$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json) Hash identifier: uPIR5bfd+IQ770l6sKephwp66fPZN1ESEMWW1GZxDG8= Subject key identifier: EA:95:DA:1A:37:B4:7B:D2:0C:EF:AB:0B:39:BD:9C:9B:D9:FD:40:75 Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft Manifest number: 05DB Signing time: Fri 18 Jul 2025 23:23:07 +0000 Manifest this update: Fri 18 Jul 2025 23:23:06 +0000 Manifest next update: Fri 25 Jul 2025 23:23:06 +0000 Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: A2P430bEf3BuO2s8AlxYLunsXensn7a9/COSfxvsUzI=) 2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: 7ioLjk8VeJvEHBuoWRfrT57B74IDRpNgRa9+NJtrnGo=) 3: 0DD6AB9CA4F011EC96AF7B65C4F9AE02.roa (hash: /5KvjYunF83kIcMiJK5ao0UnFWTIm9b33GuRAVT7yXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: Jul 18 23:23:06 2025 GMT Not After : Jul 25 23:23:06 2025 GMT Subject: CN=687ad75a-46ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:b9:cc:61:c5:31:b0:1d:12:6e:10:ad:92: 9d:78:e3:16:54:8e:fc:08:79:cb:37:98:80:ae:84: 7d:21:c2:10:0b:53:fd:fe:d5:b2:3d:7b:51:90:5d: b3:5a:de:fa:33:20:4e:30:6c:00:95:b8:fa:69:b3: c9:f6:c6:c9:22:32:e2:21:54:8f:3c:77:35:84:86: 8c:38:bf:fd:fe:38:ba:52:ac:35:b2:b6:17:ae:d2: fc:f8:76:1c:bb:d7:28:74:56:06:2f:cb:63:cf:b4: a2:9f:bc:32:78:ff:7b:40:08:bc:71:b5:75:58:25: c3:b1:2b:cf:41:60:5d:a7:1e:47:d9:28:b2:b5:9d: 5a:82:56:87:b8:8b:8d:76:69:05:24:cd:ad:37:fa: c7:8e:09:76:3e:42:cb:bb:b0:20:8f:58:a7:96:34: d6:d0:24:26:13:d2:1d:6d:3a:b0:b8:58:95:e2:88: 07:1b:aa:7e:ac:d5:f8:da:4f:ae:7b:21:54:09:3d: fc:56:81:a1:cd:9f:34:14:44:96:a4:9f:a6:40:41: d4:24:c6:69:01:f6:d7:5a:77:e9:c5:5e:87:4b:63: 5f:52:8b:7b:f6:6f:aa:ce:42:56:f1:1b:2d:71:54: 69:a2:4b:6f:ec:55:3d:72:8c:5d:a4:98:c8:a1:1d: 9d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:95:DA:1A:37:B4:7B:D2:0C:EF:AB:0B:39:BD:9C:9B:D9:FD:40:75 X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a3:37:b9:f4:17:13:3c:8a:1d:e8:1a:cd:51:63:b6:af:44: 9d:9c:63:0d:91:c1:c4:6d:f1:7d:18:17:1a:a5:50:be:11:49: 94:e9:fe:a3:5b:fc:5f:2d:f9:fa:df:7f:5f:c9:45:3a:af:54: 8b:5d:08:85:d4:dd:15:5d:65:c2:90:c8:02:c5:ad:08:56:3f: bd:31:6e:d0:83:0c:2c:75:52:68:f1:f4:a1:8a:ad:ce:a9:bd: 91:7a:63:39:dc:5a:df:e1:08:92:aa:8d:da:88:d5:98:2a:a8: 65:02:68:5e:de:72:bd:07:22:fa:1c:af:fc:a8:87:f0:a0:d2: 3d:8a:58:85:a0:35:92:d3:ac:55:ea:c4:83:b0:18:09:69:f0: fa:85:75:db:e4:54:30:9e:9b:a3:0d:62:02:3d:b9:fe:2e:04: 87:99:91:5e:d3:cf:4f:61:98:91:d4:d3:ae:2d:d4:37:d9:17: e3:56:3e:d4:b1:37:de:7c:d7:4f:09:45:4a:a3:51:f4:0f:69: 39:78:b6:00:42:4a:d4:52:2d:28:b2:2b:b8:a3:ac:cf:22:6f: a8:f7:cc:37:5d:85:e8:3c:fb:db:39:f4:68:05:22:1f:c7:35: b6:08:e6:97:4b:56:7b:4f:7b:7d:df:70:af:d0:97:78:94:e1: e7:d2:10:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjUwNzE4MjMyMzA2WhcNMjUwNzI1MjMyMzA2WjAYMRYwFAYD VQQDEw02ODdhZDc1YS00NmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTa5zGHFMbAdEm4QrZKdeOMWVI78CHnLN5iAroR9IcIQC1P9/tWyPXtRkF2z Wt76MyBOMGwAlbj6abPJ9sbJIjLiIVSPPHc1hIaMOL/9/ji6Uqw1srYXrtL8+HYc u9codFYGL8tjz7Sin7wyeP97QAi8cbV1WCXDsSvPQWBdpx5H2SiytZ1aglaHuIuN dmkFJM2tN/rHjgl2PkLLu7Agj1inljTW0CQmE9IdbTqwuFiV4ogHG6p+rNX42k+u eyFUCT38VoGhzZ80FESWpJ+mQEHUJMZpAfbXWnfpxV6HS2NfUot79m+qzkJW8Rst cVRpoktv7FU9coxdpJjIoR2d7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqV2ho3 tHvSDO+rCzm9nJvZ/UB1MB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjVGNy80NEZDRTU2OEM3ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FD dUtITlJYZVRYazg4Slp3WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAoze59BcTPIod6BrNUWO2r0SdnGMNkcHEbfF9GBcapVC+EUmU6f6j W/xfLfn6339fyUU6r1SLXQiF1N0VXWXCkMgCxa0IVj+9MW7QgwwsdVJo8fShiq3O qb2RemM53Frf4QiSqo3aiNWYKqhlAmhe3nK9ByL6HK/8qIfwoNI9iliFoDWS06xV 6sSDsBgJafD6hXXb5FQwnpujDWICPbn+LgSHmZFe089PYZiR1NOuLdQ32RfjVj7U sTfefNdPCUVKo1H0D2k5eLYAQkrUUi0osiu4o6zPIm+o98w3XYXoPPvbOfRoBSIf xzW2COaXS1Z7T3t933Cv0Jd4lOHn0hAh -----END CERTIFICATE-----Generated at Sun Jul 20 07:15:47 2025 by rpki-client