$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft File: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json) Hash identifier: B2OMm0AN+lmC1uowZ00+qKSPiSFoc7AUPMcPyVzrwKU= Subject key identifier: CC:03:B0:FF:C4:FE:C4:BE:48:5D:06:B0:FF:79:7B:1A:51:5D:9C:3F Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 Certificate issuer: /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Certificate serial: 051E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft Manifest number: 0518 Signing time: Wed 02 Jul 2025 23:56:37 +0000 Manifest this update: Wed 02 Jul 2025 23:56:36 +0000 Manifest next update: Wed 09 Jul 2025 23:56:36 +0000 Files and hashes: 1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: YkqcMR1rBMVyJqxYjWNQdtjjonU0axY0kBnPwlCEUGk=) 2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: OdV4BW1AypHn4SWRXVNRSTTOuuILOVr+n5WSk2uAXqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1310 (0x51e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Validity Not Before: Jul 2 23:56:36 2025 GMT Not After : Jul 9 23:56:36 2025 GMT Subject: CN=6865c734-765d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b3:80:0d:52:91:b8:7e:5e:d3:22:39:92:07: b7:70:2c:37:9f:d8:0a:e4:26:db:1d:f2:0b:db:bd: 82:43:49:8c:78:ac:12:80:d6:dc:38:9e:e6:d4:b5: 46:4d:ff:59:bd:5c:22:33:2c:4a:b7:96:9c:f1:f5: a7:77:36:0f:39:db:52:cc:12:b9:2c:1c:f6:52:1a: 10:33:ff:9c:5f:b7:c1:08:cb:50:7d:f1:98:40:af: 0b:46:04:49:78:a8:82:f5:12:0e:7e:f7:25:3e:c4: f5:79:e6:18:5a:4f:77:99:7e:17:df:2d:4d:63:7b: ff:70:59:66:8e:2b:02:97:20:de:21:39:ef:90:5c: 05:af:9c:25:7f:d0:0b:36:e6:65:b8:67:93:73:2f: a1:24:81:f7:b3:0d:25:64:f3:21:f6:56:06:ec:c2: 8d:ba:81:c3:a8:00:4e:cc:5e:4c:11:f4:28:62:d6: ef:f2:9a:fc:f7:72:ce:8c:62:77:dd:75:64:20:ea: dd:30:6a:8d:37:24:51:14:f7:7c:ec:69:53:40:73: 5d:56:7e:9e:82:62:75:38:df:96:d3:ce:b7:09:0c: a9:bc:87:53:79:f7:d5:c9:1c:50:2e:84:4c:b4:f4: c3:f8:df:e6:96:5c:31:84:b8:77:9e:7b:f9:f3:ef: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:03:B0:FF:C4:FE:C4:BE:48:5D:06:B0:FF:79:7B:1A:51:5D:9C:3F X509v3 Authority Key Identifier: keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b9:83:d3:f5:7c:90:03:6c:4b:ad:a6:7e:a8:df:77:3f:a0: 3c:e7:f4:da:78:6a:e2:dc:fc:18:53:93:2d:2c:51:16:25:0e: d9:a7:16:a5:20:49:9a:fe:2f:17:05:32:1d:c0:2f:2c:8f:b6: be:27:f2:0b:01:a8:8a:69:e0:91:61:e1:09:bb:2e:18:40:41: f0:fa:f4:7b:96:61:1e:66:b6:46:d2:af:bc:5b:ae:79:eb:9a: 9b:b7:bb:12:85:61:29:e0:30:aa:2d:5d:41:d9:3d:81:33:9b: de:73:cb:d7:11:87:86:f9:24:8d:c7:05:32:09:16:ed:4a:5d: 41:59:7a:8e:3a:5e:ae:08:3b:8d:35:00:e7:a8:15:7b:cb:65: 65:b1:1a:3d:db:a5:dd:51:91:cb:35:2e:84:ec:26:c5:6d:c1: fe:cd:9f:9f:68:20:39:74:b4:eb:2c:38:b9:b1:94:68:0a:97: 2b:53:8a:1f:94:84:72:bf:70:34:ac:1b:4a:a6:4d:41:32:1a: e1:b2:fd:37:2f:c5:06:e9:3c:7b:94:95:85:5e:e0:44:f4:ac: 5b:08:08:be:0b:21:8c:6a:02:5d:dd:d6:7a:22:c6:12:35:08: 86:e7:10:58:7a:84:bf:2d:eb:68:48:1f:dd:0a:98:a6:1f:4a: 73:48:bc:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdBQzkxMTAvBgNVBAUTKDMyNkU1NUU3NEIwNkNEODNGOTk0Q0MxREE2NjU2NTQy MUNDOUUyMTkwHhcNMjUwNzAyMjM1NjM2WhcNMjUwNzA5MjM1NjM2WjAYMRYwFAYD VQQDEw02ODY1YzczNC03NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbOADVKRuH5e0yI5kge3cCw3n9gK5CbbHfIL272CQ0mMeKwSgNbcOJ7m1LVG Tf9ZvVwiMyxKt5ac8fWndzYPOdtSzBK5LBz2UhoQM/+cX7fBCMtQffGYQK8LRgRJ eKiC9RIOfvclPsT1eeYYWk93mX4X3y1NY3v/cFlmjisClyDeITnvkFwFr5wlf9AL NuZluGeTcy+hJIH3sw0lZPMh9lYG7MKNuoHDqABOzF5MEfQoYtbv8pr893LOjGJ3 3XVkIOrdMGqNNyRRFPd87GlTQHNdVn6egmJ1ON+W0863CQypvIdTeffVyRxQLoRM tPTD+N/mllwxhLh3nnv58++L0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwDsP/E /sS+SF0GsP95expRXZw/MB8GA1UdIwQYMBaAFDJuVedLBs2D+ZTMHaZlZUIcyeIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0FDOS8wRDlGNDBFNjBD NUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZUDVsTXdkcG1WbFFoeko0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tNVY1MHNHellQNWxNd2RwbVZsUWh6SjRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0FDOS8wRDlGNDBFNjBDNUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZ UDVsTXdkcG1WbFFoeko0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4uYPT9XyQA2xLraZ+qN93P6A85/TaeGri3PwYU5MtLFEWJQ7Zpxal IEma/i8XBTIdwC8sj7a+J/ILAaiKaeCRYeEJuy4YQEHw+vR7lmEeZrZG0q+8W655 65qbt7sShWEp4DCqLV1B2T2BM5vec8vXEYeG+SSNxwUyCRbtSl1BWXqOOl6uCDuN NQDnqBV7y2VlsRo926XdUZHLNS6E7CbFbcH+zZ+faCA5dLTrLDi5sZRoCpcrU4of lIRyv3A0rBtKpk1BMhrhsv03L8UG6Tx7lJWFXuBE9KxbCAi+CyGMagJd3dZ6IsYS NQiG5xBYeoS/LetoSB/dCpimH0pzSLwf -----END CERTIFICATE-----Generated at Thu Jul 3 07:05:20 2025 by rpki-client