$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: XtKzZEoF/T3kWTbH/XV39NbEx5js4oL15v0ZfaenyB0= Subject key identifier: 34:74:4E:1B:87:54:16:AA:8F:67:8F:B2:B6:89:C9:F7:10:3A:45:5B Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0193 Signing time: Sat 19 Jul 2025 03:37:14 +0000 Manifest this update: Sat 19 Jul 2025 03:37:13 +0000 Manifest next update: Sat 26 Jul 2025 03:37:13 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: u+uvjATjDoWGR2PiN+YOIo1PkkA5LFlYCuq99p6f0tk=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: 5LwG+YuvnWBKIRnuTBcbel0b3f9GalJtz9Pj2RCQeu4=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XEujoILkyQGDOgd5du+8WCWbh++D58fSsRkYOzlukgc=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: NGaaDsp7E7XVzTL3vht2Lwlvp5OwCewd6D52RccQHyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Jul 19 03:37:13 2025 GMT Not After : Jul 26 03:37:13 2025 GMT Subject: CN=687b12e9-5649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:09:20:9c:be:de:b5:cb:c1:8d:a9:17:a3:5e: 19:23:2a:c7:2b:31:bd:a1:4e:41:64:d8:76:1a:ec: d2:0a:ac:20:67:db:df:60:3b:bd:f8:fc:10:73:87: 3a:83:89:34:94:0b:28:87:64:3d:9e:50:43:bd:83: bd:83:07:a4:a1:ca:92:7a:fd:ec:5a:57:c4:13:ae: 03:42:5e:4a:14:21:dc:4b:70:7d:be:4e:c2:55:59: 89:41:56:60:e1:85:60:f1:74:27:a0:d6:46:16:ac: 57:33:2b:4b:ab:67:7b:a6:d5:09:f9:1e:34:5f:8a: f1:12:84:fb:48:ba:06:b0:46:45:4f:3e:0a:04:0a: f8:a1:63:8c:c8:2e:a7:a1:8f:7f:85:70:09:21:87: cb:03:ea:cb:fd:44:14:9b:a9:d0:82:33:34:13:29: f7:7e:b0:80:ac:9a:64:64:6f:c6:36:a8:1d:1d:c7: f4:e8:2f:d3:b0:72:89:aa:4f:cb:5d:65:72:c5:53: 2a:3a:6b:69:b6:ee:2f:82:1a:35:a9:5a:61:25:0f: 2e:61:3c:49:ba:02:44:f1:fb:81:fe:c5:29:75:9c: 35:3d:92:2f:69:6b:5d:20:c3:d5:71:c6:da:4c:30: c1:b5:6d:10:74:a8:e7:75:da:3a:b8:bf:cb:b8:29: 5a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:74:4E:1B:87:54:16:AA:8F:67:8F:B2:B6:89:C9:F7:10:3A:45:5B X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d4:be:0c:c2:7e:0d:ea:db:89:87:fe:7a:2f:a6:c3:2f:80: 05:d5:a4:29:49:f7:73:a3:55:c5:2a:bb:b5:fd:c7:4f:fa:55: d1:71:9c:a8:e2:8f:20:24:0d:18:be:72:64:e8:ed:56:7f:2b: 70:54:61:ee:a8:2a:e2:4d:c6:8c:6e:b0:54:47:c6:ff:e4:a4: f4:34:94:3d:d5:d3:d4:e9:9c:ab:26:8d:e9:0e:3a:04:3b:e9: bf:79:55:cc:81:98:aa:eb:05:83:99:dc:56:b3:14:8f:48:f2: b9:c1:17:d2:f7:09:63:9f:ee:d6:e3:fb:ff:06:d8:12:08:78: 37:10:57:ce:2e:b0:f3:8b:a8:ca:f2:00:1e:bb:9f:aa:54:bc: 4a:b4:42:05:35:eb:69:65:4c:01:ca:f1:23:9c:ec:3f:36:c5: 1e:16:eb:28:79:66:11:3e:85:0c:92:20:90:95:fb:b6:56:c5: af:da:c4:bf:08:d5:8c:5b:da:ac:e9:8e:73:96:69:1c:fb:83: 21:7c:ea:29:fe:9f:f7:20:0c:37:c3:13:8f:86:94:41:b9:be: 8c:f9:60:cb:25:8e:23:df:fa:2b:8d:eb:96:22:7c:46:7b:af: 00:4f:a0:79:bc:97:bb:31:82:13:bb:db:13:9d:e4:70:af:be: 6b:cb:bb:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUwNzE5MDMzNzEzWhcNMjUwNzI2MDMzNzEzWjAYMRYwFAYD VQQDEw02ODdiMTJlOS01NjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5AkgnL7etcvBjakXo14ZIyrHKzG9oU5BZNh2GuzSCqwgZ9vfYDu9+PwQc4c6 g4k0lAsoh2Q9nlBDvYO9gwekocqSev3sWlfEE64DQl5KFCHcS3B9vk7CVVmJQVZg 4YVg8XQnoNZGFqxXMytLq2d7ptUJ+R40X4rxEoT7SLoGsEZFTz4KBAr4oWOMyC6n oY9/hXAJIYfLA+rL/UQUm6nQgjM0Eyn3frCArJpkZG/GNqgdHcf06C/TsHKJqk/L XWVyxVMqOmtptu4vgho1qVphJQ8uYTxJugJE8fuB/sUpdZw1PZIvaWtdIMPVccba TDDBtW0QdKjnddo6uL/LuClaYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR0ThuH VBaqj2ePsraJyfcQOkVbMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB1L4Mwn4N6tuJh/56L6bDL4AF1aQpSfdzo1XFKru1/cdP+lXRcZyo 4o8gJA0YvnJk6O1WfytwVGHuqCriTcaMbrBUR8b/5KT0NJQ91dPU6ZyrJo3pDjoE O+m/eVXMgZiq6wWDmdxWsxSPSPK5wRfS9wljn+7W4/v/BtgSCHg3EFfOLrDzi6jK 8gAeu5+qVLxKtEIFNetpZUwByvEjnOw/NsUeFusoeWYRPoUMkiCQlfu2VsWv2sS/ CNWMW9qs6Y5zlmkc+4MhfOop/p/3IAw3wxOPhpRBub6M+WDLJY4j3/orjeuWInxG e68AT6B5vJe7MYITu9sTneRwr75ry7vP -----END CERTIFICATE-----Generated at Sun Jul 20 03:44:17 2025 by rpki-client