$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: sbnluZ1w/eRE1EPif9FjXa9EQkzsil4LAb0kRoI5Ez8= Subject key identifier: 8E:FD:B3:C3:F9:71:F4:62:9D:4A:7F:EA:3C:B1:E8:64:DD:0B:E0:2D Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: D5 Signing time: Sat 19 Jul 2025 05:46:35 +0000 Manifest this update: Sat 19 Jul 2025 05:46:35 +0000 Manifest next update: Sat 26 Jul 2025 05:46:35 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: 7DKHufeCQ3d2uLtlb4Rp1OypuqsrUncfkqSU5TW05TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Jul 19 05:46:35 2025 GMT Not After : Jul 26 05:46:35 2025 GMT Subject: CN=687b313b-6f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:57:05:13:16:45:50:4c:09:4a:52:41:5d: 4b:03:51:46:42:7d:62:49:fe:c3:50:84:0d:a1:ea: e9:dd:3f:8e:a1:53:ad:c9:e2:4d:26:ce:18:99:43: f4:09:d5:42:de:b5:00:5c:a9:b4:7f:b3:f8:68:17: 0c:c2:8f:30:fc:39:64:fb:d1:c4:c9:86:a6:cb:af: 87:63:0b:3a:e3:77:1d:7e:94:8d:08:e2:e4:a8:a2: 86:37:54:5d:56:07:3e:b1:19:91:cb:d4:44:2c:46: 6b:51:df:e9:52:02:58:90:62:a7:c7:70:4e:bc:fe: c6:e8:8d:0f:19:74:a0:ef:ae:cc:42:f1:1d:66:9d: 24:5e:ed:d9:42:f7:74:7a:df:ed:ac:5b:22:e1:4c: ac:3f:7e:9e:d1:3e:88:89:5e:00:73:63:6b:2f:37: 56:fd:ab:88:10:d0:4b:ef:ca:fc:da:b5:d0:4b:9b: 2c:42:f7:96:39:7a:0d:56:23:1c:bd:af:81:9b:ae: 3e:db:85:57:fe:2f:bd:ea:12:77:5c:e0:7b:c5:93: 61:77:d9:0f:2a:ea:bf:ae:cc:fd:67:58:7a:64:70: b6:4e:5e:21:1f:c6:c0:3e:8c:8f:a7:96:dc:3a:c7: 61:12:06:a5:25:9c:5b:6b:f8:3d:ae:d0:d6:d2:f6: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FD:B3:C3:F9:71:F4:62:9D:4A:7F:EA:3C:B1:E8:64:DD:0B:E0:2D X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:f9:ed:b3:d5:cb:08:19:75:bc:5f:da:1a:ea:ff:04:a1:6c: 14:97:5f:1f:ff:97:a5:ea:f3:4a:3f:ff:00:df:9c:57:a9:1c: 7d:fa:f5:48:4c:d5:d2:a7:b9:0d:62:d9:10:dc:17:69:cd:ce: b4:b8:6b:d4:b0:ae:ac:00:0c:65:2d:27:9a:c2:22:4d:f8:fb: 99:97:66:66:b2:75:72:96:b8:05:b1:25:d4:16:a8:6f:be:31: f8:b0:54:32:58:c4:42:ca:91:1a:c5:fd:3c:a6:6f:e7:63:2e: 93:30:fd:17:de:b7:5e:46:a9:8d:a0:38:18:5a:bb:29:72:36: a8:d7:10:e0:3d:83:cf:9f:c4:f7:a9:d3:24:eb:a9:56:a3:f2: 9f:32:b5:cf:31:9a:b4:34:0f:b6:bc:f8:7a:d5:c9:b4:69:bb: 97:90:d8:ff:4d:83:56:d4:80:e0:38:7d:14:45:1c:db:19:4b: 1b:a1:5f:fe:d2:10:c6:19:d9:a4:4e:42:ed:64:d2:e0:1e:56: a9:89:70:82:e3:18:90:cf:9a:89:b6:46:51:dd:3b:9b:42:04: 00:71:1c:08:01:1e:70:70:ff:a3:76:87:99:91:fb:d5:c6:6b: bc:c4:bc:e1:46:88:83:da:97:a5:75:d1:a9:3f:42:14:f0:80: 17:e8:69:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjUwNzE5MDU0NjM1WhcNMjUwNzI2MDU0NjM1WjAYMRYwFAYD VQQDEw02ODdiMzEzYi02ZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ulXBRMWRVBMCUpSQV1LA1FGQn1iSf7DUIQNoerp3T+OoVOtyeJNJs4YmUP0 CdVC3rUAXKm0f7P4aBcMwo8w/Dlk+9HEyYamy6+HYws643cdfpSNCOLkqKKGN1Rd Vgc+sRmRy9RELEZrUd/pUgJYkGKnx3BOvP7G6I0PGXSg767MQvEdZp0kXu3ZQvd0 et/trFsi4UysP36e0T6IiV4Ac2NrLzdW/auIENBL78r82rXQS5ssQveWOXoNViMc va+Bm64+24VX/i+96hJ3XOB7xZNhd9kPKuq/rsz9Z1h6ZHC2Tl4hH8bAPoyPp5bc OsdhEgalJZxba/g9rtDW0vYn+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI79s8P5 cfRinUp/6jyx6GTdC+AtMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2+e2z1csIGXW8X9oa6v8EoWwUl18f/5el6vNKP/8A35xXqRx9+vVI TNXSp7kNYtkQ3Bdpzc60uGvUsK6sAAxlLSeawiJN+PuZl2ZmsnVylrgFsSXUFqhv vjH4sFQyWMRCypEaxf08pm/nYy6TMP0X3rdeRqmNoDgYWrspcjao1xDgPYPPn8T3 qdMk66lWo/KfMrXPMZq0NA+2vPh61cm0abuXkNj/TYNW1IDgOH0URRzbGUsboV/+ 0hDGGdmkTkLtZNLgHlapiXCC4xiQz5qJtkZR3TubQgQAcRwIAR5wcP+jdoeZkfvV xmu8xLzhRoiD2pelddGpP0IU8IAX6GkA -----END CERTIFICATE-----Generated at Sun Jul 20 06:11:18 2025 by rpki-client