$ rpki-client -vvf rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft File: baLnsgc31v3aKTEYAyM4Tcf4AXI.mft (raw, json) Hash identifier: MDH+dLHYyrwVzmrWbxiY3IKQXvtBWcz/LkFszHGiNTg= Subject key identifier: 58:A3:40:0F:DA:02:80:98:18:C2:F5:9F:01:F3:95:9B:73:05:08:22 Authority key identifier: 6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72 Certificate issuer: /CN=A911D415/serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft Manifest number: 014E Signing time: Mon 21 Jul 2025 04:17:36 +0000 Manifest this update: Mon 21 Jul 2025 04:17:36 +0000 Manifest next update: Mon 28 Jul 2025 04:17:36 +0000 Files and hashes: 1: baLnsgc31v3aKTEYAyM4Tcf4AXI.crl (hash: MH13pSLeqFE1swNjtx4waRohZBomOALmz8naf0SwCr4=) 2: B2B7B96067BA11EE99370352C4F9AE02.roa (hash: P/WWt5eI8v2C+zoec4Zd9OnVnDcSJ3bbXF6r7+A0KgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D415, serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172 Validity Not Before: Jul 21 04:17:36 2025 GMT Not After : Jul 28 04:17:36 2025 GMT Subject: CN=687dbf60-d716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:2f:0d:c4:72:db:5e:97:c8:49:ab:24:e5: 80:05:a8:4f:ee:df:3d:94:21:93:e8:a7:1a:4e:c6: f3:bd:6b:a5:4f:d1:cd:24:23:dc:a0:54:4a:cf:10: e8:1a:bb:7c:5e:79:1b:3a:24:ee:45:b5:e6:b9:43: 7a:b4:e1:6a:82:7c:6d:ed:8d:91:1f:28:c6:39:bb: de:86:3a:f2:43:ad:42:52:8d:d8:b6:dc:90:ad:13: ef:be:a7:9b:6f:cc:e2:cd:e6:be:8b:9a:0b:51:7c: 58:42:d3:6f:4d:04:a0:64:d1:d0:6f:5b:94:ae:08: 9a:bf:ec:c0:32:31:79:96:cd:ae:ea:07:8f:3c:c8: 76:4e:9b:17:4f:5d:e1:85:9f:3f:4a:8c:b1:06:b0: f7:25:aa:7f:5b:4f:2f:36:30:1c:f1:be:7f:17:4f: 84:f2:96:5a:f1:b0:bf:6b:eb:9b:f9:ea:e0:84:ed: b1:bb:0d:12:2f:48:2f:dd:1b:19:26:d3:e4:b1:08: e7:6a:21:cb:70:d4:8f:1d:86:89:ee:73:94:81:47: ca:4f:21:78:ae:70:c0:cf:43:5f:2c:56:4b:01:fb: bb:5a:41:0a:68:ce:47:7c:f7:99:df:2e:b4:0d:c6: 0b:55:32:a6:d1:25:bc:cb:bb:d8:52:0c:63:94:57: 5d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A3:40:0F:DA:02:80:98:18:C2:F5:9F:01:F3:95:9B:73:05:08:22 X509v3 Authority Key Identifier: keyid:6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:98:ae:ea:a3:43:7c:b8:43:ce:1c:08:70:5c:a5:56:21:34: 74:c8:3c:59:81:f3:37:15:2a:3e:26:ee:8a:a2:03:a2:36:23: d8:52:32:09:9b:3d:5a:31:6d:af:96:dd:08:ff:3b:29:8d:fe: 79:b4:8a:58:17:5b:c7:c2:72:da:f5:5c:1c:86:1b:de:ec:69: c2:b0:bf:71:54:1a:e5:b7:91:4b:af:1b:e0:18:59:ad:90:e4: 10:d9:90:4f:37:ba:86:ae:b9:e3:af:e2:0c:db:04:0b:7a:93: c1:c8:8d:6d:76:52:4f:9d:57:8d:48:8b:dc:2d:92:94:08:ba: af:be:fb:ed:e6:9e:3f:01:b9:89:90:26:15:39:e6:73:ef:4f: cc:da:fd:7f:00:03:1c:8d:90:ce:4a:30:72:33:bd:c6:b8:83: 5a:e2:70:cc:cc:05:31:4e:bd:4a:86:97:51:a7:f5:18:53:66: 93:cd:73:1d:5b:42:ff:e8:07:a6:af:c9:62:6a:2a:66:aa:d5: 18:fe:17:33:e7:d6:c0:fc:c3:45:5b:84:e4:0a:e7:76:fb:36: 0f:f9:5d:0d:49:96:6f:3e:b8:2f:5e:d8:3e:02:09:14:7b:05: 9b:a7:85:41:08:56:44:4c:60:ca:74:d7:05:07:0b:ec:e1:0e: 71:fc:56:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MTUxMTAvBgNVBAUTKDZEQTJFN0IyMDczN0Q2RkREQTI5MzExODAzMjMzODRE QzdGODAxNzIwHhcNMjUwNzIxMDQxNzM2WhcNMjUwNzI4MDQxNzM2WjAYMRYwFAYD VQQDEw02ODdkYmY2MC1kNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdIvDcRy216XyEmrJOWABahP7t89lCGT6KcaTsbzvWulT9HNJCPcoFRKzxDo Grt8XnkbOiTuRbXmuUN6tOFqgnxt7Y2RHyjGObvehjryQ61CUo3YttyQrRPvvqeb b8zizea+i5oLUXxYQtNvTQSgZNHQb1uUrgiav+zAMjF5ls2u6gePPMh2TpsXT13h hZ8/SoyxBrD3Jap/W08vNjAc8b5/F0+E8pZa8bC/a+ub+erghO2xuw0SL0gv3RsZ JtPksQjnaiHLcNSPHYaJ7nOUgUfKTyF4rnDAz0NfLFZLAfu7WkEKaM5HfPeZ3y60 DcYLVTKm0SW8y7vYUgxjlFddKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFijQA/a AoCYGML1nwHzlZtzBQgiMB8GA1UdIwQYMBaAFG2i57IHN9b92ikxGAMjOE3H+AFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQxNS82NEI3NzYyRTY3 QkExMUVFQTkxMkRFMzdDNEY5QUUwMi9iYUxuc2djMzF2M2FLVEVZQXlNNFRjZjRB WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhTG5zZ2MzMXYzYUtURVlBeU00VGNmNEFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQxNS82NEI3NzYyRTY3QkExMUVFQTkxMkRFMzdDNEY5QUUwMi9iYUxuc2djMzF2 M2FLVEVZQXlNNFRjZjRBWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCImK7qo0N8uEPOHAhwXKVWITR0yDxZgfM3FSo+Ju6KogOiNiPYUjIJ mz1aMW2vlt0I/zspjf55tIpYF1vHwnLa9Vwchhve7GnCsL9xVBrlt5FLrxvgGFmt kOQQ2ZBPN7qGrrnjr+IM2wQLepPByI1tdlJPnVeNSIvcLZKUCLqvvvvt5p4/AbmJ kCYVOeZz70/M2v1/AAMcjZDOSjByM73GuINa4nDMzAUxTr1KhpdRp/UYU2aTzXMd W0L/6Aemr8liaipmqtUY/hcz59bA/MNFW4TkCud2+zYP+V0NSZZvPrgvXtg+AgkU ewWbp4VBCFZETGDKdNcFBwvs4Q5x/FaS -----END CERTIFICATE-----Generated at Mon Jul 21 23:45:10 2025 by rpki-client