$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft File: 53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json) Hash identifier: /rN+7ksEYyFgG5tIlsbROnzkDpDUS1QKzDVVxd6PQrI= Subject key identifier: 87:1C:7C:27:5C:97:93:6B:D3:E0:B8:4F:A8:B5:44:8E:0D:D2:E0:D9 Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9 Certificate issuer: /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft Manifest number: 0189 Signing time: Sun 15 Jun 2025 02:47:15 +0000 Manifest this update: Sun 15 Jun 2025 02:47:15 +0000 Manifest next update: Sun 22 Jun 2025 02:47:14 +0000 Files and hashes: 1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: NAs96qtWP6Etx9s3Y6CKIBka1FuiPYauxUdsiTNAmJo=) 2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: MagQfzBe5yekFsZC62iyjicRBCCYPyKf7/pA5fRZ3FI=) 3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: WtNf5u0VPKCbZuWxho7o4y46h8TygPH5bunfDKzrwyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9 Validity Not Before: Jun 15 02:47:15 2025 GMT Not After : Jun 22 02:47:14 2025 GMT Subject: CN=684e3433-02be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:17:de:b6:b8:b2:8b:96:92:b5:4b:17:d2: 6c:fe:5f:e4:9e:14:63:04:54:aa:58:45:18:39:2a: 57:a9:7e:41:2c:2a:03:d9:8b:18:2f:7a:55:f9:26: 9c:8b:10:c0:f0:ee:f4:9b:3c:ee:e4:80:75:24:c0: a1:4f:76:16:cd:7c:7e:d6:7d:d3:c2:dd:1d:7a:53: 6c:9a:d8:8e:d0:a2:3f:7a:0e:72:11:cd:a8:62:b7: 97:5e:80:a0:b2:97:02:fe:87:c9:19:b1:6d:d8:ba: 6e:ab:37:bd:36:6f:9d:c1:ab:b2:3a:c1:ed:8a:53: da:37:45:c3:a1:0b:c4:d8:30:3c:c6:5c:6c:42:4e: de:94:37:53:e3:25:33:96:07:8a:27:96:ac:5d:8e: 9e:97:5c:bf:7f:21:0d:be:a3:bb:58:95:ef:06:68: 3b:14:e7:bc:47:11:da:e8:e8:a5:bf:2e:4d:f6:76: d0:73:16:f3:52:03:b1:f8:70:bd:7a:9d:1b:2e:a8: 96:38:a2:06:e1:9b:ea:2e:2c:05:c2:1a:30:39:f3: 50:81:1f:f4:cf:57:2e:04:59:cf:2e:ff:ff:a5:f6: e6:ba:10:bd:cd:d1:05:f8:1a:9e:b5:a0:7a:f3:4d: ba:4f:06:e9:4e:4a:0f:6a:07:b8:92:29:be:1f:c6: b1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1C:7C:27:5C:97:93:6B:D3:E0:B8:4F:A8:B5:44:8E:0D:D2:E0:D9 X509v3 Authority Key Identifier: keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:25:4b:23:ad:85:73:dd:03:8c:a3:41:bf:a7:f6:0b:6e:1a: ee:7f:e9:5e:2d:d8:25:c5:39:c9:aa:48:47:a8:05:71:7b:22: 37:11:5e:a4:4f:e6:c4:80:92:6e:72:4d:b7:06:37:d6:2e:6b: 88:95:e2:1c:ba:25:af:ad:12:6a:6c:90:ce:b9:cf:ab:2e:b1: 79:19:45:c5:d1:a5:39:95:52:f8:8a:36:8e:16:7d:36:90:95: c5:c1:40:ba:90:5c:16:85:ca:bf:16:f4:24:99:62:48:cc:61: 8b:27:f8:54:f0:4e:40:10:75:12:6d:a8:ba:44:f4:fe:7e:e1: ba:5d:2f:c2:33:ca:80:0a:85:94:64:ce:bb:da:13:5b:56:67: c1:d2:c9:47:fa:1c:9a:b0:c1:6e:4d:4c:89:6d:05:70:56:4d: f5:cf:23:84:e6:f8:a0:a3:91:58:a7:37:c0:12:78:69:4f:27: de:ed:d1:f2:e3:16:c1:99:3c:f7:13:41:f0:c3:fc:9e:cb:e8: af:f1:3c:19:d0:e6:4b:ab:a3:ab:72:84:90:44:cc:cd:a5:42: 0b:3f:ab:b3:ee:bf:0f:42:23:16:3b:7f:68:9f:56:3c:c2:31: 65:19:4d:ca:58:d7:10:93:a7:60:2c:99:a2:aa:f7:7e:62:d4: 2d:ae:1d:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBREYxMTAvBgNVBAUTKEU3NzA1MDg5MUJGODkyNzQzMjY1MEI3MDZGMkJGRURE OTJBMTExQzkwHhcNMjUwNjE1MDI0NzE1WhcNMjUwNjIyMDI0NzE0WjAYMRYwFAYD VQQDEw02ODRlMzQzMy0wMmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlsX3ra4souWkrVLF9Js/l/knhRjBFSqWEUYOSpXqX5BLCoD2YsYL3pV+Sac ixDA8O70mzzu5IB1JMChT3YWzXx+1n3Twt0delNsmtiO0KI/eg5yEc2oYreXXoCg spcC/ofJGbFt2Lpuqze9Nm+dwauyOsHtilPaN0XDoQvE2DA8xlxsQk7elDdT4yUz lgeKJ5asXY6el1y/fyENvqO7WJXvBmg7FOe8RxHa6Oilvy5N9nbQcxbzUgOx+HC9 ep0bLqiWOKIG4ZvqLiwFwhowOfNQgR/0z1cuBFnPLv//pfbmuhC9zdEF+BqetaB6 8026TwbpTkoPage4kim+H8axzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIccfCdc l5Nr0+C4T6i1RI4N0uDZMB8GA1UdIwQYMBaAFOdwUIkb+JJ0MmULcG8r/t2SoRHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFERi9DREY0MDVDMkYw NjgxMUVEQkI5NzhFMkRDNEY5QUUwMi81M0JRaVJ2NGtuUXlaUXR3Ynl2LTNaS2hF Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzQlFpUnY0a25ReVpRdHdieXYtM1pLaEVjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEFERi9DREY0MDVDMkYwNjgxMUVEQkI5NzhFMkRDNEY5QUUwMi81M0JRaVJ2NGtu UXlaUXR3Ynl2LTNaS2hFY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWJUsjrYVz3QOMo0G/p/YLbhruf+leLdglxTnJqkhHqAVxeyI3EV6k T+bEgJJuck23BjfWLmuIleIcuiWvrRJqbJDOuc+rLrF5GUXF0aU5lVL4ijaOFn02 kJXFwUC6kFwWhcq/FvQkmWJIzGGLJ/hU8E5AEHUSbai6RPT+fuG6XS/CM8qACoWU ZM672hNbVmfB0slH+hyasMFuTUyJbQVwVk31zyOE5vigo5FYpzfAEnhpTyfe7dHy 4xbBmTz3E0Hww/yey+iv8TwZ0OZLq6OrcoSQRMzNpUILP6uz7r8PQiMWO39on1Y8 wjFlGU3KWNcQk6dgLJmiqvd+YtQtrh1H -----END CERTIFICATE-----Generated at Sun Jun 15 04:56:24 2025 by rpki-client