$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft File: n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json) Hash identifier: XMI+923ahOpJ0eHKKHWOrE9dZgnqMoRjn5/uVlXo7kI= Subject key identifier: DF:B5:5E:13:02:76:90:DD:B1:92:75:F5:A2:08:EB:CE:F5:4E:CA:05 Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 Certificate issuer: /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft Manifest number: 47 Signing time: Mon 21 Jul 2025 07:37:01 +0000 Manifest this update: Mon 21 Jul 2025 07:37:00 +0000 Manifest next update: Mon 28 Jul 2025 07:37:00 +0000 Files and hashes: 1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: fI3zh8eNdTqXPAKlXXoSA3guyRugHkb7RWDO2hiRv5Y=) 2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: hHpuvEEfCl4OhjB2zfY/eTXHBtooIatBX5e91JuXgS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Validity Not Before: Jul 21 07:37:00 2025 GMT Not After : Jul 28 07:37:00 2025 GMT Subject: CN=687dee1d-4a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:30:66:0a:fe:b3:fe:5b:00:e1:4f:31:b2:78: 91:69:88:2e:98:ad:56:5a:fc:d0:e0:ad:44:86:4d: 20:dd:3f:b5:63:a2:6b:71:02:cc:e2:16:08:52:da: b6:d1:5d:6a:29:9b:16:01:ef:24:e5:57:5c:a0:25: 0c:ef:d9:8b:b3:99:fd:2f:4d:f7:79:0d:80:05:d0: b2:48:5a:5a:ff:9c:41:74:f7:6f:f3:67:91:6e:91: 95:b7:5a:86:7d:c5:0d:56:e5:10:88:f2:9e:6a:6f: 82:a5:0d:2f:ca:73:3f:fc:b5:85:69:4b:74:d0:dd: 15:c0:6f:30:51:0e:91:6d:e1:57:80:25:3a:dc:14: b7:53:cc:0f:60:c3:b6:82:f9:5e:b7:8c:38:36:09: 67:16:07:99:98:cf:2c:a1:99:e8:57:d7:1f:94:af: 9b:ad:83:12:8d:87:c1:ba:5f:81:cd:65:81:c6:61: b6:82:d3:e9:16:59:a9:db:72:2e:6f:ee:f8:7e:66: 70:43:d4:85:be:e6:46:4c:49:65:5b:18:98:61:22: 29:5f:2c:6e:e1:e1:4f:13:14:8f:56:ed:89:cf:f4: 60:59:67:82:d5:9e:47:5a:d1:69:20:b0:74:80:b8: d6:57:be:ff:09:49:35:ba:f1:6c:fc:17:eb:e3:52: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B5:5E:13:02:76:90:DD:B1:92:75:F5:A2:08:EB:CE:F5:4E:CA:05 X509v3 Authority Key Identifier: keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:71:b0:15:89:4f:a3:85:61:33:2f:3d:aa:39:14:ec:b9:22: 87:fb:37:16:90:56:ae:f5:13:e5:bf:2d:fc:9b:89:5d:55:63: b3:43:3b:14:ef:5c:6f:33:c3:c7:7c:b7:7d:ca:68:f7:59:27: 82:1e:3c:4c:01:cc:b3:f0:8b:f2:0b:ab:91:50:1c:e1:48:02: 2e:d0:28:d9:ac:f8:bf:2d:13:73:5d:83:78:4d:95:4b:85:86: c9:30:3a:c9:61:34:86:8b:bf:7d:4c:b0:35:d1:47:6d:db:fb: 9f:7b:9d:d8:d3:89:b6:e4:50:32:5d:ba:e4:2d:d6:21:94:89: 93:e2:cf:38:c2:6b:7c:2b:5f:ae:3f:ef:02:af:6b:58:a4:fc: 83:02:a8:44:a3:8f:00:9b:05:3d:78:70:b8:71:74:46:c3:c6: da:b2:c7:14:63:69:b0:d1:03:d8:4e:15:94:10:26:47:75:e1: 8e:a2:b7:43:b2:70:c2:2b:98:f7:73:de:a0:c5:72:5b:1c:1e: 02:97:68:4c:c0:d9:94:4d:31:d7:3e:5b:d6:81:6c:06:af:ac: d3:76:d2:e3:a3:e8:c8:cd:f1:d3:3b:2c:46:9d:e8:2d:58:03: c4:dc:44:b7:04:4f:85:a6:9d:ae:9c:77:6a:69:58:70:ec:3b: 15:7d:5b:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODI4MjExMC8GA1UEBRMoOUY3QjQyRUYxOEQzNDJGREQ1NkE5RkRDNUYzRDgwMUUy RDJDMUFCNzAeFw0yNTA3MjEwNzM3MDBaFw0yNTA3MjgwNzM3MDBaMBgxFjAUBgNV BAMTDTY4N2RlZTFkLTRhMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaMGYK/rP+WwDhTzGyeJFpiC6YrVZa/NDgrUSGTSDdP7VjomtxAsziFghS2rbR XWopmxYB7yTlV1ygJQzv2Yuzmf0vTfd5DYAF0LJIWlr/nEF092/zZ5FukZW3WoZ9 xQ1W5RCI8p5qb4KlDS/Kcz/8tYVpS3TQ3RXAbzBRDpFt4VeAJTrcFLdTzA9gw7aC +V63jDg2CWcWB5mYzyyhmehX1x+Ur5utgxKNh8G6X4HNZYHGYbaC0+kWWanbci5v 7vh+ZnBD1IW+5kZMSWVbGJhhIilfLG7h4U8TFI9W7YnP9GBZZ4LVnkda0WkgsHSA uNZXvv8JSTW68Wz8F+vjUh/jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU37VeEwJ2 kN2xknX1ogjrzvVOygUwHwYDVR0jBBgwFoAUn3tC7xjTQv3Vap/cXz2AHi0sGrcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MjgyLzA2MUFBQjUyRkJG RTExRUZCNTUyMEExMkM0RjlBRTAyL24zdEM3eGpUUXYzVmFwX2NYejJBSGkwc0dy Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjN0Qzd4alRRdjNWYXBfY1h6MkFIaTBzR3JjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MjgyLzA2MUFBQjUyRkJGRTExRUZCNTUyMEExMkM0RjlBRTAyL24zdEM3eGpUUXYz VmFwX2NYejJBSGkwc0dyYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFdxsBWJT6OFYTMvPao5FOy5Iof7NxaQVq71E+W/LfybiV1VY7NDOxTv XG8zw8d8t33KaPdZJ4IePEwBzLPwi/ILq5FQHOFIAi7QKNms+L8tE3Ndg3hNlUuF hskwOslhNIaLv31MsDXRR23b+597ndjTibbkUDJduuQt1iGUiZPizzjCa3wrX64/ 7wKva1ik/IMCqESjjwCbBT14cLhxdEbDxtqyxxRjabDRA9hOFZQQJkd14Y6it0Oy cMIrmPdz3qDFclscHgKXaEzA2ZRNMdc+W9aBbAavrNN20uOj6MjN8dM7LEad6C1Y A8TcRLcET4Wmna6cd2ppWHDsOxV9W/4= -----END CERTIFICATE-----Generated at Mon Jul 21 23:59:22 2025 by rpki-client