$ rpki-client -vvf rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft File: 1RCJONILodf7ySo7qZ8tafyPSog.mft (raw, json) Hash identifier: HA4fhspW2umtYD/6H5SY3AeF1MlhT5D8It10RyqeWes= Subject key identifier: 24:9E:28:E9:9A:DB:9E:6A:15:4D:03:F1:33:CE:5E:60:29:93:BC:57 Authority key identifier: D5:10:89:38:D2:0B:A1:D7:FB:C9:2A:3B:A9:9F:2D:69:FC:8F:4A:88 Certificate issuer: /CN=A91836D8/serialNumber=D5108938D20BA1D7FBC92A3BA99F2D69FC8F4A88 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RCJONILodf7ySo7qZ8tafyPSog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft Manifest number: 3F Signing time: Sat 19 Jul 2025 07:46:46 +0000 Manifest this update: Sat 19 Jul 2025 07:46:46 +0000 Manifest next update: Sat 26 Jul 2025 07:46:46 +0000 Files and hashes: 1: 1RCJONILodf7ySo7qZ8tafyPSog.crl (hash: NRa4r5rApx3lhi5QEpfLpO9p/iAWe0lc3knDtvuR6PM=) 2: 2A0F594C07B911F0B93D3034C4F9AE02.roa (hash: r5ruoCtRcYnEcHexWC9aJqjiLOW/BTPK5UGFj2P9wTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.crl rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RCJONILodf7ySo7qZ8tafyPSog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836D8, serialNumber=D5108938D20BA1D7FBC92A3BA99F2D69FC8F4A88 Validity Not Before: Jul 19 07:46:46 2025 GMT Not After : Jul 26 07:46:46 2025 GMT Subject: CN=687b4d66-731d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:6e:36:cd:a4:8d:f8:76:7a:0a:96:b1:cf: 7b:69:c1:3d:cc:c7:00:2e:92:4f:21:77:9f:82:63: 89:c3:f8:38:09:01:ca:34:a3:43:b8:7f:5f:8c:ff: 3f:03:c4:17:5f:c0:c4:54:72:14:f4:57:d1:84:a2: b6:28:b6:1a:32:78:f9:c3:72:c0:14:78:d1:3e:ef: b4:b7:cd:a1:c0:a2:f5:e2:5b:9e:1f:b0:44:1a:1d: 23:35:65:e6:ee:cd:97:80:6e:7b:1c:af:a1:3a:00: 34:d0:4f:9e:b7:07:48:ee:40:27:ec:5f:d0:bf:8f: 05:85:0d:e2:c4:b8:82:dc:4a:61:52:9a:f3:02:91: ac:63:c5:11:a9:bc:80:10:c6:05:41:4c:c0:85:27: 14:8f:55:71:fb:f9:cb:f3:3f:f4:55:79:b5:8c:fd: 59:55:f8:00:86:9c:ee:dd:62:45:71:33:b4:2e:bc: 9a:65:6a:32:14:42:d6:96:64:8e:e6:cc:07:9d:b9: ee:85:77:f4:c8:a3:57:a8:c2:c4:9f:2a:79:fc:d8: 3f:75:35:97:26:23:a8:79:e5:79:91:25:19:8f:14: 55:df:37:db:d9:7a:7c:de:66:8b:4e:a1:32:71:50: cf:3e:9b:a8:a2:c2:1e:7a:96:2c:3f:f9:40:3e:0b: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9E:28:E9:9A:DB:9E:6A:15:4D:03:F1:33:CE:5E:60:29:93:BC:57 X509v3 Authority Key Identifier: keyid:D5:10:89:38:D2:0B:A1:D7:FB:C9:2A:3B:A9:9F:2D:69:FC:8F:4A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RCJONILodf7ySo7qZ8tafyPSog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9a:7b:1b:c1:41:81:77:52:c3:45:a4:40:c8:04:94:05:a9: 19:fa:13:9a:b7:a8:0a:12:a0:71:06:87:19:2c:65:f3:dc:4d: 2b:ca:0d:c9:bc:8f:ef:62:00:79:89:47:f9:93:14:8d:01:60: 88:c1:93:30:d3:58:39:47:3b:4d:88:fd:8d:fd:88:a6:bc:cd: fe:27:31:70:ce:8e:ab:b4:23:03:34:cd:1c:f9:6a:ee:a6:5b: 60:1f:d9:fc:c7:fd:82:42:4c:1f:cc:ac:66:4f:c6:b0:9c:64: 34:d2:b5:44:f0:a1:fd:9f:d4:cd:7d:72:a9:3d:8a:2c:1b:0d: 9f:25:fb:b5:44:89:62:f8:cd:12:c7:d9:15:d2:2d:d2:3b:cc: 9f:49:a1:cc:1e:16:0a:74:1e:7e:a5:7a:e5:08:ba:84:f6:9a: 2b:b2:81:ef:a0:97:a5:c1:6a:06:9f:c1:e2:5c:39:5d:95:a3: f7:5a:c2:bd:5c:4d:40:4a:d1:e4:84:9b:68:73:a9:00:95:1f: 4e:0a:50:ac:7e:c9:f0:69:19:02:41:37:ec:bd:f7:87:24:e5: 02:4c:15:df:bf:09:f0:b4:ef:61:68:5f:2d:9f:55:c9:a2:2d: 65:0d:bc:09:04:1c:f3:5b:56:fa:38:e6:48:a9:95:a7:5d:20: ac:5f:02:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEODExMC8GA1UEBRMoRDUxMDg5MzhEMjBCQTFEN0ZCQzkyQTNCQTk5RjJENjlG QzhGNEE4ODAeFw0yNTA3MTkwNzQ2NDZaFw0yNTA3MjYwNzQ2NDZaMBgxFjAUBgNV BAMTDTY4N2I0ZDY2LTczMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChfm42zaSN+HZ6Cpaxz3tpwT3MxwAukk8hd5+CY4nD+DgJAco0o0O4f1+M/z8D xBdfwMRUchT0V9GEorYothoyePnDcsAUeNE+77S3zaHAovXiW54fsEQaHSM1Zebu zZeAbnscr6E6ADTQT563B0juQCfsX9C/jwWFDeLEuILcSmFSmvMCkaxjxRGpvIAQ xgVBTMCFJxSPVXH7+cvzP/RVebWM/VlV+ACGnO7dYkVxM7QuvJplajIUQtaWZI7m zAedue6Fd/TIo1eowsSfKnn82D91NZcmI6h55XmRJRmPFFXfN9vZenzeZotOoTJx UM8+m6iiwh56liw/+UA+Cw0rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJJ4o6Zrb nmoVTQPxM85eYCmTvFcwHwYDVR0jBBgwFoAU1RCJONILodf7ySo7qZ8tafyPSogw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkQ4LzMyREFCMjkyMDdB RjExRjA5NjA2RTUzNEM0RjlBRTAyLzFSQ0pPTklMb2RmN3lTbzdxWjh0YWZ5UFNv Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVJDSk9OSUxvZGY3eVNvN3FaOHRhZnlQU29nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkQ4LzMyREFCMjkyMDdBRjExRjA5NjA2RTUzNEM0RjlBRTAyLzFSQ0pPTklMb2Rm N3lTbzdxWjh0YWZ5UFNvZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGeaexvBQYF3UsNFpEDIBJQFqRn6E5q3qAoSoHEGhxksZfPcTSvKDcm8 j+9iAHmJR/mTFI0BYIjBkzDTWDlHO02I/Y39iKa8zf4nMXDOjqu0IwM0zRz5au6m W2Af2fzH/YJCTB/MrGZPxrCcZDTStUTwof2f1M19cqk9iiwbDZ8l+7VEiWL4zRLH 2RXSLdI7zJ9JocweFgp0Hn6leuUIuoT2miuyge+gl6XBagafweJcOV2Vo/dawr1c TUBK0eSEm2hzqQCVH04KUKx+yfBpGQJBN+y994ck5QJMFd+/CfC072FoXy2fVcmi LWUNvAkEHPNbVvo45kipladdIKxfAgA= -----END CERTIFICATE-----Generated at Sat Jul 19 18:25:21 2025 by rpki-client