$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json) Hash identifier: uFrWS8T/ErkgGkejtPXOvUtj/23jMeKuYNKY5qqFAXU= Subject key identifier: FE:CF:B3:EF:57:D8:37:2B:F8:4F:49:47:DF:A3:BD:4F:DE:FF:CE:F6 Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft Manifest number: 0187 Signing time: Sat 19 Jul 2025 03:48:08 +0000 Manifest this update: Sat 19 Jul 2025 03:48:07 +0000 Manifest next update: Sat 26 Jul 2025 03:48:07 +0000 Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: LBWFX31qNEG1FW9WpeeT4GBRWZYEHAkvdp6/8/aWH1Q=) 2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: uBYO+C6UlAsgzho2C/yzZOLuZD7LLvHBHa19TIwL+RU=) 3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: 4bQshwbLuuIizTEi1i8kAXXdNltaobrkapRT1VY6dw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Validity Not Before: Jul 19 03:48:07 2025 GMT Not After : Jul 26 03:48:07 2025 GMT Subject: CN=687b1577-d22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f4:1b:8b:fe:67:32:b5:d0:dc:7a:08:41:12: 83:b2:0e:cf:91:0d:99:dd:a0:07:9d:c3:7d:09:80: b8:ae:0a:e4:48:1b:44:0d:7b:bb:6a:5b:5e:4a:14: 68:d8:07:94:c4:fe:38:57:cd:c8:e6:f5:21:5a:f6: c7:13:53:7a:6f:d3:3e:27:fc:05:78:26:f0:eb:ba: 6d:3d:22:a6:71:47:99:e1:79:80:c5:20:87:7a:a9: 75:c1:a2:8f:c4:e9:03:b6:52:8c:15:67:d1:ea:a5: 1f:36:1f:f6:a0:06:1b:0a:e0:e8:fe:5f:c4:99:6c: 87:52:42:49:a6:4c:13:65:d6:80:30:9c:c4:e4:20: 1e:3e:3a:9c:24:cc:ba:e4:4c:a9:a5:b3:3b:3e:37: 56:f9:e6:a3:76:70:13:f8:6d:3d:b7:4d:4d:89:26: 96:36:25:85:da:5b:9a:ef:44:d0:60:49:28:9e:f1: 43:05:71:03:c8:6a:71:a1:9b:b3:68:49:75:78:c0: 87:3f:94:a9:59:ad:b9:47:47:4d:86:91:a0:a5:41: cd:40:79:22:5c:7a:eb:67:79:43:05:81:16:b3:e4: de:ca:af:55:f9:b9:d5:22:24:d0:d9:7c:ce:a1:57: 21:e4:ae:5b:5a:6d:f2:93:29:24:ce:b5:28:dc:10: a6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CF:B3:EF:57:D8:37:2B:F8:4F:49:47:DF:A3:BD:4F:DE:FF:CE:F6 X509v3 Authority Key Identifier: keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6d:84:b0:88:4b:8c:c6:ca:a4:e9:fc:8c:3c:3f:e4:74:72: 9f:4c:8f:2d:bd:06:11:ab:24:ff:e1:f9:e8:06:59:2d:26:31: 14:bc:fd:59:84:47:76:95:8e:4b:1c:37:63:45:7f:d5:07:6c: 44:f7:d6:f9:4a:f2:df:39:f4:81:d6:57:2f:e9:f7:3b:ec:5d: 89:8c:61:77:2c:6a:6b:30:e1:a7:04:c2:eb:2f:b4:9f:3c:6f: 0f:91:5c:43:7b:1c:29:40:7d:bc:4d:bd:fb:60:25:3f:02:8a: 5d:ec:4a:3f:5f:43:73:0b:0b:e6:02:bd:34:05:1f:48:07:09: 17:90:da:fe:35:34:ca:eb:59:49:d4:d5:f7:2d:46:ae:8e:4b: 77:37:7d:65:68:69:cb:aa:ec:be:74:32:0e:3c:50:17:43:14: 86:b4:7c:a6:01:7e:f1:58:5b:80:d8:d3:be:94:50:25:3c:d1: f1:a3:78:fd:86:25:08:66:96:e1:0d:58:97:a7:69:ce:d1:59: 69:7e:4a:f4:54:ea:19:2c:77:90:e1:b9:94:57:d4:de:0d:2b: 33:c1:d3:47:94:e4:cf:69:dd:01:f1:56:8d:a3:88:f7:f9:1e: 73:81:73:94:1b:c2:03:16:82:e1:07:50:76:03:33:30:9d:9e: f7:dc:b7:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4NkYxMTAvBgNVBAUTKDZCQUREN0Q1RDExMjgxMTJENzBBQjRBMjQ1MjQwMTQy OEY5RDA5N0IwHhcNMjUwNzE5MDM0ODA3WhcNMjUwNzI2MDM0ODA3WjAYMRYwFAYD VQQDEw02ODdiMTU3Ny1kMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovQbi/5nMrXQ3HoIQRKDsg7PkQ2Z3aAHncN9CYC4rgrkSBtEDXu7alteShRo 2AeUxP44V83I5vUhWvbHE1N6b9M+J/wFeCbw67ptPSKmcUeZ4XmAxSCHeql1waKP xOkDtlKMFWfR6qUfNh/2oAYbCuDo/l/EmWyHUkJJpkwTZdaAMJzE5CAePjqcJMy6 5EyppbM7PjdW+eajdnAT+G09t01NiSaWNiWF2lua70TQYEkonvFDBXEDyGpxoZuz aEl1eMCHP5SpWa25R0dNhpGgpUHNQHkiXHrrZ3lDBYEWs+Teyq9V+bnVIiTQ2XzO oVch5K5bWm3ykykkzrUo3BCmUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7Ps+9X 2Dcr+E9JR9+jvU/e/872MB8GA1UdIwQYMBaAFGut19XREoES1wq0okUkAUKPnQl7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzg2Ri80N0JBMjhBRTEz RjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dSTFhDclNpUlNRQlFvLWRD WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2M1gxZEVTZ1JMWENyU2lSU1FCUW8tZENYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qzg2Ri80N0JBMjhBRTEzRjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dS TFhDclNpUlNRQlFvLWRDWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+bYSwiEuMxsqk6fyMPD/kdHKfTI8tvQYRqyT/4fnoBlktJjEUvP1Z hEd2lY5LHDdjRX/VB2xE99b5SvLfOfSB1lcv6fc77F2JjGF3LGprMOGnBMLrL7Sf PG8PkVxDexwpQH28Tb37YCU/Aopd7Eo/X0NzCwvmAr00BR9IBwkXkNr+NTTK61lJ 1NX3LUaujkt3N31laGnLquy+dDIOPFAXQxSGtHymAX7xWFuA2NO+lFAlPNHxo3j9 hiUIZpbhDViXp2nO0Vlpfkr0VOoZLHeQ4bmUV9TeDSszwdNHlOTPad0B8VaNo4j3 +R5zgXOUG8IDFoLhB1B2AzMwnZ733Lfo -----END CERTIFICATE-----Generated at Sun Jul 20 07:36:22 2025 by rpki-client