$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: CuJpwNfgFWbZiomuop1t70wV+szM25G4iqKzrbVMegI= Subject key identifier: 23:66:12:39:86:AD:49:0A:A7:93:41:4B:15:10:F7:EE:5D:D3:FD:0F Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 063C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 0634 Signing time: Sun 20 Jul 2025 22:55:04 +0000 Manifest this update: Sun 20 Jul 2025 22:55:03 +0000 Manifest next update: Sun 27 Jul 2025 22:55:03 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: yMSD8gqPs1l1q/g2Pka9WXMsff90kbZ76dcHJMzKGGo=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: qCXzkeKuPVL2AFCLekUycL2ac1PSk1oLXnC7v+nyDIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1596 (0x63c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Jul 20 22:55:03 2025 GMT Not After : Jul 27 22:55:03 2025 GMT Subject: CN=687d73c7-baf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:73:79:ec:02:20:40:74:66:b5:c1:e4:ba:58: b5:77:69:f8:e8:e7:e8:aa:db:7a:83:a7:79:2b:48: 83:70:8b:6f:31:ec:0b:8d:0b:f7:17:83:2b:60:66: 45:d7:5d:4c:70:c2:f9:b3:00:51:e2:bc:d9:59:e9: 51:92:d0:cb:85:46:e1:f0:a0:2b:c6:f5:a1:6f:0a: 78:ff:a2:94:1b:2c:b9:d1:8b:27:e2:a9:79:62:21: a3:da:bf:d5:ff:69:83:07:58:25:00:ba:f4:4b:05: f6:9b:88:a4:17:8d:7d:7d:3a:ec:2a:d7:7b:7f:8e: b0:63:12:03:57:d0:a0:b7:b1:7e:6e:1f:59:ae:6b: b1:0b:a5:63:1f:ba:2b:b4:0a:60:bc:9b:82:f8:db: 27:b6:5b:64:67:8d:9b:91:0f:31:36:74:61:46:40: 91:3a:fa:7b:b1:54:c1:26:54:e8:97:d4:5e:ee:0d: 39:d4:58:55:03:64:23:58:91:da:1d:b6:1e:1e:15: 58:ab:f6:e8:f3:90:79:f7:9c:f0:70:af:73:d5:a4: c0:52:df:59:25:4e:af:70:f4:a3:f8:96:c7:c3:46: e3:30:e9:24:d3:3a:af:04:28:8e:5e:80:5d:ad:1a: ab:15:40:dc:71:6c:b7:8c:b6:34:7d:be:45:08:63: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:66:12:39:86:AD:49:0A:A7:93:41:4B:15:10:F7:EE:5D:D3:FD:0F X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5b:1e:90:f0:1c:a6:c9:f3:51:5a:6b:41:3d:f7:ac:a3:9a: cd:8d:0e:99:35:11:90:4b:47:1b:cf:6b:fa:20:d6:01:05:44: 31:15:6c:2e:b8:83:64:ba:2e:ab:6e:38:2b:98:8e:bf:c0:a7: 4e:22:5a:45:16:88:49:4a:99:c7:f5:0b:69:7b:31:1e:7b:db: 81:09:95:40:8f:22:0a:49:1f:ac:bf:7e:17:ec:14:77:9f:c9: 0d:3f:60:3b:fb:e6:9c:92:e0:d8:01:06:c8:8c:67:94:88:6a: 75:0c:fd:1a:d8:5c:c4:aa:34:39:b5:f1:f0:6e:3a:f3:ba:c2: 76:ef:4d:0b:29:ef:83:da:ed:ea:3c:b4:25:b3:b6:6b:56:2f: 21:be:a4:ec:05:18:9e:6c:ae:cc:4c:9d:36:4c:97:40:cd:05: d4:9a:a8:f0:69:23:a8:ff:d5:ea:f5:23:3d:04:a1:6a:13:2c: 2f:8a:8c:6b:0d:39:26:87:ef:ea:15:c0:4d:96:2b:17:c2:b2: e4:78:9c:28:d8:c1:07:d8:7d:0f:9f:42:fb:c5:f3:ff:67:7d: d8:8d:c5:e9:a8:b8:40:99:22:81:38:66:dd:4d:22:b5:d0:92: 39:4f:20:15:65:77:2e:ac:1b:6c:d9:1c:5b:55:7b:b1:0d:b6: a8:94:be:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUwNzIwMjI1NTAzWhcNMjUwNzI3MjI1NTAzWjAYMRYwFAYD VQQDEw02ODdkNzNjNy1iYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nN57AIgQHRmtcHkuli1d2n46Ofoqtt6g6d5K0iDcItvMewLjQv3F4MrYGZF 111McML5swBR4rzZWelRktDLhUbh8KArxvWhbwp4/6KUGyy50Ysn4ql5YiGj2r/V /2mDB1glALr0SwX2m4ikF419fTrsKtd7f46wYxIDV9Cgt7F+bh9ZrmuxC6VjH7or tApgvJuC+NsntltkZ42bkQ8xNnRhRkCROvp7sVTBJlTol9Re7g051FhVA2QjWJHa HbYeHhVYq/bo85B595zwcK9z1aTAUt9ZJU6vcPSj+JbHw0bjMOkk0zqvBCiOXoBd rRqrFUDccWy3jLY0fb5FCGOTnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNmEjmG rUkKp5NBSxUQ9+5d0/0PMB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMWx6Q8BymyfNRWmtBPfeso5rNjQ6ZNRGQS0cbz2v6INYBBUQxFWwu uINkui6rbjgrmI6/wKdOIlpFFohJSpnH9QtpezEee9uBCZVAjyIKSR+sv34X7BR3 n8kNP2A7++ackuDYAQbIjGeUiGp1DP0a2FzEqjQ5tfHwbjrzusJ2700LKe+D2u3q PLQls7ZrVi8hvqTsBRiebK7MTJ02TJdAzQXUmqjwaSOo/9Xq9SM9BKFqEywvioxr DTkmh+/qFcBNlisXwrLkeJwo2MEH2H0Pn0L7xfP/Z33YjcXpqLhAmSKBOGbdTSK1 0JI5TyAVZXcurBts2RxbVXuxDbaolL6S -----END CERTIFICATE-----Generated at Mon Jul 21 12:32:08 2025 by rpki-client