$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft File: V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json) Hash identifier: iay0sXf5EgcNluWwxmnmbMCOPTYZ8Hey1q3j5tCGAL0= Subject key identifier: 84:3F:A2:7A:3B:58:95:CB:F2:F2:D0:A0:2E:F1:F8:42:AD:A5:BA:71 Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA Certificate issuer: /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft Manifest number: 83 Signing time: Thu 19 Jun 2025 06:00:06 +0000 Manifest this update: Thu 19 Jun 2025 06:00:05 +0000 Manifest next update: Thu 26 Jun 2025 06:00:05 +0000 Files and hashes: 1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: lAMAayQNjmqnWrCLrMKw/cUBiKuSExsbZtLPSH3vHg0=) 2: CC5DED701ED011F087716517C4F9AE02.roa (hash: /r/z36JtiDDnCVXQeI6m7NOKWTwHjbV5JqKL9GGA5Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA Validity Not Before: Jun 19 06:00:05 2025 GMT Not After : Jun 26 06:00:05 2025 GMT Subject: CN=6853a765-bf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8f:e3:e5:37:0f:a8:4b:a9:a1:7d:76:53:b2: 3a:25:ca:5c:fd:64:6f:db:e5:bf:0a:57:c1:93:6b: 64:96:61:95:c3:79:86:46:3b:ff:33:13:d6:a0:6b: f9:b3:29:18:fc:61:29:c0:e6:3e:7c:9b:3e:c4:ba: 49:e8:ae:37:0e:dc:53:0e:8d:5a:c3:57:9f:9b:f7: fb:92:21:bd:40:cb:31:8f:4b:d4:29:ba:d1:60:e0: 12:e0:d5:52:75:62:7d:18:f4:07:ae:88:01:9a:d4: 88:b9:e6:a6:ae:30:bb:76:ed:80:e9:67:08:f7:47: db:3e:8a:74:74:d7:b0:2a:a0:de:eb:bb:57:94:a6: 08:7e:8f:cc:57:87:b0:0e:f1:ad:93:d4:79:9a:44: 9f:0a:50:ea:ee:17:fe:3f:f4:f6:ee:4e:af:b3:f8: d4:17:0c:8e:c3:a9:51:b2:0b:3e:3f:4d:ba:59:ac: 38:f0:af:87:cd:0c:af:31:7d:ce:5d:b4:c6:8d:73: 6a:2a:38:6b:de:90:66:e9:b6:a3:0a:e5:2d:d0:81: 79:c7:9f:b3:0c:f2:3a:07:58:06:be:62:17:02:18: 52:c5:92:ea:08:5f:71:4b:e9:14:78:94:07:3c:fe: 8f:1c:f7:71:4f:05:52:39:44:cf:56:61:80:1e:33: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3F:A2:7A:3B:58:95:CB:F2:F2:D0:A0:2E:F1:F8:42:AD:A5:BA:71 X509v3 Authority Key Identifier: keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:61:b0:ed:4e:2e:6e:ab:9d:93:79:8f:17:c6:d4:e0:6f:dd: d1:84:6b:f5:fb:00:a6:a0:6c:36:c6:1a:d0:bb:12:8d:48:af: 6a:79:a9:68:ea:57:44:6f:69:fa:9e:cd:1e:90:ae:08:9b:7b: 9d:13:ac:3c:9f:9c:c9:31:49:49:e2:cf:8b:62:92:71:81:f4: cb:c8:a2:65:42:9a:df:ef:76:39:ee:52:cf:6b:35:b0:f0:07: c1:61:af:43:60:9e:a6:7a:8f:1c:11:78:1f:07:08:f3:4e:25: f0:e9:eb:c1:46:bf:f6:9e:94:21:cb:1f:e7:c2:9d:93:76:ae: 29:f7:33:b4:a1:b1:56:24:e9:a6:58:60:94:a2:36:ed:da:f1: 0e:ab:23:94:63:ed:db:e8:48:7e:3c:5a:1a:da:42:7a:ce:14: e1:92:86:42:b4:85:6b:33:98:13:f7:f7:c5:dc:87:23:e4:b6: c7:fe:79:9f:91:7d:60:e5:8f:ac:42:db:f9:bd:46:7e:0f:02: 0e:da:23:65:ae:8a:55:d0:e3:43:84:f9:87:52:9a:a3:5d:e6: 9c:d1:34:9a:3e:da:68:fa:70:54:f9:67:d9:5c:64:0a:49:53: 13:89:2e:51:01:b4:d1:b7:7d:0f:87:cf:31:36:52:3c:82:0d: 7a:a0:8c:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3QzUxMTAvBgNVBAUTKDU3NUE2RUQzMEMzNzNBRDQzNEQxNUE2NjVEREEyRTc2 NEVDODlBQ0EwHhcNMjUwNjE5MDYwMDA1WhcNMjUwNjI2MDYwMDA1WjAYMRYwFAYD VQQDEw02ODUzYTc2NS1iZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArY/j5TcPqEupoX12U7I6Jcpc/WRv2+W/ClfBk2tklmGVw3mGRjv/MxPWoGv5 sykY/GEpwOY+fJs+xLpJ6K43DtxTDo1aw1efm/f7kiG9QMsxj0vUKbrRYOAS4NVS dWJ9GPQHrogBmtSIueamrjC7du2A6WcI90fbPop0dNewKqDe67tXlKYIfo/MV4ew DvGtk9R5mkSfClDq7hf+P/T27k6vs/jUFwyOw6lRsgs+P026Waw48K+HzQyvMX3O XbTGjXNqKjhr3pBm6bajCuUt0IF5x5+zDPI6B1gGvmIXAhhSxZLqCF9xS+kUeJQH PP6PHPdxTwVSOUTPVmGAHjOxOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQ/ono7 WJXL8vLQoC7x+EKtpbpxMB8GA1UdIwQYMBaAFFdabtMMNzrUNNFaZl3aLnZOyJrK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EMDY1QUJCNDhB RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9WMXB1MHd3M090UTAwVnBtWGRvdWRrN0lt c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1YxcHUwd3czT3RRMDBWcG1YZG91ZGs3SW1zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdDNS9EMDY1QUJCNDhBRDkxMUVGOTgxQzgyODNDNEY5QUUwMi9WMXB1MHd3M090 UTAwVnBtWGRvdWRrN0ltc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbYbDtTi5uq52TeY8XxtTgb93RhGv1+wCmoGw2xhrQuxKNSK9qealo 6ldEb2n6ns0ekK4Im3udE6w8n5zJMUlJ4s+LYpJxgfTLyKJlQprf73Y57lLPazWw 8AfBYa9DYJ6meo8cEXgfBwjzTiXw6evBRr/2npQhyx/nwp2Tdq4p9zO0obFWJOmm WGCUojbt2vEOqyOUY+3b6Eh+PFoa2kJ6zhThkoZCtIVrM5gT9/fF3Icj5LbH/nmf kX1g5Y+sQtv5vUZ+DwIO2iNlropV0ONDhPmHUpqjXeac0TSaPtpo+nBU+WfZXGQK SVMTiS5RAbTRt30Ph88xNlI8gg16oIwk -----END CERTIFICATE-----Generated at Fri Jun 20 13:51:55 2025 by rpki-client