$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json) Hash identifier: jQGCU3Nb8L0bV1/KjW8QBoGNVoKvym1ibkOxHJzYY7w= Subject key identifier: DE:E3:3D:2A:A0:65:A2:9B:20:BD:A2:78:CB:97:DC:63:5E:C2:A9:96 Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft Manifest number: 0155 Signing time: Mon 21 Jul 2025 04:12:53 +0000 Manifest this update: Mon 21 Jul 2025 04:12:53 +0000 Manifest next update: Mon 28 Jul 2025 04:12:53 +0000 Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: pPG9HAKNNusJM6z+q2eLJh1L8dh1Q0fzJsohJAZWQuM=) 2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: UriYheink9mBFpQsL32JX0ce8LUKE4XsmIwp1611QqI=) 3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: jh0oO56JyhcPYhu6/Q/RMYfmAkOnoy1yyTgFcYp5ApY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: Jul 21 04:12:53 2025 GMT Not After : Jul 28 04:12:53 2025 GMT Subject: CN=687dbe45-b0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:67:ef:55:8e:a1:f0:5b:7a:bc:f1:66:97: 40:a3:bb:2e:34:08:d5:14:b3:4e:82:56:b8:aa:fd: 97:05:81:70:f1:7c:7d:6a:0f:06:da:a5:11:f6:a3: fe:ca:c7:69:30:c6:e0:92:4c:93:3f:e5:54:24:b2: b8:d0:6a:f9:bf:cb:bc:15:35:f0:2a:ce:32:4f:71: e4:ee:3f:5b:88:ed:28:f0:7d:1a:5e:4e:ac:4e:00: e3:57:32:fd:fe:59:fe:f2:0f:47:fd:41:d7:81:13: 5c:95:78:85:58:75:ad:f2:0b:24:8e:e4:37:2e:cb: 39:5e:51:07:61:36:80:13:74:32:47:59:af:01:dc: 70:fd:b9:11:8f:77:11:e8:b4:4c:4a:a3:0e:13:d5: 6c:5e:e8:27:b0:cf:20:74:ad:dc:59:97:d0:d0:2a: 45:5c:4e:59:47:aa:37:11:ac:97:0a:af:7f:b3:42: fb:ed:d3:e6:55:22:f0:47:23:4a:c3:c6:52:f0:1e: 60:7a:c5:73:ba:1d:f0:29:14:dc:11:e9:2e:4a:ce: 55:01:db:4a:73:54:2c:6a:d3:f1:13:17:b0:b7:41: 81:fd:25:c6:e9:71:eb:77:0b:96:5d:8f:54:53:4e: 80:56:1e:ed:43:21:2a:ea:3b:b1:54:e0:09:f9:81: b8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E3:3D:2A:A0:65:A2:9B:20:BD:A2:78:CB:97:DC:63:5E:C2:A9:96 X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:66:f9:21:2e:41:ff:8b:eb:36:53:cc:17:c1:02:cd:48:e8: c8:a7:c7:7b:57:1f:97:da:0a:07:79:7a:09:d9:cd:c1:83:30: c0:e0:37:9c:17:0d:29:2d:81:82:2b:5d:13:2d:67:a1:9c:70: 30:d7:84:e3:ba:ca:59:f3:6f:e3:69:ca:b1:0d:34:14:64:e9: 22:b9:62:ce:ea:6e:a9:4a:95:0d:1b:19:00:96:06:09:73:b3: c8:64:72:7c:0c:eb:0c:38:7c:6b:3e:a5:77:01:9f:b1:fa:ec: 20:26:e8:f3:a5:e5:80:f5:4d:4d:f1:84:25:da:99:8f:3e:a4: 56:f8:09:0d:78:61:e7:34:cf:89:be:44:57:58:38:90:7d:02: b9:b0:fa:8a:b0:ca:c4:9e:76:7b:0b:4f:c8:2f:c1:97:70:0c: 8c:86:75:2e:8d:9d:c3:d1:7f:a5:0c:d3:b8:e4:ae:b1:bc:cb: 90:a3:74:2a:ed:0e:2c:12:64:1a:c4:1c:77:fc:72:df:2f:2e: 1b:93:8e:20:64:a2:5d:0e:63:97:ae:b8:12:15:2b:9f:4d:f4: 2b:fb:3f:d5:16:f5:8c:33:86:f0:bb:84:d2:6d:5b:3b:c7:87: 8c:68:68:1b:e5:e9:5c:0c:1e:d3:48:92:71:e1:43:1b:17:74: 5c:13:fe:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE Q0IyQThBNEIwHhcNMjUwNzIxMDQxMjUzWhcNMjUwNzI4MDQxMjUzWjAYMRYwFAYD VQQDEw02ODdkYmU0NS1iMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykRn71WOofBberzxZpdAo7suNAjVFLNOgla4qv2XBYFw8Xx9ag8G2qUR9qP+ ysdpMMbgkkyTP+VUJLK40Gr5v8u8FTXwKs4yT3Hk7j9biO0o8H0aXk6sTgDjVzL9 /ln+8g9H/UHXgRNclXiFWHWt8gskjuQ3Lss5XlEHYTaAE3QyR1mvAdxw/bkRj3cR 6LRMSqMOE9VsXugnsM8gdK3cWZfQ0CpFXE5ZR6o3EayXCq9/s0L77dPmVSLwRyNK w8ZS8B5gesVzuh3wKRTcEekuSs5VAdtKc1QsatPxExewt0GB/SXG6XHrdwuWXY9U U06AVh7tQyEq6juxVOAJ+YG4qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7jPSqg ZaKbIL2ieMuX3GNewqmWMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/ZvkhLkH/i+s2U8wXwQLNSOjIp8d7Vx+X2goHeXoJ2c3BgzDA4Dec Fw0pLYGCK10TLWehnHAw14TjuspZ82/jacqxDTQUZOkiuWLO6m6pSpUNGxkAlgYJ c7PIZHJ8DOsMOHxrPqV3AZ+x+uwgJujzpeWA9U1N8YQl2pmPPqRW+AkNeGHnNM+J vkRXWDiQfQK5sPqKsMrEnnZ7C0/IL8GXcAyMhnUujZ3D0X+lDNO45K6xvMuQo3Qq 7Q4sEmQaxBx3/HLfLy4bk44gZKJdDmOXrrgSFSufTfQr+z/VFvWMM4bwu4TSbVs7 x4eMaGgb5elcDB7TSJJx4UMbF3RcE/4H -----END CERTIFICATE-----Generated at Mon Jul 21 06:57:43 2025 by rpki-client