$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft File: rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json) Hash identifier: xTfqg6RRTavf9TEokpt7RHJXYAdmoAw+q8sBYj9J4L0= Subject key identifier: 5A:0F:A7:33:AA:5C:0D:51:69:D1:71:3A:FE:03:8E:41:AD:C2:0B:33 Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B Certificate issuer: /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft Manifest number: 0565 Signing time: Mon 30 Jun 2025 23:44:52 +0000 Manifest this update: Mon 30 Jun 2025 23:44:51 +0000 Manifest next update: Mon 07 Jul 2025 23:44:51 +0000 Files and hashes: 1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: tUKTU4qhJnKmkG8YQGJcLSFzcMm8vtXAk4beXBLsXTQ=) 2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: C9U0iPB8A/9VqWcnQG5AxuP08um0L5X8KsDf++uFfPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B Validity Not Before: Jun 30 23:44:51 2025 GMT Not After : Jul 7 23:44:51 2025 GMT Subject: CN=68632174-0166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:74:d7:03:4d:b6:db:2f:97:53:e9:fe:83:53: 0d:17:41:bd:5c:c9:58:55:dc:a4:69:b2:5a:32:48: 2d:c2:e7:08:96:e1:ce:46:43:6e:06:db:ab:95:da: 3f:7f:7f:31:fc:08:fe:90:66:61:2d:53:72:91:73: 73:3a:90:8c:20:75:ac:e4:fc:42:6a:6e:95:33:49: 7b:f8:65:d6:96:d9:ca:ff:aa:9d:9b:64:75:ab:b0: 90:e5:19:d5:fb:87:bc:94:9a:7b:73:86:c0:e5:99: d1:2a:7e:6e:bd:16:07:76:21:74:22:71:cd:26:6a: b5:84:ba:00:89:a9:81:cd:01:a5:74:a5:ba:ac:98: eb:81:c4:d4:bb:42:bd:a0:62:04:b5:d2:ce:6f:0f: 85:53:d2:bc:a9:32:df:b9:7f:dd:55:02:29:cf:97: 51:c4:06:1d:a1:35:fe:8a:cb:50:ec:de:13:ae:a6: a3:6e:94:8e:81:52:32:c1:d2:59:2d:98:4d:cc:0b: bf:7f:07:d0:25:95:af:d7:e8:dd:cd:90:15:c3:8e: 08:56:d0:50:e0:6c:cb:81:b4:56:92:2d:80:14:bb: e6:13:94:75:20:a7:22:85:c0:bb:5d:70:aa:98:61: f9:39:33:d4:46:64:a7:9c:80:5c:33:aa:43:ff:7d: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0F:A7:33:AA:5C:0D:51:69:D1:71:3A:FE:03:8E:41:AD:C2:0B:33 X509v3 Authority Key Identifier: keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:22:01:41:9d:06:36:e3:39:ae:fa:ca:c9:44:64:e0:eb:7f: 40:7b:2f:0b:07:98:63:54:a4:fa:34:fe:97:79:38:b3:66:82: 5c:36:36:19:f0:60:7a:90:af:de:48:5c:f6:8f:b1:df:6b:8b: c8:83:62:37:68:3e:5d:38:9a:7c:48:29:17:fe:fd:d6:83:03: a7:40:e6:e8:12:24:ef:ff:43:25:17:5a:08:70:30:95:60:0a: 38:fc:2b:04:90:48:53:c6:aa:a3:68:5c:56:93:7e:ac:e0:c1: 15:69:0e:81:32:99:72:4b:da:4d:db:27:8d:b4:38:ab:78:eb: 0a:65:76:ad:47:19:70:31:ae:36:b1:cc:c1:f5:0e:3e:74:c7: 65:cd:5e:f9:65:0f:11:74:e6:9e:77:46:e1:fa:23:0b:dd:5f: 9e:83:bd:1c:82:08:8b:cd:eb:a3:d4:4c:05:26:bf:2d:cd:58: 33:ec:a4:6c:e3:24:66:03:45:4e:1a:f6:f9:a0:66:d5:71:f3: f2:15:3c:e5:38:20:a7:6c:09:0a:0f:1b:d4:d4:48:d1:4a:5e: 24:ca:d5:53:c0:da:e5:ff:55:fa:9b:d7:68:a7:2e:9f:d0:47: 48:7a:aa:f8:6f:98:e8:92:5b:42:ed:e1:57:6e:04:37:10:d1: 10:99:ba:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ1NTMxMTAvBgNVBAUTKEFERTZCNTc3RDU0QjVBQjA5MDA1Q0U2MTNCQjEzNjQ4 NjUyRTZBNkIwHhcNMjUwNjMwMjM0NDUxWhcNMjUwNzA3MjM0NDUxWjAYMRYwFAYD VQQDEw02ODYzMjE3NC0wMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HTXA0222y+XU+n+g1MNF0G9XMlYVdykabJaMkgtwucIluHORkNuBturldo/ f38x/Aj+kGZhLVNykXNzOpCMIHWs5PxCam6VM0l7+GXWltnK/6qdm2R1q7CQ5RnV +4e8lJp7c4bA5ZnRKn5uvRYHdiF0InHNJmq1hLoAiamBzQGldKW6rJjrgcTUu0K9 oGIEtdLObw+FU9K8qTLfuX/dVQIpz5dRxAYdoTX+istQ7N4TrqajbpSOgVIywdJZ LZhNzAu/fwfQJZWv1+jdzZAVw44IVtBQ4GzLgbRWki2AFLvmE5R1IKcihcC7XXCq mGH5OTPURmSnnIBcM6pD/30E6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoPpzOq XA1RadFxOv4DjkGtwgszMB8GA1UdIwQYMBaAFK3mtXfVS1qwkAXOYTuxNkhlLmpr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDU1My80RDIzQkIwRUVC NzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdyQ1FCYzVoTzdFMlNHVXVh bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlYTFkOVZMV3JDUUJjNWhPN0UyU0dVdWFtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDU1My80RDIzQkIwRUVCNzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdy Q1FCYzVoTzdFMlNHVXVhbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJIgFBnQY24zmu+srJRGTg639Aey8LB5hjVKT6NP6XeTizZoJcNjYZ 8GB6kK/eSFz2j7Hfa4vIg2I3aD5dOJp8SCkX/v3WgwOnQOboEiTv/0MlF1oIcDCV YAo4/CsEkEhTxqqjaFxWk36s4MEVaQ6BMplyS9pN2yeNtDireOsKZXatRxlwMa42 sczB9Q4+dMdlzV75ZQ8RdOaed0bh+iML3V+eg70cggiLzeuj1EwFJr8tzVgz7KRs 4yRmA0VOGvb5oGbVcfPyFTzlOCCnbAkKDxvU1EjRSl4kytVTwNrl/1X6m9dopy6f 0EdIeqr4b5jokltC7eFXbgQ3ENEQmbpS -----END CERTIFICATE-----Generated at Tue Jul 1 13:06:05 2025 by rpki-client