$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json) Hash identifier: ppJfQ5Is/YqwceYRBVhD7lpy/hB6J3jiMtIlaixow8g= Subject key identifier: FE:19:72:D5:1B:9D:26:C8:D9:17:BE:FD:D6:B8:27:A5:0E:2B:3E:57 Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft Manifest number: EB Signing time: Sat 19 Jul 2025 05:38:11 +0000 Manifest this update: Sat 19 Jul 2025 05:38:11 +0000 Manifest next update: Sat 26 Jul 2025 05:38:11 +0000 Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: IsjPVlmQhirMTJn/w7jvVeUy1Er9XW1KhoVV2bcdHaA=) 2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: SSYQhoePXSEZdBWsz2dSUFdjtoPBSwBZmvZLvzmRmE0=) 3: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: P3/wZ7DQvbJJfKWvdajqCfHfPIC9vT8MvrKGyjWYukc=) 4: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: ZSCw86aRTNxpcp5h59Ua7FuiYhnQ7JZYo+fxXzI0qEo=) 5: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: 81XCmtMAkz8d5MFKkbARa3r3fmwCBxTjGKLV+BXxDFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: Jul 19 05:38:11 2025 GMT Not After : Jul 26 05:38:11 2025 GMT Subject: CN=687b2f43-54ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:2e:9c:94:94:40:bb:ba:bf:f1:1e:18:3b: 9d:d5:ea:58:3b:ab:84:55:5b:ef:53:1a:42:d2:c8: b7:3e:11:60:50:f1:a5:d1:00:53:df:de:fd:9d:dc: 7b:c7:b6:a1:d0:43:a6:4c:c6:77:3d:1f:52:42:74: dd:8f:a3:61:22:63:96:1d:9f:3d:b6:63:02:c2:3b: bc:0f:5f:84:f2:76:eb:b2:d7:44:e3:a6:34:4e:14: 20:7f:af:39:cb:1c:4b:f1:87:5b:ce:c2:40:fd:43: d3:ad:5b:9b:44:37:56:a5:2f:29:5e:54:01:0b:6a: a8:12:9e:fd:b3:90:de:8b:f9:dc:4d:a1:11:46:8d: 17:2a:f1:a9:84:04:c4:97:a2:73:5c:00:5f:01:36: 78:c5:be:87:d0:45:9c:09:da:82:f4:3e:df:8e:1f: be:19:88:bd:00:6d:53:be:3d:b9:13:13:ad:87:33: 37:43:6d:82:c8:b5:61:e3:d1:fa:cd:9d:cd:6d:4c: 9a:db:24:a8:49:f4:9d:12:75:b8:88:ed:27:01:2b: 05:f7:5e:64:fd:39:45:ca:84:ff:a5:09:7b:91:72: c4:90:76:fd:76:9a:ca:06:33:69:b5:7c:b4:35:f4: 99:73:0f:35:9e:4e:95:73:2b:ce:4b:fc:7c:9b:9b: b7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:19:72:D5:1B:9D:26:C8:D9:17:BE:FD:D6:B8:27:A5:0E:2B:3E:57 X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:48:c4:8b:93:65:c2:c0:88:93:d4:69:9e:12:7d:e5:f6:87: b9:76:a3:ca:66:eb:bb:3f:3d:d1:51:a6:83:b0:68:86:aa:fc: ee:7c:fa:12:31:1a:27:4c:3f:7a:e7:ae:fb:a5:3c:33:eb:d9: a8:1a:ae:d7:24:b4:45:cf:75:cd:e2:2d:4d:d8:89:a6:64:d5: 14:fa:c2:ac:94:0d:28:42:11:46:50:b3:46:06:88:d6:12:29: 68:86:07:99:75:34:7b:2e:92:d8:58:c2:62:1b:53:d6:f6:55: 22:a8:ca:d3:e9:33:e8:c6:a0:48:ba:35:50:4a:bf:27:2a:ae: 1e:81:f5:74:d4:2d:de:e2:05:64:e0:cd:ae:8d:2f:6b:a2:47: 63:d5:29:5b:8c:4b:d0:6d:75:cd:64:7b:c1:cc:7a:b4:4b:ac: 25:c7:8b:13:f8:b0:3e:7d:8d:0e:7c:32:20:c4:84:bb:f3:3f: 78:c7:8c:c8:23:b4:be:7c:5e:8d:f4:41:2b:af:1a:42:14:d8: 9e:25:7f:f3:bd:e3:a8:47:db:5a:4a:fb:df:2b:ca:00:b2:35: a7:67:d3:8b:17:98:39:0c:0b:79:71:b5:2a:6d:f4:46:e2:ab: cf:da:b9:82:39:0a:74:b4:80:cc:25:10:72:56:12:9a:19:a9: b9:59:37:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD NjAwNTg5MDIwHhcNMjUwNzE5MDUzODExWhcNMjUwNzI2MDUzODExWjAYMRYwFAYD VQQDEw02ODdiMmY0My01NGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvU0unJSUQLu6v/EeGDud1epYO6uEVVvvUxpC0si3PhFgUPGl0QBT3979ndx7 x7ah0EOmTMZ3PR9SQnTdj6NhImOWHZ89tmMCwju8D1+E8nbrstdE46Y0ThQgf685 yxxL8YdbzsJA/UPTrVubRDdWpS8pXlQBC2qoEp79s5Dei/ncTaERRo0XKvGphATE l6JzXABfATZ4xb6H0EWcCdqC9D7fjh++GYi9AG1Tvj25ExOthzM3Q22CyLVh49H6 zZ3NbUya2ySoSfSdEnW4iO0nASsF915k/TlFyoT/pQl7kXLEkHb9dprKBjNptXy0 NfSZcw81nk6VcyvOS/x8m5u3mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4ZctUb nSbI2Re+/da4J6UOKz5XMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2 QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda aWh6SlVLeHZvUXZHQUZpUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVSMSLk2XCwIiT1GmeEn3l9oe5dqPKZuu7Pz3RUaaDsGiGqvzufPoS MRonTD965677pTwz69moGq7XJLRFz3XN4i1N2ImmZNUU+sKslA0oQhFGULNGBojW EilohgeZdTR7LpLYWMJiG1PW9lUiqMrT6TPoxqBIujVQSr8nKq4egfV01C3e4gVk 4M2ujS9rokdj1SlbjEvQbXXNZHvBzHq0S6wlx4sT+LA+fY0OfDIgxIS78z94x4zI I7S+fF6N9EErrxpCFNieJX/zveOoR9taSvvfK8oAsjWnZ9OLF5g5DAt5cbUqbfRG 4qvP2rmCOQp0tIDMJRByVhKaGam5WTfH -----END CERTIFICATE-----Generated at Sun Jul 20 10:22:06 2025 by rpki-client