$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: M/9l2koFqE5WqFG2VEEUWhcTJGlgH6PfttKbAGbF3eo= Subject key identifier: CA:5E:30:D5:F3:A1:28:D9:0D:4D:99:ED:EA:66:25:F0:E7:90:E9:D1 Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 0490 Signing time: Sun 27 Jul 2025 00:20:39 +0000 Manifest this update: Sun 27 Jul 2025 00:20:38 +0000 Manifest next update: Sun 03 Aug 2025 00:20:38 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: tB0eXK32fnmg2G8zZIyzGUE3BDcvX/iogja+P/dAuqQ=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: Jul 27 00:20:38 2025 GMT Not After : Aug 3 00:20:38 2025 GMT Subject: CN=688570d7-cca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fd:c4:38:33:ac:35:a4:3d:fe:a8:29:f7:59: 0d:07:3a:ff:cb:31:38:06:4a:25:0a:d1:51:75:c2: 30:b0:81:83:3c:89:40:bf:9c:ea:b6:6d:59:5f:10: c0:27:89:3c:89:5e:90:d7:e3:f6:e1:fc:e8:3e:ad: f6:ea:94:95:7d:aa:ca:e3:24:ff:ab:3f:48:ee:01: 8c:df:83:94:08:8a:c4:a0:f4:30:ad:e1:d1:78:b2: 40:a0:b5:44:07:92:23:cd:14:59:74:4d:7b:ef:7f: ff:90:73:a5:ac:0a:00:19:f8:4a:ed:54:76:e0:61: d2:90:20:17:18:3f:87:a2:88:cb:9c:c5:b2:00:44: c2:42:2f:41:df:47:ef:5d:a4:4a:28:07:31:fe:13: da:65:ec:76:b9:b8:52:3c:85:ee:69:a7:6c:11:e4: a7:3b:aa:b8:2a:d3:b7:2e:38:86:6c:d1:82:d1:36: b3:6d:12:9a:0d:76:59:14:a3:c4:de:6e:5e:22:53: 0e:c4:2a:4a:c8:f1:16:10:ad:9d:a2:29:0e:4d:5d: e2:9f:59:94:b5:85:b0:76:87:f2:35:b5:8b:08:29: 76:97:36:7d:bb:1d:cf:b4:31:f9:74:33:26:53:58: 7d:de:61:75:38:5b:7c:63:92:77:34:f3:12:9a:ac: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5E:30:D5:F3:A1:28:D9:0D:4D:99:ED:EA:66:25:F0:E7:90:E9:D1 X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9a:e6:be:52:61:38:08:b7:11:55:81:03:23:d4:ce:73:cc: a4:37:ee:b5:25:e9:3d:31:20:21:a1:04:56:fe:e7:e0:cf:ee: 99:a8:88:d1:94:3d:b8:fe:e2:d4:05:46:11:4b:01:63:fc:1c: bb:7e:d4:c3:1c:b9:45:b5:ae:76:5e:9b:ac:ef:26:21:9d:8f: 3e:fb:f7:3e:03:56:d3:a3:f9:0d:84:42:c0:da:f3:ff:19:c3: c6:ee:66:af:a9:13:bb:78:9f:93:51:a5:e8:ab:c7:d1:09:13: db:e7:d0:c7:f5:92:f4:6c:27:9e:da:18:cd:55:0f:24:d9:c6: 86:10:c2:15:7e:b6:c3:4d:ca:66:cd:4b:2a:dc:81:f2:11:ed: a4:1b:5d:35:90:35:73:70:0a:8b:f7:4b:cb:db:f4:1e:71:f3: ec:de:0b:b8:fe:e6:a3:7d:75:e4:4e:75:40:e1:7f:57:fa:c7: 1e:50:d0:98:27:30:37:fe:18:75:df:d4:45:0c:9e:7e:8e:6a: 9a:79:9a:6d:3c:1d:4b:9d:c5:bb:98:37:66:2d:9c:07:93:62: fa:9f:50:39:b0:b2:a4:5e:66:1e:ce:d5:a7:24:60:31:77:18: 05:a1:cb:aa:ed:79:fa:83:62:67:3e:61:c0:af:61:33:9d:86: 5f:51:6a:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUwNzI3MDAyMDM4WhcNMjUwODAzMDAyMDM4WjAYMRYwFAYD VQQDEw02ODg1NzBkNy1jY2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5f3EODOsNaQ9/qgp91kNBzr/yzE4BkolCtFRdcIwsIGDPIlAv5zqtm1ZXxDA J4k8iV6Q1+P24fzoPq326pSVfarK4yT/qz9I7gGM34OUCIrEoPQwreHReLJAoLVE B5IjzRRZdE1773//kHOlrAoAGfhK7VR24GHSkCAXGD+HoojLnMWyAETCQi9B30fv XaRKKAcx/hPaZex2ubhSPIXuaadsEeSnO6q4KtO3LjiGbNGC0TazbRKaDXZZFKPE 3m5eIlMOxCpKyPEWEK2doikOTV3in1mUtYWwdofyNbWLCCl2lzZ9ux3PtDH5dDMm U1h93mF1OFt8Y5J3NPMSmqzvSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpeMNXz oSjZDU2Z7epmJfDnkOnRMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnmua+UmE4CLcRVYEDI9TOc8ykN+61Jek9MSAhoQRW/ufgz+6ZqIjR lD24/uLUBUYRSwFj/By7ftTDHLlFta52Xpus7yYhnY8++/c+A1bTo/kNhELA2vP/ GcPG7mavqRO7eJ+TUaXoq8fRCRPb59DH9ZL0bCee2hjNVQ8k2caGEMIVfrbDTcpm zUsq3IHyEe2kG101kDVzcAqL90vL2/QecfPs3gu4/uajfXXkTnVA4X9X+sceUNCY JzA3/hh139RFDJ5+jmqaeZptPB1LncW7mDdmLZwHk2L6n1A5sLKkXmYeztWnJGAx dxgFocuq7Xn6g2JnPmHAr2EznYZfUWrW -----END CERTIFICATE-----Generated at Mon Jul 28 22:45:58 2025 by rpki-client