$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: O39aVrGkE3WsczmWz/Dzhmq6bCIG1jRyXSVLi/78zM8= Subject key identifier: 3D:3C:F3:16:D7:07:4A:5B:F8:90:14:00:86:9F:FA:35:72:50:F3:14 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 0123 Signing time: Sat 19 Jul 2025 04:58:44 +0000 Manifest this update: Sat 19 Jul 2025 04:58:44 +0000 Manifest next update: Sat 26 Jul 2025 04:58:44 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: FZ0nMJbCZ0SobYXkzb8hlgIUqYOPzRc1ffRzKZUvpH0=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Jul 19 04:58:44 2025 GMT Not After : Jul 26 04:58:44 2025 GMT Subject: CN=687b2604-30c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:12:25:b3:05:0c:76:dd:b9:77:4d:39:b7: d4:54:23:2b:ff:c1:25:3d:0c:d3:d7:47:86:c1:9e: bf:bc:bd:b0:7d:2d:d5:5f:00:c6:e0:53:68:64:e9: 05:07:ff:b5:a9:bb:31:0a:94:ef:e1:64:8f:27:28: 83:b6:2f:48:d0:d3:96:fc:52:4c:33:94:4f:bb:8f: 93:03:60:e2:01:77:9a:ad:6d:a1:4e:3e:e6:36:3e: 9f:f5:df:d8:6b:de:e6:ea:02:6b:28:b1:b8:ad:e4: 41:51:ab:57:28:7c:6e:0f:4b:71:27:38:7d:a4:81: 42:b8:ef:5c:cc:0a:fb:be:af:c5:ff:12:58:ac:ca: cd:bb:1f:f3:ef:01:1c:d1:54:08:bd:5a:51:cf:2e: 14:60:8e:cb:30:8f:6d:16:9c:75:ee:36:20:aa:70: 26:b0:ee:f1:46:b6:15:36:d6:ad:c1:e7:8d:9d:ca: a8:62:fc:ec:5d:bf:52:78:a3:72:61:a5:4c:d6:4e: 8d:d9:e8:ee:7b:f0:2e:b2:af:0b:4b:da:d9:27:c8: 35:06:8c:5d:a9:8f:56:62:a4:63:57:13:a1:59:71: 4e:e9:f1:7d:cd:54:b5:e8:e3:87:14:e9:8d:41:59: be:f0:8b:88:ae:a7:e8:b0:2b:c4:30:54:31:4d:3a: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3C:F3:16:D7:07:4A:5B:F8:90:14:00:86:9F:FA:35:72:50:F3:14 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:1c:bc:56:6c:9a:f8:67:4b:ad:bd:1c:c4:02:3b:ae:a4:bd: fa:e6:b9:63:44:03:9c:d6:91:3a:ff:aa:c6:9a:60:e3:c2:e9: 28:cf:c6:a1:66:e2:21:3e:cb:f1:b6:8d:89:3b:73:84:1f:e9: 4f:f2:1c:0f:6b:2b:d9:e7:c2:90:47:16:54:5e:9e:7a:fe:e8: 08:0c:09:ce:50:dc:af:01:5c:82:57:bb:8f:81:f2:0f:6d:b4: 25:a0:4b:26:d2:73:8b:5d:2d:a6:75:dc:08:e8:3b:cc:fa:fd: 20:30:32:c6:c3:32:a3:00:5f:73:31:08:1d:20:59:b7:80:c9: aa:23:a9:0a:3d:66:36:6e:16:38:9d:cf:a8:9e:72:ad:db:73: b8:11:bf:c7:ee:8a:1d:70:03:35:af:87:08:9b:ed:50:7d:c1: ec:69:12:91:b6:45:89:a0:24:26:1d:99:e8:7b:39:6e:86:ad: 51:9d:43:84:25:37:7e:a5:4b:91:91:45:fe:92:db:e0:be:27: f8:a5:53:c9:50:37:00:86:6c:3c:e1:86:5c:85:55:da:a1:ed: 7d:07:50:6d:3e:0d:fa:29:11:4b:7d:df:6b:38:83:f8:0c:b7: d3:19:ec:85:98:0c:6f:d4:0c:7d:e6:b7:c1:5c:60:40:36:20: 08:4f:58:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwNzE5MDQ1ODQ0WhcNMjUwNzI2MDQ1ODQ0WjAYMRYwFAYD VQQDEw02ODdiMjYwNC0zMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA058SJbMFDHbduXdNObfUVCMr/8ElPQzT10eGwZ6/vL2wfS3VXwDG4FNoZOkF B/+1qbsxCpTv4WSPJyiDti9I0NOW/FJMM5RPu4+TA2DiAXearW2hTj7mNj6f9d/Y a97m6gJrKLG4reRBUatXKHxuD0txJzh9pIFCuO9czAr7vq/F/xJYrMrNux/z7wEc 0VQIvVpRzy4UYI7LMI9tFpx17jYgqnAmsO7xRrYVNtatweeNncqoYvzsXb9SeKNy YaVM1k6N2ejue/Ausq8LS9rZJ8g1BoxdqY9WYqRjVxOhWXFO6fF9zVS16OOHFOmN QVm+8IuIrqfosCvEMFQxTTrrnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD088xbX B0pb+JAUAIaf+jVyUPMUMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhHLxWbJr4Z0utvRzEAjuupL365rljRAOc1pE6/6rGmmDjwukoz8ah ZuIhPsvxto2JO3OEH+lP8hwPayvZ58KQRxZUXp56/ugIDAnOUNyvAVyCV7uPgfIP bbQloEsm0nOLXS2mddwI6DvM+v0gMDLGwzKjAF9zMQgdIFm3gMmqI6kKPWY2bhY4 nc+onnKt23O4Eb/H7oodcAM1r4cIm+1QfcHsaRKRtkWJoCQmHZnoezluhq1RnUOE JTd+pUuRkUX+ktvgvif4pVPJUDcAhmw84YZchVXaoe19B1BtPg36KRFLfd9rOIP4 DLfTGeyFmAxv1Ax95rfBXGBANiAIT1hT -----END CERTIFICATE-----Generated at Sun Jul 20 16:35:57 2025 by rpki-client