$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: NZk6eK2t+kWIKCheiLTI7sYQJAdBT+/Ws5vI5TgLN3Q= Subject key identifier: 5D:B0:21:EF:4D:E2:76:E6:7A:D7:57:C2:37:C2:1F:D7:B3:9C:21:17 Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 0A37 Signing time: Sun 20 Jul 2025 19:52:53 +0000 Manifest this update: Sun 20 Jul 2025 19:52:52 +0000 Manifest next update: Sun 27 Jul 2025 19:52:52 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: 9w0Za2ArqrSqHHujhtrOfcKBBbUCb1s2yPhs2uilMiw=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: NYdc2f4yDizOBPmg8EBE/rQVPUKcax5Hh13GoWVtgRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Validity Not Before: Jul 20 19:52:52 2025 GMT Not After : Jul 27 19:52:52 2025 GMT Subject: CN=687d4914-74f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:25:70:97:01:0d:e6:d2:bc:c0:0d:37:de: bb:b2:ab:3c:42:1b:cb:be:ac:e7:0b:24:49:6b:d2: d9:c7:bc:a8:a6:b7:be:79:f0:a7:1c:14:2c:d0:c1: ef:82:01:26:3f:fa:4b:58:7f:44:9f:8f:42:6d:56: e9:82:23:ad:15:c2:b2:db:64:5c:3e:74:40:57:b7: b2:9f:7f:c1:5f:88:ff:50:9f:6e:6a:3e:48:17:8e: 91:f2:14:28:b2:8c:de:76:e0:25:83:f7:48:ae:80: e0:92:8e:c7:eb:80:b5:56:d5:39:ae:4b:3a:b3:5c: df:38:6f:4b:97:f8:12:25:03:1e:7a:fe:f2:fc:26: b1:38:29:06:97:a7:3f:81:bf:98:6e:a0:a5:3f:b1: 70:64:ef:0a:2a:d8:87:a6:90:09:8b:8e:c7:19:12: 0c:e0:a1:74:1c:5b:b5:13:10:f0:80:51:3a:3b:4b: 9e:6d:6e:b6:2c:7a:3f:4b:54:90:51:5c:f4:ea:5b: 7b:17:95:5e:98:f0:bc:98:94:6c:8f:31:69:76:e6: b9:33:bc:e5:ae:51:fc:33:60:34:58:47:04:d8:9e: 44:4a:55:87:c8:4d:75:e0:e5:74:eb:73:f0:68:c8: a9:04:80:47:2a:d8:74:66:20:8b:29:75:18:a2:f2: cd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B0:21:EF:4D:E2:76:E6:7A:D7:57:C2:37:C2:1F:D7:B3:9C:21:17 X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b9:13:86:71:8e:a4:bb:02:2e:e0:84:ef:d1:e1:9c:f1:53: cc:6e:b0:4c:46:25:be:32:01:d7:4a:aa:d0:02:b8:33:2c:99: eb:fb:fb:cb:2f:dd:dd:45:25:bc:00:dc:53:1c:10:c6:66:31: ef:28:cd:50:d0:52:e4:35:dd:b7:33:95:dd:c8:f2:52:1e:82: ea:ec:03:97:2a:27:ac:60:dd:10:67:26:ca:40:8d:1d:c8:02: c1:13:81:1b:7d:8f:43:c0:d2:94:a9:1e:5b:da:f0:60:b6:4c: af:a3:a0:71:fa:a8:c8:dc:cd:91:a8:d1:ee:bf:c9:8a:8b:7e: 0c:4a:29:7c:a5:70:0d:5a:dc:8a:6c:b1:c1:b5:35:ce:cb:24: 06:cb:d6:b5:33:f1:15:b3:bc:14:b9:24:59:7e:d4:3a:a2:a9: 3e:18:3b:bf:fa:24:ac:1f:22:cb:8d:3b:4f:33:b4:79:77:b6: 81:67:d2:3d:9b:83:20:1d:bf:2c:a7:6c:a0:e1:55:79:a3:dd: 09:99:a9:b8:41:42:aa:0d:53:30:d8:fc:ee:40:02:bc:12:2f: 90:e3:a2:51:16:96:79:24:7d:2c:99:17:1b:ec:ed:e7:39:3e: ef:0d:e6:95:db:69:93:87:6b:17:a1:14:60:b6:08:67:c3:1e: bc:6b:ed:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjUwNzIwMTk1MjUyWhcNMjUwNzI3MTk1MjUyWjAYMRYwFAYD VQQDEw02ODdkNDkxNC03NGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QYlcJcBDebSvMANN967sqs8QhvLvqznCyRJa9LZx7yopre+efCnHBQs0MHv ggEmP/pLWH9En49CbVbpgiOtFcKy22RcPnRAV7eyn3/BX4j/UJ9uaj5IF46R8hQo sozeduAlg/dIroDgko7H64C1VtU5rks6s1zfOG9Ll/gSJQMeev7y/CaxOCkGl6c/ gb+YbqClP7FwZO8KKtiHppAJi47HGRIM4KF0HFu1ExDwgFE6O0uebW62LHo/S1SQ UVz06lt7F5VemPC8mJRsjzFpdua5M7zlrlH8M2A0WEcE2J5ESlWHyE114OV063Pw aMipBIBHKth0ZiCLKXUYovLNEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2wIe9N 4nbmetdXwjfCH9eznCEXMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfuROGcY6kuwIu4ITv0eGc8VPMbrBMRiW+MgHXSqrQArgzLJnr+/vL L93dRSW8ANxTHBDGZjHvKM1Q0FLkNd23M5XdyPJSHoLq7AOXKiesYN0QZybKQI0d yALBE4EbfY9DwNKUqR5b2vBgtkyvo6Bx+qjI3M2RqNHuv8mKi34MSil8pXANWtyK bLHBtTXOyyQGy9a1M/EVs7wUuSRZftQ6oqk+GDu/+iSsHyLLjTtPM7R5d7aBZ9I9 m4MgHb8sp2yg4VV5o90Jmam4QUKqDVMw2PzuQAK8Ei+Q46JRFpZ5JH0smRcb7O3n OT7vDeaV22mTh2sXoRRgtghnwx68a+2F -----END CERTIFICATE-----Generated at Mon Jul 21 06:51:44 2025 by rpki-client