$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json) Hash identifier: sQvPzQTnPotf3QMsvKvjFe8oBwM6SPtVB0nKQ0cZcaU= Subject key identifier: E2:E9:CC:5E:1E:0C:AD:10:44:36:E5:B3:8A:B5:2C:42:C6:06:18:7D Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Certificate serial: 11D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft Manifest number: 11C7 Signing time: Mon 16 Jun 2025 17:13:14 +0000 Manifest this update: Mon 16 Jun 2025 17:13:13 +0000 Manifest next update: Mon 23 Jun 2025 17:13:13 +0000 Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: o2FNuc9IF5fovGZ1YyZVuprcDNLYnlzS2i4ySlPBTTs=) 2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: 19PePHoFF22nUkndMtbal1vAJr/Bweg8ayj4IBTrMGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4565 (0x11d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Validity Not Before: Jun 16 17:13:13 2025 GMT Not After : Jun 23 17:13:13 2025 GMT Subject: CN=685050aa-f629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:01:85:f2:ed:a2:24:51:64:f7:4a:3b:25:d2: 4c:5f:19:4f:8d:d7:cd:dd:21:60:d0:63:f8:79:f4: 93:c4:26:f5:dc:c1:40:30:35:d6:d6:e8:a4:bf:7b: c9:0c:fa:0e:a5:ba:de:c4:3e:4c:6e:95:09:49:d0: 6a:dc:8b:5b:81:2d:bd:29:3d:a0:cc:83:c0:0f:fa: 01:b9:00:83:3a:c5:f6:a3:5c:9f:e9:60:8e:59:47: 4e:b6:55:6c:8c:4f:23:79:f3:3f:b0:4d:b5:5a:95: 26:ef:ca:24:b5:9c:62:cb:bd:17:8b:d5:45:d6:ea: 1d:bf:71:e3:8e:56:94:56:7b:11:6a:74:0d:e2:54: 6a:51:38:c4:1a:db:77:1b:58:d2:03:2a:1e:e5:9e: 48:3f:c1:65:7b:66:47:8c:99:dc:0e:e8:08:52:c6: bb:3b:e0:32:31:49:fe:32:f4:c8:b9:f4:60:bc:0a: 1e:75:a2:63:1f:0b:cb:58:88:8f:4f:84:1a:31:7a: 77:52:82:b1:0e:fa:e6:aa:78:8b:88:81:85:48:90: 8c:e7:92:06:a8:2e:4d:70:5c:58:6e:1c:f8:a5:48: 7e:d6:35:35:ee:e6:a4:8d:89:9d:4e:eb:53:04:c1: 48:ad:78:31:c6:d3:87:04:fa:85:13:20:76:6f:a0: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E9:CC:5E:1E:0C:AD:10:44:36:E5:B3:8A:B5:2C:42:C6:06:18:7D X509v3 Authority Key Identifier: keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ec:30:dc:10:8d:2a:29:93:85:1c:a4:a0:0f:cd:6e:cc:bb: 06:05:91:77:c7:0a:ed:48:99:9c:18:10:23:e2:9b:b8:23:03: dc:9f:43:12:1f:9c:18:25:d2:e5:25:37:cf:28:f8:24:fd:02: dd:79:a2:b2:67:b9:4f:54:4d:8a:c5:a7:94:cb:c1:5d:09:47: c6:5e:0a:c0:32:82:79:ea:cc:16:39:f9:90:f1:7f:77:18:a9: 2e:c0:ad:4b:f1:18:ec:67:b5:7c:cf:18:b1:01:62:07:77:87: 23:14:91:10:07:5a:cd:1a:7f:12:fe:84:23:c9:30:f4:b8:bc: 89:39:6b:c4:55:b6:eb:4b:ba:2a:75:4c:5d:69:36:59:93:b8: fb:7c:9a:74:a3:1b:72:8b:5d:de:3c:57:b5:ac:2e:ef:fa:6b: 31:0f:bf:f3:cc:9d:7e:38:0b:f0:df:ad:a6:63:82:d3:ac:aa: 0d:34:08:a6:c2:0c:82:17:be:5c:af:5c:c5:56:a5:57:90:29: fb:dd:a4:3b:36:f7:0d:d5:a7:bb:0b:6c:09:94:7a:5c:13:b3: 7a:6f:b8:4b:b8:3f:26:83:13:95:2d:8c:d9:e9:0d:a6:7f:c4: a8:de:05:77:26:23:ff:43:20:fb:e8:fd:d0:79:b7:02:f0:cd: 0b:82:8a:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy Q0NDMjFENjcwHhcNMjUwNjE2MTcxMzEzWhcNMjUwNjIzMTcxMzEzWjAYMRYwFAYD VQQDEw02ODUwNTBhYS1mNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wGF8u2iJFFk90o7JdJMXxlPjdfN3SFg0GP4efSTxCb13MFAMDXW1uikv3vJ DPoOpbrexD5MbpUJSdBq3ItbgS29KT2gzIPAD/oBuQCDOsX2o1yf6WCOWUdOtlVs jE8jefM/sE21WpUm78oktZxiy70Xi9VF1uodv3HjjlaUVnsRanQN4lRqUTjEGtt3 G1jSAyoe5Z5IP8Fle2ZHjJncDugIUsa7O+AyMUn+MvTIufRgvAoedaJjHwvLWIiP T4QaMXp3UoKxDvrmqniLiIGFSJCM55IGqC5NcFxYbhz4pUh+1jU17uakjYmdTutT BMFIrXgxxtOHBPqFEyB2b6AE2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLpzF4e DK0QRDbls4q1LELGBhh9MB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX NTdua3Yxc01nWElzekNIV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi7DDcEI0qKZOFHKSgD81uzLsGBZF3xwrtSJmcGBAj4pu4IwPcn0MS H5wYJdLlJTfPKPgk/QLdeaKyZ7lPVE2KxaeUy8FdCUfGXgrAMoJ56swWOfmQ8X93 GKkuwK1L8RjsZ7V8zxixAWIHd4cjFJEQB1rNGn8S/oQjyTD0uLyJOWvEVbbrS7oq dUxdaTZZk7j7fJp0oxtyi13ePFe1rC7v+msxD7/zzJ1+OAvw362mY4LTrKoNNAim wgyCF75cr1zFVqVXkCn73aQ7NvcN1ae7C2wJlHpcE7N6b7hLuD8mgxOVLYzZ6Q2m f8So3gV3JiP/QyD76P3QebcC8M0LgoqR -----END CERTIFICATE-----Generated at Tue Jun 17 10:25:42 2025 by rpki-client