$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: ur/otUxIBw1b9LMAjHJ0IMla3StlAyMV948cllG1hhc= Subject key identifier: 32:F6:09:A1:3C:B8:DC:52:7F:39:EC:54:62:27:76:DA:0E:DE:FD:BA Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 2648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 2622 Signing time: Sun 20 Jul 2025 15:44:00 +0000 Manifest this update: Sun 20 Jul 2025 15:44:00 +0000 Manifest next update: Sun 27 Jul 2025 15:44:00 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: a8/NFAtvx/wy3WkLh/RgxxQ+B1GfBjkbu3JfnuxjsRA=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: Bub+bmfe4PnreQ1ZPIst7Ck9C3Kep4qMMCvN4ZXfJXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9800 (0x2648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: Jul 20 15:44:00 2025 GMT Not After : Jul 27 15:44:00 2025 GMT Subject: CN=687d0ec0-0853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:f1:8f:89:29:15:03:b4:2b:01:6a:54:9e: e4:c6:a8:ad:02:75:50:13:cf:7b:7b:71:c3:7b:a9: ee:b2:7e:ed:35:f4:a8:7a:c8:ee:55:da:7c:97:fe: 82:b0:86:95:9f:8f:d6:bb:95:bd:de:19:c7:59:de: 8c:7e:4f:76:b1:e2:4d:f7:03:75:63:84:bd:6e:57: fa:0b:f3:dc:9e:38:0c:28:23:83:49:d6:84:cb:32: ac:e6:d7:4c:d0:48:b9:c3:6d:48:37:e2:9f:84:9c: e3:1f:76:30:35:61:e5:44:21:73:2c:99:24:73:ea: 1b:26:b6:be:c5:1b:47:5d:69:5a:c8:d2:9b:c3:d4: 80:c3:db:6f:98:b3:9c:fb:3d:20:b4:2f:b9:02:6e: 9d:98:1f:7b:8b:9f:e3:de:ec:66:8e:ad:4d:46:14: 7a:89:6e:6c:c9:87:81:0b:88:01:3b:c0:25:0e:4c: 1c:39:ff:01:4f:16:c7:cc:3f:3e:9c:29:c6:c4:cc: 6b:e3:ac:5c:a4:6f:80:63:21:4b:b8:16:87:7f:c4: 68:c1:71:b8:d9:1a:df:45:2e:de:34:83:a6:a8:e6: 19:d3:a8:f8:a9:79:e2:9a:ea:1f:d8:16:d7:e5:3d: fa:f5:a4:d0:c2:a6:02:f2:e9:8c:bc:a1:17:31:24: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F6:09:A1:3C:B8:DC:52:7F:39:EC:54:62:27:76:DA:0E:DE:FD:BA X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:57:5d:b7:62:d8:a7:41:68:fc:0a:e9:1a:d3:58:ef:fe:ba: c0:51:b8:7f:ee:7d:57:28:1f:57:63:54:a5:06:28:57:ef:26: 75:79:73:88:43:91:76:71:bd:32:51:79:ca:75:04:db:78:08: 73:95:6e:05:f6:20:e7:12:a9:0a:37:f2:c7:45:73:9b:db:cb: a1:a4:e0:fb:12:f8:21:63:07:bb:f3:ba:93:d0:7e:88:33:68: bf:32:da:96:64:ae:0a:ec:a4:3c:36:9c:59:c2:48:ef:b8:9f: 54:f5:5e:d4:86:24:78:78:8c:1f:ad:60:f1:a1:94:58:b0:9d: ec:c2:de:62:9d:88:98:a7:c2:98:77:f2:fc:2d:7a:d3:8f:90: 08:4e:56:bc:bb:72:54:2c:fd:21:44:64:4c:b1:ae:c8:cb:73: b3:48:02:4d:a9:10:45:41:9d:35:9b:15:2d:4a:2d:4d:9d:d3: b5:51:78:b2:a1:92:42:bd:e9:b3:9c:99:4d:bd:76:64:c3:82: d1:a1:75:45:6c:7e:b1:87:d2:ca:6a:37:b2:69:cc:93:d6:08: f0:c4:ec:5c:0a:06:a1:a5:ea:3d:dd:5c:cf:c7:a5:bc:ca:f3: b1:85:5c:91:6e:f0:a4:eb:07:d3:cb:3e:da:45:40:14:7b:2e: 24:8e:25:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjUwNzIwMTU0NDAwWhcNMjUwNzI3MTU0NDAwWjAYMRYwFAYD VQQDEw02ODdkMGVjMC0wODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa7xj4kpFQO0KwFqVJ7kxqitAnVQE897e3HDe6nusn7tNfSoesjuVdp8l/6C sIaVn4/Wu5W93hnHWd6Mfk92seJN9wN1Y4S9blf6C/PcnjgMKCODSdaEyzKs5tdM 0Ei5w21IN+KfhJzjH3YwNWHlRCFzLJkkc+obJra+xRtHXWlayNKbw9SAw9tvmLOc +z0gtC+5Am6dmB97i5/j3uxmjq1NRhR6iW5syYeBC4gBO8AlDkwcOf8BTxbHzD8+ nCnGxMxr46xcpG+AYyFLuBaHf8RowXG42RrfRS7eNIOmqOYZ06j4qXnimuof2BbX 5T369aTQwqYC8umMvKEXMSTcMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDL2CaE8 uNxSfznsVGIndtoO3v26MB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTV123YtinQWj8Cuka01jv/rrAUbh/7n1XKB9XY1SlBihX7yZ1eXOI Q5F2cb0yUXnKdQTbeAhzlW4F9iDnEqkKN/LHRXOb28uhpOD7EvghYwe787qT0H6I M2i/MtqWZK4K7KQ8NpxZwkjvuJ9U9V7UhiR4eIwfrWDxoZRYsJ3swt5inYiYp8KY d/L8LXrTj5AITla8u3JULP0hRGRMsa7Iy3OzSAJNqRBFQZ01mxUtSi1NndO1UXiy oZJCvemznJlNvXZkw4LRoXVFbH6xh9LKajeyacyT1gjwxOxcCgahpeo93VzPx6W8 yvOxhVyRbvCk6wfTyz7aRUAUey4kjiW9 -----END CERTIFICATE-----Generated at Sun Jul 20 18:17:56 2025 by rpki-client