$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json) Hash identifier: stSFv5vGKmFhj1p1B8Ok6dLgjfJeeSK6nj/BRtaIoJg= Subject key identifier: CF:DD:4C:18:AA:89:60:E0:21:6C:95:00:77:40:63:F8:54:FF:21:2C Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft Manifest number: 01C7 Signing time: Sun 15 Jun 2025 02:15:30 +0000 Manifest this update: Sun 15 Jun 2025 02:15:29 +0000 Manifest next update: Sun 22 Jun 2025 02:15:29 +0000 Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: sbJHG+nPfqedBCOF4YyhNfUfDAoWkBig25atlT53E8s=) 2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ksp6qBpZ5kB0EysEaPobcR9QCXbiquNMVXrarPKPN4A=) 3: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: xgTk5QLU2Vm82iRKTqkbO5V1pNHv+/+0qFa5a4D2Fm4=) 4: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: 5cknTz/azpX9sHHI7VxRFMrA+eqmREBfLXzZWKlWnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Validity Not Before: Jun 15 02:15:29 2025 GMT Not After : Jun 22 02:15:29 2025 GMT Subject: CN=684e2cc1-d808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:6d:7d:e2:e3:68:d8:a9:8c:3b:fb:67:f6: 2d:48:2d:08:ee:a1:da:0d:1c:14:44:26:36:49:5c: 5f:88:da:a1:ad:7c:1d:2e:df:69:8a:ad:2e:03:39: a7:16:b3:ad:25:19:5c:8b:d7:04:75:bc:fb:68:91: be:e2:90:78:62:c0:3f:a5:f2:0d:03:00:04:a6:5c: fa:1f:e2:e9:0b:d9:e6:05:16:f7:9b:0e:00:d2:0a: dc:36:40:03:4b:ff:26:68:7b:37:9e:97:52:1a:68: 53:42:3e:46:52:26:65:6b:03:c9:0e:b0:e4:b3:15: fa:04:82:e2:c9:da:77:06:c9:7f:fa:e3:9d:4a:57: d5:39:e6:b4:74:6b:a5:cc:f3:7e:78:54:0b:f0:93: 5d:76:b9:12:4c:15:3a:48:80:60:91:14:90:e0:48: ef:34:63:31:12:42:a7:27:4d:77:ba:04:fb:90:b3: 81:16:62:40:90:4a:19:20:c6:47:5d:e5:c3:f6:3d: 59:ae:36:7d:8d:cb:16:e3:60:27:98:74:81:9c:22: a5:69:48:e2:47:e4:e8:5c:ca:80:da:07:51:92:35: fc:72:e6:16:76:bf:46:98:e7:d0:bb:18:89:44:29: 82:51:ef:ee:0c:90:ec:71:d8:d9:bc:09:30:b4:37: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DD:4C:18:AA:89:60:E0:21:6C:95:00:77:40:63:F8:54:FF:21:2C X509v3 Authority Key Identifier: keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:3d:a2:d0:f0:1e:1c:00:f3:e8:36:d1:a2:d1:a3:19:f4:9c: e9:87:f7:c0:49:70:77:cb:11:ac:50:ba:3d:9f:df:15:e4:7c: eb:40:1c:0c:1c:c0:95:b6:b2:dc:90:0e:79:1b:91:ee:03:de: cb:f9:ec:82:97:71:fc:da:14:6e:27:bc:ad:b4:d8:cd:31:37: 96:95:be:b8:08:e4:8a:ab:4e:e1:76:64:b9:e5:fc:43:9a:d3: 6c:28:c0:b6:15:73:3c:4c:96:32:5c:24:72:a8:b7:b9:c5:fe: fd:3f:f5:9a:8a:1b:ab:3a:3d:5f:37:ca:32:14:23:04:75:b0: a8:d6:cc:9d:e4:df:2a:a4:00:64:e4:92:43:85:cf:4a:66:fe: 3c:4e:ce:72:bd:da:1b:0f:b1:be:de:b4:b1:0b:b8:3e:b0:2c: 6e:6c:45:31:41:b0:15:70:c2:4e:08:a3:b0:cb:8e:9c:8d:09: a1:05:7c:49:5a:02:4d:da:d1:73:25:12:09:02:b0:96:54:46: 18:74:72:af:1b:9b:17:5a:d0:7e:a4:8e:dd:eb:12:b6:22:c1: 19:70:27:72:b3:d0:d7:5b:c4:36:5a:88:9a:c6:ae:e6:76:7c: 12:af:46:76:b2:6e:c2:03:4b:fe:ad:91:8b:57:3c:c6:63:f1: cb:8d:04:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE MkFBRUU0QjkwHhcNMjUwNjE1MDIxNTI5WhcNMjUwNjIyMDIxNTI5WjAYMRYwFAYD VQQDEw02ODRlMmNjMS1kODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/JtfeLjaNipjDv7Z/YtSC0I7qHaDRwURCY2SVxfiNqhrXwdLt9piq0uAzmn FrOtJRlci9cEdbz7aJG+4pB4YsA/pfINAwAEplz6H+LpC9nmBRb3mw4A0grcNkAD S/8maHs3npdSGmhTQj5GUiZlawPJDrDksxX6BILiydp3Bsl/+uOdSlfVOea0dGul zPN+eFQL8JNddrkSTBU6SIBgkRSQ4EjvNGMxEkKnJ013ugT7kLOBFmJAkEoZIMZH XeXD9j1ZrjZ9jcsW42AnmHSBnCKlaUjiR+ToXMqA2gdRkjX8cuYWdr9GmOfQuxiJ RCmCUe/uDJDscdjZvAkwtDdhFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/dTBiq iWDgIWyVAHdAY/hU/yEsMB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2 MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1 TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD cDZIazJrc3NCdnJTcXU1TGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVPaLQ8B4cAPPoNtGi0aMZ9Jzph/fASXB3yxGsULo9n98V5HzrQBwM HMCVtrLckA55G5HuA97L+eyCl3H82hRuJ7yttNjNMTeWlb64COSKq07hdmS55fxD mtNsKMC2FXM8TJYyXCRyqLe5xf79P/WaihurOj1fN8oyFCMEdbCo1syd5N8qpABk 5JJDhc9KZv48Ts5yvdobD7G+3rSxC7g+sCxubEUxQbAVcMJOCKOwy46cjQmhBXxJ WgJN2tFzJRIJArCWVEYYdHKvG5sXWtB+pI7d6xK2IsEZcCdys9DXW8Q2Woiaxq7m dnwSr0Z2sm7CA0v+rZGLVzzGY/HLjQSs -----END CERTIFICATE-----Generated at Sun Jun 15 08:51:27 2025 by rpki-client