$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: q/T8Z5QmH/zSvPqjioPwR8k2gfuNTBTf5SqlWDVe1oI= Subject key identifier: 8B:A9:B7:11:BB:6E:A1:B3:33:84:11:AF:6B:0D:BF:EF:6D:C5:F4:97 Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 0280 Signing time: Sat 19 Jul 2025 02:06:08 +0000 Manifest this update: Sat 19 Jul 2025 02:06:08 +0000 Manifest next update: Sat 26 Jul 2025 02:06:08 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: WLR639ifPnJl5DQyeVIjLKuDT5ddo8O1LVl9co5FzBo=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: zKt5rIlG3Ic7UH3iJOhsHCuRIq5p4/W7QWgInl/Ff3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: Jul 19 02:06:08 2025 GMT Not After : Jul 26 02:06:08 2025 GMT Subject: CN=687afd90-fdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:da:f0:de:c5:1e:03:d3:a7:d4:8e:bd:dc: c7:aa:7e:06:b9:10:29:ec:69:44:68:c0:bc:10:ee: ea:dd:7d:c7:8d:14:20:41:8e:50:92:fe:a2:7b:07: f9:b5:58:a3:01:3e:b8:67:22:d9:c0:7e:05:01:23: d4:74:6c:7a:4b:99:97:c7:e7:c4:8b:b1:df:56:d9: 6c:73:c7:45:ac:54:25:fb:0d:aa:ac:e1:70:ca:be: af:5b:17:ad:8a:d8:9b:b0:e8:cc:30:23:66:61:e5: 65:93:09:d3:c9:ad:69:93:41:83:10:ec:d3:a6:10: 47:5e:ca:77:68:7f:4d:8f:b6:5d:43:4a:86:0d:f2: 03:60:ed:02:ee:52:a3:fb:6e:3b:29:52:85:79:8f: c3:60:04:ad:de:a3:37:08:76:d4:5c:6f:50:4f:bb: 1a:57:b5:8d:72:12:0e:0f:15:c8:07:84:c2:80:70: 1f:61:8b:f1:fb:38:9a:44:ff:ba:27:6a:ae:3b:d7: b4:51:8b:89:c2:4e:59:86:1a:d6:98:96:eb:3c:1f: 6f:31:57:2c:bd:16:7c:a8:10:98:cc:6d:32:80:55: 5b:14:5e:c9:1e:8a:87:dc:e4:49:a1:5d:a2:27:83: 64:90:74:44:d6:f8:f9:74:3e:f6:ac:8f:fb:4d:09: e1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A9:B7:11:BB:6E:A1:B3:33:84:11:AF:6B:0D:BF:EF:6D:C5:F4:97 X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:28:c5:cb:04:b8:bf:b1:23:64:d1:4b:e0:b4:c1:4a:b1:f2: 8e:e6:fc:68:9c:73:f1:b3:91:fd:26:0a:43:9c:5f:8f:af:e6: 19:40:09:af:f5:ae:18:53:8d:c4:85:27:85:95:c7:58:e7:a8: 9f:2c:67:00:7d:1d:a4:c0:84:d7:8e:3d:58:2b:37:94:77:7f: d8:22:0d:76:99:23:ab:bc:af:34:95:f8:40:be:8c:3c:7a:c7: 3f:5e:83:3a:77:09:52:f2:09:c3:6a:4c:2b:4b:fe:b3:7d:9c: d7:2e:09:ab:34:f9:d6:18:b0:38:ff:1b:5c:7f:45:82:cf:c7: d6:d9:af:a6:9e:1c:4e:95:d0:4c:43:c5:1f:f5:d3:fa:9a:0d: 62:c8:89:57:53:16:ea:a0:40:a8:e4:87:ad:9e:d5:24:e6:84: 88:89:b3:1e:ad:80:00:90:9e:8c:de:e1:f4:fd:8d:f2:3d:c6: 49:c6:66:48:d5:cf:11:19:27:f2:85:2c:0e:c3:45:86:7a:77: 75:58:4a:55:97:16:61:0f:02:1c:6e:a0:fe:e7:ff:80:ec:33: b8:1f:9e:1c:8d:bf:c3:7d:9a:26:ea:10:41:3e:97:bb:3f:e4: b8:b6:88:43:46:8c:8f:51:06:41:ac:b1:a0:fb:ec:e6:a0:02: 49:80:1a:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUwNzE5MDIwNjA4WhcNMjUwNzI2MDIwNjA4WjAYMRYwFAYD VQQDEw02ODdhZmQ5MC1mZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj/a8N7FHgPTp9SOvdzHqn4GuRAp7GlEaMC8EO7q3X3HjRQgQY5Qkv6iewf5 tVijAT64ZyLZwH4FASPUdGx6S5mXx+fEi7HfVtlsc8dFrFQl+w2qrOFwyr6vWxet itibsOjMMCNmYeVlkwnTya1pk0GDEOzTphBHXsp3aH9Nj7ZdQ0qGDfIDYO0C7lKj +247KVKFeY/DYASt3qM3CHbUXG9QT7saV7WNchIODxXIB4TCgHAfYYvx+ziaRP+6 J2quO9e0UYuJwk5ZhhrWmJbrPB9vMVcsvRZ8qBCYzG0ygFVbFF7JHoqH3ORJoV2i J4NkkHRE1vj5dD72rI/7TQnhDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuptxG7 bqGzM4QRr2sNv+9txfSXMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYKMXLBLi/sSNk0UvgtMFKsfKO5vxonHPxs5H9JgpDnF+Pr+YZQAmv 9a4YU43EhSeFlcdY56ifLGcAfR2kwITXjj1YKzeUd3/YIg12mSOrvK80lfhAvow8 esc/XoM6dwlS8gnDakwrS/6zfZzXLgmrNPnWGLA4/xtcf0WCz8fW2a+mnhxOldBM Q8Uf9dP6mg1iyIlXUxbqoECo5IetntUk5oSIibMerYAAkJ6M3uH0/Y3yPcZJxmZI 1c8RGSfyhSwOw0WGend1WEpVlxZhDwIcbqD+5/+A7DO4H54cjb/DfZom6hBBPpe7 P+S4tohDRoyPUQZBrLGg++zmoAJJgBqC -----END CERTIFICATE-----Generated at Sun Jul 20 10:00:19 2025 by rpki-client