$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft File: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft (raw, json) Hash identifier: kNswL4MLPv+X87Ctsj20mn3K1y3cUQ7qAsgEKG/iDJ0= Subject key identifier: AF:C8:CC:31:94:3D:0D:24:1E:65:7A:AD:F1:D5:9F:B1:CB:2F:B5:CF Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E Certificate issuer: /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Certificate serial: 06F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft Manifest number: 22A5 Signing time: Sat 14 Jun 2025 15:49:46 +0000 Manifest this update: Sat 14 Jun 2025 15:49:46 +0000 Manifest next update: Sat 21 Jun 2025 15:49:45 +0000 Files and hashes: 1: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl (hash: 41zyKdw5YrOS66ZsPLluUVZLKBYz0+hSRpzfN9HgLZk=) 2: CCC98C06516B11EBB8942876C4F9AE02.roa (hash: oQ+XeX3QPr5MKR/Pv82IWUhiWxAkN4R4paMHXTKKeg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1784 (0x6f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AF0, serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Validity Not Before: Jun 14 15:49:46 2025 GMT Not After : Jun 21 15:49:45 2025 GMT Subject: CN=684d9a1a-63de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:ec:fc:15:a5:43:14:ed:17:84:fb:41:99: ac:4e:aa:d7:e1:14:fb:02:62:48:35:00:0b:25:39: aa:29:0a:08:05:b3:87:6f:e7:d2:b4:26:9f:64:ea: 13:f0:f6:a7:c6:0c:9e:08:56:97:52:a4:9b:c7:64: f4:b5:6d:7f:c3:f6:a3:4c:d3:fb:06:5c:03:b2:d2: 94:23:db:98:e1:0f:18:56:92:ba:90:6c:d9:0a:2d: b5:58:44:67:20:76:ac:25:b7:98:a7:0a:9e:1d:2e: 63:6f:c6:2f:dc:91:a1:75:5f:65:e8:e1:96:ff:af: 7e:97:11:de:f5:ad:ff:c0:a2:ea:eb:e6:e8:af:32: 43:24:a2:d6:5f:2a:1b:d3:34:3b:d8:67:89:0d:e1: 70:b0:19:25:06:01:9b:f3:68:da:5a:24:76:48:8e: 5f:74:0e:ee:14:6d:98:1e:64:1b:f9:bd:4c:11:79: 3d:4d:ad:7c:8f:eb:87:d4:cf:e3:ba:4a:24:b8:88: 43:ae:c0:e4:6e:1f:04:31:17:1e:a7:0d:cc:08:6f: ff:40:46:41:21:a0:4b:75:88:d6:3d:84:c6:83:b5: 85:4d:b8:20:b2:32:da:38:61:ee:e8:3d:d4:14:15: 46:e6:ee:57:3e:ea:9e:cc:dc:32:94:b9:f2:ee:25: 66:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C8:CC:31:94:3D:0D:24:1E:65:7A:AD:F1:D5:9F:B1:CB:2F:B5:CF X509v3 Authority Key Identifier: keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9c:a0:08:1e:ae:cb:30:94:ce:02:7f:dd:b9:4e:37:0c:46: 1f:cf:70:47:90:a5:6f:e4:a6:2a:84:7e:f1:23:47:39:5d:c4: d7:7a:9c:9e:0b:25:e5:d5:a5:e0:9a:d4:37:33:5e:ab:af:44: 81:f7:41:32:ee:d5:f2:5e:4a:28:57:76:b4:79:87:6d:a3:49: fc:3d:78:9a:fb:7c:4b:8c:6e:38:db:28:a0:fa:16:37:ec:39: 54:03:34:dc:39:19:2d:32:41:d9:62:42:ea:3d:62:de:97:2c: 09:53:bd:f8:f0:d5:12:e3:5b:cd:74:cf:82:5f:4b:10:0a:c9: c7:ae:88:a9:bb:79:7c:79:19:7a:be:61:b6:5b:83:6d:af:d8: 13:a3:3d:19:c8:34:47:06:8d:c8:f2:35:c9:d6:8e:b5:51:9a: 82:c2:90:1a:2f:e9:b6:70:54:66:9f:06:cc:5c:de:b6:50:9f: 4b:52:65:48:43:8a:92:17:39:2a:e2:df:16:dd:0d:23:75:02: 3c:5a:25:16:7b:73:99:1c:2e:fa:5b:04:94:b1:a1:b0:07:d3: d6:a5:8d:2e:48:fd:f4:72:60:be:7a:6e:04:9c:a4:85:94:8f: 25:2d:3c:c5:c1:d3:a7:24:31:f7:04:56:92:30:ca:ac:20:56: 6c:74:49:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBRjAxMTAvBgNVBAUTKDUxMjYxOURFMEMxRDFCQjNFNTc3OTk0RUUwQzVGRjMw RDQ5MUNEMEUwHhcNMjUwNjE0MTU0OTQ2WhcNMjUwNjIxMTU0OTQ1WjAYMRYwFAYD VQQDEw02ODRkOWExYS02M2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+Xs/BWlQxTtF4T7QZmsTqrX4RT7AmJINQALJTmqKQoIBbOHb+fStCafZOoT 8PanxgyeCFaXUqSbx2T0tW1/w/ajTNP7BlwDstKUI9uY4Q8YVpK6kGzZCi21WERn IHasJbeYpwqeHS5jb8Yv3JGhdV9l6OGW/69+lxHe9a3/wKLq6+borzJDJKLWXyob 0zQ72GeJDeFwsBklBgGb82jaWiR2SI5fdA7uFG2YHmQb+b1MEXk9Ta18j+uH1M/j ukokuIhDrsDkbh8EMRcepw3MCG//QEZBIaBLdYjWPYTGg7WFTbggsjLaOGHu6D3U FBVG5u5XPuqezNwylLny7iVmOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/IzDGU PQ0kHmV6rfHVn7HLL7XPMB8GA1UdIwQYMBaAFFEmGd4MHRuz5XeZTuDF/zDUkc0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFGMC9GMTYyREE0RTlG OTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3UGxkNWxPNE1YX01OU1J6 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTWVozZ3dkRzdQbGQ1bE80TVhfTU5TUnpRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFGMC9GMTYyREE0RTlGOTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3 UGxkNWxPNE1YX01OU1J6UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjnKAIHq7LMJTOAn/duU43DEYfz3BHkKVv5KYqhH7xI0c5XcTXepye CyXl1aXgmtQ3M16rr0SB90Ey7tXyXkooV3a0eYdto0n8PXia+3xLjG442yig+hY3 7DlUAzTcORktMkHZYkLqPWLelywJU7348NUS41vNdM+CX0sQCsnHroipu3l8eRl6 vmG2W4Ntr9gToz0ZyDRHBo3I8jXJ1o61UZqCwpAaL+m2cFRmnwbMXN62UJ9LUmVI Q4qSFzkq4t8W3Q0jdQI8WiUWe3OZHC76WwSUsaGwB9PWpY0uSP30cmC+em4EnKSF lI8lLTzFwdOnJDH3BFaSMMqsIFZsdEkg -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:13 2025 by rpki-client