$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: AjsjfwqR7eviRCCIs52dD/fEOl7tfoGPFXsOSuDrVfk= Subject key identifier: AF:BC:D4:1A:9E:92:B3:5B:34:FF:10:47:DD:83:6C:8D:87:49:D8:DC Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 01F7 Signing time: Sat 19 Jul 2025 02:38:56 +0000 Manifest this update: Sat 19 Jul 2025 02:38:56 +0000 Manifest next update: Sat 26 Jul 2025 02:38:56 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: oGTGgzhdVbbRAjCvO5wdidhuTF/5mqF1p9YyfFQVQRY=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: 3BIidzXw3SbxxirE9B5rO+NW6ewizhq6UX39Bo2kTKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: Jul 19 02:38:56 2025 GMT Not After : Jul 26 02:38:56 2025 GMT Subject: CN=687b0540-22e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:0c:43:98:d4:7f:b4:75:d0:44:d0:10:72: ff:89:c0:3d:53:05:0e:0a:d4:d9:6e:7b:72:17:69: bb:05:a7:66:29:b0:7a:3d:49:28:7d:b3:60:85:b4: a6:a4:ed:8a:97:01:7c:ce:5f:45:15:74:5a:19:79: 7a:d0:8b:e8:8a:90:89:0c:dd:7a:a4:36:8c:f9:cd: bd:36:bf:2a:1e:a0:d4:d1:cb:c1:7f:62:25:2c:75: ff:36:dc:a0:b0:1f:a4:c7:f6:04:e0:8a:8d:40:03: e3:32:a1:04:e3:39:a7:d7:a7:d2:88:4e:19:cc:ec: 19:39:8b:6b:9b:90:51:dc:b3:cc:fb:d9:5d:5a:6f: ee:44:b3:ed:96:4d:a2:fc:0f:09:a8:37:d5:00:7e: c9:c3:c0:8c:73:98:77:69:4b:fc:94:e2:19:00:f7: 10:b1:e3:75:47:da:74:e6:c8:89:3f:7e:97:35:5c: 4a:c0:05:06:bc:a5:36:c6:8b:cb:3a:8b:ff:34:2e: e4:93:26:b8:02:83:05:87:29:54:28:8b:3a:61:e4: a9:b9:31:24:b9:8b:75:21:fe:19:bd:0b:2e:34:59: 65:99:d9:a2:8e:02:28:49:34:a4:f4:13:95:60:b3: ba:85:79:af:0f:00:7a:1e:47:bd:e4:d5:c2:2a:5f: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BC:D4:1A:9E:92:B3:5B:34:FF:10:47:DD:83:6C:8D:87:49:D8:DC X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:1c:08:5d:41:82:15:fe:c7:15:5f:96:67:9a:02:28:67:cf: 38:8f:ae:60:63:d7:dd:69:a2:62:14:3a:0a:02:f0:c0:c2:e0: 6e:ec:eb:cc:bf:da:9d:48:42:f0:43:b9:d1:57:7e:92:11:f7: 07:b9:6d:26:bb:a9:1f:7a:45:44:16:20:7e:f1:0c:1a:9e:21: 54:25:77:a1:79:62:3f:0b:d5:da:59:d5:20:e2:f6:98:6c:7d: 06:e5:bf:31:2c:c6:37:2b:f4:ed:96:5e:15:79:31:2c:5d:1c: 76:a3:99:8c:4e:ae:61:0d:4e:e2:9f:65:bf:aa:b5:a3:da:bc: 8b:99:51:fb:f3:15:cb:c5:fc:ce:56:5c:88:cd:31:22:9d:2c: 63:7e:4e:f0:63:4c:43:27:86:aa:3b:3f:05:f1:c7:f4:a8:e2: d5:77:2e:35:6b:b3:b0:46:b9:1e:48:b9:83:c7:e9:2e:ef:fc: 5f:bb:4c:5d:49:9e:7f:53:95:45:92:7b:59:8d:7b:98:5b:30: ec:94:72:0c:2c:de:f8:f0:0d:0a:70:b7:1d:63:b2:8e:35:6c: fa:13:a6:18:c7:63:ca:2e:92:ee:2d:cf:58:d8:68:63:6c:a6: ab:26:5b:56:0d:85:32:5b:51:7a:1a:d3:3e:79:14:4d:35:c6: 58:1c:8a:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjUwNzE5MDIzODU2WhcNMjUwNzI2MDIzODU2WjAYMRYwFAYD VQQDEw02ODdiMDU0MC0yMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSIMQ5jUf7R10ETQEHL/icA9UwUOCtTZbntyF2m7BadmKbB6PUkofbNghbSm pO2KlwF8zl9FFXRaGXl60IvoipCJDN16pDaM+c29Nr8qHqDU0cvBf2IlLHX/Ntyg sB+kx/YE4IqNQAPjMqEE4zmn16fSiE4ZzOwZOYtrm5BR3LPM+9ldWm/uRLPtlk2i /A8JqDfVAH7Jw8CMc5h3aUv8lOIZAPcQseN1R9p05siJP36XNVxKwAUGvKU2xovL Oov/NC7kkya4AoMFhylUKIs6YeSpuTEkuYt1If4ZvQsuNFllmdmijgIoSTSk9BOV YLO6hXmvDwB6Hke95NXCKl93bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+81Bqe krNbNP8QR92DbI2HSdjcMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtHAhdQYIV/scVX5ZnmgIoZ884j65gY9fdaaJiFDoKAvDAwuBu7OvM v9qdSELwQ7nRV36SEfcHuW0mu6kfekVEFiB+8QwaniFUJXeheWI/C9XaWdUg4vaY bH0G5b8xLMY3K/Ttll4VeTEsXRx2o5mMTq5hDU7in2W/qrWj2ryLmVH78xXLxfzO VlyIzTEinSxjfk7wY0xDJ4aqOz8F8cf0qOLVdy41a7OwRrkeSLmDx+ku7/xfu0xd SZ5/U5VFkntZjXuYWzDslHIMLN748A0KcLcdY7KONWz6E6YYx2PKLpLuLc9Y2Ghj bKarJltWDYUyW1F6GtM+eRRNNcZYHIrM -----END CERTIFICATE-----Generated at Sun Jul 20 07:48:19 2025 by rpki-client