$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft File: fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json) Hash identifier: BC0UdafQFeGzJvzpWQXWWUKmxZnNmwzPKyGOgxH0jas= Subject key identifier: 74:78:9B:E0:13:B3:F3:E3:3F:C4:57:72:51:50:39:4C:DA:DF:88:36 Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 Certificate issuer: /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft Manifest number: 06E7 Signing time: Tue 22 Jul 2025 22:18:51 +0000 Manifest this update: Tue 22 Jul 2025 22:18:50 +0000 Manifest next update: Tue 29 Jul 2025 22:18:50 +0000 Files and hashes: 1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: TewVkO8/DJfq4BDED1EB5BhqrS3PYz3B5OsKNlGCtQw=) 2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: hUqHFifGF2RTMr5P0bZj3vJ6RCASWQ9bPokCmECeKBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 22:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Validity Not Before: Jul 22 22:18:50 2025 GMT Not After : Jul 29 22:18:50 2025 GMT Subject: CN=68800e4b-9ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:de:f3:2b:52:e1:cd:aa:0a:0e:a2:23:0a:74: 6d:9f:37:c2:c5:1e:76:5b:6b:0b:78:1c:b7:60:78: 15:ea:ab:6b:df:9e:dc:fa:c2:7a:c7:6a:5b:9d:d9: 46:4b:d3:85:75:e5:d3:dd:b6:d6:d8:af:68:37:95: 9e:c6:81:d5:86:39:9a:7c:b1:b5:58:1d:d2:ea:92: 02:59:6c:da:8a:9a:bd:79:6c:43:16:e2:ca:54:73: 58:43:c2:9c:28:e8:f4:3e:c0:5a:48:70:d2:b9:9b: aa:63:70:6c:c3:69:74:19:b3:81:d2:50:fa:ad:81: eb:03:77:4f:51:d3:3a:cf:fa:d3:9a:81:70:aa:27: c9:99:6c:3a:85:1b:7b:aa:e5:7c:a3:b5:89:37:8a: 2a:cf:62:68:c8:06:94:7b:1a:9b:7c:93:50:fb:c4: 3b:64:84:73:10:9c:66:65:82:81:ae:06:b9:c3:33: 0e:f7:06:b1:87:1e:e7:3e:05:11:b6:37:7c:26:47: 2f:f6:08:98:24:c6:83:c5:d8:d6:bd:20:ad:59:ca: b9:37:b0:8e:ef:33:bd:47:b4:2a:b7:0e:de:f3:a6: 1a:42:3f:c5:d2:7c:c9:d3:ed:b7:e5:10:d8:bd:de: df:c6:62:cf:5c:80:74:ca:4e:5a:1f:93:64:f2:61: fe:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:78:9B:E0:13:B3:F3:E3:3F:C4:57:72:51:50:39:4C:DA:DF:88:36 X509v3 Authority Key Identifier: keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c7:da:cb:19:ea:03:b4:b0:49:05:13:b8:65:b3:dc:5f:0b: d6:08:5c:42:fd:f7:b8:34:0b:6c:9a:ac:4b:2b:97:3f:ec:15: a9:18:e7:ce:29:70:bf:8f:ee:90:65:78:26:6e:e6:20:eb:20: 28:19:ea:24:a2:1c:4a:35:df:9a:22:68:23:b4:30:38:ec:17: 41:51:ce:c1:51:38:9d:aa:21:34:00:31:0c:1c:ad:59:2a:7a: f3:05:15:08:9c:f8:11:83:da:5f:0d:b5:81:66:35:59:ba:e8: f1:8d:14:a9:6a:ca:24:c0:77:07:01:38:d8:d1:88:ec:5e:14: e1:e4:c7:11:94:8f:e8:30:a0:03:06:47:23:0a:1b:bc:14:08: 5f:ee:2a:0c:21:ad:c2:43:96:8f:f0:1c:1f:af:ae:fe:d4:a9: e5:6e:09:a2:45:b4:51:dc:e5:ed:d5:44:a1:9d:4d:f7:27:cf: b6:72:8e:91:bc:a7:34:01:b4:43:57:2e:5d:51:a8:99:26:64: 37:1d:e3:53:71:48:5a:c5:70:3f:1e:ac:5a:1f:77:84:be:0f: fe:45:aa:e8:57:3b:c0:3e:41:ea:99:08:7d:88:4d:92:2c:ca: 28:fd:ba:3d:fa:7b:1c:47:be:99:6c:56:f6:cc:de:aa:c1:85: 9d:b6:49:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMyMzIxMTAvBgNVBAUTKDdEM0EyMkRFRDFBQkYwQ0QzOTA5MjgwQjg5QjIzNzZD NTQ1RjZGMDcwHhcNMjUwNzIyMjIxODUwWhcNMjUwNzI5MjIxODUwWjAYMRYwFAYD VQQDEw02ODgwMGU0Yi05YWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5t7zK1LhzaoKDqIjCnRtnzfCxR52W2sLeBy3YHgV6qtr357c+sJ6x2pbndlG S9OFdeXT3bbW2K9oN5WexoHVhjmafLG1WB3S6pICWWzaipq9eWxDFuLKVHNYQ8Kc KOj0PsBaSHDSuZuqY3Bsw2l0GbOB0lD6rYHrA3dPUdM6z/rTmoFwqifJmWw6hRt7 quV8o7WJN4oqz2JoyAaUexqbfJNQ+8Q7ZIRzEJxmZYKBrga5wzMO9waxhx7nPgUR tjd8Jkcv9giYJMaDxdjWvSCtWcq5N7CO7zO9R7Qqtw7e86YaQj/F0nzJ0+235RDY vd7fxmLPXIB0yk5aH5Nk8mH+MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHR4m+AT s/PjP8RXclFQOUza34g2MB8GA1UdIwQYMBaAFH06It7Rq/DNOQkoC4myN2xUX28H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzIzMi80MTczMDA4NjU5 OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhNMDVDU2dMaWJJM2JGUmZi d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUb2kzdEdyOE0wNUNTZ0xpYkkzYkZSZmJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzIzMi80MTczMDA4NjU5OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhN MDVDU2dMaWJJM2JGUmZid2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASx9rLGeoDtLBJBRO4ZbPcXwvWCFxC/fe4NAtsmqxLK5c/7BWpGOfO KXC/j+6QZXgmbuYg6yAoGeokohxKNd+aImgjtDA47BdBUc7BUTidqiE0ADEMHK1Z KnrzBRUInPgRg9pfDbWBZjVZuujxjRSpasokwHcHATjY0YjsXhTh5McRlI/oMKAD BkcjChu8FAhf7ioMIa3CQ5aP8Bwfr67+1KnlbgmiRbRR3OXt1UShnU33J8+2co6R vKc0AbRDVy5dUaiZJmQ3HeNTcUhaxXA/HqxaH3eEvg/+RaroVzvAPkHqmQh9iE2S LMoo/bo9+nscR76ZbFb2zN6qwYWdtkmc -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:05 2025 by rpki-client