$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json) Hash identifier: uVyLhQ6cDVylVrDbFyC8TFdd2UIVz1jpd7JiJzqG1xw= Subject key identifier: 1C:1E:D8:4F:B3:C7:54:CD:F5:B4:0B:9F:3C:7A:8C:28:42:91:DF:90 Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft Manifest number: EF Signing time: Mon 21 Jul 2025 05:27:15 +0000 Manifest this update: Mon 21 Jul 2025 05:27:14 +0000 Manifest next update: Mon 28 Jul 2025 05:27:14 +0000 Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: SN2yHi2+q4ozn+kV38YJiRm2rdiRHH82bYC0r9flDV0=) 2: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: w5ofhzUzRvCot65WQ4cidA6AcgZbPr0ZDlGiXy64td8=) 3: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: G4iwG5XMEp5g2eV1gP3t6eKMuKxcRTnnbvUBF3nUwk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5849, serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Validity Not Before: Jul 21 05:27:14 2025 GMT Not After : Jul 28 05:27:14 2025 GMT Subject: CN=687dcfb3-ba7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:01:42:f7:7d:08:93:a6:5f:15:b2:a9:18:4b: fe:e2:be:dd:c0:78:2b:0f:0b:7c:e4:e8:ed:8e:97: 6f:aa:86:c1:5b:82:83:8b:a9:75:d4:6a:2b:53:a4: 5b:26:a2:79:3d:a2:ba:33:6b:36:0d:a3:97:ef:03: 7e:12:c0:c3:30:68:08:15:bd:45:19:f1:ec:89:10: 05:c0:da:b7:13:25:52:ce:a1:07:38:75:c1:99:f9: 40:19:36:3b:f4:fb:8e:65:e2:59:3f:02:82:4e:4c: c5:2d:c6:ea:a3:be:82:c9:69:1f:64:35:d2:ec:c3: d3:1c:c3:4a:00:c9:12:c7:39:12:d2:b4:ae:ec:bb: 5d:65:d2:98:47:58:0d:f8:ec:f8:b2:3e:d6:67:02: 6e:3d:4d:bd:2e:e9:23:f1:d8:49:e8:0f:b8:fa:cc: 47:3d:0f:b8:04:05:09:eb:70:67:21:89:af:83:b2: 05:23:9e:60:bd:5d:a8:75:58:99:3f:0f:17:27:02: 1f:e5:7d:ad:fb:6a:39:82:86:83:4c:b0:3c:d6:d3: cb:09:c3:51:89:b0:6f:80:c3:94:35:ef:a7:33:c0: 41:f4:21:07:65:65:71:a4:e4:89:7e:be:2d:c9:b3: 98:85:5c:e1:b1:68:19:07:7c:eb:3a:25:27:90:81: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1E:D8:4F:B3:C7:54:CD:F5:B4:0B:9F:3C:7A:8C:28:42:91:DF:90 X509v3 Authority Key Identifier: keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:30:2c:8b:9c:48:28:54:d0:eb:d6:8f:52:4a:f3:37:77:21: f1:8e:6d:d5:57:4b:98:90:2c:c7:b4:59:d6:e9:d4:f6:24:b0: b9:7e:c5:ab:f3:cd:9f:06:62:e0:23:5b:1c:e5:87:d1:22:d4: ae:ef:12:53:9a:0e:f6:cd:fe:81:35:9b:cf:24:4f:af:16:01: db:bb:04:b8:32:c0:29:90:03:de:c8:41:2b:09:de:28:3c:e8: b7:bb:87:b4:61:af:e2:ad:bd:7b:eb:67:d9:e0:36:a7:78:23: b2:a9:3a:cb:2a:e1:8b:04:b2:7d:d4:c5:d8:87:ef:ee:ff:90: 6e:1e:68:e6:ff:ed:15:fc:4a:ad:12:74:ca:65:6c:de:8f:9c: 67:0a:61:5b:00:6e:d2:97:3b:c7:aa:53:34:84:39:ee:8d:ac: c7:be:c9:9d:b6:25:b5:dd:64:f9:1c:2c:69:86:86:38:86:7e: 15:8e:d2:93:43:06:d2:15:7a:73:4a:04:b2:b5:8d:34:b9:42: 9f:90:70:aa:6a:e9:43:cb:4f:bb:24:89:4d:ee:9a:93:6b:68: 22:5a:71:c5:63:0b:b1:08:51:95:52:a6:6f:ff:be:17:c1:58: 57:f0:50:fe:b5:dd:13:9a:d9:d0:94:5e:01:de:ce:16:e4:ce: e4:e0:26:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4NDkxMTAvBgNVBAUTKDUzNkJGOEREQ0U4MDI2NjczNzhGNDdCRDQ5NTRBOTBC N0M3MDA5QzEwHhcNMjUwNzIxMDUyNzE0WhcNMjUwNzI4MDUyNzE0WjAYMRYwFAYD VQQDEw02ODdkY2ZiMy1iYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QFC930Ik6ZfFbKpGEv+4r7dwHgrDwt85OjtjpdvqobBW4KDi6l11GorU6Rb JqJ5PaK6M2s2DaOX7wN+EsDDMGgIFb1FGfHsiRAFwNq3EyVSzqEHOHXBmflAGTY7 9PuOZeJZPwKCTkzFLcbqo76CyWkfZDXS7MPTHMNKAMkSxzkS0rSu7LtdZdKYR1gN +Oz4sj7WZwJuPU29Lukj8dhJ6A+4+sxHPQ+4BAUJ63BnIYmvg7IFI55gvV2odViZ Pw8XJwIf5X2t+2o5goaDTLA81tPLCcNRibBvgMOUNe+nM8BB9CEHZWVxpOSJfr4t ybOYhVzhsWgZB3zrOiUnkIEe2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwe2E+z x1TN9bQLnzx6jChCkd+QMB8GA1UdIwQYMBaAFFNr+N3OgCZnN49HvUlUqQt8cAnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTg0OS9EQkFEMzg0RUY3 OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUptYzNqMGU5U1ZTcEMzeHdD Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0NjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTg0OS9EQkFEMzg0RUY3OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUpt YzNqMGU5U1ZTcEMzeHdDY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtMCyLnEgoVNDr1o9SSvM3dyHxjm3VV0uYkCzHtFnW6dT2JLC5fsWr 882fBmLgI1sc5YfRItSu7xJTmg72zf6BNZvPJE+vFgHbuwS4MsApkAPeyEErCd4o POi3u4e0Ya/irb1762fZ4DaneCOyqTrLKuGLBLJ91MXYh+/u/5BuHmjm/+0V/Eqt EnTKZWzej5xnCmFbAG7SlzvHqlM0hDnujazHvsmdtiW13WT5HCxphoY4hn4VjtKT QwbSFXpzSgSytY00uUKfkHCqaulDy0+7JIlN7pqTa2giWnHFYwuxCFGVUqZv/74X wVhX8FD+td0TmtnQlF4B3s4W5M7k4CaK -----END CERTIFICATE-----Generated at Mon Jul 21 12:48:45 2025 by rpki-client