$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft File: 446z9aUQfjDwynHd6nWxcNCwMlY.mft (raw, json) Hash identifier: yYUPWJrzxwoIRVWEoyBJzcaGHbpuFDugPoSwPqgojBo= Subject key identifier: D5:FF:6D:E9:99:DD:98:9B:D4:16:2E:53:6E:D7:A5:B6:BC:C3:28:A7 Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 Certificate issuer: /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft Manifest number: DB Signing time: Sat 19 Jul 2025 05:48:38 +0000 Manifest this update: Sat 19 Jul 2025 05:48:37 +0000 Manifest next update: Sat 26 Jul 2025 05:48:37 +0000 Files and hashes: 1: 446z9aUQfjDwynHd6nWxcNCwMlY.crl (hash: msxh+B2L2HvdKpEnYpI53dMenKbFJ2Nh5wF9ahv1fus=) 2: CEA2276C1AD511F0A8A8811CC4F9AE02.roa (hash: 2A1lG71X8xYaIUoTChjegPu89TboGvrn5Fad8OHtf1k=) 3: B84D6D3AF81811EFACB5925BC4F9AE02.roa (hash: OXnTHrIuW8lqh4Zru5Af4wCTMKEnL5QDhv8/K+4cKxI=) 4: F9ECF4A0295A11EFBECFCA7EC4F9AE02.roa (hash: NdbphxCCW/0QaYFIIuCoc2s3U5MsSxFLdZGoiC7E3Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Validity Not Before: Jul 19 05:48:37 2025 GMT Not After : Jul 26 05:48:37 2025 GMT Subject: CN=687b31b5-0a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fb:59:a8:6a:3a:1a:6c:18:06:75:3a:86:a0: 28:1f:5d:1f:bf:a0:c7:53:c0:53:4a:27:ec:00:fe: a8:61:c9:41:24:e0:6e:d3:40:bc:8a:55:66:9a:7f: 4c:ac:e5:47:d9:05:9a:1e:52:4d:b7:c9:c3:f8:dc: 02:d8:26:4d:1d:4a:a7:5e:8b:b2:92:9e:c8:c7:81: 5f:a9:1e:bc:e1:26:1e:49:aa:21:28:29:1b:c5:b5: c3:02:40:b5:39:32:7b:f2:7d:d8:7f:57:74:0c:95: 65:ff:65:78:21:a6:5d:3a:b8:c1:1e:ac:e4:13:85: 9e:3b:34:08:74:3a:18:ce:15:e4:1e:bf:9c:24:e3: f3:89:ad:b8:75:1e:aa:62:be:57:53:cf:c3:fb:9f: fe:da:cb:39:95:84:1d:96:f0:b4:fb:c1:fe:3b:fb: 83:62:e8:e4:a8:7e:fe:0c:9d:ed:d5:a4:b0:c8:26: 87:4c:5a:a2:ff:0f:3d:3b:b5:66:3e:79:12:89:99: 06:d8:1a:84:c2:ec:1c:38:08:76:74:a8:67:b6:a6: 2e:8a:9f:a3:8f:50:8d:d4:9e:9f:a0:b8:41:2f:a0: 4a:f9:3e:75:db:28:02:26:89:f9:b9:81:ed:52:6f: 17:68:49:9a:a7:e5:57:95:d7:37:8a:e5:f6:ea:19: 4f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FF:6D:E9:99:DD:98:9B:D4:16:2E:53:6E:D7:A5:B6:BC:C3:28:A7 X509v3 Authority Key Identifier: keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:e9:2e:b9:51:0f:e3:c0:1c:30:56:ec:0a:09:86:b3:c2:78: 69:e1:97:12:9d:b3:b2:50:20:da:d1:e7:27:82:99:ae:96:93: ec:70:9b:4b:9f:e8:85:a2:68:c4:65:a0:8d:75:c1:20:c7:69: 79:c8:94:61:8f:99:c4:bc:af:5c:4d:b3:3d:ee:da:5e:f8:11: 5b:9e:04:c0:48:f4:88:de:18:23:5a:c5:4a:5f:a9:91:f4:88: 7f:b6:10:c4:b6:a7:cb:f0:3a:0d:a5:75:41:57:21:d0:17:aa: db:9f:04:33:5a:b4:20:b3:ae:70:ce:6f:7d:fa:34:77:9f:03: 9e:5a:65:1e:f0:40:88:14:80:79:26:0f:b8:85:3d:96:30:af: e8:3f:62:70:48:fe:36:82:cc:01:b8:e0:c2:b0:e3:4e:6d:7f: 77:d0:ae:f6:69:4f:c6:ac:f4:4d:59:ff:2e:81:48:8f:86:ad: 35:8b:91:f6:fc:dc:1d:d2:e9:79:a6:41:83:7a:75:e0:1a:17: bc:02:31:45:7e:b0:c9:15:c7:6e:1c:65:72:21:35:a6:f9:20: 57:36:a4:47:41:f7:ba:16:a5:5f:83:89:36:f5:81:a7:c4:f5: b6:dc:8a:fc:36:14:9e:d8:22:5c:93:eb:cf:60:eb:ca:05:b9: 13:26:4e:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NjAxMTAvBgNVBAUTKEUzOEVCM0Y1QTUxMDdFMzBGMENBNzFEREVBNzVCMTcw RDBCMDMyNTYwHhcNMjUwNzE5MDU0ODM3WhcNMjUwNzI2MDU0ODM3WjAYMRYwFAYD VQQDEw02ODdiMzFiNS0wYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ftZqGo6GmwYBnU6hqAoH10fv6DHU8BTSifsAP6oYclBJOBu00C8ilVmmn9M rOVH2QWaHlJNt8nD+NwC2CZNHUqnXouykp7Ix4FfqR684SYeSaohKCkbxbXDAkC1 OTJ78n3Yf1d0DJVl/2V4IaZdOrjBHqzkE4WeOzQIdDoYzhXkHr+cJOPzia24dR6q Yr5XU8/D+5/+2ss5lYQdlvC0+8H+O/uDYujkqH7+DJ3t1aSwyCaHTFqi/w89O7Vm PnkSiZkG2BqEwuwcOAh2dKhntqYuip+jj1CN1J6foLhBL6BK+T512ygCJon5uYHt Um8XaEmap+VXldc3iuX26hlPGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX/bemZ 3Zib1BYuU27Xpba8wyinMB8GA1UdIwQYMBaAFOOOs/WlEH4w8Mpx3ep1sXDQsDJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU2MC80QzNENkJDMDIx NkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZqRHd5bkhkNm5XeGNOQ3dN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0Nno5YVVRZmpEd3luSGQ2bld4Y05Dd01sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU2MC80QzNENkJDMDIxNkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZq RHd5bkhkNm5XeGNOQ3dNbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC6S65UQ/jwBwwVuwKCYazwnhp4ZcSnbOyUCDa0ecngpmulpPscJtL n+iFomjEZaCNdcEgx2l5yJRhj5nEvK9cTbM97tpe+BFbngTASPSI3hgjWsVKX6mR 9Ih/thDEtqfL8DoNpXVBVyHQF6rbnwQzWrQgs65wzm99+jR3nwOeWmUe8ECIFIB5 Jg+4hT2WMK/oP2JwSP42gswBuODCsONObX930K72aU/GrPRNWf8ugUiPhq01i5H2 /Nwd0ul5pkGDenXgGhe8AjFFfrDJFcduHGVyITWm+SBXNqRHQfe6FqVfg4k29YGn xPW23Ir8NhSe2CJck+vPYOvKBbkTJk7k -----END CERTIFICATE-----Generated at Sun Jul 20 03:51:29 2025 by rpki-client