$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: wlwhBqI3BcL5SaPhVOuI+dLjTqqW9DAiwGn0tbk169Y= Subject key identifier: E7:00:21:C7:F2:4F:11:92:36:85:13:99:E7:66:B7:63:72:F0:C1:47 Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 08B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 08A6 Signing time: Sat 14 Jun 2025 20:19:52 +0000 Manifest this update: Sat 14 Jun 2025 20:19:52 +0000 Manifest next update: Sat 21 Jun 2025 20:19:52 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: lORT7HxZKYZJK9wlTRmDDKDml7jurUqdOva+cH+2dSU=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: JY394gUy9qqM6BqtEt3A+TeeEC3ZSaP+KRzIxp12INs=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2225 (0x8b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Jun 14 20:19:52 2025 GMT Not After : Jun 21 20:19:52 2025 GMT Subject: CN=684dd968-887a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:66:75:dd:8c:5a:3d:b0:0f:ce:dc:3b:51: 97:b9:63:8b:ea:7d:9b:2d:92:4a:27:4b:29:41:4f: 6d:bb:ff:9f:5a:57:be:15:8b:c2:1d:50:63:73:5b: fa:62:b8:0b:54:97:40:b7:c5:e6:b6:03:38:be:8a: 43:7b:95:a9:4c:62:58:44:00:4c:04:3d:d9:fa:7e: 38:bb:46:e6:22:b4:8d:79:52:8c:fe:e1:f2:95:dc: 1c:14:49:52:7a:e2:19:94:95:78:12:91:15:1c:5e: 54:44:62:3a:30:2a:35:f2:39:a9:10:21:85:94:7d: df:08:e9:0a:f6:2e:5b:98:86:e0:be:77:bc:92:a3: 52:0a:76:f6:0d:05:2c:58:07:21:cd:10:85:e1:97: cf:32:f8:35:7f:a3:53:60:a1:48:64:aa:af:27:a8: 33:13:20:c9:2a:3d:6c:63:59:a2:9a:66:43:44:bf: 52:e5:d1:99:bc:1b:1f:96:49:b2:94:be:ca:ca:9e: de:0a:67:69:d3:2c:df:70:2b:9a:be:7d:6b:39:31: 24:45:2d:81:8b:6e:3e:2d:e7:2c:da:c9:c9:ed:ea: 89:82:72:af:3c:11:93:57:a1:e6:b6:a9:1c:d9:61: 03:e8:b1:05:44:de:6f:3c:b9:5d:19:c6:b1:9e:db: 1e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:00:21:C7:F2:4F:11:92:36:85:13:99:E7:66:B7:63:72:F0:C1:47 X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ff:37:ec:5a:5e:a2:25:63:96:10:b5:33:8d:c9:4a:25:a6: 40:18:75:13:2e:23:dc:50:16:cf:e7:99:2b:7a:c3:c8:bb:ee: dd:c4:b0:8c:a7:41:a1:eb:00:0f:27:fe:81:41:54:bf:bf:be: 75:bf:02:38:8c:d6:3a:c1:e5:f7:94:84:fd:85:33:f7:cd:4a: 34:6a:10:22:b7:58:dd:d0:10:18:55:e3:75:61:02:c6:4f:7c: 46:af:38:ec:2a:c4:19:f3:f3:29:c7:ee:76:90:42:16:15:53: ff:19:30:a1:17:3f:48:f2:05:0d:ae:47:e3:4e:26:85:6a:31: 66:72:5d:f7:5c:08:24:11:79:25:aa:55:f6:d1:6d:46:ae:7a: 98:da:b2:db:ac:cf:64:26:54:ac:aa:f6:94:9f:ca:f8:7b:b1: 2d:e7:d2:72:1c:20:54:f6:b6:4a:c2:c3:11:fb:c5:cb:27:61: 1f:0c:a1:d4:02:6a:f5:5c:48:07:aa:6b:9c:02:ee:11:ba:64: 43:bb:b7:1c:03:1c:e3:dc:58:74:46:a9:a7:88:dd:59:c8:5d: 37:dc:32:e4:22:3a:5f:10:d6:c6:53:85:73:8a:9f:be:c6:a6: 63:34:df:24:dc:f5:21:92:52:ea:84:6c:c9:4c:09:d7:cb:98: d9:ee:da:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUwNjE0MjAxOTUyWhcNMjUwNjIxMjAxOTUyWjAYMRYwFAYD VQQDEw02ODRkZDk2OC04ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDZmdd2MWj2wD87cO1GXuWOL6n2bLZJKJ0spQU9tu/+fWle+FYvCHVBjc1v6 YrgLVJdAt8XmtgM4vopDe5WpTGJYRABMBD3Z+n44u0bmIrSNeVKM/uHyldwcFElS euIZlJV4EpEVHF5URGI6MCo18jmpECGFlH3fCOkK9i5bmIbgvne8kqNSCnb2DQUs WAchzRCF4ZfPMvg1f6NTYKFIZKqvJ6gzEyDJKj1sY1mimmZDRL9S5dGZvBsflkmy lL7Kyp7eCmdp0yzfcCuavn1rOTEkRS2Bi24+Lecs2snJ7eqJgnKvPBGTV6Hmtqkc 2WED6LEFRN5vPLldGcaxntse6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcAIcfy TxGSNoUTmedmt2Ny8MFHMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB/zfsWl6iJWOWELUzjclKJaZAGHUTLiPcUBbP55kresPIu+7dxLCM p0Gh6wAPJ/6BQVS/v751vwI4jNY6weX3lIT9hTP3zUo0ahAit1jd0BAYVeN1YQLG T3xGrzjsKsQZ8/Mpx+52kEIWFVP/GTChFz9I8gUNrkfjTiaFajFmcl33XAgkEXkl qlX20W1GrnqY2rLbrM9kJlSsqvaUn8r4e7Et59JyHCBU9rZKwsMR+8XLJ2EfDKHU Amr1XEgHqmucAu4RumRDu7ccAxzj3Fh0RqmniN1ZyF033DLkIjpfENbGU4Vzip++ xqZjNN8k3PUhklLqhGzJTAnXy5jZ7tr/ -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:57 2025 by rpki-client