$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json) Hash identifier: llt1m0IB+SZ1z2eSY+A6D6wZsZlVQkdULcXYW9c+pf4= Subject key identifier: 51:6F:28:FF:97:CB:A1:3A:67:0A:69:28:77:2F:74:10:08:AE:83:AA Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft Manifest number: 22 Signing time: Sat 19 Jul 2025 08:06:01 +0000 Manifest this update: Sat 19 Jul 2025 08:06:01 +0000 Manifest next update: Sat 26 Jul 2025 08:06:01 +0000 Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: 2AURt4wQ1Y4FPZVy2wtMueyYYgxaW3/ohLyjeJLXZZo=) 2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: C2osSUSGXaoVQWIdcbrfsnLCIsFQre/GUrWQUTRuHn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Validity Not Before: Jul 19 08:06:01 2025 GMT Not After : Jul 26 08:06:01 2025 GMT Subject: CN=687b51e9-da36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:c0:51:c8:19:92:c7:0e:32:f9:c1:28:a3: 11:30:42:99:27:fd:26:19:d1:43:8a:7d:43:f9:4a: ea:a6:48:43:25:f9:b3:a8:c5:e2:2f:8b:f9:f7:51: 8d:ef:57:4c:8b:19:82:33:aa:4d:ea:bd:18:97:49: fc:14:a4:b6:96:b0:be:0c:f7:02:e4:59:b9:bb:3b: 39:9a:bb:44:23:9a:ac:93:78:34:16:9b:da:c4:6e: e0:0c:4b:df:33:73:37:74:4f:56:de:30:a9:20:a0: 4e:86:c2:64:f8:e0:0c:ec:ae:0f:15:fc:dc:5c:f2: 8d:17:25:6d:21:4e:17:e4:bb:ff:ea:62:da:b6:d0: b7:c6:6f:70:85:16:25:b2:01:1c:2d:0c:af:bc:d2: ce:f6:59:df:2e:9f:01:3d:85:ea:73:59:c0:34:36: 5b:f4:e8:5a:6d:cc:ae:c4:f2:c7:64:8b:dc:17:92: 0d:1c:27:97:e6:ca:9d:db:2f:ac:7a:86:b5:6e:52: 68:83:d3:8e:4a:6b:5e:06:b8:ad:44:6d:34:73:bb: e0:dc:51:27:d9:5d:fa:2b:8b:ee:08:f9:29:44:84: 12:bf:bd:1f:0a:b7:5d:58:f8:48:cb:55:01:2b:2a: e2:a8:39:88:83:79:7c:9a:14:72:a5:c0:6a:e2:a7: 69:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6F:28:FF:97:CB:A1:3A:67:0A:69:28:77:2F:74:10:08:AE:83:AA X509v3 Authority Key Identifier: keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:63:a0:17:f9:fc:ec:6f:21:52:04:94:84:68:86:1a:16:d2: 15:b4:b1:9b:66:c5:0f:56:60:99:16:96:fb:3a:85:0f:fb:46: a0:49:a6:fd:60:4d:4c:6b:a9:37:ad:ed:15:f9:89:52:c9:6a: 15:dc:32:fe:97:70:ba:32:58:21:fb:b3:32:67:b0:88:87:e2: 3f:af:3e:70:75:d3:ab:c9:c4:8d:4a:4b:e0:8a:f5:f7:2a:b7: f1:3a:09:0d:09:da:7f:c9:54:8d:e5:f0:6b:f0:de:a5:e5:04: f0:8f:ee:78:ff:46:51:b4:a7:72:d6:bf:d7:64:07:96:39:ef: f0:28:08:10:7d:1b:93:ec:a3:ac:90:8b:56:34:db:3b:69:19: 97:94:3e:f8:5d:d3:48:79:12:5d:5b:a7:f7:c4:a7:b8:65:c6: 0a:f2:d6:f9:1c:11:99:ea:0c:21:6d:f5:13:57:3f:78:2d:b0: a3:97:fb:01:09:d8:14:dd:6f:51:21:c5:b4:d9:ff:3b:1a:9d: ff:70:e4:51:e7:71:4f:09:41:9b:0c:cf:55:56:a0:b0:e2:80: 02:58:62:c4:53:e5:0c:67:5f:51:77:ab:11:12:4e:fd:5d:56: 86:4c:50:cb:36:71:ae:14:bc:e4:bf:88:e5:10:a4:09:df:11: 3f:96:8c:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTZDRjExMC8GA1UEBRMoMEZGRjcxNzk4MkQ5RTFEOTZGNEQ3RkM1MzExRUQzMjMy MzZCQTA5MzAeFw0yNTA3MTkwODA2MDFaFw0yNTA3MjYwODA2MDFaMBgxFjAUBgNV BAMTDTY4N2I1MWU5LWRhMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEpMBRyBmSxw4y+cEooxEwQpkn/SYZ0UOKfUP5SuqmSEMl+bOoxeIvi/n3UY3v V0yLGYIzqk3qvRiXSfwUpLaWsL4M9wLkWbm7Ozmau0QjmqyTeDQWm9rEbuAMS98z czd0T1beMKkgoE6GwmT44Azsrg8V/Nxc8o0XJW0hThfku//qYtq20LfGb3CFFiWy ARwtDK+80s72Wd8unwE9hepzWcA0Nlv06FptzK7E8sdki9wXkg0cJ5fmyp3bL6x6 hrVuUmiD045Ka14GuK1EbTRzu+DcUSfZXfori+4I+SlEhBK/vR8Kt11Y+EjLVQEr KuKoOYiDeXyaFHKlwGrip2mjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUW8o/5fL oTpnCmkody90EAiug6owHwYDVR0jBBgwFoAUD/9xeYLZ4dlvTX/FMR7TIyNroJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NkNGLzAxMzkzNDk2MzEy RDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRsdlRYX0ZNUjdUSXlOcm9K TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRF85eGVZTFo0ZGx2VFhfRk1SN1RJeU5yb0pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NkNGLzAxMzkzNDk2MzEyRDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRs dlRYX0ZNUjdUSXlOcm9KTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBjoBf5/OxvIVIElIRohhoW0hW0sZtmxQ9WYJkWlvs6hQ/7RqBJpv1g TUxrqTet7RX5iVLJahXcMv6XcLoyWCH7szJnsIiH4j+vPnB106vJxI1KS+CK9fcq t/E6CQ0J2n/JVI3l8Gvw3qXlBPCP7nj/RlG0p3LWv9dkB5Y57/AoCBB9G5Pso6yQ i1Y02ztpGZeUPvhd00h5El1bp/fEp7hlxgry1vkcEZnqDCFt9RNXP3gtsKOX+wEJ 2BTdb1EhxbTZ/zsanf9w5FHncU8JQZsMz1VWoLDigAJYYsRT5QxnX1F3qxESTv1d VoZMUMs2ca4UvOS/iOUQpAnfET+WjAQ= -----END CERTIFICATE-----Generated at Sun Jul 20 07:23:17 2025 by rpki-client