$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: +qh2J7g3JXR6QJCGtTcyXcD8JpKW2hSilz3HVtvxs9w= Subject key identifier: E6:41:8B:BD:3D:D2:70:EB:D5:EF:84:BA:D3:09:E1:26:E5:9B:B5:D4 Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 05FD Signing time: Fri 18 Jul 2025 23:18:04 +0000 Manifest this update: Fri 18 Jul 2025 23:18:04 +0000 Manifest next update: Fri 25 Jul 2025 23:18:04 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: DbYCmAKHlg1Bg6mfoBZxTTj0UZMJiPk2pWr5eq5rHEY=) 2: C9BA671C3A2611F0908A2B20C4F9AE02.roa (hash: hAsOFqLGhlXPlJQqq8o+TJ1lqU96PHU1fRQ8ll9kM1c=) 3: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: RAzhHtW1VH/eUjgZQiEsm0Ej6j+0F6PlwpjTpjOi8Jo=) 4: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: EkzwfsPvhq1FP6pm5CT4LDCnqWr4szU6ESASOp0o6DU=) 5: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: RB6HB76Hd37I1Qyua/UNLhe473Y5QaFhWKPCNvGT+Jc=) 6: DBF856463A3011F0B0C6F437C4F9AE02.roa (hash: 3y3NqdGA4Yb7KDxIbZnutCZORNmNgdB027E2G7UT98A=) 7: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: 1YFs0Zqq59OdTTfQ9TRBhg+ye+627iyYVeuBlex3Kfk=) 8: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: ehyJGIeBDK390bSFLx2HamOEcgKmw6zu6VhcLaVRD/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Validity Not Before: Jul 18 23:18:04 2025 GMT Not After : Jul 25 23:18:04 2025 GMT Subject: CN=687ad62c-320b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e5:69:95:ae:83:af:0a:56:b2:85:17:18:a7: 2a:82:62:7e:5d:69:87:ee:96:83:35:37:05:7f:e0: bb:23:10:d2:3d:80:f9:4d:a1:7e:91:23:bb:f2:fb: 3a:95:50:18:52:78:ce:0b:8c:c1:c9:a1:9b:ce:41: e3:41:4f:93:3a:7c:1a:ea:71:3e:5f:53:bc:f7:33: 7e:b4:5e:67:13:41:74:0f:5d:71:59:73:cf:63:e8: 29:7e:bb:13:05:ee:69:69:70:4f:c4:c2:b9:a9:0f: 4a:62:a4:5b:5f:f5:06:2b:54:6d:1a:1d:b1:c3:fa: d9:1d:ca:ea:21:47:48:5d:0b:3d:07:2a:1e:c3:5a: 31:79:f2:3d:2b:93:18:cb:a2:78:30:0c:c4:54:7d: 99:98:8d:49:bb:91:8c:b0:25:30:39:d9:b2:d4:96: 38:c2:4e:20:9f:1b:3b:ec:b3:cd:3c:cf:22:1b:1a: 9c:fa:6f:e3:40:ef:bb:4e:a9:34:90:ed:c3:9d:58: 28:bd:2a:d2:82:b7:c6:6e:d5:8d:2b:1b:b1:4c:54: 14:85:1e:8b:40:59:94:b1:94:bc:d4:7e:d2:f8:a0: 3d:b6:70:ee:0a:35:43:ff:80:1b:29:3e:ec:6f:76: 5a:6e:35:b0:e9:f8:27:ff:02:7c:38:15:7a:81:62: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:41:8B:BD:3D:D2:70:EB:D5:EF:84:BA:D3:09:E1:26:E5:9B:B5:D4 X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0e:6d:ff:41:31:14:40:97:bc:4b:35:9c:b8:ac:59:2e:10: 27:87:f5:30:82:23:6b:41:8a:bc:ba:58:9b:b7:b3:e0:45:cd: 4c:8c:fd:96:0c:b4:f6:31:73:10:2e:eb:52:a4:cb:86:a2:d5: 77:04:59:2b:79:7e:a9:51:ec:b1:45:a8:cd:2a:bb:fb:24:b1: 44:9c:4d:22:06:2a:c6:55:72:6a:11:b6:03:7d:2c:4b:f5:fa: 58:89:5a:d2:55:d6:c4:8f:cd:eb:0f:e9:5a:2c:99:1d:a5:86: 5a:7f:8f:1c:c6:57:1f:7a:45:ef:b4:fc:ce:12:6e:5f:25:36: 5d:89:b1:0a:f4:69:51:20:4d:dc:5a:05:85:6a:99:69:cb:57: 61:56:ef:03:4f:1f:a9:78:d4:ab:f0:9f:c5:d0:85:dc:7b:24: 2a:9a:78:f5:0e:23:28:e2:83:5b:83:8f:66:8e:aa:2e:17:d1: e9:76:63:19:44:b6:80:c3:a1:26:a1:e1:38:45:f6:5e:4f:8f: 89:ea:85:be:c9:d6:5b:82:6c:9a:71:49:ca:b6:9d:b1:f2:5f: 4b:03:2a:a7:ff:66:e5:02:13:b1:63:25:3d:cb:c3:65:d4:66: 36:76:e6:e9:5a:c6:47:9d:86:77:58:06:9b:15:90:df:8a:df: 1e:74:3a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUwNzE4MjMxODA0WhcNMjUwNzI1MjMxODA0WjAYMRYwFAYD VQQDEw02ODdhZDYyYy0zMjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmeVpla6DrwpWsoUXGKcqgmJ+XWmH7paDNTcFf+C7IxDSPYD5TaF+kSO78vs6 lVAYUnjOC4zByaGbzkHjQU+TOnwa6nE+X1O89zN+tF5nE0F0D11xWXPPY+gpfrsT Be5paXBPxMK5qQ9KYqRbX/UGK1RtGh2xw/rZHcrqIUdIXQs9Byoew1oxefI9K5MY y6J4MAzEVH2ZmI1Ju5GMsCUwOdmy1JY4wk4gnxs77LPNPM8iGxqc+m/jQO+7Tqk0 kO3DnVgovSrSgrfGbtWNKxuxTFQUhR6LQFmUsZS81H7S+KA9tnDuCjVD/4AbKT7s b3ZabjWw6fgn/wJ8OBV6gWLSYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZBi709 0nDr1e+EutMJ4Sblm7XUMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGDm3/QTEUQJe8SzWcuKxZLhAnh/UwgiNrQYq8ulibt7PgRc1MjP2W DLT2MXMQLutSpMuGotV3BFkreX6pUeyxRajNKrv7JLFEnE0iBirGVXJqEbYDfSxL 9fpYiVrSVdbEj83rD+laLJkdpYZaf48cxlcfekXvtPzOEm5fJTZdibEK9GlRIE3c WgWFaplpy1dhVu8DTx+peNSr8J/F0IXceyQqmnj1DiMo4oNbg49mjqouF9HpdmMZ RLaAw6EmoeE4RfZeT4+J6oW+ydZbgmyacUnKtp2x8l9LAyqn/2blAhOxYyU9y8Nl 1GY2dubpWsZHnYZ3WAabFZDfit8edDpd -----END CERTIFICATE-----Generated at Sun Jul 20 16:49:37 2025 by rpki-client