$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json) Hash identifier: iJKGwG2EkbKpTSVQ1zOPRLeVRUD5ImzuC3nM+H6pXdg= Subject key identifier: 89:52:63:25:6E:B8:CD:9A:C8:30:E7:82:A1:2C:08:61:DA:F9:A5:E4 Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft Manifest number: 01CF Signing time: Tue 01 Jul 2025 03:17:23 +0000 Manifest this update: Tue 01 Jul 2025 03:17:22 +0000 Manifest next update: Tue 08 Jul 2025 03:17:22 +0000 Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: ezzDilKuHzYvSUKVKN/S9Y18VM8S9zqVEU/bu0h0WI4=) 2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ksp6qBpZ5kB0EysEaPobcR9QCXbiquNMVXrarPKPN4A=) 3: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: xgTk5QLU2Vm82iRKTqkbO5V1pNHv+/+0qFa5a4D2Fm4=) 4: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: 5cknTz/azpX9sHHI7VxRFMrA+eqmREBfLXzZWKlWnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Validity Not Before: Jul 1 03:17:22 2025 GMT Not After : Jul 8 03:17:22 2025 GMT Subject: CN=68635343-9948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:a2:71:e9:c3:7c:01:35:a7:64:9c:00:97: c5:bc:dc:32:58:ce:47:30:f0:dd:f9:96:95:59:20: be:04:67:62:2b:bc:c9:50:d7:f9:10:1a:54:e0:a3: ad:0b:72:2b:1f:77:eb:02:bc:9a:d4:f6:c5:1e:58: 71:c3:4a:82:ff:4e:7b:a4:5a:90:f7:74:3a:f6:15: 55:a4:95:2a:3b:77:26:b0:c5:93:8b:c6:20:02:4b: 00:57:7e:c7:b5:e2:25:6e:46:2d:97:d7:2e:00:77: 90:d7:87:a0:ea:da:c9:b9:82:d2:85:97:2d:ca:b4: e0:ce:f5:0c:e1:fe:7c:ab:a7:a6:e0:c7:8c:8f:69: a8:02:47:0b:19:a9:e8:a0:cc:3b:3f:4a:0e:89:74: 88:50:72:35:b4:bc:50:e9:c1:5a:5a:ec:9a:35:d5: 73:4a:ef:18:01:12:a1:87:00:e7:ad:34:33:ec:da: 5a:54:c1:0c:44:01:25:bf:0a:97:eb:b8:21:71:56: 9d:74:b5:c7:77:0e:fb:64:2d:1f:f8:de:11:8d:ff: bc:d1:48:a3:6d:c0:52:81:6e:cd:86:5d:b7:9f:78: 2e:bd:53:60:70:22:97:54:51:a0:2c:e5:50:34:54: d3:9d:7c:04:56:9a:2b:ec:4c:9f:12:d7:6e:33:f4: 00:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:63:25:6E:B8:CD:9A:C8:30:E7:82:A1:2C:08:61:DA:F9:A5:E4 X509v3 Authority Key Identifier: keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e5:98:7b:87:3e:48:2f:f5:4a:8d:26:14:7d:00:86:d5:92: 6c:5c:d9:87:d6:56:a5:05:40:a3:87:c0:c2:e3:fd:00:a3:0b: 1a:60:44:0c:1c:9a:16:f5:dc:4b:89:aa:23:bd:a2:05:db:6e: fc:d9:63:5a:40:20:01:d3:8c:a5:52:9b:ee:ad:30:e3:72:ef: 59:05:1d:79:f4:8c:fa:f8:81:22:b9:c8:c9:76:22:46:4e:43: 52:92:3c:3e:6a:b1:19:13:03:60:8f:94:4a:a0:ec:e5:5d:12: 73:7b:d3:03:8c:7c:bc:ba:e5:bd:1b:8e:23:2c:08:e0:9a:b5: 4c:55:58:38:e0:29:2d:93:9d:e3:7f:c1:56:35:09:4f:a5:1b: 4e:33:8a:32:32:51:f3:ce:0a:dc:ed:41:a9:d8:89:ce:bc:23: 85:16:2b:6d:4d:80:5b:cd:e4:32:ca:aa:73:38:71:3b:12:40: 30:24:4a:80:08:ba:7c:b9:1e:df:c2:42:b4:59:1a:41:f7:cd: 7f:35:c9:99:31:8f:29:a5:0d:2c:05:e7:4b:dd:0f:b6:e7:24: 3e:d7:17:ae:b9:06:3b:fb:55:78:b6:ff:48:3e:83:a6:30:e6: fa:aa:0f:cc:0f:ff:da:1c:3e:44:6c:a8:d9:83:6d:9c:13:40: 59:c5:3f:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE MkFBRUU0QjkwHhcNMjUwNzAxMDMxNzIyWhcNMjUwNzA4MDMxNzIyWjAYMRYwFAYD VQQDEw02ODYzNTM0My05OTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRSicenDfAE1p2ScAJfFvNwyWM5HMPDd+ZaVWSC+BGdiK7zJUNf5EBpU4KOt C3IrH3frArya1PbFHlhxw0qC/057pFqQ93Q69hVVpJUqO3cmsMWTi8YgAksAV37H teIlbkYtl9cuAHeQ14eg6trJuYLShZctyrTgzvUM4f58q6em4MeMj2moAkcLGano oMw7P0oOiXSIUHI1tLxQ6cFaWuyaNdVzSu8YARKhhwDnrTQz7NpaVMEMRAElvwqX 67ghcVaddLXHdw77ZC0f+N4Rjf+80UijbcBSgW7Nhl23n3guvVNgcCKXVFGgLOVQ NFTTnXwEVpor7EyfEtduM/QA1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlSYyVu uM2ayDDngqEsCGHa+aXkMB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2 MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1 TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD cDZIazJrc3NCdnJTcXU1TGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG5Zh7hz5IL/VKjSYUfQCG1ZJsXNmH1lalBUCjh8DC4/0AowsaYEQM HJoW9dxLiaojvaIF22782WNaQCAB04ylUpvurTDjcu9ZBR159Iz6+IEiucjJdiJG TkNSkjw+arEZEwNgj5RKoOzlXRJze9MDjHy8uuW9G44jLAjgmrVMVVg44Cktk53j f8FWNQlPpRtOM4oyMlHzzgrc7UGp2InOvCOFFittTYBbzeQyyqpzOHE7EkAwJEqA CLp8uR7fwkK0WRpB981/NcmZMY8ppQ0sBedL3Q+25yQ+1xeuuQY7+1V4tv9IPoOm MOb6qg/MD//aHD5EbKjZg22cE0BZxT8X -----END CERTIFICATE-----Generated at Wed Jul 2 23:22:22 2025 by rpki-client