$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: 7zi0uLn7a9g3FHUfK0dv75xPfN7QbLVdhGK2KJAe1UA= Subject key identifier: 92:29:91:02:58:DB:22:AF:CA:B2:C2:14:38:38:3F:D1:4D:8E:A8:02 Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 0151 Signing time: Wed 23 Jul 2025 04:25:01 +0000 Manifest this update: Wed 23 Jul 2025 04:25:01 +0000 Manifest next update: Wed 30 Jul 2025 04:25:01 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: ado4/Qm5fzvju+RlO7KTMNClVJgCSnIsfKgmhG1DFnw=) 2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: qDjDjx/58q+LWkw/PFVn1wwvsxzD4HwajEOfZNh5ZU0=) 3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: bQFYc9TGCv39aWTUTfzRcDtHtMAg4CgWesOizIV+Kko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 04:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Jul 23 04:25:01 2025 GMT Not After : Jul 30 04:25:01 2025 GMT Subject: CN=6880641d-bc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:c5:9c:79:a5:eb:97:00:75:9f:a9:20:6e: 31:35:6b:62:ca:94:e1:12:e7:45:db:cc:19:e6:b3: ab:27:9a:d6:d6:28:29:a0:f5:12:f7:c8:93:49:8c: 08:71:19:f3:c8:b2:c1:26:be:a1:86:3a:20:6f:1c: c7:94:3a:2b:25:9d:ef:fd:92:45:da:30:db:f3:2e: 75:34:a8:03:ea:c2:70:23:20:c0:1f:af:25:3b:1e: 3d:45:38:7b:96:3d:5b:8a:79:81:8f:f1:88:3f:8e: 97:27:90:d7:03:b6:5e:83:2b:0e:ea:99:5e:1c:38: 61:0e:51:b9:80:68:1a:31:86:dd:10:23:c5:f6:a0: 3e:f1:17:70:dd:76:7e:a5:0e:e8:af:c8:73:0d:24: b0:17:7b:c7:4c:91:2e:c6:5e:5c:9e:5a:1c:80:35: 5f:d3:4e:a0:0c:26:7f:c1:72:19:16:ef:31:f6:86: e1:af:4e:21:ed:28:a1:e5:20:9f:e0:45:5e:8e:fa: c1:f1:44:be:7d:1f:c2:ed:cb:40:5d:18:81:79:9a: 63:ab:e0:19:5c:c5:74:11:6b:b1:23:ac:b8:da:14: 12:37:63:21:5e:46:9e:3d:1b:3c:72:19:72:b6:c3: 92:09:fb:7b:1d:79:45:bb:c5:33:db:92:27:83:52: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:29:91:02:58:DB:22:AF:CA:B2:C2:14:38:38:3F:D1:4D:8E:A8:02 X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:00:6a:ac:86:50:8d:e8:f8:24:2e:9a:15:a4:aa:2e:cb:6a: 3a:fe:bf:33:83:39:43:fc:c2:a0:02:58:ed:52:94:f0:d6:7d: ff:2c:6a:c8:a2:21:8c:25:c4:86:d0:55:7f:be:e6:7a:20:c0: 22:a0:a6:25:93:7c:1b:af:03:62:d4:06:8e:38:35:a8:b5:45: 52:c4:8f:55:53:ee:1a:f1:36:64:7c:20:6e:00:f9:ed:66:ee: b7:27:80:64:f9:e6:f8:ce:4c:23:7b:77:af:85:2b:cc:c4:aa: 39:75:c3:fe:33:d8:d6:79:1d:88:05:0f:86:b6:43:7c:14:55: b5:3c:be:ff:98:5d:53:14:81:3e:02:aa:e6:cd:0e:6c:ce:d5: 84:1e:36:fe:75:1f:82:10:b5:07:4c:16:e4:5f:b9:6e:7c:7a: 75:ad:b8:64:0a:50:6a:0b:18:97:bd:75:f6:ee:b4:b6:1f:8c: bc:6f:ac:b6:be:4d:49:99:87:33:97:b8:5a:e5:1a:ba:55:9d: f9:39:a5:e3:95:8b:e7:56:80:d2:ea:8b:2a:81:35:29:8f:fb: 62:10:bf:9e:0e:5c:ce:67:6b:85:b2:36:86:86:7b:92:25:98: 35:80:d5:c6:bb:db:18:86:e5:73:15:e4:ac:c2:00:8d:b4:82: a2:29:d0:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjUwNzIzMDQyNTAxWhcNMjUwNzMwMDQyNTAxWjAYMRYwFAYD VQQDEw02ODgwNjQxZC1iYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVbFnHml65cAdZ+pIG4xNWtiypThEudF28wZ5rOrJ5rW1igpoPUS98iTSYwI cRnzyLLBJr6hhjogbxzHlDorJZ3v/ZJF2jDb8y51NKgD6sJwIyDAH68lOx49RTh7 lj1binmBj/GIP46XJ5DXA7ZegysO6pleHDhhDlG5gGgaMYbdECPF9qA+8Rdw3XZ+ pQ7or8hzDSSwF3vHTJEuxl5cnlocgDVf006gDCZ/wXIZFu8x9obhr04h7Sih5SCf 4EVejvrB8US+fR/C7ctAXRiBeZpjq+AZXMV0EWuxI6y42hQSN2MhXkaePRs8chly tsOSCft7HXlFu8Uz25Ing1JjxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIpkQJY 2yKvyrLCFDg4P9FNjqgCMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKAGqshlCN6PgkLpoVpKouy2o6/r8zgzlD/MKgAljtUpTw1n3/LGrI oiGMJcSG0FV/vuZ6IMAioKYlk3wbrwNi1AaOODWotUVSxI9VU+4a8TZkfCBuAPnt Zu63J4Bk+eb4zkwje3evhSvMxKo5dcP+M9jWeR2IBQ+GtkN8FFW1PL7/mF1TFIE+ AqrmzQ5sztWEHjb+dR+CELUHTBbkX7lufHp1rbhkClBqCxiXvXX27rS2H4y8b6y2 vk1JmYczl7ha5Rq6VZ35OaXjlYvnVoDS6osqgTUpj/tiEL+eDlzOZ2uFsjaGhnuS JZg1gNXGu9sYhuVzFeSswgCNtIKiKdBG -----END CERTIFICATE-----Generated at Thu Jul 24 17:22:35 2025 by rpki-client