$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json) Hash identifier: 2qkuBITswTWZKKhCavrPDKuGH6AN4DrhD0y2ra1UvyQ= Subject key identifier: 78:AC:AE:41:B6:5E:E5:F6:6B:5E:6C:0F:CD:CC:3C:64:A1:86:53:9C Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft Manifest number: 81 Signing time: Tue 17 Jun 2025 05:36:24 +0000 Manifest this update: Tue 17 Jun 2025 05:36:24 +0000 Manifest next update: Tue 24 Jun 2025 05:36:24 +0000 Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: oduyTn3ViVrygP4glJYXbV40lP7AGVIFgF+JxGE3BcI=) 2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: cHJy1BLtElHS3p1bo+4QsrHmfc/col4vczERE1sjyMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Validity Not Before: Jun 17 05:36:24 2025 GMT Not After : Jun 24 05:36:24 2025 GMT Subject: CN=6850fed8-d28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:e6:58:0c:51:66:03:bb:f3:89:73:1f:9d: aa:f0:98:90:8c:5b:52:a6:44:0c:31:df:4c:24:63: bb:76:bb:43:75:a5:e2:5c:ba:c1:4f:e0:0f:95:b8: dc:7f:84:44:2d:88:8d:a0:52:fa:1b:5a:17:bd:55: b0:a4:f0:fa:9f:ce:74:e4:b3:18:54:8f:c6:c0:59: ae:ff:bb:63:05:30:66:9f:ee:3e:00:85:7d:6d:4f: 70:51:15:21:f0:25:c0:73:d5:54:32:a5:30:2b:29: 95:30:f4:c9:e0:05:92:35:0e:06:3d:c1:28:7a:e1: 50:72:24:24:1c:67:1e:9c:80:77:40:5f:56:7a:76: 7e:10:08:07:a4:e9:98:dc:b4:49:27:fc:0b:ea:5a: ad:bc:8c:96:43:e3:fe:76:b0:42:18:a4:90:46:50: 4e:ee:cf:4b:1b:63:fe:9d:23:b5:ec:e3:03:6c:c2: 4c:6a:af:c1:45:01:e1:98:15:e7:3a:56:ac:69:7a: 9f:dd:85:85:9b:25:ad:07:5e:4c:ac:bb:3b:58:dc: 81:32:b1:48:5e:bb:8a:9c:96:7c:25:eb:ab:6c:54: 87:d4:80:d0:21:30:28:e4:9b:c3:ea:70:de:1f:0c: 50:76:51:47:bf:f3:83:4c:56:34:d0:15:d6:b8:4a: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AC:AE:41:B6:5E:E5:F6:6B:5E:6C:0F:CD:CC:3C:64:A1:86:53:9C X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5c:fd:ae:e7:d4:c2:e8:4b:b8:d4:80:fa:f8:5e:2d:00:a3: 20:b6:7c:e5:83:dd:88:0a:b8:ce:83:1b:9c:37:40:63:43:77: 8b:27:ea:86:dc:bd:b2:f4:9f:9f:dd:6c:39:5e:9a:d1:50:96: 04:65:7b:a3:52:5c:e8:9d:4d:9b:20:8f:aa:c0:95:a5:e8:24: ac:b3:83:a1:26:0e:28:1c:46:d6:b4:01:78:1d:85:9d:3f:ff: a5:fc:e9:6a:17:b2:70:98:bc:75:85:fc:98:be:af:04:ac:25: 34:b9:be:c8:59:af:77:eb:3d:53:ce:9e:58:a5:dc:39:24:b3: 40:e6:82:1d:4c:f6:35:86:aa:94:02:1b:8e:f3:b0:2b:2a:05: 9a:2f:a8:6b:2f:6e:34:fa:a6:94:ae:be:f0:a5:cd:63:a5:2c: e1:4b:c0:d2:0e:cf:40:e8:db:e0:8c:43:52:52:23:36:2a:17: 4a:c1:3a:9c:5e:90:e9:20:3c:d2:e7:d5:4c:7b:e9:4f:63:a9: cc:fb:97:af:3e:e9:b7:17:bb:ff:5d:49:29:7c:d7:a1:1e:bb: 54:bf:1b:0c:3c:cb:67:9d:5b:48:a3:7c:88:4a:7f:0d:bf:d1: fa:5a:f3:74:76:b1:99:6c:41:7b:09:36:46:c8:03:cf:13:3e: e9:9a:fe:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKEFFMEU0QkVDNTY4RkU2RkVFNDkyRjcyRTREM0FDQjky OEQ5QzFFNEYwHhcNMjUwNjE3MDUzNjI0WhcNMjUwNjI0MDUzNjI0WjAYMRYwFAYD VQQDEw02ODUwZmVkOC1kMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmU/mWAxRZgO784lzH52q8JiQjFtSpkQMMd9MJGO7drtDdaXiXLrBT+APlbjc f4RELYiNoFL6G1oXvVWwpPD6n8505LMYVI/GwFmu/7tjBTBmn+4+AIV9bU9wURUh 8CXAc9VUMqUwKymVMPTJ4AWSNQ4GPcEoeuFQciQkHGcenIB3QF9WenZ+EAgHpOmY 3LRJJ/wL6lqtvIyWQ+P+drBCGKSQRlBO7s9LG2P+nSO17OMDbMJMaq/BRQHhmBXn OlasaXqf3YWFmyWtB15MrLs7WNyBMrFIXruKnJZ8JeurbFSH1IDQITAo5JvD6nDe HwxQdlFHv/ODTFY00BXWuEp09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHisrkG2 XuX2a15sD83MPGShhlOcMB8GA1UdIwQYMBaAFK4OS+xWj+b+5JL3Lk06y5KNnB5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80MTQ4NTA3MDhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2N2trdmN1VFRyTGtvMmNI azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwQy80MTQ4NTA3MDhDNUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2 N2trdmN1VFRyTGtvMmNIazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvXP2u59TC6Eu41ID6+F4tAKMgtnzlg92ICrjOgxucN0BjQ3eLJ+qG 3L2y9J+f3Ww5XprRUJYEZXujUlzonU2bII+qwJWl6CSss4OhJg4oHEbWtAF4HYWd P/+l/OlqF7JwmLx1hfyYvq8ErCU0ub7IWa936z1Tzp5Ypdw5JLNA5oIdTPY1hqqU AhuO87ArKgWaL6hrL240+qaUrr7wpc1jpSzhS8DSDs9A6NvgjENSUiM2KhdKwTqc XpDpIDzS59VMe+lPY6nM+5evPum3F7v/XUkpfNehHrtUvxsMPMtnnVtIo3yISn8N v9H6WvN0drGZbEF7CTZGyAPPEz7pmv7/ -----END CERTIFICATE-----Generated at Thu Jun 19 03:01:11 2025 by rpki-client