$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft File: 29u3f7gUXp1EhgdPtz74TVSOpiI.mft (raw, json) Hash identifier: f1k21Tgk/B2XuvWuq3r50rM5WAhE7rPClUV0OH4Jdok= Subject key identifier: 92:C3:8B:70:BF:22:1A:93:E4:D8:C7:2F:5A:81:92:CE:76:38:30:DC Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 Certificate issuer: /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft Manifest number: DC Signing time: Mon 21 Jul 2025 05:38:35 +0000 Manifest this update: Mon 21 Jul 2025 05:38:35 +0000 Manifest next update: Mon 28 Jul 2025 05:38:35 +0000 Files and hashes: 1: 29u3f7gUXp1EhgdPtz74TVSOpiI.crl (hash: OIsTl/0d5MOlKffvpf6WpOQZcboQJRh7a63Kb7hgrqc=) 2: 5741EB0A159311EFA0CC790BC4F9AE02.roa (hash: jE4GzHd14AerZws/zq+eZy5XQS34aDVO012G4f0K8Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1511, serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Validity Not Before: Jul 21 05:38:35 2025 GMT Not After : Jul 28 05:38:35 2025 GMT Subject: CN=687dd25b-15b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:cf:1b:ff:67:79:c2:14:e5:6a:39:6f:11: ea:7b:aa:41:ca:95:13:f2:0b:90:1c:47:de:ab:9b: b7:f4:40:d5:3f:c2:e8:d5:5c:e4:08:14:59:a9:05: a9:e9:2d:dc:40:65:d5:8d:12:6c:f0:bc:80:17:40: 75:63:3b:82:42:8d:6a:77:08:5b:6f:cf:3e:72:5c: b0:b8:5e:0f:c1:c2:be:12:1f:2f:91:c5:d2:9f:7f: d1:fc:49:ca:85:69:9b:93:37:ea:60:24:ce:77:68: bf:bb:f6:05:b9:70:e4:ae:bd:ef:95:6d:02:e8:83: b9:9b:7a:3d:62:68:01:68:dd:b9:35:38:03:2d:06: 09:8f:76:81:c9:82:7c:80:e2:68:5a:ad:4d:62:8c: fa:29:3f:1b:0b:2b:7f:d8:84:ae:d5:c7:e8:93:2c: 6f:8f:cf:7e:07:84:f5:e1:34:1d:08:25:ac:6a:27: a3:7b:03:98:8f:8d:f6:d2:4a:67:fc:33:57:08:40: 0b:4c:a4:5a:ab:5a:74:66:f6:89:81:cd:50:f8:25: b6:ee:b4:68:ef:14:71:39:75:a4:3e:fd:08:42:e5: 74:0a:76:64:12:f1:41:d8:8f:d5:eb:bf:2f:77:66: 8d:c1:82:12:9a:56:f4:f3:ba:5e:da:4d:3f:2f:32: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C3:8B:70:BF:22:1A:93:E4:D8:C7:2F:5A:81:92:CE:76:38:30:DC X509v3 Authority Key Identifier: keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:a0:9f:b2:c5:00:a0:2e:9c:d1:95:61:3c:e9:33:25:d9:1a: c3:b7:47:12:40:62:de:13:a6:8c:2d:16:93:9e:a2:34:67:2a: 38:32:5e:35:8d:ab:c1:56:27:3e:d4:f5:c3:e9:38:0e:2e:c7: 88:20:5a:be:03:75:ff:32:8e:e6:86:ee:d8:fc:16:89:b4:49: 4e:69:1e:92:73:5b:ca:59:8d:8f:36:51:0e:bf:a2:d1:10:a2: 41:fc:b7:5d:12:e2:cf:57:92:ec:d5:48:b2:50:bf:53:76:62: d3:c8:d2:9e:9a:6d:b6:34:a9:52:60:dc:8d:03:66:6c:43:5c: 66:f6:64:63:2c:53:5b:e5:a4:70:52:df:ab:36:18:dd:2b:ac: 49:cd:60:63:ca:50:83:e8:6b:fb:50:84:95:f7:af:9a:55:41: aa:1e:29:48:6f:ea:e1:61:3e:36:52:b2:2b:2f:41:e0:a9:d4: 5a:45:09:a9:b7:2f:5d:b2:0a:88:5c:39:69:36:50:0c:3d:b7: bf:59:94:8f:03:4e:d4:c7:70:64:5d:1a:0d:19:b3:22:0d:c9: 7c:fe:86:13:b3:7a:75:17:97:2b:b3:f9:92:8c:d4:e1:93:0d: d1:48:d0:f9:8c:0d:c3:34:60:8b:4b:6f:ce:ca:1c:58:82:a0: 1a:95:d3:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1MTExMTAvBgNVBAUTKERCREJCNzdGQjgxNDVFOUQ0NDg2MDc0RkI3M0VGODRE NTQ4RUE2MjIwHhcNMjUwNzIxMDUzODM1WhcNMjUwNzI4MDUzODM1WjAYMRYwFAYD VQQDEw02ODdkZDI1Yi0xNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BfPG/9necIU5Wo5bxHqe6pBypUT8guQHEfeq5u39EDVP8Lo1VzkCBRZqQWp 6S3cQGXVjRJs8LyAF0B1YzuCQo1qdwhbb88+clywuF4PwcK+Eh8vkcXSn3/R/EnK hWmbkzfqYCTOd2i/u/YFuXDkrr3vlW0C6IO5m3o9YmgBaN25NTgDLQYJj3aByYJ8 gOJoWq1NYoz6KT8bCyt/2ISu1cfokyxvj89+B4T14TQdCCWsaiejewOYj4320kpn /DNXCEALTKRaq1p0ZvaJgc1Q+CW27rRo7xRxOXWkPv0IQuV0CnZkEvFB2I/V678v d2aNwYISmlb087pe2k0/LzL4uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLDi3C/ IhqT5NjHL1qBks52ODDcMB8GA1UdIwQYMBaAFNvbt3+4FF6dRIYHT7c++E1UjqYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTUxMS84RDM0MzIzQzEz RjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhwMUVoZ2RQdHo3NFRWU09w aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5dTNmN2dVWHAxRWhnZFB0ejc0VFZTT3BpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTUxMS84RDM0MzIzQzEzRjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhw MUVoZ2RQdHo3NFRWU09waUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5oJ+yxQCgLpzRlWE86TMl2RrDt0cSQGLeE6aMLRaTnqI0Zyo4Ml41 javBVic+1PXD6TgOLseIIFq+A3X/Mo7mhu7Y/BaJtElOaR6Sc1vKWY2PNlEOv6LR EKJB/LddEuLPV5Ls1UiyUL9TdmLTyNKemm22NKlSYNyNA2ZsQ1xm9mRjLFNb5aRw Ut+rNhjdK6xJzWBjylCD6Gv7UISV96+aVUGqHilIb+rhYT42UrIrL0HgqdRaRQmp ty9dsgqIXDlpNlAMPbe/WZSPA07Ux3BkXRoNGbMiDcl8/oYTs3p1F5crs/mSjNTh kw3RSND5jA3DNGCLS2/OyhxYgqAaldP0 -----END CERTIFICATE-----Generated at Mon Jul 21 06:53:26 2025 by rpki-client