$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft File: slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json) Hash identifier: JnBdkuFoVdD+l9wTaY1eA3HFIG+v4eqZPVy/swWdEc8= Subject key identifier: 06:CC:78:7D:5F:8C:CA:08:41:6B:0A:9D:09:7D:54:0B:EB:6C:54:C1 Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft Manifest number: A7 Signing time: Thu 03 Jul 2025 06:19:23 +0000 Manifest this update: Thu 03 Jul 2025 06:19:22 +0000 Manifest next update: Thu 10 Jul 2025 06:19:22 +0000 Files and hashes: 1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: m4j5lDnCB2YTBU6exbUnDQx25rv2e7Lqhhaj4H7AytM=) 2: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (hash: u07sFp3Yqjqw6LAiuoDt1givQlP2Rg/DNRW12Og3/70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Validity Not Before: Jul 3 06:19:22 2025 GMT Not After : Jul 10 06:19:22 2025 GMT Subject: CN=686620eb-2b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:dc:d1:ff:f6:9b:82:d7:dd:f6:58:b9:c8: 7e:31:b8:4b:50:a1:f4:fa:5f:8e:e3:66:f5:0c:36: 4a:4c:e3:5b:1a:60:fa:1f:a7:6f:1e:1e:68:48:ee: d8:d8:c7:24:da:c9:34:91:cc:b5:1c:38:01:6a:81: 54:f4:c9:c7:fc:41:fa:3a:f7:1d:49:74:2d:a0:6c: 49:f1:e0:12:a7:16:22:3c:a5:4f:0a:b0:ce:30:39: 20:12:d5:4c:1e:68:79:02:1a:25:ca:da:51:12:26: d2:53:94:c1:44:66:74:3d:45:7a:0d:87:20:87:5b: eb:89:00:59:17:ba:cd:d3:d7:f6:60:2d:9f:be:18: 53:ce:5e:dd:94:65:c0:f9:64:41:45:ad:bd:3a:82: ce:c7:26:69:bc:56:14:a7:c5:91:19:30:8a:56:48: ae:7a:f7:68:70:50:53:a4:5a:87:66:c6:6d:d5:9e: cd:c2:52:44:01:45:2d:82:bb:cf:b3:0d:0e:dc:83: 91:09:66:19:b3:40:e2:a0:4c:4b:6c:1b:a4:ad:0c: e3:3a:86:98:7e:1d:61:88:07:a4:dc:18:b6:84:09: a2:41:2c:a1:44:cc:27:eb:04:f3:90:85:89:e4:e5: 18:e1:56:fd:2f:ca:16:c0:b0:e4:47:1c:1b:7d:32: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:78:7D:5F:8C:CA:08:41:6B:0A:9D:09:7D:54:0B:EB:6C:54:C1 X509v3 Authority Key Identifier: keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:10:d6:05:66:c6:db:ce:f4:bc:78:69:d3:da:fc:7f:05:1a: 42:01:d8:c3:1e:ce:05:c5:8c:50:55:15:34:9d:f7:b7:9d:29: d2:07:8c:84:1a:04:4f:69:bb:c9:19:27:4f:65:74:42:2b:32: b3:72:53:63:47:de:3a:a9:05:97:9a:40:c9:70:a5:9f:47:2d: 5a:10:ea:f3:43:38:bb:0d:a5:4b:54:45:a0:c7:b4:a3:05:47: 6d:d2:65:63:7a:3b:1b:08:19:e2:82:59:e1:ee:87:1a:dc:5d: 53:6f:f0:7d:0b:49:78:66:a1:03:4f:ce:db:62:09:c4:37:d5: e2:2e:71:32:f0:47:25:06:98:be:bb:59:36:77:76:33:d8:01: df:b1:46:34:05:0c:21:ae:43:34:0f:88:fb:e5:81:54:51:1d: 37:05:d4:6e:d2:d5:0d:8c:7a:a9:2f:15:d5:71:67:fd:ea:54: 15:bb:fd:60:77:c0:70:be:6f:c9:57:b7:d8:0d:10:db:14:6f: ef:06:99:c0:27:91:e5:17:19:c9:90:dc:93:1c:fc:85:04:63: c3:b4:09:0b:77:bb:c6:14:b6:f2:b9:a3:19:e6:d7:be:b4:09: a1:e0:d6:0e:ae:ec:2e:54:c6:4f:57:67:75:9c:c6:94:b7:ed: 31:30:ff:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3ODYxMTAvBgNVBAUTKEIyNTUyQjM4QjhDNUNCMDkzNUM5NDBGQTYwOTgwRUE2 RjUxMENGODYwHhcNMjUwNzAzMDYxOTIyWhcNMjUwNzEwMDYxOTIyWjAYMRYwFAYD VQQDEw02ODY2MjBlYi0yYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrDc0f/2m4LX3fZYuch+MbhLUKH0+l+O42b1DDZKTONbGmD6H6dvHh5oSO7Y 2Mck2sk0kcy1HDgBaoFU9MnH/EH6OvcdSXQtoGxJ8eASpxYiPKVPCrDOMDkgEtVM Hmh5AholytpREibSU5TBRGZ0PUV6DYcgh1vriQBZF7rN09f2YC2fvhhTzl7dlGXA +WRBRa29OoLOxyZpvFYUp8WRGTCKVkiuevdocFBTpFqHZsZt1Z7NwlJEAUUtgrvP sw0O3IORCWYZs0DioExLbBukrQzjOoaYfh1hiAek3Bi2hAmiQSyhRMwn6wTzkIWJ 5OUY4Vb9L8oWwLDkRxwbfTISvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbMeH1f jMoIQWsKnQl9VAvrbFTBMB8GA1UdIwQYMBaAFLJVKzi4xcsJNclA+mCYDqb1EM+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc4Ni9FNTc3MTM4MDVB RTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3azF5VUQ2WUpnT3B2VVF6 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NsVXJPTGpGeXdrMXlVRDZZSmdPcHZVUXo0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc4Ni9FNTc3MTM4MDVBRTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3 azF5VUQ2WUpnT3B2VVF6NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4ENYFZsbbzvS8eGnT2vx/BRpCAdjDHs4FxYxQVRU0nfe3nSnSB4yE GgRPabvJGSdPZXRCKzKzclNjR946qQWXmkDJcKWfRy1aEOrzQzi7DaVLVEWgx7Sj BUdt0mVjejsbCBniglnh7oca3F1Tb/B9C0l4ZqEDT87bYgnEN9XiLnEy8EclBpi+ u1k2d3Yz2AHfsUY0BQwhrkM0D4j75YFUUR03BdRu0tUNjHqpLxXVcWf96lQVu/1g d8Bwvm/JV7fYDRDbFG/vBpnAJ5HlFxnJkNyTHPyFBGPDtAkLd7vGFLbyuaMZ5te+ tAmh4NYOruwuVMZPV2d1nMaUt+0xMP8G -----END CERTIFICATE-----Generated at Fri Jul 4 19:10:10 2025 by rpki-client