$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft File: 1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json) Hash identifier: +uvO5BmNBApR4PGUfnDCk0qkvHL+CHU5CQe+/F2YOpY= Subject key identifier: 1C:0B:07:16:31:26:8F:B9:95:F8:75:4C:66:1F:51:16:16:91:AE:55 Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 Certificate issuer: /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft Manifest number: BA Signing time: Sat 19 Jul 2025 06:08:21 +0000 Manifest this update: Sat 19 Jul 2025 06:08:21 +0000 Manifest next update: Sat 26 Jul 2025 06:08:21 +0000 Files and hashes: 1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: TFA+5sGwCnG1NzxwuHAhMntyTvVEKl2LKy+EH/En+ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Validity Not Before: Jul 19 06:08:21 2025 GMT Not After : Jul 26 06:08:21 2025 GMT Subject: CN=687b3655-a3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:7e:02:c6:23:f6:59:89:32:0f:41:1a:d6: 5d:9b:03:bc:11:69:0c:41:90:cd:e3:7a:5e:2e:57: ac:fd:a6:c7:e1:97:81:3e:ff:28:ef:dd:61:f1:ef: 9c:aa:52:36:10:35:f8:31:7a:f7:e7:b3:b8:c9:5c: 92:ec:0c:e9:17:4b:fa:af:77:4d:35:d7:be:e3:b1: 5c:c2:69:2e:44:0d:7e:72:2b:cd:51:23:f5:0f:73: a6:b3:4a:e1:a0:b2:73:65:ae:47:51:ef:44:08:06: 7e:ba:dd:fb:4d:97:b1:fc:13:a3:f1:28:4a:9a:e1: 40:6a:46:be:15:ee:00:4a:13:7a:e9:b1:db:fa:53: f4:2c:c9:8c:b1:38:cf:d8:40:62:ff:a0:15:9b:c3: f9:a8:c5:29:de:81:41:63:39:95:9e:1c:17:23:91: 6f:bf:c9:2e:60:5b:8d:3c:a4:df:68:43:71:a8:15: 05:78:b8:88:ca:70:8e:89:5f:ee:0b:c4:5f:af:36: 08:0d:5b:09:db:c5:55:a1:64:8f:63:56:4a:e9:ae: cc:e1:de:93:85:30:66:5f:66:64:c5:a6:97:d2:48: 02:d3:d6:28:c4:3e:61:e5:df:28:f4:80:de:c6:7f: 9e:b7:9d:71:90:11:5e:d5:ee:48:77:21:94:95:97: e3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0B:07:16:31:26:8F:B9:95:F8:75:4C:66:1F:51:16:16:91:AE:55 X509v3 Authority Key Identifier: keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:81:ef:17:b8:a5:fe:70:53:d6:e2:b5:8c:ac:71:43:36:2b: af:dc:53:b6:0e:e4:c3:00:40:43:86:4a:8a:04:53:79:f7:ce: c5:0f:da:c4:74:58:00:e0:8c:64:1e:13:77:20:e4:05:17:4c: 4d:36:ab:28:90:98:5d:f2:08:8e:dc:69:4c:89:27:ab:fb:8b: 97:16:5b:90:6b:3f:3a:19:90:b7:e2:e7:23:6f:15:6f:ba:38: 0d:46:49:8f:37:4d:40:4c:bd:89:63:50:e8:f8:15:8a:97:30: 89:0b:89:2d:5f:18:28:c5:fc:c7:57:09:b0:65:65:93:ff:c4: 18:66:14:54:69:02:cc:ae:8b:2d:a1:cd:23:c8:e3:4d:56:49: 4f:4c:29:26:de:ec:4b:bf:b5:28:a9:fb:1e:cb:d4:5a:bc:5a: ed:12:ac:91:74:51:3b:1e:72:30:1a:bc:1d:e5:8b:b4:66:4b: f0:c8:24:56:58:fc:c5:0b:7f:7f:c3:b9:3f:aa:8e:32:67:fc: 74:51:7f:eb:f2:34:78:e3:12:7e:1e:3e:7a:9f:14:66:5a:4c: 00:c7:c9:37:13:0d:3a:4d:1f:f3:4f:cc:d0:ee:8c:8f:c4:5e: 14:08:49:1a:4f:df:99:5a:bc:7b:40:1e:05:a7:48:bf:d6:ab: ac:96:d6:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxM0IxMTAvBgNVBAUTKEQ1RUM3NENGQzhDMEZEMDU3Q0Q0RTgzQkUzRUI1N0Yw NjFEQzU4RjgwHhcNMjUwNzE5MDYwODIxWhcNMjUwNzI2MDYwODIxWjAYMRYwFAYD VQQDEw02ODdiMzY1NS1hM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt39+AsYj9lmJMg9BGtZdmwO8EWkMQZDN43peLles/abH4ZeBPv8o791h8e+c qlI2EDX4MXr357O4yVyS7AzpF0v6r3dNNde+47FcwmkuRA1+civNUSP1D3Oms0rh oLJzZa5HUe9ECAZ+ut37TZex/BOj8ShKmuFAaka+Fe4AShN66bHb+lP0LMmMsTjP 2EBi/6AVm8P5qMUp3oFBYzmVnhwXI5Fvv8kuYFuNPKTfaENxqBUFeLiIynCOiV/u C8RfrzYIDVsJ28VVoWSPY1ZK6a7M4d6ThTBmX2ZkxaaX0kgC09YoxD5h5d8o9IDe xn+et51xkBFe1e5IdyGUlZfj/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwLBxYx Jo+5lfh1TGYfURYWka5VMB8GA1UdIwQYMBaAFNXsdM/IwP0FfNToO+PrV/Bh3Fj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9ENUJGRUMxNDQ3 REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9RVjgxT2c3NC10WDhHSGNX UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFleDB6OGpBX1FWODFPZzc0LXRYOEdIY1dQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEzQi9ENUJGRUMxNDQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9R VjgxT2c3NC10WDhHSGNXUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACge8XuKX+cFPW4rWMrHFDNiuv3FO2DuTDAEBDhkqKBFN5987FD9rE dFgA4IxkHhN3IOQFF0xNNqsokJhd8giO3GlMiSer+4uXFluQaz86GZC34ucjbxVv ujgNRkmPN01ATL2JY1Do+BWKlzCJC4ktXxgoxfzHVwmwZWWT/8QYZhRUaQLMrost oc0jyONNVklPTCkm3uxLv7Uoqfsey9RavFrtEqyRdFE7HnIwGrwd5Yu0ZkvwyCRW WPzFC39/w7k/qo4yZ/x0UX/r8jR44xJ+Hj56nxRmWkwAx8k3Ew06TR/zT8zQ7oyP xF4UCEkaT9+ZWrx7QB4Fp0i/1qusltaI -----END CERTIFICATE-----Generated at Mon Jul 21 05:49:00 2025 by rpki-client