$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft File: 53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json) Hash identifier: kvaGnKfYrq/+OYOrvvZNP4Jq3nc1uz2mZyeL5hEcBBQ= Subject key identifier: EF:4A:C1:DD:7D:9B:40:6D:DF:03:C8:62:0F:C8:3F:38:E2:9B:3D:D2 Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9 Certificate issuer: /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft Manifest number: 01A3 Signing time: Tue 05 Aug 2025 03:43:11 +0000 Manifest this update: Tue 05 Aug 2025 03:43:10 +0000 Manifest next update: Tue 12 Aug 2025 03:43:10 +0000 Files and hashes: 1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: jMA6G+T1+ws5UNUAsgpGBsAIcK/7/xn3yBXIRJrylOE=) 2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: MagQfzBe5yekFsZC62iyjicRBCCYPyKf7/pA5fRZ3FI=) 3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: WtNf5u0VPKCbZuWxho7o4y46h8TygPH5bunfDKzrwyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9 Validity Not Before: Aug 5 03:43:10 2025 GMT Not After : Aug 12 03:43:10 2025 GMT Subject: CN=68917dce-6cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:24:35:d3:6b:1f:79:01:88:28:ed:f8:5b:25: 95:eb:3c:d8:a5:ed:88:03:30:92:fb:21:7c:65:63: 9e:3a:14:b5:64:01:be:64:a3:2a:76:8d:5f:fc:c0: 2e:80:a1:17:90:99:21:f9:12:25:48:4a:df:a2:da: 31:18:1e:52:b5:42:42:fd:fa:0d:86:ba:f5:8f:86: 11:ed:fa:97:b0:80:82:9c:86:ac:16:e1:6b:8a:ef: 9a:ef:66:46:2c:31:dc:8e:80:e4:69:0a:e2:a7:fa: 79:d4:b8:7e:ba:0f:d5:fa:1d:3e:2b:a0:11:8b:6f: cf:e4:09:19:df:39:80:aa:12:3e:1d:de:04:0a:ed: c4:c2:53:31:9f:44:c8:f0:29:0f:32:36:c3:f5:c3: e1:54:96:68:b8:e1:35:8f:d0:fc:34:60:bf:23:e4: 48:79:61:ec:41:0d:3c:09:88:cb:35:10:25:57:b5: 47:f4:56:08:d6:1f:83:29:63:2c:a1:91:bd:87:08: 3c:4f:21:f1:5d:82:3c:37:03:13:b8:b2:be:ba:63: 1d:d1:f0:04:4b:ac:d9:a8:97:3f:86:23:e1:a0:f8: 39:68:c1:89:9f:57:07:90:65:01:d3:3e:7f:1a:56: a6:ba:ef:92:47:2f:9c:4a:3f:a7:c3:30:b7:2d:e8: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4A:C1:DD:7D:9B:40:6D:DF:03:C8:62:0F:C8:3F:38:E2:9B:3D:D2 X509v3 Authority Key Identifier: keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:31:24:72:15:25:ec:33:1e:b6:b3:db:09:9e:3c:97:4f:2b: 64:e5:72:a8:88:ae:83:17:e9:bc:41:d8:48:2a:ad:00:48:c0: 2e:58:95:b4:9e:b7:ba:fc:49:b3:04:f1:5d:6c:e3:f1:92:65: ce:3e:e1:7b:e4:f3:ef:a4:b6:b6:42:aa:dc:90:a6:75:33:a3: 77:2e:df:6b:a5:1e:af:b2:82:ad:39:0c:2c:ce:94:b3:d4:25: 24:d9:0d:c9:b6:b6:da:92:49:2b:84:da:23:79:fd:c8:37:e2: c8:e7:83:01:6b:f5:b5:b4:7b:5e:bf:59:34:38:d0:ed:2f:e4: ce:f9:fb:4c:66:51:a8:73:56:38:65:9a:0b:c8:8d:e3:bd:d5: a0:98:c7:f2:20:c5:ae:a9:70:ea:43:00:95:b8:70:c7:08:18: 1e:4f:72:bf:93:90:4f:2d:b8:0f:b2:bf:0b:c4:dc:62:20:86: 8d:2b:a0:37:fb:39:60:04:f9:e4:37:91:38:45:3d:2f:f9:79: b4:25:2d:b8:e7:ae:71:9e:07:c1:c3:59:a3:a2:39:23:31:b9: eb:db:ea:f5:db:fc:cc:51:81:f8:86:41:38:7e:55:5e:20:fe: 8e:24:44:c3:34:a9:98:ac:dc:1c:6e:07:35:b4:78:02:b1:b7: 66:c2:68:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBREYxMTAvBgNVBAUTKEU3NzA1MDg5MUJGODkyNzQzMjY1MEI3MDZGMkJGRURE OTJBMTExQzkwHhcNMjUwODA1MDM0MzEwWhcNMjUwODEyMDM0MzEwWjAYMRYwFAYD VQQDEw02ODkxN2RjZS02Y2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/iQ102sfeQGIKO34WyWV6zzYpe2IAzCS+yF8ZWOeOhS1ZAG+ZKMqdo1f/MAu gKEXkJkh+RIlSErfotoxGB5StUJC/foNhrr1j4YR7fqXsICCnIasFuFriu+a72ZG LDHcjoDkaQrip/p51Lh+ug/V+h0+K6ARi2/P5AkZ3zmAqhI+Hd4ECu3EwlMxn0TI 8CkPMjbD9cPhVJZouOE1j9D8NGC/I+RIeWHsQQ08CYjLNRAlV7VH9FYI1h+DKWMs oZG9hwg8TyHxXYI8NwMTuLK+umMd0fAES6zZqJc/hiPhoPg5aMGJn1cHkGUB0z5/ Glamuu+SRy+cSj+nwzC3LehmxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9Kwd19 m0Bt3wPIYg/IPzjimz3SMB8GA1UdIwQYMBaAFOdwUIkb+JJ0MmULcG8r/t2SoRHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFERi9DREY0MDVDMkYw NjgxMUVEQkI5NzhFMkRDNEY5QUUwMi81M0JRaVJ2NGtuUXlaUXR3Ynl2LTNaS2hF Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzQlFpUnY0a25ReVpRdHdieXYtM1pLaEVjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEFERi9DREY0MDVDMkYwNjgxMUVEQkI5NzhFMkRDNEY5QUUwMi81M0JRaVJ2NGtu UXlaUXR3Ynl2LTNaS2hFY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArMSRyFSXsMx62s9sJnjyXTytk5XKoiK6DF+m8QdhIKq0ASMAuWJW0 nre6/EmzBPFdbOPxkmXOPuF75PPvpLa2QqrckKZ1M6N3Lt9rpR6vsoKtOQwszpSz 1CUk2Q3JtrbakkkrhNojef3IN+LI54MBa/W1tHtev1k0ONDtL+TO+ftMZlGoc1Y4 ZZoLyI3jvdWgmMfyIMWuqXDqQwCVuHDHCBgeT3K/k5BPLbgPsr8LxNxiIIaNK6A3 +zlgBPnkN5E4RT0v+Xm0JS24565xngfBw1mjojkjMbnr2+r12/zMUYH4hkE4flVe IP6OJETDNKmYrNwcbgc1tHgCsbdmwmj+ -----END CERTIFICATE-----Generated at Thu Aug 7 00:30:55 2025 by rpki-client