:58:38:c3:f7:e2:34:20:bb: 6f:eb:1e:a9:04:50:5c:f4:6f:94:cd:06:0a:18:06: cb:45:4f:cd:01:c4:5d:ad:d4:78:5b:88:91:3e:ce: d4:b8:1a:b3:d6:94:df:90:d5:3d:00:55:bd:e5:07: e0:d3:b9:91:cc:7b:23:29:5c:51:5c:26:db:fb:d9: b4:51:45:0c:77:10:96:5c:4c:e4:04:a9:88:35:90: 0d:3f:12:9a:d5:73:5d:90:61:d2:b4:87:3a:04:f0: 4f:ad:33:b9:e4:f8:e2:35:a7:15:94:68:31:87:86: 32:1b:6e:6e:a3:af:7c:1f:42:ea:28:a4:6d:92:17: 70:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:01:D3:01:FB:49:6D:F8:D5:40:2C:67:E2:E6:F1:FC:55:0E:99:D5 X509v3 Authority Key Identifier: keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f5:b7:14:8c:40:6d:46:2e:5d:3f:1e:92:a8:d8:48:e7:a6: 1a:c6:3c:2b:20:fa:e6:94:c2:40:56:c4:fc:13:01:99:ca:75: a2:47:43:dc:5d:20:d4:a0:a9:42:9e:50:08:d3:4b:f8:01:d4: 4c:c0:c8:b9:ef:6e:ca:c6:ff:1c:52:a6:3c:c0:e5:49:68:88: 14:4b:fe:29:eb:07:28:1e:0f:d0:45:13:65:28:ab:3b:7d:dc: e9:5b:20:85:4a:5c:0f:4d:da:4a:65:80:5b:2e:df:bf:f5:ac: 27:72:32:6a:d1:34:cf:48:8f:d8:1a:f5:00:c6:4c:a6:34:72: 7e:37:9c:ad:9a:87:06:f1:89:37:f1:2e:7e:f2:d8:d5:77:d8: de:ed:fc:73:98:4c:18:80:a7:6b:cc:36:9d:fd:12:f8:e0:77: 27:3e:da:88:c4:3c:bc:01:8c:2e:90:20:db:4f:33:89:03:7b: 89:b1:27:e0:78:0b:6a:01:53:ed:de:10:1c:05:a6:cb:6e:df: ec:02:b3:71:cb:bc:f7:a7:f2:4b:e8:52:fd:43:da:7b:c8:48: dd:09:85:fb:4b:94:74:0f:38:c9:f8:7c:b4:b0:51:47:b5:1e: 07:e0:c1:07:6b:ec:14:e7:7d:f0:01:93:5e:55:b0:eb:f1:8d: 93:99:43:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxQTcxMTAvBgNVBAUTKDZBQzc3OTc0REZFNDUwODA3MzVDREI5MDY2QTdFMjQ2 OTYwNDkyQjcwHhcNMjUwNzAyMTczNDU4WhcNMjUwNzA5MTczNDU4WjAYMRYwFAYD VQQDEw02ODY1NmRjMi0xNTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjappEHapEv6gaQV0ZvsY+zUMa9FFEP4S1twm93+9XeOsrxMpTmFNlvMazad S6aYzPfzz03fzFFNIknEz5/WS2Uo3X4aZPwHtDS6W7lv9T+MI1yymc0Jek1KkHhw qmYnCFLc5r+AQTqUjleetc8xcciCzqBV0Ere52nepoBkWDjD9+I0ILtv6x6pBFBc 9G+UzQYKGAbLRU/NAcRdrdR4W4iRPs7UuBqz1pTfkNU9AFW95Qfg07mRzHsjKVxR XCbb+9m0UUUMdxCWXEzkBKmINZANPxKa1XNdkGHStIc6BPBPrTO55PjiNacVlGgx h4YyG25uo698H0LqKKRtkhdwgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIB0wH7 SW341UAsZ+Lm8fxVDpnVMB8GA1UdIwQYMBaAFGrHeXTf5FCAc1zbkGan4kaWBJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFBNy83QjBCNjc4NDM5 QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJQnpYTnVRWnFmaVJwWUVr cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzZDVkTl9rVUlCelhOdVFacWZpUnBZRWtyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzFBNy83QjBCNjc4NDM5QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJ QnpYTnVRWnFmaVJwWUVrcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm9bcUjEBtRi5dPx6SqNhI56YaxjwrIPrmlMJAVsT8EwGZynWiR0Pc XSDUoKlCnlAI00v4AdRMwMi5727Kxv8cUqY8wOVJaIgUS/4p6wcoHg/QRRNlKKs7 fdzpWyCFSlwPTdpKZYBbLt+/9awncjJq0TTPSI/YGvUAxkymNHJ+N5ytmocG8Yk3 8S5+8tjVd9je7fxzmEwYgKdrzDad/RL44HcnPtqIxDy8AYwukCDbTzOJA3uJsSfg eAtqAVPt3hAcBabLbt/sArNxy7z3p/JL6FL9Q9p7yEjdCYX7S5R0DzjJ+Hy0sFFH tR4H4MEHa+wU533wAZNeVbDr8Y2TmUNg -----END CERTIFICATE-----Generated at Fri Jul 4 18:46:52 2025 by rpki-client