$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json) Hash identifier: IDen2bFsQfjL9Lof62LOIdGL+aXc6RUGQy1MplMMzUk= Subject key identifier: EB:3B:1D:70:99:40:DC:E3:61:08:61:6A:91:A5:B8:D5:82:8F:C6:9E Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft Manifest number: 0130 Signing time: Sat 19 Jul 2025 04:51:42 +0000 Manifest this update: Sat 19 Jul 2025 04:51:41 +0000 Manifest next update: Sat 26 Jul 2025 04:51:41 +0000 Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: YSopvQg/BpzqTfj/tEmcBEjTjotXfKGq2uK8vvr64G4=) 2: D4F8CEB8FE4211EF958ABE3BC4F9AE02.roa (hash: e+itOOHa2GS7haggfAySbnRHvgH3I9TscI3l9ZgslXk=) 3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: pCYjff74rDvqaSSHh6b2YJXJxIU8kNQvxw7uQ6aFFQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Validity Not Before: Jul 19 04:51:41 2025 GMT Not After : Jul 26 04:51:41 2025 GMT Subject: CN=687b245e-710c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:87:e0:3e:45:7a:dd:bb:d8:87:c5:b3:b5:fe: bc:5a:7c:0a:8c:9e:41:06:28:74:87:6d:8b:d7:6f: a9:2a:81:89:b6:aa:f2:72:cb:3e:ff:84:11:43:48: c9:61:a6:58:49:d1:1d:a4:f7:e3:2c:7d:a4:81:e3: b5:d0:02:25:ff:c6:1b:82:6c:91:2e:b6:bf:d4:49: 95:b5:2c:0b:be:1f:e9:8b:76:44:02:cd:e5:59:19: cf:68:02:44:d3:c5:aa:72:f9:56:d3:a5:e2:50:41: 45:20:26:d3:81:ed:cb:ff:ef:df:d6:8d:50:47:2e: 63:b7:c3:d6:d2:8f:83:06:3a:fa:ea:d6:3d:65:27: f8:2a:23:b3:2b:b8:59:58:0d:4e:32:fc:4a:8d:b0: f3:5a:b0:e2:dd:14:65:a1:94:20:cc:93:90:f1:70: 21:b2:37:07:a7:8b:3a:f5:25:2a:1d:48:14:f6:13: ea:54:ad:90:6f:75:3e:07:80:43:36:4d:7f:1c:e0: 00:34:f2:ab:33:90:7e:c1:bb:71:f3:5e:73:e3:4a: f9:21:f0:9b:13:9a:c1:ec:29:b8:ab:be:db:a3:03: ea:3b:d8:28:0a:b6:97:6b:91:78:c3:b1:29:22:05: e5:7a:ab:d7:a8:2a:a3:79:f7:43:7f:0e:99:45:54: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3B:1D:70:99:40:DC:E3:61:08:61:6A:91:A5:B8:D5:82:8F:C6:9E X509v3 Authority Key Identifier: keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:10:29:f8:3c:c9:45:56:68:2b:85:a4:02:aa:77:1f:26:ef: 63:d6:ea:6d:f0:6d:c2:84:e4:09:ce:78:1a:65:0e:59:24:a6: ad:56:41:43:fa:4e:af:26:37:14:d5:40:f3:2b:b3:98:12:34: 55:2a:6c:4c:87:f4:cd:ce:c3:13:04:af:09:7d:dc:50:82:49: c5:15:0d:b2:9d:79:e5:56:78:40:96:8a:8f:a5:bd:8d:ea:3f: 86:be:fb:d0:08:a4:8a:a9:5a:b7:97:45:8d:b1:b6:aa:3b:fd: 1e:eb:c8:c4:3e:50:c5:15:ad:d1:b8:a7:1a:84:76:cd:37:bd: ce:ab:dd:d4:39:ef:00:e2:6b:41:ee:af:82:29:eb:20:a9:31: a6:64:a5:7d:38:5d:80:8d:26:7a:fc:0f:65:a9:db:ab:d5:d7: ec:47:ec:87:ce:5b:47:c6:fe:45:dd:68:e8:cd:ea:9b:12:5b: 6e:78:ae:5a:49:5b:50:7f:41:cc:10:f7:7d:30:5d:d9:91:36: cb:b5:42:92:9b:db:4d:c1:d4:31:eb:69:cf:60:6a:b9:c6:7b: aa:94:4e:f7:0f:6e:8d:f3:86:a6:9c:20:aa:0f:23:e1:62:9c: 89:96:b9:9d:ef:7d:94:bb:ba:60:7e:2a:49:7c:69:51:4e:eb: 58:09:47:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4 MDgwRTk3MzAwHhcNMjUwNzE5MDQ1MTQxWhcNMjUwNzI2MDQ1MTQxWjAYMRYwFAYD VQQDEw02ODdiMjQ1ZS03MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34fgPkV63bvYh8Wztf68WnwKjJ5BBih0h22L12+pKoGJtqrycss+/4QRQ0jJ YaZYSdEdpPfjLH2kgeO10AIl/8YbgmyRLra/1EmVtSwLvh/pi3ZEAs3lWRnPaAJE 08WqcvlW06XiUEFFICbTge3L/+/f1o1QRy5jt8PW0o+DBjr66tY9ZSf4KiOzK7hZ WA1OMvxKjbDzWrDi3RRloZQgzJOQ8XAhsjcHp4s69SUqHUgU9hPqVK2Qb3U+B4BD Nk1/HOAANPKrM5B+wbtx815z40r5IfCbE5rB7Cm4q77bowPqO9goCraXa5F4w7Ep IgXleqvXqCqjefdDfw6ZRVR/WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOs7HXCZ QNzjYQhhapGluNWCj8aeMB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE eVFBUFpmY0Z5VzZBZ09sekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfECn4PMlFVmgrhaQCqncfJu9j1upt8G3ChOQJzngaZQ5ZJKatVkFD +k6vJjcU1UDzK7OYEjRVKmxMh/TNzsMTBK8JfdxQgknFFQ2ynXnlVnhAloqPpb2N 6j+GvvvQCKSKqVq3l0WNsbaqO/0e68jEPlDFFa3RuKcahHbNN73Oq93UOe8A4mtB 7q+CKesgqTGmZKV9OF2AjSZ6/A9lqdur1dfsR+yHzltHxv5F3WjozeqbEltueK5a SVtQf0HMEPd9MF3ZkTbLtUKSm9tNwdQx62nPYGq5xnuqlE73D26N84amnCCqDyPh YpyJlrmd732Uu7pgfipJfGlRTutYCUcK -----END CERTIFICATE-----Generated at Sun Jul 20 06:45:36 2025 by rpki-client