$ rpki-client -vvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft File: -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json) Hash identifier: AA/XYWR9iV1Dr8/vs0q8pIBM+AZFqvj5By9ml5FDZ04= Subject key identifier: 05:7E:76:6F:3C:81:78:CC:E0:5C:7F:06:61:04:AD:6A:D3:7E:AF:DA Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC Certificate issuer: /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft Manifest number: 063D Signing time: Sun 20 Jul 2025 22:50:32 +0000 Manifest this update: Sun 20 Jul 2025 22:50:31 +0000 Manifest next update: Sun 27 Jul 2025 22:50:31 +0000 Files and hashes: 1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: dVAWXcI79pFYdcWaRualk6rfmHNsY7jzYeRpxVtKIOc=) 2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: u94MQjoE9DI5ldBDPfqmoxt1XvvR3zVSKElHRq9GZVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC Validity Not Before: Jul 20 22:50:31 2025 GMT Not After : Jul 27 22:50:31 2025 GMT Subject: CN=687d72b8-d3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:1d:b5:f8:a0:e8:65:e5:42:08:ab:34:6f: e6:c7:7c:a5:6b:2e:7b:7c:b5:2d:f3:9b:de:90:90: 2d:0c:a5:72:c3:59:4b:cf:3d:75:a4:24:fa:b6:86: 93:c1:55:48:58:45:fd:c9:c6:3d:28:b6:06:6d:2a: f6:6b:a8:a6:98:a9:d6:e8:de:c1:92:2f:f6:c7:bf: 05:96:6f:24:57:c8:15:f6:42:49:58:1c:b2:5c:0d: 42:c3:c1:a8:d3:e5:25:c2:f1:79:40:9f:fc:18:98: 95:13:8b:ef:a7:35:c0:a0:34:e1:2d:0f:09:e0:6a: 3c:d4:50:5f:2f:af:bf:11:76:b8:6e:f9:71:ad:9f: 23:5f:6c:e1:0e:58:64:72:0f:98:6b:f0:11:86:48: 41:5c:3f:c2:c5:35:53:74:6a:d3:db:8d:05:44:86: 69:e7:6e:9e:fe:cf:11:b0:0e:e2:b5:4e:59:eb:de: b1:86:d3:51:44:17:7d:b7:33:a4:d0:f6:f9:1c:75: 1a:fe:3d:5e:28:12:45:dd:dd:94:80:8b:86:6a:cd: 40:dd:99:d8:00:0e:3c:a6:6f:76:35:33:1c:40:32: 3d:ba:52:af:39:c7:c2:03:6e:9f:95:b6:9b:b3:46: ea:d7:44:1d:b6:7a:cd:f4:c8:9b:ef:d1:0d:37:7e: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7E:76:6F:3C:81:78:CC:E0:5C:7F:06:61:04:AD:6A:D3:7E:AF:DA X509v3 Authority Key Identifier: keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:90:1c:46:60:c4:43:0b:07:cb:0c:0b:74:16:20:49:55:26: 39:2c:10:81:41:29:45:e7:6f:51:c3:fc:44:9f:2f:da:56:c5: f1:09:28:f1:a0:24:01:9b:98:6f:23:0e:3a:d6:e7:c2:6d:05: de:60:2e:4a:9c:27:88:11:62:16:e7:75:b1:51:ad:fa:e7:38: 53:3c:b0:ae:5a:24:eb:1a:7c:97:4e:68:2b:2b:9f:ad:f6:58: 57:bf:31:91:27:b3:34:70:9b:7a:ed:af:07:3d:bd:98:0c:21: 22:9d:40:e4:8b:a1:f6:8b:a5:71:f5:8f:e1:87:4d:e3:86:3c: 9d:33:14:95:21:d0:2b:c1:fa:bf:6c:26:9d:b7:53:d8:b9:a6: 8f:9d:b4:5e:61:be:d4:f3:35:72:b6:9e:2a:4e:81:93:ad:9c: f6:72:64:9b:64:a7:43:15:a8:db:7a:e9:87:5f:13:8a:e0:fa: 93:c3:ae:6f:0e:a5:20:09:13:61:2a:0a:5d:bb:c7:ae:69:d9: c1:bd:e5:03:5b:be:7a:24:13:cf:b9:4d:88:b0:59:ac:2e:b9: 76:a0:25:db:9c:a3:31:59:c8:1f:de:98:82:a0:28:75:9e:1b: e7:56:c3:6c:69:fd:5a:b6:4e:17:43:b9:f8:fb:3c:31:2e:61: a6:99:65:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI1RTUxMTAvBgNVBAUTKEZBQkE1M0Y0M0RBMDBFMjFBN0VBRjc5MkQ0OEZEQjc2 OTU3QTgwQkMwHhcNMjUwNzIwMjI1MDMxWhcNMjUwNzI3MjI1MDMxWjAYMRYwFAYD VQQDEw02ODdkNzJiOC1kM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGkdtfig6GXlQgirNG/mx3ylay57fLUt85vekJAtDKVyw1lLzz11pCT6toaT wVVIWEX9ycY9KLYGbSr2a6immKnW6N7Bki/2x78Flm8kV8gV9kJJWByyXA1Cw8Go 0+UlwvF5QJ/8GJiVE4vvpzXAoDThLQ8J4Go81FBfL6+/EXa4bvlxrZ8jX2zhDlhk cg+Ya/ARhkhBXD/CxTVTdGrT240FRIZp526e/s8RsA7itU5Z696xhtNRRBd9tzOk 0Pb5HHUa/j1eKBJF3d2UgIuGas1A3ZnYAA48pm92NTMcQDI9ulKvOcfCA26flbab s0bq10QdtnrN9Mib79ENN35JcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAV+dm88 gXjM4Fx/BmEErWrTfq/aMB8GA1UdIwQYMBaAFPq6U/Q9oA4hp+r3ktSP23aVeoC8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjVFNS9FQ0JGMDBFODlC NEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0RpR242dmVTMUlfYmRwVjZn THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ycFQ5RDJnRGlHbjZ2ZVMxSV9iZHBWNmdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjVFNS9FQ0JGMDBFODlCNEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0Rp R242dmVTMUlfYmRwVjZnTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvkBxGYMRDCwfLDAt0FiBJVSY5LBCBQSlF529Rw/xEny/aVsXxCSjx oCQBm5hvIw461ufCbQXeYC5KnCeIEWIW53WxUa365zhTPLCuWiTrGnyXTmgrK5+t 9lhXvzGRJ7M0cJt67a8HPb2YDCEinUDki6H2i6Vx9Y/hh03jhjydMxSVIdArwfq/ bCadt1PYuaaPnbReYb7U8zVytp4qToGTrZz2cmSbZKdDFajbeumHXxOK4PqTw65v DqUgCRNhKgpdu8euadnBveUDW756JBPPuU2IsFmsLrl2oCXbnKMxWcgf3piCoCh1 nhvnVsNsaf1atk4XQ7n4+zwxLmGmmWUW -----END CERTIFICATE-----Generated at Mon Jul 21 06:01:15 2025 by rpki-client