$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft File: C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json) Hash identifier: VNfcD9PWEKKcHHV20eiknY0n0s24r3LqHLQW4kUPFUU= Subject key identifier: B0:EF:B2:F6:FF:94:A0:A9:F8:1C:9D:65:21:B8:19:7C:6B:68:5E:3B Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C Certificate issuer: /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Certificate serial: 0ACC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft Manifest number: 0ABD Signing time: Fri 18 Jul 2025 19:44:40 +0000 Manifest this update: Fri 18 Jul 2025 19:44:39 +0000 Manifest next update: Fri 25 Jul 2025 19:44:39 +0000 Files and hashes: 1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: JFRBWGeliMjZN4bWd0uopC2LAwtSILxwHn4qn3wh7xQ=) 2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: mPyJyn/hNgsJM5dLLqcQiKjGiDQ28uU6I1BenfIYNic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2764 (0xacc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Validity Not Before: Jul 18 19:44:39 2025 GMT Not After : Jul 25 19:44:39 2025 GMT Subject: CN=687aa428-32aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:cd:88:eb:1e:83:27:88:26:9b:d5:5d:6f: 78:0d:9f:5a:89:1e:03:13:77:6c:d2:78:92:70:03: 52:30:d3:fe:a6:b5:d1:f1:97:2c:e2:9c:ab:03:a9: 56:62:1d:bc:d0:5a:23:96:0a:fa:42:5d:14:24:2a: 6e:80:a5:06:7f:a3:aa:a6:87:08:78:4f:f1:a3:45: bf:cf:72:a4:e9:06:3b:e4:de:9c:6f:34:ad:13:69: 2c:aa:11:b6:96:89:bf:0e:3a:b7:1b:84:6d:fc:0a: 67:62:f8:d2:83:5d:03:97:ca:c3:2c:91:65:fe:5b: 23:42:e1:2d:24:a3:ce:c3:79:d3:c4:62:ae:7e:32: d8:07:58:c1:31:2b:a6:ca:36:fc:9c:73:7f:fd:5e: b3:8b:cc:65:e6:36:2a:cf:0f:57:f0:4b:2b:d9:44: 3a:89:95:48:d1:62:f2:0f:f8:75:5c:98:45:99:3c: e2:b6:8d:36:e6:83:36:5c:80:c2:f8:e1:a0:0e:c7: ab:57:05:a7:25:22:b0:30:64:66:89:45:98:19:1e: 96:4f:9c:39:40:4c:ea:3e:a4:ef:f7:f5:58:42:5d: 51:69:9c:e8:64:98:e4:63:be:61:70:f2:ee:18:36: 9b:86:5b:1f:38:3d:04:9f:1a:3a:02:d4:86:5d:49: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EF:B2:F6:FF:94:A0:A9:F8:1C:9D:65:21:B8:19:7C:6B:68:5E:3B X509v3 Authority Key Identifier: keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:00:6e:ac:05:16:ca:67:b0:35:2f:07:43:14:11:95:ae:c6: 21:e3:0a:59:35:9e:eb:84:c3:90:28:0b:1c:3d:6f:26:9c:16: 20:f2:fe:52:f0:c9:17:0a:09:4a:02:32:7a:60:8d:77:00:b0: 70:0e:2f:39:09:66:25:eb:83:54:76:cd:af:db:5a:3e:12:bf: 56:7c:28:2c:80:5c:23:11:3a:79:56:3f:2c:42:f9:c7:73:cd: 80:ef:e7:63:20:4e:e3:72:5a:28:af:3e:0b:e1:a5:f2:2f:a9: 95:e4:63:a5:d7:ae:7e:f9:72:39:97:36:67:f9:82:61:fe:cb: ed:86:3f:27:c7:7c:ca:2a:98:f4:f0:5f:de:4c:3f:19:c5:89: df:9d:a9:aa:02:c8:f3:5c:46:ea:6e:d1:45:7f:96:14:81:fe: 58:d6:6c:e7:f7:b8:1a:1d:85:7e:3d:59:ad:bb:68:0e:19:3b: bc:a0:60:d8:36:c9:82:9e:2d:c2:32:a1:ce:84:c0:18:4c:50: 20:23:ea:0e:fc:cd:5b:c5:a9:48:8c:f4:3a:cc:6a:f4:49:d6: db:40:d9:c2:f9:25:f4:9f:b0:b0:4f:ea:ea:e2:23:41:b9:68: e4:07:d9:1b:3f:1b:17:4b:5b:17:d9:16:b0:0f:41:d1:af:38: eb:87:80:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFMUYxMTAvBgNVBAUTKDBCQkQ3MDU4OTBGMjc4RTFENTkzRTk4QTc0RjAzNDcw Rjc5NEZFNUMwHhcNMjUwNzE4MTk0NDM5WhcNMjUwNzI1MTk0NDM5WjAYMRYwFAYD VQQDEw02ODdhYTQyOC0zMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv3NiOsegyeIJpvVXW94DZ9aiR4DE3ds0niScANSMNP+prXR8Zcs4pyrA6lW Yh280Fojlgr6Ql0UJCpugKUGf6OqpocIeE/xo0W/z3Kk6QY75N6cbzStE2ksqhG2 lom/Djq3G4Rt/ApnYvjSg10Dl8rDLJFl/lsjQuEtJKPOw3nTxGKufjLYB1jBMSum yjb8nHN//V6zi8xl5jYqzw9X8Esr2UQ6iZVI0WLyD/h1XJhFmTzito025oM2XIDC +OGgDserVwWnJSKwMGRmiUWYGR6WT5w5QEzqPqTv9/VYQl1RaZzoZJjkY75hcPLu GDabhlsfOD0Enxo6AtSGXUk+CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDvsvb/ lKCp+BydZSG4GXxraF47MB8GA1UdIwQYMBaAFAu9cFiQ8njh1ZPpinTwNHD3lP5c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUUxRi8wMUY3RDZDQTU4 NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVPSFZrLW1LZFBBMGNQZVVf bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3MXdXSkR5ZU9IVmstbUtkUEEwY1BlVV9sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUUxRi8wMUY3RDZDQTU4NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVP SFZrLW1LZFBBMGNQZVVfbHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACAG6sBRbKZ7A1LwdDFBGVrsYh4wpZNZ7rhMOQKAscPW8mnBYg8v5S 8MkXCglKAjJ6YI13ALBwDi85CWYl64NUds2v21o+Er9WfCgsgFwjETp5Vj8sQvnH c82A7+djIE7jcloorz4L4aXyL6mV5GOl165++XI5lzZn+YJh/svthj8nx3zKKpj0 8F/eTD8ZxYnfnamqAsjzXEbqbtFFf5YUgf5Y1mzn97gaHYV+PVmtu2gOGTu8oGDY NsmCni3CMqHOhMAYTFAgI+oO/M1bxalIjPQ6zGr0SdbbQNnC+SX0n7CwT+rq4iNB uWjkB9kbPxsXS1sX2RawD0HRrzjrh4DU -----END CERTIFICATE-----Generated at Sun Jul 20 03:27:51 2025 by rpki-client