$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: bXymwgufFSNWmvwicYuXIqeBraGDmYgGg3I48CMAz0s= Subject key identifier: A4:42:A8:32:43:32:8A:6F:65:65:E4:5B:8D:FC:6A:61:2F:E6:66:8C Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: C0 Signing time: Sat 19 Jul 2025 06:03:37 +0000 Manifest this update: Sat 19 Jul 2025 06:03:37 +0000 Manifest next update: Sat 26 Jul 2025 06:03:37 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: Qre4vOt9iapbhE3XOrKsi5YMPJ4KaA0OdF72JiUvwmY=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: Jb/5el+254tvWTwmxgE5e2fworHZ6IC6eYTkaaOmWbo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 5j1mJUsKsqLJqbWxCLNYcCoMJnOjUallWOckNeSTW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Jul 19 06:03:37 2025 GMT Not After : Jul 26 06:03:37 2025 GMT Subject: CN=687b3539-dae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:39:df:a0:57:81:55:12:19:31:e0:a1:bd: b7:bb:fc:4f:5a:c7:58:73:0c:4c:f0:2b:01:d1:a5: b4:3e:a0:be:6f:21:28:66:ab:ad:7c:d2:a5:c7:9d: f9:bb:b6:18:65:d2:0c:b9:6f:1a:69:ef:c7:e8:60: 6b:8d:54:1f:1c:d7:c3:51:a1:f2:44:88:81:33:8a: 7f:03:fa:30:3b:2d:20:b9:f9:77:7f:b4:11:08:1d: 75:88:3e:2d:fe:66:77:5a:17:05:bc:e7:fb:60:a4: c1:83:85:84:4c:81:6d:ee:c0:8c:1c:1d:e3:73:6d: 2c:80:47:09:af:f8:b3:60:3c:a7:e0:9f:02:09:22: 8a:c5:6e:de:46:30:21:41:c5:09:f8:ff:13:44:5a: 8e:9c:33:e1:8c:c2:6b:1a:97:b5:3b:2f:3f:15:a6: 89:22:98:72:37:5b:cd:17:84:db:30:cb:81:4d:10: 31:69:93:dd:59:03:6e:fe:0f:ce:21:20:af:46:af: 01:b7:a4:07:1d:11:b6:b7:f5:3c:cb:29:eb:13:a8: 4b:23:22:76:0d:71:d9:7c:a4:3e:ba:84:86:7d:b6: 7d:d6:0c:70:ea:56:72:a0:e3:ad:39:ad:76:b3:0e: 1c:2d:c9:39:c2:96:69:1e:2a:da:d8:7c:ca:2a:a9: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:42:A8:32:43:32:8A:6F:65:65:E4:5B:8D:FC:6A:61:2F:E6:66:8C X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:47:b7:a7:9a:17:5c:92:b4:9a:d3:45:e6:4b:56:a4:48:35: 85:6a:e3:1e:18:c4:8c:66:98:26:43:3e:16:b9:b7:2e:ec:93: b9:05:f8:7c:67:cc:af:8d:80:ec:46:f6:fc:e0:e1:e7:b1:a2: 4e:b2:19:60:86:0a:cc:8b:13:6c:d1:2e:cc:b4:93:8d:5f:06: 62:fa:2a:a9:8a:24:d6:bd:a4:fa:ed:c6:70:6b:6e:7d:68:d3: d6:d0:00:bd:cf:69:e0:04:9b:65:ae:89:72:0e:64:f8:0c:19: ef:75:8a:44:5a:b5:a7:e4:65:18:29:43:f7:12:86:3f:4a:c2: c8:66:d7:40:a4:84:c5:dd:53:88:df:25:27:fd:43:a8:6d:5b: a1:1d:4d:4b:99:46:83:83:50:0c:6e:d3:93:47:3e:66:2f:f6: 5d:66:9d:5a:a0:49:be:5d:a9:29:57:ec:4a:6d:c7:3d:ba:92: 62:2e:84:be:12:fe:d0:3d:df:6c:09:e0:86:fd:e0:9a:15:41: 91:40:ad:c8:a7:0e:4d:aa:1a:22:6f:1d:a6:09:e1:ea:28:ab: 9e:b6:54:ae:82:20:d3:f5:ce:ab:ce:80:c4:4a:06:21:00:9b: 2e:c9:05:41:1e:37:eb:3f:c0:43:a4:c6:ad:5b:50:71:4f:63: f7:16:11:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUwNzE5MDYwMzM3WhcNMjUwNzI2MDYwMzM3WjAYMRYwFAYD VQQDEw02ODdiMzUzOS1kYWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnj4536BXgVUSGTHgob23u/xPWsdYcwxM8CsB0aW0PqC+byEoZqutfNKlx535 u7YYZdIMuW8aae/H6GBrjVQfHNfDUaHyRIiBM4p/A/owOy0gufl3f7QRCB11iD4t /mZ3WhcFvOf7YKTBg4WETIFt7sCMHB3jc20sgEcJr/izYDyn4J8CCSKKxW7eRjAh QcUJ+P8TRFqOnDPhjMJrGpe1Oy8/FaaJIphyN1vNF4TbMMuBTRAxaZPdWQNu/g/O ISCvRq8Bt6QHHRG2t/U8yynrE6hLIyJ2DXHZfKQ+uoSGfbZ91gxw6lZyoOOtOa12 sw4cLck5wpZpHira2HzKKqnNQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRCqDJD MopvZWXkW438amEv5maMMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDR7enmhdckrSa00XmS1akSDWFauMeGMSMZpgmQz4Wubcu7JO5Bfh8 Z8yvjYDsRvb84OHnsaJOshlghgrMixNs0S7MtJONXwZi+iqpiiTWvaT67cZwa259 aNPW0AC9z2ngBJtlrolyDmT4DBnvdYpEWrWn5GUYKUP3EoY/SsLIZtdApITF3VOI 3yUn/UOobVuhHU1LmUaDg1AMbtOTRz5mL/ZdZp1aoEm+XakpV+xKbcc9upJiLoS+ Ev7QPd9sCeCG/eCaFUGRQK3Ipw5Nqhoibx2mCeHqKKuetlSugiDT9c6rzoDESgYh AJsuyQVBHjfrP8BDpMatW1BxT2P3FhE4 -----END CERTIFICATE-----Generated at Sun Jul 20 18:55:30 2025 by rpki-client