$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json) Hash identifier: x1tAKJeK9c5fRkU4jeg7jgAn3v2jnCilDr+aLWek0Pg= Subject key identifier: 62:28:C0:AB:25:82:14:F0:E5:B2:36:12:40:B8:09:72:B6:2C:EA:EB Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft Manifest number: 013D Signing time: Sat 19 Jul 2025 04:44:08 +0000 Manifest this update: Sat 19 Jul 2025 04:44:08 +0000 Manifest next update: Sat 26 Jul 2025 04:44:08 +0000 Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: 20LesZYWplusZ00YXET+AesQ1EfrkJzbURvYEEP+ZnM=) 2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: H7JonSUtz6tgIVuXpEGUpFZ7fUQBIkEHbO/Cd9DHtNo=) 3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: j/6dClTGKIF6Y0W3OQ8vmv5qC35aQkMZjQK9N8GGPFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: Jul 19 04:44:08 2025 GMT Not After : Jul 26 04:44:08 2025 GMT Subject: CN=687b2298-2d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:90:29:2c:38:5c:17:c1:10:12:06:c3:11: d2:dc:79:90:ba:b2:79:99:04:d4:6f:af:72:0c:7e: 68:c7:b1:e1:29:05:41:09:27:49:bd:f5:ad:a5:09: 0f:47:34:d5:e1:05:8e:de:23:26:f9:d4:be:09:c2: ba:58:72:60:77:0b:e0:ad:83:f1:67:03:02:dd:3e: d9:cd:0a:ba:eb:84:04:fa:b4:5c:8a:bf:bc:53:9b: 84:f9:9b:ad:9b:34:99:49:7d:ae:29:b7:ca:41:ca: 76:d0:ec:62:c1:8b:ab:02:1c:ad:df:72:dc:5a:c8: 0b:bb:1e:3f:6d:64:7d:b6:7b:6d:d7:2e:b9:15:58: 3c:16:bc:61:64:21:c5:bf:ca:bd:4b:64:02:75:2f: 30:3e:ff:0e:49:1b:86:ba:cd:b5:ef:8e:15:6e:2a: 56:ea:b6:5d:06:ed:94:20:5a:f6:9c:79:fb:03:84: b1:d9:9b:b4:8e:24:5c:ab:f1:97:5a:7d:7d:3b:0b: 44:b4:e9:39:2f:59:17:f5:cb:e8:88:7d:bc:d9:23: c1:83:ed:71:45:74:62:fb:1c:99:c3:41:60:87:33: 5c:3a:b5:71:bc:65:ac:9c:e8:d3:b1:fd:ff:90:7c: b3:c0:33:12:4f:72:7a:d9:08:0c:5c:30:a1:ea:85: 0a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:28:C0:AB:25:82:14:F0:E5:B2:36:12:40:B8:09:72:B6:2C:EA:EB X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:82:e8:02:6e:ab:40:51:31:42:b7:36:37:3c:60:9f:39:ca: b2:2a:f4:a1:e3:6d:ca:b4:62:70:c9:87:1f:e8:2d:9f:da:e1: 0d:d8:a9:ef:47:e9:ff:a8:a7:f7:3e:23:4e:3d:e1:b9:ac:7c: ca:34:1f:89:22:7e:42:af:e6:29:5e:62:56:a9:2e:76:2c:6e: 6a:da:9e:8f:67:63:c8:12:f3:32:f3:c1:c8:00:9f:0a:87:b3: 85:62:29:c8:ee:34:55:f7:ae:81:0f:8a:6a:56:60:dc:17:7f: 1f:d7:97:b6:e6:d4:9e:a2:81:b8:47:8e:0d:59:fd:a2:c6:6c: 11:65:90:e7:76:09:85:6f:83:1a:26:9d:33:3c:80:5e:73:a3: 56:d8:3f:ee:6d:de:7d:50:01:db:be:b4:a8:42:5c:ab:71:21: 31:03:25:ea:b7:95:63:0d:6a:e3:17:76:63:87:03:aa:00:0b: 79:76:42:76:72:3a:ce:8b:4c:4f:53:e3:43:28:43:11:ad:aa: b3:96:a7:3f:4a:4e:5d:af:74:bf:56:86:5a:70:85:2e:5f:0c: 87:0c:3b:29:14:7c:3b:64:6c:e9:4a:bc:f5:ed:ea:65:60:20: 9c:f5:4f:71:77:dc:77:3d:41:de:b8:1f:e8:ed:69:4c:23:54: 29:e0:54:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD QzI4MjM2NEUwHhcNMjUwNzE5MDQ0NDA4WhcNMjUwNzI2MDQ0NDA4WjAYMRYwFAYD VQQDEw02ODdiMjI5OC0yZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLqQKSw4XBfBEBIGwxHS3HmQurJ5mQTUb69yDH5ox7HhKQVBCSdJvfWtpQkP RzTV4QWO3iMm+dS+CcK6WHJgdwvgrYPxZwMC3T7ZzQq664QE+rRcir+8U5uE+Zut mzSZSX2uKbfKQcp20OxiwYurAhyt33LcWsgLux4/bWR9tntt1y65FVg8FrxhZCHF v8q9S2QCdS8wPv8OSRuGus21744VbipW6rZdBu2UIFr2nHn7A4Sx2Zu0jiRcq/GX Wn19OwtEtOk5L1kX9cvoiH282SPBg+1xRXRi+xyZw0FghzNcOrVxvGWsnOjTsf3/ kHyzwDMST3J62QgMXDCh6oUKMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIowKsl ghTw5bI2EkC4CXK2LOrrMB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjVEQi8xMTkzOUQxMDkwNjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tB RmtMYnliSlBoZERNS0NOazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFgugCbqtAUTFCtzY3PGCfOcqyKvSh423KtGJwyYcf6C2f2uEN2Knv R+n/qKf3PiNOPeG5rHzKNB+JIn5Cr+YpXmJWqS52LG5q2p6PZ2PIEvMy88HIAJ8K h7OFYinI7jRV966BD4pqVmDcF38f15e25tSeooG4R44NWf2ixmwRZZDndgmFb4Ma Jp0zPIBec6NW2D/ubd59UAHbvrSoQlyrcSExAyXqt5VjDWrjF3ZjhwOqAAt5dkJ2 cjrOi0xPU+NDKEMRraqzlqc/Sk5dr3S/VoZacIUuXwyHDDspFHw7ZGzpSrz17epl YCCc9U9xd9x3PUHeuB/o7WlMI1Qp4FTT -----END CERTIFICATE-----Generated at Sun Jul 20 18:49:20 2025 by rpki-client