$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft File: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json) Hash identifier: +LWyQEbvibp7iWG0y2xAyAW68/skcV559PBpgBHfI0k= Subject key identifier: B3:88:CB:60:DA:44:A6:76:65:5A:BC:F6:41:2C:0F:6E:8E:09:D6:0F Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD Certificate issuer: /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft Manifest number: 21 Signing time: Sat 19 Jul 2025 08:07:31 +0000 Manifest this update: Sat 19 Jul 2025 08:07:30 +0000 Manifest next update: Sat 26 Jul 2025 08:07:30 +0000 Files and hashes: 1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: 7jeXTpPjqGFxY/EupaYlnPXHe9EBvoTpPbn2SgXFj44=) 2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: slKnmbx+8GFjxzbTLlGteNrzM3mXfRGAHKxnN7Hj2s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Validity Not Before: Jul 19 08:07:30 2025 GMT Not After : Jul 26 08:07:30 2025 GMT Subject: CN=687b5242-690f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f1:0c:37:8c:f1:64:0d:84:08:32:b8:86:bb: ec:66:88:f4:72:7d:b6:47:16:80:a6:10:14:22:98: 51:f6:18:65:6b:8b:35:32:9b:0d:87:fc:c7:97:d6: 68:25:da:8a:fa:ef:e8:04:73:c3:64:fb:ce:f1:79: 91:96:fb:ab:29:5a:78:4c:40:57:cb:fc:13:2c:e8: 1a:c4:2d:92:b6:c9:70:9e:fa:26:ca:20:05:30:cd: 12:81:3b:1e:61:50:ae:8f:01:8d:83:11:2c:d6:a0: b7:3d:2c:a8:67:fd:46:7f:a0:92:76:07:00:9c:7a: 8e:0d:5a:ee:5a:ac:c0:f4:e9:9b:01:a8:9e:8c:14: 64:8a:34:30:83:d0:1f:79:eb:f2:91:2b:7b:d2:68: 2a:c0:55:2b:6a:4c:ca:7c:a3:03:d6:6a:42:44:16: 89:3d:24:9f:d8:c1:73:c8:f0:19:1f:8b:24:7c:81: dd:be:be:97:f6:f2:0f:65:5d:bb:6e:a6:6d:f6:e2: 0d:61:00:7c:36:b2:ba:5f:c9:97:2a:ce:ab:eb:82: 0f:66:e1:79:b9:21:6d:ee:9c:43:19:36:b0:08:db: f8:cc:da:63:ce:91:42:4f:9f:c6:3c:a5:d1:17:dc: c9:f2:d9:43:9e:84:d4:95:ae:a9:b8:4d:60:b9:68: 89:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:CB:60:DA:44:A6:76:65:5A:BC:F6:41:2C:0F:6E:8E:09:D6:0F X509v3 Authority Key Identifier: keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:03:4c:54:67:0d:4b:08:75:65:0f:35:22:7c:1c:77:13:15: 66:a8:a5:aa:95:39:0f:cc:01:73:8e:2a:be:e7:1a:a3:2c:21: fe:34:51:54:0e:c0:9b:ad:09:27:47:09:3a:96:70:5e:81:e4: 89:57:33:88:a3:45:59:14:33:e7:e4:df:79:d9:03:bc:9e:1f: bd:5c:25:8a:0a:ac:1f:e0:dd:70:0b:75:97:b3:0d:d0:01:ef: f8:4b:47:da:d2:40:aa:70:25:91:86:29:2f:a8:76:2f:a4:23: a7:0f:5c:84:fa:07:a3:54:1a:85:d1:ba:5b:fd:13:b7:40:f4: 98:c8:d0:d8:c1:8f:3d:50:ae:28:a8:5e:e3:04:be:29:06:45: 71:55:0d:d6:46:2f:8c:43:5b:fc:78:06:31:8e:8c:9a:81:cd: 2f:9b:8f:ac:4b:96:91:e7:80:a9:49:59:40:4a:1c:4a:81:09: d9:82:48:46:8d:4b:93:68:78:b6:44:5b:c5:ec:5d:ab:46:e6: 60:75:ce:dd:70:fa:7e:08:59:31:09:f2:aa:60:3d:b0:11:87: 46:ab:0a:37:ba:df:18:27:3e:1e:d1:9e:33:d7:59:8d:48:3a: d1:41:bb:d9:24:23:44:1f:12:c1:1e:01:42:8f:29:b3:30:24: 35:ff:2e:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODM5RTExMC8GA1UEBRMoQzEyMTA5RjU1QzU1ODczQTQxQzM3NzgzNzJGQjA5QTBC NzQwRDJDRDAeFw0yNTA3MTkwODA3MzBaFw0yNTA3MjYwODA3MzBaMBgxFjAUBgNV BAMTDTY4N2I1MjQyLTY5MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCX8Qw3jPFkDYQIMriGu+xmiPRyfbZHFoCmEBQimFH2GGVrizUymw2H/MeX1mgl 2or67+gEc8Nk+87xeZGW+6spWnhMQFfL/BMs6BrELZK2yXCe+ibKIAUwzRKBOx5h UK6PAY2DESzWoLc9LKhn/UZ/oJJ2BwCceo4NWu5arMD06ZsBqJ6MFGSKNDCD0B95 6/KRK3vSaCrAVStqTMp8owPWakJEFok9JJ/YwXPI8BkfiyR8gd2+vpf28g9lXbtu pm324g1hAHw2srpfyZcqzqvrgg9m4Xm5IW3unEMZNrAI2/jM2mPOkUJPn8Y8pdEX 3Mny2UOehNSVrqm4TWC5aIl9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs4jLYNpE pnZlWrz2QSwPbo4J1g8wHwYDVR0jBBgwFoAUwSEJ9VxVhzpBw3eDcvsJoLdA0s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MzlFLzM0NUQwNTg2MzM2 ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpwQnczZURjdnNKb0xkQTBz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1NFSjlWeFZoenBCdzNlRGN2c0pvTGRBMHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 MzlFLzM0NUQwNTg2MzM2ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpw QnczZURjdnNKb0xkQTBzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADMDTFRnDUsIdWUPNSJ8HHcTFWaopaqVOQ/MAXOOKr7nGqMsIf40UVQO wJutCSdHCTqWcF6B5IlXM4ijRVkUM+fk33nZA7yeH71cJYoKrB/g3XALdZezDdAB 7/hLR9rSQKpwJZGGKS+odi+kI6cPXIT6B6NUGoXRulv9E7dA9JjI0NjBjz1Qriio XuMEvikGRXFVDdZGL4xDW/x4BjGOjJqBzS+bj6xLlpHngKlJWUBKHEqBCdmCSEaN S5NoeLZEW8XsXatG5mB1zt1w+n4IWTEJ8qpgPbARh0arCje63xgnPh7RnjPXWY1I OtFBu9kkI0QfEsEeAUKPKbMwJDX/Lqo= -----END CERTIFICATE-----Generated at Mon Jul 21 06:50:52 2025 by rpki-client