$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft File: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft (raw, json) Hash identifier: vtDEYuS+kgFHdPKRMw8ZWa3B/wz1PhSuRtRCaoVHc78= Subject key identifier: C3:CC:1B:83:14:2E:1D:8B:C2:DD:49:18:B5:4E:93:D2:BE:97:4A:C1 Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft Manifest number: 0286 Signing time: Thu 19 Jun 2025 01:33:27 +0000 Manifest this update: Thu 19 Jun 2025 01:33:27 +0000 Manifest next update: Thu 26 Jun 2025 01:33:27 +0000 Files and hashes: 1: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl (hash: TkY7Ij4n8aaGc5zIuEHRHJlsljNzNqAz+EVYH9dfdcM=) 2: 60A2CF98817811EE9E9A211DC4F9AE02.roa (hash: OBulHvX2B6jsIGrCSAsyqZYvuyIkHgMKG5wNVNk2ul8=) 3: 195EA596AC8711EEAC4B2427C4F9AE02.roa (hash: hhO5y4e/DFpdPdaj49uvYHcFr1O6lkR5HUgMp+6rOns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91447E7, serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Validity Not Before: Jun 19 01:33:27 2025 GMT Not After : Jun 26 01:33:27 2025 GMT Subject: CN=685368e7-136c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:a8:0d:bc:f5:a8:c5:fc:76:ef:8e:9b:d0: 38:01:68:c1:68:c1:33:9a:b3:87:14:e5:6d:0e:81: c2:10:12:20:18:a7:20:39:29:14:4b:d9:a7:af:66: 80:aa:22:77:e6:8a:a9:b9:72:bb:b6:a0:cc:f1:b0: 2e:00:cf:63:59:e0:af:a4:54:17:3f:94:10:e2:05: 14:1d:dd:da:ea:f3:73:09:74:57:c4:9a:8f:98:0a: 09:c4:6c:f4:9c:44:2f:c5:b4:73:27:51:a0:fa:ba: c2:15:58:74:ab:65:ce:8a:7c:e6:11:33:69:e4:1a: ff:8f:4b:9a:7a:43:57:32:2c:64:7e:19:a6:59:37: bf:48:90:1d:6f:4b:c4:b8:0f:b7:92:40:97:3b:f0: 41:50:1e:59:c8:83:63:a5:c1:42:c2:5c:c0:5e:ea: 15:9a:49:ef:6a:4b:58:c2:6d:8b:84:df:d2:62:68: d3:ab:93:39:28:10:4c:46:61:91:72:0a:9c:ff:ff: 09:2c:21:73:5d:f9:68:83:86:71:9e:80:d3:a7:75: 53:9a:72:01:a4:8b:0b:30:e4:b2:15:ec:8d:6e:46: ab:26:48:30:0e:d8:6f:a6:9b:51:e8:b1:38:b7:4b: d8:a0:eb:46:11:d6:f4:56:42:dc:8f:60:ca:90:39: a8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CC:1B:83:14:2E:1D:8B:C2:DD:49:18:B5:4E:93:D2:BE:97:4A:C1 X509v3 Authority Key Identifier: keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:54:65:19:09:e0:86:66:52:d9:66:00:a6:73:d0:31:fb:13: e0:86:7f:bf:1b:3d:2b:52:7f:29:37:6a:68:0c:a0:02:bd:63: 96:65:93:09:48:d7:6b:d4:d3:ff:27:1a:a1:56:69:d3:cc:00: af:34:71:e9:6b:24:e1:0a:b1:ac:50:04:ea:7e:cf:7f:5f:9f: 66:89:b5:f8:67:10:22:e8:b6:fe:d8:ea:ad:53:06:01:3d:33: 77:8e:10:a1:ee:1e:35:1d:27:08:91:4f:1c:72:d3:cc:d2:e3: 57:ec:e9:b3:4c:9f:2a:f3:3c:fd:b4:0d:b8:62:b0:9f:34:b6: 13:9f:7e:09:82:e9:9a:63:31:f6:25:ef:52:6f:8f:28:b1:b2: a6:a7:dc:b7:93:fa:9f:17:27:47:4a:08:06:27:c1:d5:58:5d: ac:29:7e:2d:a5:34:bd:6f:59:7e:0e:e0:33:33:21:58:f7:d1: 97:44:c6:59:58:de:42:b1:7c:bc:0f:06:13:73:11:0a:67:7e: ea:3f:07:d2:b6:e9:7c:48:fc:1c:68:70:e6:1b:e5:f6:44:cd: df:5d:a8:62:3d:90:e7:64:9c:fc:ee:83:67:7a:70:b7:52:71: 2a:a2:ad:69:12:db:dc:a0:be:0d:54:2e:20:72:48:e4:0b:9e: 94:67:2c:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3RTcxMTAvBgNVBAUTKEU3N0I4NzE0NjgwNUUyNjA0QjQ5RUVGMkI0QTQzOENC RDJBNTE0MjQwHhcNMjUwNjE5MDEzMzI3WhcNMjUwNjI2MDEzMzI3WjAYMRYwFAYD VQQDEw02ODUzNjhlNy0xMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqC6oDbz1qMX8du+Om9A4AWjBaMEzmrOHFOVtDoHCEBIgGKcgOSkUS9mnr2aA qiJ35oqpuXK7tqDM8bAuAM9jWeCvpFQXP5QQ4gUUHd3a6vNzCXRXxJqPmAoJxGz0 nEQvxbRzJ1Gg+rrCFVh0q2XOinzmETNp5Br/j0uaekNXMixkfhmmWTe/SJAdb0vE uA+3kkCXO/BBUB5ZyINjpcFCwlzAXuoVmknvaktYwm2LhN/SYmjTq5M5KBBMRmGR cgqc//8JLCFzXflog4ZxnoDTp3VTmnIBpIsLMOSyFeyNbkarJkgwDthvpptR6LE4 t0vYoOtGEdb0VkLcj2DKkDmoYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPMG4MU Lh2Lwt1JGLVOk9K+l0rBMB8GA1UdIwQYMBaAFOd7hxRoBeJgS0nu8rSkOMvSpRQk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDdFNy9GRTQ0NjlEMjEz MDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRtQkxTZTd5dEtRNHk5S2xG Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzdUhGR2dGNG1CTFNlN3l0S1E0eTlLbEZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDdFNy9GRTQ0NjlEMjEzMDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRt QkxTZTd5dEtRNHk5S2xGQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0VGUZCeCGZlLZZgCmc9Ax+xPghn+/Gz0rUn8pN2poDKACvWOWZZMJ SNdr1NP/JxqhVmnTzACvNHHpayThCrGsUATqfs9/X59mibX4ZxAi6Lb+2OqtUwYB PTN3jhCh7h41HScIkU8cctPM0uNX7OmzTJ8q8zz9tA24YrCfNLYTn34JgumaYzH2 Je9Sb48osbKmp9y3k/qfFydHSggGJ8HVWF2sKX4tpTS9b1l+DuAzMyFY99GXRMZZ WN5CsXy8DwYTcxEKZ37qPwfStul8SPwcaHDmG+X2RM3fXahiPZDnZJz87oNnenC3 UnEqoq1pEtvcoL4NVC4gckjkC56UZyyr -----END CERTIFICATE-----Generated at Thu Jun 19 04:48:29 2025 by rpki-client