$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: gYxpqE8QekwWpM5kY9oOnjGrMbTSkiD3XgWC229sQ4Y= Subject key identifier: 91:33:8F:A6:D7:8D:10:FF:63:DC:1E:D1:75:28:7F:40:82:E7:C0:59 Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: 0C Signing time: Tue 05 Aug 2025 08:49:20 +0000 Manifest this update: Tue 05 Aug 2025 08:49:19 +0000 Manifest next update: Tue 12 Aug 2025 08:49:19 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: TQ5lMBvN4z7e3DH+JtjmBA7LKptxuRPNre7YsWFyhxQ=) 2: D24370A6638211F087594469C4F9AE02.roa (hash: BC9hUQT1LjynnO8EIFYzWbutVI812gfFy3AK+b9ATvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Aug 5 08:49:19 2025 GMT Not After : Aug 12 08:49:19 2025 GMT Subject: CN=6891c58f-fe34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:b3:fc:88:53:91:ff:2f:9e:a8:84:14:26:bb: c7:7a:d5:e9:64:8e:dd:e8:c3:38:9c:94:e0:1d:ef: 71:f7:50:f6:9e:8c:90:fd:c2:f9:c0:1c:31:7d:f1: 81:02:b4:c8:9d:27:92:7b:5f:46:e0:e6:c7:01:07: 13:fc:74:76:c4:6f:19:f5:29:97:d5:b5:b2:45:9d: 11:7a:0b:87:50:15:97:8d:44:66:64:09:85:03:cc: 5c:ab:55:95:85:5d:29:12:1c:0f:35:2a:c0:2e:b0: b8:6a:9a:b6:c9:bb:1b:ce:11:b7:da:03:07:12:1f: 35:51:b8:52:fa:b0:02:d0:38:2e:84:34:2a:ab:9a: 66:e8:cb:75:cc:3d:e3:89:0b:08:cb:cd:92:0c:3c: a2:7e:6d:68:e5:eb:01:86:83:31:ca:bf:48:ad:ed: 7f:55:38:6f:b8:b6:27:aa:07:35:d5:85:27:c9:d3: cf:ba:ab:89:56:72:5d:91:fb:b1:f2:f0:ee:c9:6a: 5e:b5:f2:fd:9e:c8:44:17:05:61:6c:9f:07:96:3b: 6c:16:af:05:19:6e:b7:32:21:85:e6:d9:c6:bb:36: 91:4a:73:1e:f1:e9:56:ee:94:3c:b2:e4:0e:fe:ab: 3a:33:a8:58:b9:54:4c:33:93:dd:3e:22:76:d7:8e: 69:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:33:8F:A6:D7:8D:10:FF:63:DC:1E:D1:75:28:7F:40:82:E7:C0:59 X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:63:65:cf:cb:a2:87:b5:5f:21:08:1e:53:a2:70:24:e3:b1: 4e:6e:03:78:ad:b6:88:79:75:69:6c:b0:33:c5:89:55:7d:56: 5d:40:9b:32:1c:c7:15:e4:40:62:83:71:82:d5:89:de:12:cd: 5e:66:73:55:52:ba:4e:a2:ac:a0:b9:a0:1e:26:83:75:88:e1: 58:1f:0a:23:04:5c:84:46:c6:42:c5:e6:fc:66:71:f6:6e:9a: c9:e1:ed:ff:61:83:06:06:df:5d:da:f3:00:00:be:2f:f8:37: b3:4d:28:b5:c0:17:fe:6e:d7:13:4a:60:1c:40:b5:c7:08:07: f4:1e:f4:f7:c3:df:10:ee:40:c1:a4:74:3f:05:45:d8:90:88: 51:39:6b:f7:7a:2c:ba:b6:ac:ba:6c:83:b5:2a:9a:bd:8a:dd: f1:1c:98:dd:17:1e:69:ec:f6:e9:ae:98:f1:04:5a:b7:cc:35: 36:a6:40:d4:cf:5a:4d:56:63:7e:be:59:89:07:b0:e1:58:8e: 23:f1:5c:17:51:82:b3:de:07:85:01:c3:ad:c8:9e:53:90:4a: b3:1b:e3:20:b0:87:57:5d:62:a9:b4:3c:a0:a6:56:58:41:4b: 17:61:ce:14:32:9d:0f:8b:4c:8e:04:db:f0:62:d4:99:2e:a4: a1:fe:ee:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoOUI5RDM5NzI1QjI3RDQyMDI4MTM4NTE2MzQ5MkZGNzVG MTUxMTNEQTAeFw0yNTA4MDUwODQ5MTlaFw0yNTA4MTIwODQ5MTlaMBgxFjAUBgNV BAMTDTY4OTFjNThmLWZlMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD9s/yIU5H/L56ohBQmu8d61elkjt3owziclOAd73H3UPaejJD9wvnAHDF98YEC tMidJ5J7X0bg5scBBxP8dHbEbxn1KZfVtbJFnRF6C4dQFZeNRGZkCYUDzFyrVZWF XSkSHA81KsAusLhqmrbJuxvOEbfaAwcSHzVRuFL6sALQOC6ENCqrmmboy3XMPeOJ CwjLzZIMPKJ+bWjl6wGGgzHKv0it7X9VOG+4tieqBzXVhSfJ08+6q4lWcl2R+7Hy 8O7Jal618v2eyEQXBWFsnweWO2wWrwUZbrcyIYXm2ca7NpFKcx7x6VbulDyy5A7+ qzozqFi5VEwzk90+InbXjmn1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkTOPpteN EP9j3B7RdSh/QILnwFkwHwYDVR0jBBgwFoAUm505clsn1CAoE4UWNJL/dfFRE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzYyMjZDOTM2NjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbTUwNWNsc24xQ0FvRTRVV05KTF9kZkZSRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzYyMjZDOTM2NjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNB b0U0VVdOSkxfZGZGUkU5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADNjZc/Looe1XyEIHlOicCTjsU5uA3ittoh5dWlssDPFiVV9Vl1AmzIc xxXkQGKDcYLVid4SzV5mc1VSuk6irKC5oB4mg3WI4VgfCiMEXIRGxkLF5vxmcfZu msnh7f9hgwYG313a8wAAvi/4N7NNKLXAF/5u1xNKYBxAtccIB/Qe9PfD3xDuQMGk dD8FRdiQiFE5a/d6LLq2rLpsg7Uqmr2K3fEcmN0XHmns9umumPEEWrfMNTamQNTP Wk1WY36+WYkHsOFYjiPxXBdRgrPeB4UBw63InlOQSrMb4yCwh1ddYqm0PKCmVlhB SxdhzhQynQ+LTI4E2/Bi1JkupKH+7vU= -----END CERTIFICATE-----Generated at Wed Aug 6 00:41:31 2025 by rpki-client