$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: ccV47OBJ+fl+4fEFGsk9kRWMgHKrsplqV5LZPEjjlMY= Subject key identifier: 15:D5:C6:DA:7B:84:A7:EB:D1:49:4A:08:DD:F7:24:DC:2F:6C:59:F6 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 0145 Signing time: Thu 19 Jun 2025 03:42:04 +0000 Manifest this update: Thu 19 Jun 2025 03:42:03 +0000 Manifest next update: Thu 26 Jun 2025 03:42:03 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: Xtnifxj1LVBzgJOiKHaJhSZtyxKfqcdXTVgvswr8tMM=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: 5Y7qsAaq9WIcozANz4ZXMikS+vaHk2RGINX/W4ZA3l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Jun 19 03:42:03 2025 GMT Not After : Jun 26 03:42:03 2025 GMT Subject: CN=6853870c-3dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:2d:76:74:c5:43:31:8e:b5:e7:99:1f:b0: 75:e4:ab:f4:78:1c:e1:83:7f:1a:3c:a6:4b:1c:18: 5b:71:8b:00:3b:f5:ed:42:83:46:3b:14:8e:06:66: 56:a7:84:e6:cc:c3:e1:43:d5:47:19:fc:91:57:21: 02:d7:dc:57:fc:94:de:40:64:2f:b1:04:7c:a9:8f: 29:ff:e6:f6:7a:b5:4f:a7:1c:eb:c0:7b:26:d5:47: 66:b7:d3:91:13:c9:3e:23:5c:a7:3e:d1:a0:de:04: c1:fe:46:3b:c7:94:a1:78:b2:bc:06:2d:04:06:65: 0f:df:d8:11:0e:41:70:32:41:81:ec:95:74:10:4e: 89:e1:59:06:38:5a:5b:18:cf:f5:46:29:3d:59:37: 6e:44:c8:7c:80:6d:de:48:c1:29:ae:e1:b3:27:be: fc:59:0c:c8:38:b0:95:1d:e4:e7:09:0f:b6:70:5b: ab:c6:2c:71:fa:01:b9:2d:f2:47:b4:08:dc:97:c9: 23:f8:28:65:52:6c:1b:9d:9a:d4:c1:a3:c4:87:17: c5:e8:18:ca:f2:82:23:63:73:d8:cc:4f:7e:d2:99: 96:40:82:f6:fb:4f:ad:0b:2c:9e:ac:b9:da:09:a4: a1:62:36:a4:9a:9f:ee:cd:2a:6b:1d:d0:ee:a2:41: d1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D5:C6:DA:7B:84:A7:EB:D1:49:4A:08:DD:F7:24:DC:2F:6C:59:F6 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f2:12:40:1f:8b:27:06:f4:80:b7:ba:c8:56:35:8c:be:f4: f1:19:9d:8e:71:2b:76:f4:f1:f3:5b:cb:27:42:26:2d:8a:83: d1:4a:c5:6c:99:99:cc:63:d2:be:6d:0c:a2:07:14:d1:41:da: 92:95:3b:aa:6b:95:a9:98:0b:e5:ce:21:01:b8:79:95:66:ff: 9c:a2:d9:6f:6b:f7:6b:da:cd:48:59:76:e6:a1:aa:c0:81:6c: 3b:fa:d5:71:77:8b:f7:cd:8b:a8:07:f7:18:b5:b2:cd:79:13: 97:05:c6:a6:60:5b:d7:dc:ee:6d:b2:d9:3c:d3:0a:98:ea:6a: 6a:e5:79:7d:34:8d:14:81:f4:f2:34:3e:35:58:1f:ac:79:d4: ce:a7:08:27:9a:18:a0:88:0c:50:12:b0:29:2a:d6:af:5a:e0: d7:15:4c:e3:c1:e8:54:2a:23:09:11:4d:ae:4a:51:2d:95:c3: 67:b9:9d:d7:dd:19:18:43:15:2c:45:a1:08:04:c9:d8:49:f1: 21:1a:6a:ed:58:73:7b:e2:f2:94:6c:f0:91:d9:a4:c2:38:fd: c6:44:00:14:80:28:4c:c3:73:8d:54:84:d2:9c:ef:8e:0d:e0: 2d:8f:98:3e:84:32:f7:ac:06:c6:cc:63:66:7e:7a:81:60:31: 7a:2e:76:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUwNjE5MDM0MjAzWhcNMjUwNjI2MDM0MjAzWjAYMRYwFAYD VQQDEw02ODUzODcwYy0zZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqUtdnTFQzGOteeZH7B15Kv0eBzhg38aPKZLHBhbcYsAO/XtQoNGOxSOBmZW p4TmzMPhQ9VHGfyRVyEC19xX/JTeQGQvsQR8qY8p/+b2erVPpxzrwHsm1Udmt9OR E8k+I1ynPtGg3gTB/kY7x5SheLK8Bi0EBmUP39gRDkFwMkGB7JV0EE6J4VkGOFpb GM/1Rik9WTduRMh8gG3eSMEpruGzJ778WQzIOLCVHeTnCQ+2cFurxixx+gG5LfJH tAjcl8kj+ChlUmwbnZrUwaPEhxfF6BjK8oIjY3PYzE9+0pmWQIL2+0+tCyyerLna CaShYjakmp/uzSprHdDuokHRhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXVxtp7 hKfr0UlKCN33JNwvbFn2MB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk8hJAH4snBvSAt7rIVjWMvvTxGZ2OcSt29PHzW8snQiYtioPRSsVs mZnMY9K+bQyiBxTRQdqSlTuqa5WpmAvlziEBuHmVZv+cotlva/dr2s1IWXbmoarA gWw7+tVxd4v3zYuoB/cYtbLNeROXBcamYFvX3O5tstk80wqY6mpq5Xl9NI0UgfTy ND41WB+sedTOpwgnmhigiAxQErApKtavWuDXFUzjwehUKiMJEU2uSlEtlcNnuZ3X 3RkYQxUsRaEIBMnYSfEhGmrtWHN74vKUbPCR2aTCOP3GRAAUgChMw3ONVITSnO+O DeAtj5g+hDL3rAbGzGNmfnqBYDF6LnZl -----END CERTIFICATE-----Generated at Thu Jun 19 15:30:12 2025 by rpki-client