$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft File: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft (raw, json) Hash identifier: Oaci/72sg4OXIYYMxN+2975IX+3RgQHNNcT1c2K+Zd4= Subject key identifier: 04:25:CA:23:73:66:5F:14:8E:D0:76:EB:9E:65:35:18:5E:AA:42:9D Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 Certificate issuer: /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft Manifest number: 017B Signing time: Thu 07 Aug 2025 04:23:30 +0000 Manifest this update: Thu 07 Aug 2025 04:23:29 +0000 Manifest next update: Thu 14 Aug 2025 04:23:29 +0000 Files and hashes: 1: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl (hash: 8/4Bq9g4t4yf1mCkdWhwf/lntQr7ROGQIzcztJxZrJ8=) 2: 7A97D2F2174311EFAA4B5762C4F9AE02.roa (hash: qiuU93Lc7YatLMlsGPtovUfT87zuHB3bZX8CwFGs5GE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F715C, serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Validity Not Before: Aug 7 04:23:29 2025 GMT Not After : Aug 14 04:23:29 2025 GMT Subject: CN=68942a41-376a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:b0:45:3c:76:33:36:19:0c:54:14:c8:3a: b2:a2:eb:03:63:53:96:6a:42:44:82:43:13:1e:76: 3e:08:1a:20:2c:f8:e2:ad:4f:e6:0a:13:b6:a7:cb: 99:a0:f3:e7:de:56:52:fe:dc:7b:fc:d8:bf:f0:0d: b2:0a:59:85:98:be:ec:84:62:bf:c0:d6:3a:9b:3a: 04:38:51:a5:ff:65:5a:1a:75:67:18:89:df:e8:60: ce:88:c6:d9:46:17:81:f2:3b:bb:eb:ad:92:c8:cd: 49:1d:9e:9c:c5:49:dc:bd:2a:8c:ae:01:f4:17:62: cb:97:b8:22:93:8b:b5:34:d0:70:6a:c0:ec:cf:5f: cf:23:95:cc:07:e6:f4:f7:40:ff:95:c9:7a:f4:19: db:fd:75:3d:cd:96:42:03:8f:e7:97:9d:ab:41:e4: 78:e9:58:9b:fa:f4:12:09:13:93:58:71:65:72:67: f6:23:ec:ac:df:b6:46:aa:a7:15:13:d8:11:69:2e: f4:17:e0:d1:64:41:95:c2:3b:46:8e:fb:9b:6d:57: d6:ee:8d:ea:2b:18:e1:1b:40:78:53:cc:31:29:e4: 25:7c:60:2d:ff:bd:e9:4c:07:48:cf:3f:3d:3d:d4: 60:49:ec:59:b7:90:8a:d3:62:2a:a4:a8:1d:cb:bb: 31:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:25:CA:23:73:66:5F:14:8E:D0:76:EB:9E:65:35:18:5E:AA:42:9D X509v3 Authority Key Identifier: keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3c:3c:0b:33:c3:a3:5b:cc:e5:7e:9b:fb:16:c1:d9:8a:b1: 5c:27:07:4f:e2:04:9b:fa:92:1b:23:41:2c:88:ae:58:08:63: 06:0d:57:81:37:fb:8c:4e:cd:c3:cd:ea:28:c7:ec:fd:c4:66: dd:3e:2e:b6:38:86:36:f0:9b:fe:be:5b:71:08:89:59:fa:a2: 85:ef:d1:4b:a1:72:4e:44:1c:3a:e2:6e:98:58:26:00:7f:ee: 2f:58:32:9d:c2:ae:4a:c2:35:b0:43:95:0a:02:fc:86:55:26: 1a:8a:82:b1:84:eb:98:fb:62:d8:e9:04:ba:16:aa:cd:a5:1f: c5:cc:4e:47:a2:87:a4:e1:54:34:fb:5c:68:77:9b:8e:83:e1: 7c:9c:62:87:a0:c5:aa:fe:91:71:01:d5:b6:9a:ed:f0:d7:66: 8c:01:7d:02:dd:83:5b:56:9a:71:fa:cf:fb:28:67:9e:73:70: 1b:ea:55:6f:dd:18:1d:2e:76:05:9e:c3:92:2e:e5:d4:d9:59: 0b:e4:5e:7a:2c:b5:a7:61:ee:7a:75:e7:d3:56:aa:7f:0a:92: e5:89:d4:f0:18:83:74:82:3b:55:4f:1d:c3:f5:58:82:f7:27: 23:c3:79:e3:f2:9b:3a:95:66:c1:3b:0a:8b:f6:5d:5f:03:23: 67:d1:13:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNUMxMTAvBgNVBAUTKEU3NzEzMkU0RkVBRDA0RUVENEZFOTQ2RDYwN0EwRENC NTdBNDIwNjUwHhcNMjUwODA3MDQyMzI5WhcNMjUwODE0MDQyMzI5WjAYMRYwFAYD VQQDEw02ODk0MmE0MS0zNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0SwRTx2MzYZDFQUyDqyousDY1OWakJEgkMTHnY+CBogLPjirU/mChO2p8uZ oPPn3lZS/tx7/Ni/8A2yClmFmL7shGK/wNY6mzoEOFGl/2VaGnVnGInf6GDOiMbZ RheB8ju7662SyM1JHZ6cxUncvSqMrgH0F2LLl7gik4u1NNBwasDsz1/PI5XMB+b0 90D/lcl69Bnb/XU9zZZCA4/nl52rQeR46Vib+vQSCROTWHFlcmf2I+ys37ZGqqcV E9gRaS70F+DRZEGVwjtGjvubbVfW7o3qKxjhG0B4U8wxKeQlfGAt/73pTAdIzz89 PdRgSexZt5CK02IqpKgdy7sxrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQlyiNz Zl8UjtB2655lNRheqkKdMB8GA1UdIwQYMBaAFOdxMuT+rQTu1P6UbWB6DctXpCBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE1Qy81RjA3MjYzODRG MzMxMUVFOTY2RTBGNzJDNEY5QUUwMi81M0V5NVA2dEJPN1VfcFJ0WUhvTnkxZWtJ R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzRXk1UDZ0Qk83VV9wUnRZSG9OeTFla0lHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE1Qy81RjA3MjYzODRGMzMxMUVFOTY2RTBGNzJDNEY5QUUwMi81M0V5NVA2dEJP N1VfcFJ0WUhvTnkxZWtJR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/PDwLM8OjW8zlfpv7FsHZirFcJwdP4gSb+pIbI0EsiK5YCGMGDVeB N/uMTs3Dzeoox+z9xGbdPi62OIY28Jv+vltxCIlZ+qKF79FLoXJORBw64m6YWCYA f+4vWDKdwq5KwjWwQ5UKAvyGVSYaioKxhOuY+2LY6QS6FqrNpR/FzE5Hooek4VQ0 +1xod5uOg+F8nGKHoMWq/pFxAdW2mu3w12aMAX0C3YNbVppx+s/7KGeec3Ab6lVv 3RgdLnYFnsOSLuXU2VkL5F56LLWnYe56defTVqp/CpLlidTwGIN0gjtVTx3D9ViC 9ycjw3nj8ps6lWbBOwqL9l1fAyNn0ROo -----END CERTIFICATE-----Generated at Fri Aug 8 19:30:07 2025 by rpki-client