$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft File: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json) Hash identifier: 4tf4UzopVaNc1P+Y/B1Tcv7weYDNLpM32/TjbWQHGEw= Subject key identifier: 41:05:AB:B9:93:71:72:36:EC:E3:C4:81:7F:FD:C8:6E:D0:A7:67:0D Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E Certificate issuer: /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Certificate serial: 1B77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft Manifest number: 1B55 Signing time: Sun 20 Jul 2025 16:18:28 +0000 Manifest this update: Sun 20 Jul 2025 16:18:27 +0000 Manifest next update: Sun 27 Jul 2025 16:18:27 +0000 Files and hashes: 1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: mOoS3K1UEEbnuH3hVdXs3ulKe/Gd7a4RWlx37FbUeqU=) 2: D129428E25DF11E7AC03C03EC4F9AE02.roa (hash: 26Hx4AkbPRTYM9L9rQHlirDpC55IRFhPxlOYhEhXmNA=) 3: 20772F82207611E7AD8F8459C4F9AE02.roa (hash: ItkNWWq8nRtDa6uB2Q8iwUXsM5xJRUOh/lTQOL6uROM=) 4: 920126A625F011E7AB40BB69C4F9AE02.roa (hash: VGx79HjfctMAH3951trK9IBgyFBPVt62lhijc0hOVt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7031 (0x1b77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC4E1, serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Validity Not Before: Jul 20 16:18:27 2025 GMT Not After : Jul 27 16:18:27 2025 GMT Subject: CN=687d16d4-180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:66:fb:56:6d:eb:ce:17:10:60:2b:a6:26: 7e:35:41:10:8b:32:03:a1:e2:52:df:08:f8:ad:b7: 40:f7:83:fe:a9:e0:fc:0e:d8:4b:57:f3:4b:a6:84: 4e:6f:6a:52:7e:ca:b6:22:5f:3b:89:93:b6:c0:80: bd:96:12:5f:6f:8a:58:4a:cd:ff:7f:a1:8f:cd:10: 88:37:54:9f:21:72:9e:a2:b7:9b:f1:70:f2:4d:c5: d5:29:19:58:03:6e:cf:1f:91:da:c2:ad:20:73:7d: 6e:df:58:c1:ba:0a:9c:7b:92:ad:62:b6:a8:5a:b3: 55:ee:21:82:0f:e8:5f:89:e6:84:f4:a6:77:b6:8f: 1e:68:34:b2:a3:54:e3:95:f9:0d:fc:09:c9:cc:73: b0:72:7a:fd:56:58:05:92:0a:27:6e:99:52:1d:37: ad:6c:aa:7c:d9:64:8f:96:27:66:55:b0:ae:5d:92: 6d:13:13:be:b7:ec:70:28:b1:8a:5e:b2:47:11:4a: 69:b9:60:46:47:94:cc:39:a8:be:5e:da:35:30:c7: ab:a5:ca:b0:ea:8d:09:97:93:32:75:cc:8e:04:66: 79:67:f9:e2:8f:8d:14:c3:c2:53:aa:d6:62:33:f7: d8:32:1c:bb:57:30:f9:22:43:40:69:0d:c8:4f:02: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:05:AB:B9:93:71:72:36:EC:E3:C4:81:7F:FD:C8:6E:D0:A7:67:0D X509v3 Authority Key Identifier: keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:99:b7:38:f6:63:97:cd:f9:40:9d:25:97:00:03:86:ba:a0: 3a:97:6c:91:d7:97:25:25:d7:a0:07:0e:9c:3b:2d:f4:33:6a: e6:1f:9f:e7:79:a7:59:94:c6:8c:38:b7:55:a9:df:42:18:05: db:68:36:6b:12:c7:a7:b2:fd:db:b8:a8:ac:c2:aa:bf:a4:00: e5:66:42:db:8d:01:45:7e:9c:7e:68:d5:c5:e2:69:6a:1d:8a: 20:e2:94:6b:48:19:95:b0:b7:e5:89:67:11:b8:4e:23:7c:b5: 73:66:af:23:6b:cb:c0:19:aa:51:e9:53:bf:1b:0e:7c:14:27: 15:b9:64:71:5d:17:42:33:a3:41:49:f0:cc:10:ca:1c:9c:9a: 37:43:40:48:64:9d:81:33:e7:cf:98:0c:e0:51:0e:f9:c4:0a: ef:71:90:28:00:2a:c9:7a:aa:2a:12:e4:2b:91:e2:19:95:93: c0:16:1c:d7:01:4f:dd:f3:29:0d:b6:d1:04:a9:ab:4f:7c:65: e9:a9:af:39:79:06:fa:56:62:36:da:ff:34:4f:59:eb:83:80: 03:35:96:39:80:ce:db:9d:3c:ca:41:f7:3c:0a:63:73:f2:db: 5d:59:c4:9a:d7:f1:a9:e3:a8:b9:ba:b8:7e:73:e7:50:50:fc: ab:2a:be:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0RTExMTAvBgNVBAUTKERDMUIzOUI1NEY2MDg5MUFDNzc4QTkzMTZENzFCMEJF ODAwNjM5NkUwHhcNMjUwNzIwMTYxODI3WhcNMjUwNzI3MTYxODI3WjAYMRYwFAYD VQQDEw02ODdkMTZkNC0xODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MRm+1Zt684XEGArpiZ+NUEQizIDoeJS3wj4rbdA94P+qeD8DthLV/NLpoRO b2pSfsq2Il87iZO2wIC9lhJfb4pYSs3/f6GPzRCIN1SfIXKeoreb8XDyTcXVKRlY A27PH5Hawq0gc31u31jBugqce5KtYraoWrNV7iGCD+hfieaE9KZ3to8eaDSyo1Tj lfkN/AnJzHOwcnr9VlgFkgonbplSHTetbKp82WSPlidmVbCuXZJtExO+t+xwKLGK XrJHEUppuWBGR5TMOai+Xto1MMerpcqw6o0Jl5MydcyOBGZ5Z/nij40Uw8JTqtZi M/fYMhy7VzD5IkNAaQ3ITwLhzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEFq7mT cXI27OPEgX/9yG7Qp2cNMB8GA1UdIwQYMBaAFNwbObVPYIkax3ipMW1xsL6ABjlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzRFMS8yMDA0RjE0NDE2 MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lSckhlS2t4YlhHd3ZvQUdP VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCczV0VTlnaVJySGVLa3hiWEd3dm9BR09XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzRFMS8yMDA0RjE0NDE2MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lS ckhlS2t4YlhHd3ZvQUdPVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXmbc49mOXzflAnSWXAAOGuqA6l2yR15clJdegBw6cOy30M2rmH5/n eadZlMaMOLdVqd9CGAXbaDZrEsensv3buKiswqq/pADlZkLbjQFFfpx+aNXF4mlq HYog4pRrSBmVsLfliWcRuE4jfLVzZq8ja8vAGapR6VO/Gw58FCcVuWRxXRdCM6NB SfDMEMocnJo3Q0BIZJ2BM+fPmAzgUQ75xArvcZAoACrJeqoqEuQrkeIZlZPAFhzX AU/d8ykNttEEqatPfGXpqa85eQb6VmI22v80T1nrg4ADNZY5gM7bnTzKQfc8CmNz 8ttdWcSa1/Gp46i5urh+c+dQUPyrKr4m -----END CERTIFICATE-----Generated at Mon Jul 21 12:34:14 2025 by rpki-client