$ rpki-client -vvf rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft File: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft (raw, json) Hash identifier: hKBbCR/SxMPF6yzDhs/XE3LSwhbqpCxCRetqQNtbdXg= Subject key identifier: 5A:00:A5:8A:B6:79:64:13:39:9F:85:90:22:83:7F:46:D9:D9:FF:7C Authority key identifier: 57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 Certificate issuer: /CN=A91E331D/serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft Manifest number: 044E Signing time: Mon 21 Jul 2025 00:29:08 +0000 Manifest this update: Mon 21 Jul 2025 00:29:08 +0000 Manifest next update: Mon 28 Jul 2025 00:29:08 +0000 Files and hashes: 1: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl (hash: x/X42pka0TxjYMVOcP1zRWsrT6sQemp44K1GLUJgQwY=) 2: DBE8B4205F0F11ECA6315D2AC4F9AE02.roa (hash: jwlLH9aehVTXk9pUZLFV4it1GAP8lE1rTRj2qtnhA8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E331D, serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Validity Not Before: Jul 21 00:29:08 2025 GMT Not After : Jul 28 00:29:08 2025 GMT Subject: CN=687d89d4-d64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:7b:d6:0e:18:cc:76:fa:f7:84:9a:37:8e: 31:56:69:9b:e4:2e:60:f4:c8:8a:26:ef:f2:93:ea: 27:9f:7c:4f:24:96:41:38:09:e6:ff:4d:4f:60:17: c5:e5:5a:83:6c:b0:67:ad:47:0a:de:7d:69:d5:d1: 74:62:fb:50:03:af:52:a2:0b:b6:8a:c9:41:1c:be: 28:fc:4e:68:30:bc:21:5d:66:41:64:bc:bd:14:05: 32:5b:3f:63:a0:f9:4e:f3:05:97:92:26:2f:c0:ab: 70:32:65:5d:ac:81:52:d9:42:25:76:ce:8a:51:d0: e4:ec:32:9c:62:26:b6:d0:5d:25:cc:0f:33:5b:83: 78:c8:9f:f2:fd:5e:e4:a8:1f:11:33:3a:26:82:6d: c1:42:e7:6d:7e:40:8c:b0:2e:46:51:85:40:8f:5c: 17:43:87:99:cc:5a:3d:02:bc:e1:60:70:43:62:93: e5:11:a3:60:90:9e:84:74:24:b1:3e:37:5b:fb:3c: 6f:1e:0d:d0:07:29:19:42:f2:5d:62:f3:e2:1b:bf: 0e:d4:b6:11:7e:b1:c6:da:c3:c4:12:7f:9e:79:48: 1b:b5:c9:35:39:a7:f0:a7:62:85:a6:71:55:da:16: 76:78:62:08:62:11:36:30:34:12:dd:15:30:a5:b9: f1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:00:A5:8A:B6:79:64:13:39:9F:85:90:22:83:7F:46:D9:D9:FF:7C X509v3 Authority Key Identifier: keyid:57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:09:91:03:b1:5b:c2:b4:9d:74:1c:7b:fd:4c:83:fa:d8:52: 6a:91:3f:ff:a3:b5:b0:8d:ae:af:bb:d7:b9:ce:c6:ba:b7:f5: 96:8d:29:cd:58:22:52:49:1a:07:8d:c4:5f:96:a4:7c:ab:61: 4c:dc:06:0b:35:b6:51:16:62:4d:90:6b:8f:ce:2b:7f:1c:5d: 86:0d:5f:75:0a:c6:61:bf:cf:aa:68:02:d3:8e:ad:d5:f7:35: eb:d0:f2:e5:5d:08:25:00:8d:cd:9c:f7:34:52:60:c4:29:75: 71:f9:82:ca:87:2d:7e:10:49:df:58:c6:65:b7:bb:5b:dd:2e: a5:28:bf:3e:07:cb:2f:1f:42:32:ab:79:2b:8c:c3:6e:55:a7: 5e:94:37:29:38:7b:64:95:e7:85:d9:6e:51:a1:51:86:71:11: 17:e1:5b:1d:fd:f8:46:e2:6d:d9:ed:5a:f2:4d:30:66:5a:7a: c5:cb:73:84:91:11:2d:f0:7f:e5:7d:3f:33:b9:e2:78:46:56: 92:14:8c:94:f2:2e:f7:dc:e8:c2:f9:61:61:9b:6e:1d:f8:79: d1:2b:6f:47:fa:5f:e8:82:3e:f5:22:ae:2e:de:54:78:ee:a6: 56:46:66:36:f4:ce:ea:e0:35:31:d1:92:37:a3:f0:74:6b:b7: c9:8d:c7:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzMUQxMTAvBgNVBAUTKDU3MkU3NjBEQkNFNkQ2NTU1MzA5OEIwMTdFRkMzMkVD QjFDRUNBRTEwHhcNMjUwNzIxMDAyOTA4WhcNMjUwNzI4MDAyOTA4WjAYMRYwFAYD VQQDEw02ODdkODlkNC1kNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8h71g4YzHb694SaN44xVmmb5C5g9MiKJu/yk+onn3xPJJZBOAnm/01PYBfF 5VqDbLBnrUcK3n1p1dF0YvtQA69Sogu2islBHL4o/E5oMLwhXWZBZLy9FAUyWz9j oPlO8wWXkiYvwKtwMmVdrIFS2UIlds6KUdDk7DKcYia20F0lzA8zW4N4yJ/y/V7k qB8RMzomgm3BQudtfkCMsC5GUYVAj1wXQ4eZzFo9ArzhYHBDYpPlEaNgkJ6EdCSx Pjdb+zxvHg3QBykZQvJdYvPiG78O1LYRfrHG2sPEEn+eeUgbtck1Oafwp2KFpnFV 2hZ2eGIIYhE2MDQS3RUwpbnxPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoApYq2 eWQTOZ+FkCKDf0bZ2f98MB8GA1UdIwQYMBaAFFcudg285tZVUwmLAX78Muyxzsrh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzMxRC9FNzYxMENDRTVG MEMxMUVDQTkxNDQ0MjZDNEY5QUUwMi9WeTUyRGJ6bTFsVlRDWXNCZnZ3eTdMSE95 dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5NTJEYnptMWxWVENZc0Jmdnd5N0xIT3l1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzMxRC9FNzYxMENDRTVGMEMxMUVDQTkxNDQ0MjZDNEY5QUUwMi9WeTUyRGJ6bTFs VlRDWXNCZnZ3eTdMSE95dUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPCZEDsVvCtJ10HHv9TIP62FJqkT//o7Wwja6vu9e5zsa6t/WWjSnN WCJSSRoHjcRflqR8q2FM3AYLNbZRFmJNkGuPzit/HF2GDV91CsZhv8+qaALTjq3V 9zXr0PLlXQglAI3NnPc0UmDEKXVx+YLKhy1+EEnfWMZlt7tb3S6lKL8+B8svH0Iy q3krjMNuVadelDcpOHtkleeF2W5RoVGGcREX4Vsd/fhG4m3Z7VryTTBmWnrFy3OE kREt8H/lfT8zueJ4RlaSFIyU8i733OjC+WFhm24d+HnRK29H+l/ogj71Iq4u3lR4 7qZWRmY29M7q4DUx0ZI3o/B0a7fJjceQ -----END CERTIFICATE-----Generated at Mon Jul 21 06:07:14 2025 by rpki-client