$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json) Hash identifier: tm3r97zpSiYIz4Il9P6SzQ7WmRlN3qaivyQoYIOwxIU= Subject key identifier: 26:86:EC:E2:9E:AD:26:67:D1:4B:FE:C1:D5:70:29:2E:31:1C:60:D2 Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft Manifest number: 0798 Signing time: Fri 18 Jul 2025 21:39:37 +0000 Manifest this update: Fri 18 Jul 2025 21:39:36 +0000 Manifest next update: Fri 25 Jul 2025 21:39:36 +0000 Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: wKGi6UPJRnQcWeSVlgZDaO6OmrxkuEVtKl5GeYEqN6o=) 2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: 88Jh5coMAVPJSUCnQAmSwbUiu0xU/3P6Y2QChRKwELo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Validity Not Before: Jul 18 21:39:36 2025 GMT Not After : Jul 25 21:39:36 2025 GMT Subject: CN=687abf18-4271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d3:1a:9f:1a:f4:7d:cd:c8:0b:c5:7c:de:af: 4b:be:e2:73:e7:4f:aa:58:a9:0b:ce:86:81:59:fb: 21:97:7f:8d:a0:bf:bd:ff:b5:04:51:6b:cf:1d:a8: b4:97:53:db:27:88:bc:21:c1:18:75:fb:2e:1f:94: b5:12:67:1d:ea:1b:01:75:6e:1e:eb:58:df:d2:e6: 55:22:07:6b:8c:12:41:66:48:61:b1:84:5d:f0:69: bc:6f:56:89:9e:1b:15:89:60:8e:57:90:d6:50:02: 81:b9:88:2a:73:45:4a:93:55:df:bf:9c:80:70:f3: 78:c5:12:46:79:23:2e:82:76:80:73:34:c4:e3:c0: e1:07:31:e6:aa:4b:23:ba:4e:5b:6b:b2:5f:42:e9: 73:3e:e8:53:b5:b7:1a:68:d7:3d:5e:73:08:0c:10: 32:f7:0c:8c:c9:88:82:41:01:1d:65:c6:ce:8c:47: 84:72:a3:c5:bf:ed:f0:1d:d1:46:c1:14:d3:2e:3c: 32:8c:55:99:0a:be:cb:83:a7:c5:c5:8a:14:2f:f8: 34:02:dc:21:15:bb:c2:40:74:45:5f:42:13:3b:02: d2:8e:f9:83:a0:95:d1:dd:e6:4a:c6:13:5e:9d:24: a3:37:88:57:66:06:5a:cd:71:84:18:26:10:09:e9: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:86:EC:E2:9E:AD:26:67:D1:4B:FE:C1:D5:70:29:2E:31:1C:60:D2 X509v3 Authority Key Identifier: keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:99:e1:d9:00:57:d3:ce:1f:3b:22:2a:ce:27:8f:75:51:94: f6:e2:2f:b5:88:9f:4a:69:46:0d:36:70:a6:70:fc:f8:f5:27: 02:80:fd:05:b8:6f:b4:01:51:88:38:47:fb:eb:eb:a1:58:21: 06:bd:d2:90:75:28:11:74:3e:e4:1b:a1:d7:bc:1a:55:26:71: 9d:d8:ed:bb:2b:3b:cf:c4:f2:aa:33:95:b4:16:ae:6c:bc:fb: 95:3e:35:c3:fa:7f:cd:61:d5:16:d6:e4:b4:17:1f:92:98:77: b7:d8:3a:14:7a:49:13:7a:a7:40:99:8d:4f:cc:30:96:cd:cc: b4:93:e3:17:95:9f:52:35:ab:ae:16:c1:dd:88:60:fe:2d:39: 10:37:c0:b0:ad:30:6d:d7:40:f4:df:cf:e5:33:0a:91:bb:0c: 3b:6a:e8:f5:81:69:4e:b9:08:ae:78:b5:39:60:30:65:c2:93: bf:c8:3c:f2:8e:3f:e8:9b:6b:6f:1c:48:2f:02:20:ee:ac:73: 62:d3:91:ad:8c:69:9d:bc:f0:8e:97:0d:b3:06:9c:de:e3:c0: 53:2f:b5:e0:3c:33:3d:bb:9e:c1:67:f4:41:b4:56:bd:19:8a: 43:25:d5:bc:9b:ea:cd:34:89:69:96:bf:ff:22:07:a8:ef:ee: cc:72:c0:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE RjFFRTU1MzQwHhcNMjUwNzE4MjEzOTM2WhcNMjUwNzI1MjEzOTM2WjAYMRYwFAYD VQQDEw02ODdhYmYxOC00MjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldManxr0fc3IC8V83q9LvuJz50+qWKkLzoaBWfshl3+NoL+9/7UEUWvPHai0 l1PbJ4i8IcEYdfsuH5S1Emcd6hsBdW4e61jf0uZVIgdrjBJBZkhhsYRd8Gm8b1aJ nhsViWCOV5DWUAKBuYgqc0VKk1Xfv5yAcPN4xRJGeSMugnaAczTE48DhBzHmqksj uk5ba7JfQulzPuhTtbcaaNc9XnMIDBAy9wyMyYiCQQEdZcbOjEeEcqPFv+3wHdFG wRTTLjwyjFWZCr7Lg6fFxYoUL/g0AtwhFbvCQHRFX0ITOwLSjvmDoJXR3eZKxhNe nSSjN4hXZgZazXGEGCYQCemEwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaG7OKe rSZn0Uv+wdVwKS4xHGDSMB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXmeHZAFfTzh87IirOJ491UZT24i+1iJ9KaUYNNnCmcPz49ScCgP0F uG+0AVGIOEf76+uhWCEGvdKQdSgRdD7kG6HXvBpVJnGd2O27KzvPxPKqM5W0Fq5s vPuVPjXD+n/NYdUW1uS0Fx+SmHe32DoUekkTeqdAmY1PzDCWzcy0k+MXlZ9SNauu FsHdiGD+LTkQN8CwrTBt10D038/lMwqRuww7auj1gWlOuQiueLU5YDBlwpO/yDzy jj/om2tvHEgvAiDurHNi05GtjGmdvPCOlw2zBpze48BTL7XgPDM9u57BZ/RBtFa9 GYpDJdW8m+rNNIlplr//Igeo7+7McsC/ -----END CERTIFICATE-----Generated at Sun Jul 20 13:35:55 2025 by rpki-client