$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: 1qj7CEWYYhhvkdKyD+TtyBmbgIA2FHA8CfyscqWllN8= Subject key identifier: 89:0F:E3:99:C2:3F:4E:F0:6A:9E:EE:AD:C5:D5:F5:20:5A:03:FA:B1 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 14E6 Signing time: Fri 18 Jul 2025 16:59:43 +0000 Manifest this update: Fri 18 Jul 2025 16:59:43 +0000 Manifest next update: Fri 25 Jul 2025 16:59:43 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: nM6YXNabwQev08l+vR+Qv5QSB2uDqa5q3Ryoj33Zck0=) 2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: 8U3x6H5bY+5B5oCv6vYfZszgq6gpJHZUkBbn2fzX+3M=) 3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: m0ywv3h/BJrsw2LOsXx/0+PQM3NArl9eNZt1OPifoLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5424 (0x1530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Jul 18 16:59:43 2025 GMT Not After : Jul 25 16:59:43 2025 GMT Subject: CN=687a7d7f-fc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:15:5e:fb:26:10:65:d0:21:3f:52:ce:62:95: 29:e9:9e:36:45:cd:fd:20:da:f7:67:d3:75:10:22: e5:14:74:d7:98:f8:5a:97:43:a5:52:ce:36:d2:43: a9:f1:bb:90:54:00:7a:9a:47:4e:8a:7d:42:08:7b: 18:03:21:86:19:be:c3:95:c9:9f:22:b9:32:77:fc: 1f:00:68:2f:ae:0f:4a:98:9a:1b:32:d6:97:31:30: f1:01:0c:fb:c9:91:d4:49:c7:22:fc:f7:53:ab:a1: 8f:3b:89:0a:75:6a:5e:30:72:69:67:1c:95:f9:73: 2e:97:46:fa:94:62:fb:45:a2:2e:f0:fb:85:35:6c: 05:4d:8f:6f:4f:19:bb:fc:a7:1b:48:b2:28:cc:0a: 0a:0c:56:06:e9:84:5e:4a:3e:62:8e:50:1e:e2:05: 75:58:aa:d1:44:31:e6:5a:01:56:15:b4:9c:75:0f: 62:d6:51:5a:c8:21:99:38:4e:51:f3:e8:4c:17:4c: 2b:76:8f:fc:48:e4:92:c0:93:36:2f:a6:35:09:3d: 5b:3f:d0:ac:bd:0c:24:cf:a7:f3:90:28:cd:b4:21: 19:65:5b:28:4c:e4:26:50:58:9e:e8:13:c6:55:8c: 77:cc:92:3c:53:53:eb:a2:73:5a:34:7c:b1:7a:41: 9c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0F:E3:99:C2:3F:4E:F0:6A:9E:EE:AD:C5:D5:F5:20:5A:03:FA:B1 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f2:22:8d:6c:a3:9a:be:8c:4f:87:bd:f0:ac:9a:35:93:02: ea:3e:07:d6:6e:a9:23:eb:ff:8c:ae:72:a9:15:15:90:02:84: 10:c1:9e:04:ca:4b:d0:9a:af:e2:90:83:d4:6a:2c:d9:79:b1: d6:98:db:8b:c4:21:13:2e:da:92:de:0f:b5:b5:50:e4:fe:7e: 97:ca:cb:33:a5:a8:44:b8:0a:fb:6f:6d:dd:64:cb:c6:c3:3c: 29:7f:f9:98:8a:3c:c8:1e:1f:32:98:c4:61:42:9c:90:86:1a: 4a:c7:39:42:06:3d:0b:0c:49:c6:d0:aa:3d:19:3d:82:e1:82: 7b:24:6c:49:ad:d1:ae:a3:76:0c:e7:bc:a8:05:63:92:43:b3: 29:db:8c:8d:1f:92:bd:b1:06:99:97:8b:58:c1:a1:13:78:db: 2e:64:bc:3a:a4:e3:db:55:5b:94:5d:13:c1:8f:c3:2f:39:5b: 00:33:15:93:85:c3:e6:c6:13:38:53:6c:28:90:21:47:61:33: 56:36:a1:eb:ff:1b:37:d4:d8:1b:37:03:cb:ea:1c:8b:b2:e9: e2:70:9b:fe:73:fc:a1:cd:6d:99:1d:aa:d5:1f:33:62:55:82: b3:62:7d:4d:8c:98:76:d7:d1:f3:66:e3:6a:e7:bd:77:64:7e: 87:da:a4:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUwNzE4MTY1OTQzWhcNMjUwNzI1MTY1OTQzWjAYMRYwFAYD VQQDEw02ODdhN2Q3Zi1mYzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3BVe+yYQZdAhP1LOYpUp6Z42Rc39INr3Z9N1ECLlFHTXmPhal0OlUs420kOp 8buQVAB6mkdOin1CCHsYAyGGGb7DlcmfIrkyd/wfAGgvrg9KmJobMtaXMTDxAQz7 yZHUScci/PdTq6GPO4kKdWpeMHJpZxyV+XMul0b6lGL7RaIu8PuFNWwFTY9vTxm7 /KcbSLIozAoKDFYG6YReSj5ijlAe4gV1WKrRRDHmWgFWFbScdQ9i1lFayCGZOE5R 8+hMF0wrdo/8SOSSwJM2L6Y1CT1bP9CsvQwkz6fzkCjNtCEZZVsoTOQmUFie6BPG VYx3zJI8U1PronNaNHyxekGcjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkP45nC P07wap7urcXV9SBaA/qxMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/8iKNbKOavoxPh73wrJo1kwLqPgfWbqkj6/+MrnKpFRWQAoQQwZ4E ykvQmq/ikIPUaizZebHWmNuLxCETLtqS3g+1tVDk/n6XysszpahEuAr7b23dZMvG wzwpf/mYijzIHh8ymMRhQpyQhhpKxzlCBj0LDEnG0Ko9GT2C4YJ7JGxJrdGuo3YM 57yoBWOSQ7Mp24yNH5K9sQaZl4tYwaETeNsuZLw6pOPbVVuUXRPBj8MvOVsAMxWT hcPmxhM4U2wokCFHYTNWNqHr/xs31NgbNwPL6hyLsunicJv+c/yhzW2ZHarVHzNi VYKzYn1NjJh219HzZuNq5713ZH6H2qS8 -----END CERTIFICATE-----Generated at Sun Jul 20 16:24:43 2025 by rpki-client