$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft File: AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json) Hash identifier: BQrKRKQDMvPZEWm2edb+h7cyaLG6Ud9cLeaBmv8xAO0= Subject key identifier: 89:13:0E:E7:85:0D:EC:EB:08:0F:C1:40:37:94:9A:61:7D:6F:4A:B7 Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Certificate serial: 0F5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft Manifest number: 0F51 Signing time: Sat 28 Jun 2025 17:24:00 +0000 Manifest this update: Sat 28 Jun 2025 17:24:00 +0000 Manifest next update: Sat 05 Jul 2025 17:24:00 +0000 Files and hashes: 1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: +Ui/2HR6AnDW8mIp23uwvTKp9y/vUcQVXr/K5BgEoNI=) 2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: lww/ZRWFPgZIaev9PDmaV5kjaByxeNEFJJYVjFLwNzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 17:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3930 (0xf5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Validity Not Before: Jun 28 17:24:00 2025 GMT Not After : Jul 5 17:24:00 2025 GMT Subject: CN=68602530-f1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:b6:88:ff:ec:1f:b6:46:55:ca:5a:0b:f0: 22:d6:54:61:54:7e:74:f7:2a:ce:1c:31:39:2d:89: 2c:5c:1b:61:4c:a4:65:83:88:7f:ef:05:f7:46:00: 85:7e:53:3a:73:df:b6:bf:32:c1:1d:c7:66:50:15: 5f:dc:d0:96:60:d5:2c:45:a2:fc:3f:3c:59:40:07: 6b:8e:a3:f2:41:9b:a7:ed:5d:ed:46:e9:26:f7:08: 4e:71:50:3e:fc:65:97:5b:90:ec:28:ca:5a:b7:ed: 47:dd:1c:81:df:e0:9a:db:3d:98:a2:64:b8:be:f8: 08:7d:aa:8c:26:52:90:88:13:c2:b1:a3:0f:a1:c5: 4b:c3:b4:dd:c6:77:86:5d:d4:56:9e:41:e8:a3:e8: 47:2c:07:7a:0f:80:4c:0b:fb:38:a1:9e:6d:aa:82: e5:f8:0d:3c:27:6a:68:ec:a6:3a:fe:ed:80:51:63: 78:57:15:7e:8d:d9:bb:77:29:07:83:42:bf:17:16: 98:a4:ee:99:77:bd:29:1b:47:b3:bc:3a:be:66:67: 42:34:62:4a:b8:6d:6b:bc:bf:2d:7b:48:6e:c3:ff: f6:e1:36:98:ae:ac:60:df:39:43:ae:b3:df:22:4b: 69:13:20:93:71:08:a8:41:cd:91:94:a4:10:bc:48: a9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:13:0E:E7:85:0D:EC:EB:08:0F:C1:40:37:94:9A:61:7D:6F:4A:B7 X509v3 Authority Key Identifier: keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:43:f0:77:20:e7:85:cf:23:3e:5b:14:76:e6:6b:17:40:d7: b0:57:98:10:09:3e:c0:69:66:e1:b3:2d:14:f3:62:11:70:1e: a1:39:cc:2f:d2:31:e7:8a:f6:7a:93:63:85:70:d8:d9:d3:2a: 40:8a:fc:f9:ad:20:8c:0e:b8:aa:be:72:73:34:f4:72:e3:3f: 4e:1c:45:cb:8c:10:ba:8a:cf:78:77:2a:f2:9a:fe:25:b3:48: ef:f2:54:f5:e1:8e:23:20:84:e3:21:8e:29:c4:33:b1:85:e8: f2:f1:ec:c4:27:38:91:b4:d4:1a:84:cb:80:b0:2c:4c:41:7c: bb:8f:01:26:5c:dc:91:ce:72:63:8c:55:ec:b2:e9:e4:bf:cc: 29:39:75:c2:ba:ee:08:7a:0d:42:9f:03:88:af:e7:5c:62:90: 54:07:1a:e4:b9:48:2e:0f:4e:ad:09:8e:a8:b5:2e:30:cd:c1: 26:36:6a:3b:50:f1:55:e7:6d:67:01:b6:54:4d:9c:e4:b2:5b: 6e:c6:a4:68:6d:d3:55:d6:28:da:cc:ef:09:78:da:d0:9a:fc: 7e:2b:f6:b4:02:7c:2b:a6:ed:67:0f:29:4a:4e:92:d1:76:82: e3:bb:f0:aa:9e:3b:99:d6:6f:c8:a0:78:d7:14:2b:03:c2:e7: d5:38:d3:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF RDc5OUM5MzcwHhcNMjUwNjI4MTcyNDAwWhcNMjUwNzA1MTcyNDAwWjAYMRYwFAYD VQQDEw02ODYwMjUzMC1mMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxC2iP/sH7ZGVcpaC/Ai1lRhVH509yrOHDE5LYksXBthTKRlg4h/7wX3RgCF flM6c9+2vzLBHcdmUBVf3NCWYNUsRaL8PzxZQAdrjqPyQZun7V3tRukm9whOcVA+ /GWXW5DsKMpat+1H3RyB3+Ca2z2YomS4vvgIfaqMJlKQiBPCsaMPocVLw7TdxneG XdRWnkHoo+hHLAd6D4BMC/s4oZ5tqoLl+A08J2po7KY6/u2AUWN4VxV+jdm7dykH g0K/FxaYpO6Zd70pG0ezvDq+ZmdCNGJKuG1rvL8te0huw//24TaYrqxg3zlDrrPf IktpEyCTcQioQc2RlKQQvEip7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkTDueF DezrCA/BQDeUmmF9b0q3MB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPQ/B3IOeFzyM+WxR25msXQNewV5gQCT7AaWbhsy0U82IRcB6hOcwv 0jHnivZ6k2OFcNjZ0ypAivz5rSCMDriqvnJzNPRy4z9OHEXLjBC6is94dyrymv4l s0jv8lT14Y4jIITjIY4pxDOxhejy8ezEJziRtNQahMuAsCxMQXy7jwEmXNyRznJj jFXssunkv8wpOXXCuu4Ieg1CnwOIr+dcYpBUBxrkuUguD06tCY6otS4wzcEmNmo7 UPFV521nAbZUTZzksltuxqRobdNV1ijazO8JeNrQmvx+K/a0Anwrpu1nDylKTpLR doLju/CqnjuZ1m/IoHjXFCsDwufVONMU -----END CERTIFICATE-----Generated at Sun Jun 29 12:21:24 2025 by rpki-client