$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft File: 07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json) Hash identifier: x3DjPPPzGpXuFdbRXQwcIwt8+PeFzKo5nzDtQITF28o= Subject key identifier: D3:EE:10:80:0F:4B:23:32:85:67:F4:6F:A8:5A:59:73:D8:55:62:D8 Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD Certificate issuer: /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft Manifest number: 066A Signing time: Tue 22 Jul 2025 14:48:57 +0000 Manifest this update: Tue 22 Jul 2025 14:48:56 +0000 Manifest next update: Tue 29 Jul 2025 14:48:56 +0000 Files and hashes: 1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: xwAZIUu2DpZnaUPvU4i3JigDfxXPGz4XP53RFdYiVMw=) 2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: /bP5RMzdbkL7/5EZqhq7cO3FfNuTY5k1xdEgv+lDTck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 14:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Validity Not Before: Jul 22 14:48:56 2025 GMT Not After : Jul 29 14:48:56 2025 GMT Subject: CN=687fa4d9-c425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:6d:24:19:fc:dc:5e:99:7a:b2:19:a9:94: 34:3b:3a:24:df:70:b7:a5:0b:7e:3d:e7:33:e2:ee: f1:9c:11:86:a1:1d:c3:6d:5b:35:3a:07:cb:11:f1: da:b5:0f:52:4f:df:ff:e3:a4:ed:4c:6d:db:61:c6: be:38:7f:b9:19:f8:4d:46:3b:97:33:0b:18:3c:8c: 79:e7:58:74:6b:5f:aa:1f:ed:87:3f:be:30:b8:fb: 96:e1:48:36:e2:4d:5c:13:f0:ae:35:ef:fd:19:e3: dc:ec:81:7a:fb:79:f1:03:2c:27:05:76:39:99:3c: 96:22:9a:92:49:2e:a7:28:f0:80:ae:67:08:01:81: db:a6:82:ce:dd:1c:c9:de:be:09:ab:58:d6:80:da: 3c:49:09:d7:7c:07:24:2f:71:1a:2f:a4:9b:8a:01: 63:b2:e7:dd:3f:0e:a8:43:b1:70:d1:40:da:e4:20: 25:48:bb:c7:46:43:ff:0b:88:ac:6c:7e:63:30:88: 6b:21:7d:b4:a3:dd:ed:f2:d3:52:f5:b6:b6:c4:3f: f4:b0:ef:0b:6a:17:1f:c1:36:4c:c9:0e:8f:3a:e5: a7:80:e4:02:e2:14:04:21:1a:5e:62:09:1a:b1:fd: b4:9c:80:a6:c1:4a:22:9c:51:72:09:b6:ed:ea:df: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EE:10:80:0F:4B:23:32:85:67:F4:6F:A8:5A:59:73:D8:55:62:D8 X509v3 Authority Key Identifier: keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:0b:01:d7:75:9e:0b:e9:5a:40:d6:51:72:c6:b8:97:a3:8b: f6:e5:7b:cb:1f:f0:76:ce:c7:13:a5:d2:27:0d:d0:d7:e2:0a: 36:7b:a2:cd:95:28:42:d2:aa:33:86:ca:bd:aa:a7:21:1d:f6: 81:76:29:93:c2:59:4e:9b:3d:62:4e:b9:c1:6b:9f:69:e4:f6: 18:27:3f:5e:ab:37:1e:fe:27:5b:85:24:c3:c3:69:98:a1:e8: fe:f2:48:8b:3c:72:0a:fd:e6:ab:e5:21:f1:c1:6e:89:3a:e9: 95:da:e6:11:19:90:a2:6d:70:55:81:67:97:6f:a9:ea:9f:20: 11:8e:7a:bb:de:ac:fe:33:c6:16:a2:a3:67:f4:34:db:38:e4: 88:12:df:88:73:73:6c:51:a9:a1:ea:eb:98:37:01:25:84:2c: bc:d9:30:3a:1f:58:b8:0e:84:d8:af:6c:ab:2d:c7:ec:c0:71: 54:a9:e4:c9:9b:1a:23:8d:b9:d6:86:6e:cd:24:95:75:68:47: 1f:cc:40:b7:4b:a9:cc:76:c8:01:a1:db:79:df:b7:55:b8:3d: 30:f1:25:21:16:db:cd:ac:6b:e1:87:af:b0:28:9a:be:fb:bc: 40:b4:db:00:27:17:88:a0:81:62:ad:be:37:4a:3c:24:db:21: 61:cc:e1:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0RTAxMTAvBgNVBAUTKEQzQjRFRUJDM0Q5RjVBMUVBMjAyOTY2OTlBRTk5Mjg4 MUIxRDhERkQwHhcNMjUwNzIyMTQ0ODU2WhcNMjUwNzI5MTQ0ODU2WjAYMRYwFAYD VQQDEw02ODdmYTRkOS1jNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwNtJBn83F6ZerIZqZQ0Ozok33C3pQt+Pecz4u7xnBGGoR3DbVs1OgfLEfHa tQ9ST9//46TtTG3bYca+OH+5GfhNRjuXMwsYPIx551h0a1+qH+2HP74wuPuW4Ug2 4k1cE/CuNe/9GePc7IF6+3nxAywnBXY5mTyWIpqSSS6nKPCArmcIAYHbpoLO3RzJ 3r4Jq1jWgNo8SQnXfAckL3EaL6SbigFjsufdPw6oQ7Fw0UDa5CAlSLvHRkP/C4is bH5jMIhrIX20o93t8tNS9ba2xD/0sO8LahcfwTZMyQ6POuWngOQC4hQEIRpeYgka sf20nICmwUoinFFyCbbt6t9S6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPuEIAP SyMyhWf0b6haWXPYVWLYMB8GA1UdIwQYMBaAFNO07rw9n1oeogKWaZrpkogbHY39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDRFMC84MzQ1NzExNjhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldoNmlBcFpwbXVtU2lCc2Rq ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3VHV2RDJmV2g2aUFwWnBtdW1TaUJzZGpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDRFMC84MzQ1NzExNjhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldo NmlBcFpwbXVtU2lCc2RqZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCICwHXdZ4L6VpA1lFyxriXo4v25XvLH/B2zscTpdInDdDX4go2e6LN lShC0qozhsq9qqchHfaBdimTwllOmz1iTrnBa59p5PYYJz9eqzce/idbhSTDw2mY oej+8kiLPHIK/ear5SHxwW6JOumV2uYRGZCibXBVgWeXb6nqnyARjnq73qz+M8YW oqNn9DTbOOSIEt+Ic3NsUamh6uuYNwElhCy82TA6H1i4DoTYr2yrLcfswHFUqeTJ mxojjbnWhm7NJJV1aEcfzEC3S6nMdsgBodt537dVuD0w8SUhFtvNrGvhh6+wKJq+ +7xAtNsAJxeIoIFirb43Sjwk2yFhzOHM -----END CERTIFICATE-----Generated at Wed Jul 23 02:29:28 2025 by rpki-client