$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft File: DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft (raw, json) Hash identifier: O5RMHZGUeB1nOQh4r4ScVAuO9YD+O8HdxwMz5YH6Puc= Subject key identifier: BF:98:9D:61:46:0F:79:61:79:26:4A:CA:A3:68:C4:85:C9:7C:02:14 Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6 Certificate issuer: /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft Manifest number: 2D Signing time: Sat 19 Jul 2025 07:57:34 +0000 Manifest this update: Sat 19 Jul 2025 07:57:34 +0000 Manifest next update: Sat 26 Jul 2025 07:57:34 +0000 Files and hashes: 1: DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl (hash: vXp9vTbP3G78EhKK78xS1MfR9i0lJKIhbNUIb48hCQs=) 2: FDD4FA341E6111F0B8D45B79C4F9AE02.roa (hash: 7JB/cgKUwfUR4YGlIPTezqpMMVQ3OA1LBmpMpECbKmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6 Validity Not Before: Jul 19 07:57:34 2025 GMT Not After : Jul 26 07:57:34 2025 GMT Subject: CN=687b4fee-940b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:09:19:81:98:54:09:51:7f:09:9e:f8:08:2d: 62:10:0d:7f:bd:3f:79:2e:61:55:c9:93:cb:4a:a2: 0d:8b:9a:ed:46:6e:0f:56:62:51:16:9b:c6:25:c2: de:a8:10:35:57:01:86:c0:02:13:09:c2:91:9f:56: 28:03:bc:63:2f:51:16:b5:93:63:4f:ca:8a:8c:59: 95:b2:f8:e5:f1:0e:d9:7d:00:15:4a:d3:cf:c0:da: 28:f3:93:76:9a:b5:11:7d:9f:92:88:49:80:27:04: 2f:88:d8:1c:de:00:95:56:07:07:d0:d9:7b:50:66: 57:57:e7:3f:05:4e:32:8d:6c:dc:12:25:c7:96:b7: 88:d8:72:6e:97:da:4e:81:ee:02:16:f0:6c:ca:0e: e8:fd:e3:79:a2:fc:15:ba:ec:14:52:ff:60:48:a2: 86:6c:2b:e7:1e:ae:72:81:8c:85:00:f1:ca:65:70: 61:32:cb:6a:f5:75:f1:12:04:6f:a8:dd:47:3b:28: e8:8a:23:f6:36:9e:2a:b9:55:a9:b0:78:ed:f6:8c: 9c:d9:0f:2a:7e:3b:77:f2:50:ac:b8:06:b2:47:47: 70:d4:c2:77:d2:07:47:68:58:36:01:94:52:9a:0b: 4f:ae:ac:24:cf:8c:d3:da:5e:a2:24:fa:27:ce:59: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:98:9D:61:46:0F:79:61:79:26:4A:CA:A3:68:C4:85:C9:7C:02:14 X509v3 Authority Key Identifier: keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:85:66:e8:7d:19:ee:48:40:7a:b7:9d:d2:40:d6:f6:8d:76: c6:22:24:91:fd:14:d4:9d:a6:22:51:40:4f:e8:7c:8a:4c:10: d3:a7:bc:f9:a7:bf:fd:f8:47:3e:8f:b5:3c:59:c2:07:62:09: 94:46:ed:3d:0e:21:16:2f:40:67:09:4b:c9:a1:d7:bb:c4:ca: d1:93:fd:cf:bc:25:17:08:f7:52:a4:92:b0:de:73:c9:17:ed: 3c:90:89:04:43:bd:cc:90:45:6e:6e:57:d2:a1:4b:ea:f5:28: cb:d1:9b:6c:db:5f:29:b1:30:03:82:bb:f7:62:ac:14:d6:ef: 6a:e5:88:52:4e:83:14:23:93:8e:60:26:9a:0d:e6:a0:9d:de: e6:17:84:4d:e5:44:08:40:97:12:7c:30:71:84:ba:f9:8c:3f: 5a:0a:a0:b9:a7:de:d9:d1:47:78:91:91:e8:11:9d:0a:21:78: a3:8e:b5:1c:28:47:88:1f:17:97:6e:aa:07:7f:46:de:ef:56: 69:c2:b9:72:69:38:38:76:1b:42:9c:aa:76:c7:20:c5:56:71: b2:38:05:a9:71:00:1f:aa:1e:c8:cb:b4:50:81:33:d2:48:c3: d3:58:cf:d7:4b:d1:e1:b9:cf:9a:c2:ba:92:c9:24:82:33:98: a2:4d:53:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkMwNzExMC8GA1UEBRMoMENFMDYwQzJFNDMwREQ4NTE4MTBDOUYyMEZFQzFCQTIx MTk5RTNENjAeFw0yNTA3MTkwNzU3MzRaFw0yNTA3MjYwNzU3MzRaMBgxFjAUBgNV BAMTDTY4N2I0ZmVlLTk0MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeCRmBmFQJUX8JnvgILWIQDX+9P3kuYVXJk8tKog2Lmu1Gbg9WYlEWm8Ylwt6o EDVXAYbAAhMJwpGfVigDvGMvURa1k2NPyoqMWZWy+OXxDtl9ABVK08/A2ijzk3aa tRF9n5KISYAnBC+I2BzeAJVWBwfQ2XtQZldX5z8FTjKNbNwSJceWt4jYcm6X2k6B 7gIW8GzKDuj943mi/BW67BRS/2BIooZsK+cernKBjIUA8cplcGEyy2r1dfESBG+o 3Uc7KOiKI/Y2niq5VamweO32jJzZDyp+O3fyUKy4BrJHR3DUwnfSB0doWDYBlFKa C0+urCTPjNPaXqIk+ifOWcXtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv5idYUYP eWF5JkrKo2jEhcl8AhQwHwYDVR0jBBgwFoAUDOBgwuQw3YUYEMnyD+wbohGZ49Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyQzA3L0E3NzRBOUNFMUU2 MDExRjBCN0RDNzY1NEM0RjlBRTAyL0RPQmd3dVF3M1lVWUVNbnlELXdib2hHWjQ5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRE9CZ3d1UXczWVVZRU1ueUQtd2JvaEdaNDlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy QzA3L0E3NzRBOUNFMUU2MDExRjBCN0RDNzY1NEM0RjlBRTAyL0RPQmd3dVF3M1lV WUVNbnlELXdib2hHWjQ5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJCFZuh9Ge5IQHq3ndJA1vaNdsYiJJH9FNSdpiJRQE/ofIpMENOnvPmn v/34Rz6PtTxZwgdiCZRG7T0OIRYvQGcJS8mh17vEytGT/c+8JRcI91KkkrDec8kX 7TyQiQRDvcyQRW5uV9KhS+r1KMvRm2zbXymxMAOCu/dirBTW72rliFJOgxQjk45g JpoN5qCd3uYXhE3lRAhAlxJ8MHGEuvmMP1oKoLmn3tnRR3iRkegRnQoheKOOtRwo R4gfF5duqgd/Rt7vVmnCuXJpODh2G0KcqnbHIMVWcbI4BalxAB+qHsjLtFCBM9JI w9NYz9dL0eG5z5rCupLJJIIzmKJNUzI= -----END CERTIFICATE-----Generated at Sun Jul 20 12:37:35 2025 by rpki-client