$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft File: 156odshIAT1wTjIDr31ghtsCx50.mft (raw, json) Hash identifier: y0Bt9kqcfkIkpYR8TaRDeXB34VI5akb8xeNdrk95HQ8= Subject key identifier: CA:F1:EC:26:51:65:BA:47:35:E6:11:BC:63:E1:2D:A9:5D:54:C7:CF Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft Manifest number: 0320 Signing time: Mon 21 Jul 2025 01:26:54 +0000 Manifest this update: Mon 21 Jul 2025 01:26:54 +0000 Manifest next update: Mon 28 Jul 2025 01:26:54 +0000 Files and hashes: 1: 156odshIAT1wTjIDr31ghtsCx50.crl (hash: wXbfKme2qEm4K1YMt9SEb0VbKiSe5ovoLuyVaUh3xyg=) 2: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (hash: 4q86TaevYN4wi8FIhE98uWT6GCxVtXHFfpTKfJMTYtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Validity Not Before: Jul 21 01:26:54 2025 GMT Not After : Jul 28 01:26:54 2025 GMT Subject: CN=687d975e-c83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:23:95:14:2e:a5:cc:32:61:8d:f7:b9:99: 71:b6:12:94:48:75:c2:01:59:d8:e5:37:54:85:1c: 04:18:d1:5a:a8:ee:5d:22:ae:21:e2:92:f2:8b:d5: 5c:db:9b:1d:d8:4c:dc:ff:61:e7:12:d5:cc:22:73: 7f:d1:12:28:b9:8b:38:26:f9:ae:6e:0d:87:ed:c4: e5:04:9a:1e:13:fc:92:03:ee:0c:cc:9d:7b:57:c3: 20:fc:d3:a3:f9:76:ec:87:3d:2e:12:63:40:89:e0: 6a:31:41:4a:bf:9d:3f:96:8c:80:89:12:80:45:01: bc:67:8c:30:07:0c:fb:be:6c:25:d7:5c:ca:12:7f: 45:a0:f9:2e:f3:9c:bb:ce:c1:13:ca:0d:a6:2f:b2: 63:d1:7c:05:54:81:63:6c:74:c1:52:ad:9a:a0:4f: 30:23:8a:5f:8d:01:84:99:dd:f2:e2:5f:af:a1:86: db:7d:e2:cb:5a:c5:33:5e:6b:3a:2a:ef:fa:81:90: 11:0c:b0:ac:f6:e3:2a:ed:56:bc:5c:d0:46:ca:68: 6c:be:0e:22:b4:95:93:e2:3e:6c:29:41:d8:f8:81: 3f:1a:f6:d8:25:f7:49:1f:e5:22:52:9f:78:20:0c: 15:90:f4:e8:67:4d:46:69:5a:51:99:db:f8:f7:1f: 19:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F1:EC:26:51:65:BA:47:35:E6:11:BC:63:E1:2D:A9:5D:54:C7:CF X509v3 Authority Key Identifier: keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:23:b0:c9:9b:9c:c8:14:40:0a:b6:f6:04:d9:b7:ee:c3:08: ef:0f:f0:2b:f1:84:9e:26:4e:4a:72:1c:cc:d1:e0:d8:f4:ed: ec:03:a3:23:c7:34:e6:28:ea:8d:a2:e5:f3:e7:08:03:e4:e6: 7c:af:de:4d:2a:10:78:d1:0c:9d:95:1e:2e:f8:9b:00:1b:b8: 1b:0c:d6:26:00:ac:9c:c6:62:b9:9c:ff:94:0a:ee:dc:a3:8f: 2a:20:ed:c4:db:6c:42:1d:a0:e6:9b:d6:3d:84:b5:d2:ca:f5: fe:bb:e9:4b:7a:07:44:19:b5:49:64:d5:17:3e:d1:45:06:94: d8:37:b5:a6:59:8d:bc:0c:67:a8:2b:2e:a2:75:c8:b3:e4:84: 57:62:a1:be:de:60:d7:84:7f:62:49:cd:58:25:5d:41:00:98: f1:ab:f8:36:cd:59:2e:ff:fd:95:d8:48:36:1a:09:d2:1d:ea: 86:24:07:68:f1:7e:13:7f:18:e2:9b:4d:02:68:9d:32:18:1a: 0f:11:11:d3:ad:31:31:4b:5d:13:99:50:06:c9:48:27:2c:7d: 82:f6:0d:e7:1f:51:e4:08:47:fe:11:c3:4e:0b:e1:0e:46:5d: 2c:04:40:c0:05:f3:d5:c8:36:4d:f2:1e:c3:09:42:05:c2:45: 41:27:04:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QjgxMTAvBgNVBAUTKEQ3OUVBODc2Qzg0ODAxM0Q3MDRFMzIwM0FGN0Q2MDg2 REIwMkM3OUQwHhcNMjUwNzIxMDEyNjU0WhcNMjUwNzI4MDEyNjU0WjAYMRYwFAYD VQQDEw02ODdkOTc1ZS1jODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8UjlRQupcwyYY33uZlxthKUSHXCAVnY5TdUhRwEGNFaqO5dIq4h4pLyi9Vc 25sd2Ezc/2HnEtXMInN/0RIouYs4Jvmubg2H7cTlBJoeE/ySA+4MzJ17V8Mg/NOj +Xbshz0uEmNAieBqMUFKv50/loyAiRKARQG8Z4wwBwz7vmwl11zKEn9FoPku85y7 zsETyg2mL7Jj0XwFVIFjbHTBUq2aoE8wI4pfjQGEmd3y4l+voYbbfeLLWsUzXms6 Ku/6gZARDLCs9uMq7Va8XNBGymhsvg4itJWT4j5sKUHY+IE/GvbYJfdJH+UiUp94 IAwVkPToZ01GaVpRmdv49x8ZjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrx7CZR ZbpHNeYRvGPhLaldVMfPMB8GA1UdIwQYMBaAFNeeqHbISAE9cE4yA699YIbbAsed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCOC80REUxNkNFNEQ4 MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFUMXdUaklEcjMxZ2h0c0N4 NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1Nm9kc2hJQVQxd1RqSURyMzFnaHRzQ3g1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCOC80REUxNkNFNEQ4MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFU MXdUaklEcjMxZ2h0c0N4NTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVI7DJm5zIFEAKtvYE2bfuwwjvD/Ar8YSeJk5KchzM0eDY9O3sA6Mj xzTmKOqNouXz5wgD5OZ8r95NKhB40QydlR4u+JsAG7gbDNYmAKycxmK5nP+UCu7c o48qIO3E22xCHaDmm9Y9hLXSyvX+u+lLegdEGbVJZNUXPtFFBpTYN7WmWY28DGeo Ky6idciz5IRXYqG+3mDXhH9iSc1YJV1BAJjxq/g2zVku//2V2Eg2GgnSHeqGJAdo 8X4Tfxjim00CaJ0yGBoPERHTrTExS10TmVAGyUgnLH2C9g3nH1HkCEf+EcNOC+EO Rl0sBEDABfPVyDZN8h7DCUIFwkVBJwRI -----END CERTIFICATE-----Generated at Mon Jul 21 09:27:52 2025 by rpki-client