$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: sWquRcdU9COwqxbTS+UxbNzxxtO9s4U1EmkEh6kRGAU= Subject key identifier: EE:AC:73:2F:50:6F:A1:4F:96:70:1F:B0:4F:20:C3:EB:37:A3:20:B3 Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 05DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 05D9 Signing time: Sun 20 Jul 2025 23:12:25 +0000 Manifest this update: Sun 20 Jul 2025 23:12:24 +0000 Manifest next update: Sun 27 Jul 2025 23:12:24 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: mgtj5dBxqRgtGzWbAWzO4q8lmy3m6x3aPUQnNM1qJwA=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: vvGapGaGNGJH4S/SUbpLb9IjES+dem4UiH0RpBmA3po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1503 (0x5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: Jul 20 23:12:24 2025 GMT Not After : Jul 27 23:12:24 2025 GMT Subject: CN=687d77d8-a97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6c:a6:9c:47:ab:dc:b3:33:f3:d3:d8:d4:71: 2b:8a:03:d1:2d:80:bb:b8:47:6a:8e:ee:a5:96:99: 7c:fe:df:e1:75:41:ff:f3:00:2c:5e:d5:10:4e:75: da:26:d3:5c:02:58:66:df:35:85:86:0c:4a:d9:fc: ae:85:fa:9a:2c:94:33:02:32:af:ee:dd:ba:0d:ff: 32:f3:28:44:b1:41:3c:b8:29:65:2e:96:17:82:61: ac:00:e7:65:b6:b3:8f:d8:37:25:69:08:88:87:6b: 51:32:ad:e5:a0:4b:53:67:08:ea:b6:ad:ce:f0:3c: e8:5a:84:70:ac:aa:ad:8e:b2:53:cb:0d:e9:ea:ed: 47:a5:43:41:93:00:b5:22:5e:f8:37:bb:f7:a0:05: 91:65:c8:58:58:a8:e5:7d:00:a2:27:7d:1e:9d:95: 59:4d:d6:14:f4:6d:67:f7:6e:53:95:00:c9:32:83: 95:f5:e2:e8:2e:5a:f6:3d:c0:0b:06:ff:e1:bd:3f: 13:e1:e0:9f:de:fd:6f:d0:5d:9d:9e:7c:07:4d:2b: d2:e5:71:ab:4d:24:4d:cf:fa:ac:ba:d8:ec:a5:8b: bc:78:b8:b8:49:fc:0e:08:36:5a:30:be:f2:03:f0: e9:99:5a:fd:99:32:59:fc:8a:76:5c:9c:ec:7b:2c: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AC:73:2F:50:6F:A1:4F:96:70:1F:B0:4F:20:C3:EB:37:A3:20:B3 X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:9a:ce:08:66:66:1d:44:c4:a2:fb:73:6e:0b:4c:8b:42:9b: 9d:84:08:72:60:b7:21:ed:f6:39:62:42:92:1c:8c:63:df:5a: 3e:51:d2:9f:e6:ec:d0:15:5c:92:b1:06:b4:4b:07:b8:16:d9: 04:80:80:05:9f:a7:e1:df:7a:16:c1:4b:3d:32:8e:9f:06:b8: ed:47:03:72:10:b8:90:18:84:bc:a4:bc:2c:aa:7f:e4:cb:98: 15:08:49:0a:7d:8a:be:42:d4:3f:37:aa:2b:13:71:93:e5:61: 0a:d4:7c:a4:d9:87:f4:5b:08:24:5e:56:a5:0f:5d:a4:be:51: ab:4c:ce:87:e3:9e:53:6a:d1:5f:15:e3:2f:fe:b5:d7:1d:c9: 3b:24:95:e8:33:97:ee:a1:6e:dc:d6:5a:25:88:61:44:ce:5c: e2:95:18:cb:56:1a:66:fc:42:2d:75:9c:3b:5a:b9:ef:10:fd: 9c:36:4d:ff:3f:d3:49:45:7b:03:af:58:c8:81:f7:33:87:12: e9:3c:12:52:a4:e7:d4:bc:cf:43:01:5a:87:ae:2a:e0:b3:ea: 0a:bd:cc:c9:4d:36:d5:04:ad:fa:37:10:ed:55:2c:66:45:14: be:63:65:3a:22:f9:3a:be:3b:75:8b:18:cd:3d:78:0e:e4:d5: 28:63:3f:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjUwNzIwMjMxMjI0WhcNMjUwNzI3MjMxMjI0WjAYMRYwFAYD VQQDEw02ODdkNzdkOC1hOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mymnEer3LMz89PY1HErigPRLYC7uEdqju6llpl8/t/hdUH/8wAsXtUQTnXa JtNcAlhm3zWFhgxK2fyuhfqaLJQzAjKv7t26Df8y8yhEsUE8uCllLpYXgmGsAOdl trOP2DclaQiIh2tRMq3loEtTZwjqtq3O8DzoWoRwrKqtjrJTyw3p6u1HpUNBkwC1 Il74N7v3oAWRZchYWKjlfQCiJ30enZVZTdYU9G1n925TlQDJMoOV9eLoLlr2PcAL Bv/hvT8T4eCf3v1v0F2dnnwHTSvS5XGrTSRNz/qsutjspYu8eLi4SfwOCDZaML7y A/DpmVr9mTJZ/Ip2XJzseyzKGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6scy9Q b6FPlnAfsE8gw+s3oyCzMB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMms4IZmYdRMSi+3NuC0yLQpudhAhyYLch7fY5YkKSHIxj31o+UdKf 5uzQFVySsQa0Swe4FtkEgIAFn6fh33oWwUs9Mo6fBrjtRwNyELiQGIS8pLwsqn/k y5gVCEkKfYq+QtQ/N6orE3GT5WEK1Hyk2Yf0WwgkXlalD12kvlGrTM6H455TatFf FeMv/rXXHck7JJXoM5fuoW7c1loliGFEzlzilRjLVhpm/EItdZw7WrnvEP2cNk3/ P9NJRXsDr1jIgfczhxLpPBJSpOfUvM9DAVqHrirgs+oKvczJTTbVBK36NxDtVSxm RRS+Y2U6Ivk6vjt1ixjNPXgO5NUoYz8Q -----END CERTIFICATE-----Generated at Tue Jul 22 05:10:20 2025 by rpki-client