$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: E9UOOZ2QbwPvGl1QqtR5yiMB4PGcT/tzxSb6C343ZOw= Subject key identifier: A5:1D:65:98:8E:6D:30:6D:E5:0E:2F:A4:7E:49:9E:06:09:95:B3:D3 Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 0376 Signing time: Mon 21 Jul 2025 01:14:07 +0000 Manifest this update: Mon 21 Jul 2025 01:14:07 +0000 Manifest next update: Mon 28 Jul 2025 01:14:07 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: vFihKwcbumPIbWwQ1poRZFr3KM607ywgWYnE8nbwXNY=) 2: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 8dEWz6BA19noWs2zWuUBCRCZchx4qTK4G3VWLV+hIMw=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: 8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=) 4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: KstFse9DL+Lpk2UJhsRfTukB1/IV52HFgYreP0UKdGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Jul 21 01:14:07 2025 GMT Not After : Jul 28 01:14:07 2025 GMT Subject: CN=687d945f-9bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:90:35:2e:bd:06:52:b6:01:d0:a3:ef:af: 02:5c:41:f7:54:38:c8:58:15:fd:12:42:20:23:c1: 60:64:4a:99:09:da:91:1b:c2:e9:0b:b5:54:07:7c: 3c:dc:ac:49:3c:07:ea:40:f6:74:c1:1a:de:c9:df: a5:43:1a:68:48:8b:db:f4:b2:16:92:ce:8a:1c:3e: 61:cb:bf:21:96:23:d7:3e:ba:0e:a9:19:2e:53:13: 88:35:0e:bf:dc:ca:cf:95:0a:d3:a8:70:b0:90:10: ca:61:39:90:c0:7e:9c:8b:d9:42:4b:93:8b:fc:6f: ea:a7:b2:bf:3c:46:79:26:7f:2b:0e:20:1b:5d:b3: c4:7b:42:7e:1c:03:ad:84:8e:e2:b3:a2:55:9d:8f: 5f:ff:37:d3:39:56:88:d3:ef:ee:c2:12:06:9e:e9: 7b:62:46:01:93:6a:e7:d9:89:4c:76:da:5b:c2:e2: 86:af:65:5b:f1:d9:04:3f:57:63:45:7f:4c:b1:fa: a9:ea:a8:f2:af:5a:80:b5:ea:69:bf:5d:e9:65:0b: df:20:b7:96:07:ca:bc:9f:42:5c:ca:f1:62:83:99: d3:09:8d:97:77:cb:3b:9e:b0:4a:3b:31:04:36:65: 49:de:ae:7a:19:52:e1:76:81:80:95:88:1a:02:76: 5f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1D:65:98:8E:6D:30:6D:E5:0E:2F:A4:7E:49:9E:06:09:95:B3:D3 X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:73:ef:fb:90:06:b9:35:89:e2:8a:6a:97:38:ea:f2:77:b8: 88:85:d0:b6:86:5f:1c:14:a2:60:21:cb:8e:78:0d:d9:9b:a2: 87:f1:8a:9a:ce:c5:9d:44:37:53:cb:04:aa:16:01:8e:51:87: 56:7f:11:94:c2:59:24:78:23:ab:f1:ed:be:d8:4f:5e:88:72: 40:02:97:fe:b0:8a:83:d4:90:1d:1b:5d:99:7b:75:91:e3:87: 95:85:89:88:14:ba:1c:29:0a:61:db:35:c5:ca:fd:e1:5d:cf: a0:dc:f7:e8:15:40:e8:85:78:83:b6:1a:6a:a4:be:04:9f:d2: 26:a7:cd:91:ca:81:38:f7:47:5a:d7:f5:a4:05:24:11:d3:b1: 70:2e:fe:da:63:12:af:d9:bd:79:51:f9:a0:00:69:06:5e:fb: 21:fc:dc:6c:7e:e5:0e:81:77:d2:0a:df:e1:6f:7f:0b:51:41: d4:7b:f5:6d:fa:99:fb:77:c3:d8:c5:a2:53:c2:30:36:eb:4b: 6d:83:b9:c9:84:3b:4e:9c:99:8d:b4:09:15:85:0b:40:39:6d: 9f:5c:db:8b:6e:c5:48:3b:d3:99:e6:09:01:28:cc:bb:97:27: 2f:8d:b2:b3:38:a1:6b:c2:b0:c5:0b:5c:24:81:5c:88:f8:1e: d8:28:8b:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjUwNzIxMDExNDA3WhcNMjUwNzI4MDExNDA3WjAYMRYwFAYD VQQDEw02ODdkOTQ1Zi05YmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9KQNS69BlK2AdCj768CXEH3VDjIWBX9EkIgI8FgZEqZCdqRG8LpC7VUB3w8 3KxJPAfqQPZ0wRreyd+lQxpoSIvb9LIWks6KHD5hy78hliPXProOqRkuUxOINQ6/ 3MrPlQrTqHCwkBDKYTmQwH6ci9lCS5OL/G/qp7K/PEZ5Jn8rDiAbXbPEe0J+HAOt hI7is6JVnY9f/zfTOVaI0+/uwhIGnul7YkYBk2rn2YlMdtpbwuKGr2Vb8dkEP1dj RX9Msfqp6qjyr1qAteppv13pZQvfILeWB8q8n0JcyvFig5nTCY2Xd8s7nrBKOzEE NmVJ3q56GVLhdoGAlYgaAnZfQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUdZZiO bTBt5Q4vpH5JngYJlbPTMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDc+/7kAa5NYniimqXOOryd7iIhdC2hl8cFKJgIcuOeA3Zm6KH8Yqa zsWdRDdTywSqFgGOUYdWfxGUwlkkeCOr8e2+2E9eiHJAApf+sIqD1JAdG12Ze3WR 44eVhYmIFLocKQph2zXFyv3hXc+g3PfoFUDohXiDthpqpL4En9Imp82RyoE490da 1/WkBSQR07FwLv7aYxKv2b15UfmgAGkGXvsh/NxsfuUOgXfSCt/hb38LUUHUe/Vt +pn7d8PYxaJTwjA260ttg7nJhDtOnJmNtAkVhQtAOW2fXNuLbsVIO9OZ5gkBKMy7 lycvjbKzOKFrwrDFC1wkgVyI+B7YKIuR -----END CERTIFICATE-----Generated at Mon Jul 21 12:57:30 2025 by rpki-client