$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json) Hash identifier: Uty0teRB0H2OB8RNKxknasdWACiYDmWye6zZsp8RSLU= Subject key identifier: 97:88:F2:A4:A4:30:61:9D:53:DB:B5:54:AB:EF:E7:D9:C7:B6:25:20 Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft Manifest number: 30 Signing time: Sat 19 Jul 2025 08:02:32 +0000 Manifest this update: Sat 19 Jul 2025 08:02:31 +0000 Manifest next update: Sat 26 Jul 2025 08:02:31 +0000 Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: aFQHBsPBUkWY4V7l26naBK6ui67d2MeJc9h1pQNDAWk=) 2: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: cj52P7EVA7EzNB+cRXY75TfIttWbZ7w7qirjXKEDn/Y=) 3: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: UkjJv6j01kk67tAR7WvPOWkiQImQuY607Dwbp++ebI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Validity Not Before: Jul 19 08:02:31 2025 GMT Not After : Jul 26 08:02:31 2025 GMT Subject: CN=687b5118-859f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:eb:7d:57:e5:5a:86:4d:37:f4:cc:59:1b: 99:bb:a7:f1:83:c4:cc:ce:7c:5f:95:3b:57:79:ba: d1:6a:21:44:c9:7d:d7:06:2d:46:82:67:ca:48:6f: 2a:b8:e0:65:2b:87:83:eb:38:51:a1:34:d8:c8:63: 49:b1:60:dd:a6:99:eb:bd:66:0d:01:ee:89:9e:57: 02:84:9c:e0:4f:52:37:c8:89:04:82:09:62:0c:23: 56:a1:07:dc:86:19:53:5b:25:e1:ea:f1:be:04:82: 98:a8:9b:77:4d:92:69:07:57:6d:ae:5c:45:37:03: 0b:89:62:90:90:47:56:e9:d7:e6:21:72:dd:b9:25: 93:1b:81:53:8a:d1:a5:c2:47:e2:57:f3:be:07:a6: ca:01:c6:d0:9e:07:ed:bf:3f:ad:7c:bf:d2:70:c8: 2a:f5:86:c1:91:61:02:9e:7b:27:71:80:80:60:dd: 81:5c:87:3e:8b:1c:fa:04:74:ca:36:c3:4c:f6:17: 52:55:4b:40:52:29:01:f5:d0:94:80:29:8d:d5:8b: f7:f1:b9:ad:5d:e6:8c:07:cc:d0:ae:84:b5:92:0b: bb:44:4a:97:ce:e7:f1:b1:4b:0d:52:26:d2:2c:54: a9:72:21:13:78:86:47:fc:2f:a4:13:ce:ac:80:a8: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:88:F2:A4:A4:30:61:9D:53:DB:B5:54:AB:EF:E7:D9:C7:B6:25:20 X509v3 Authority Key Identifier: keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b5:bb:b5:7e:7d:c1:dc:8d:5b:7f:74:c6:22:41:fd:ff:d0: f3:07:5e:a9:5c:5a:b5:2c:19:89:1b:f6:88:47:38:4d:b1:6f: 95:18:bd:d0:f8:85:74:79:47:6b:3b:b1:f2:9a:a6:0a:f2:a6: 8d:0a:dd:21:e1:4b:9a:6e:48:ec:c7:e4:06:6c:56:fc:58:dd: 76:8f:6b:d2:12:40:84:9d:b5:23:2a:f2:42:31:c8:f8:dc:fe: 42:42:4b:79:aa:62:f0:5b:1e:36:d5:01:59:c9:77:60:45:9e: 65:e6:70:c4:82:b5:18:ba:1d:ae:d3:2a:ac:93:e6:ee:24:78: 56:ff:96:08:51:07:4f:22:1f:ab:be:ea:f5:6f:58:3a:79:82: 41:ae:fa:0e:56:1a:e3:ab:a5:bc:04:ff:f7:41:d1:f2:3e:c9: c2:c1:19:f3:6a:ef:c1:05:4a:2b:9b:eb:15:c1:d1:14:1d:f9: 62:57:0d:b1:8f:03:64:86:ab:b5:1d:f8:4c:4f:7f:f1:c9:f5: 07:45:7c:31:d8:7b:0a:b0:0c:10:05:5b:78:c3:ac:76:0c:f5: 55:44:ee:e3:1d:9d:20:19:2a:3e:54:16:07:65:dc:ab:54:05: ba:a9:3e:11:39:32:44:ce:25:34:31:79:3f:d6:8c:b9:ea:d6: b4:8f:9c:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REUxMzExMC8GA1UEBRMoNDlGRDMzRDZGNTFBRDZBNDk4ODQ0NjlGQTM5RkVGMDQz MjMzNkY4MTAeFw0yNTA3MTkwODAyMzFaFw0yNTA3MjYwODAyMzFaMBgxFjAUBgNV BAMTDTY4N2I1MTE4LTg1OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTw+t9V+Vahk039MxZG5m7p/GDxMzOfF+VO1d5utFqIUTJfdcGLUaCZ8pIbyq4 4GUrh4PrOFGhNNjIY0mxYN2mmeu9Zg0B7omeVwKEnOBPUjfIiQSCCWIMI1ahB9yG GVNbJeHq8b4Egpiom3dNkmkHV22uXEU3AwuJYpCQR1bp1+Yhct25JZMbgVOK0aXC R+JX874HpsoBxtCeB+2/P618v9JwyCr1hsGRYQKeeydxgIBg3YFchz6LHPoEdMo2 w0z2F1JVS0BSKQH10JSAKY3Vi/fxua1d5owHzNCuhLWSC7tESpfO5/GxSw1SJtIs VKlyIRN4hkf8L6QTzqyAqHbHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl4jypKQw YZ1T27VUq+/n2ce2JSAwHwYDVR0jBBgwFoAUSf0z1vUa1qSYhEafo5/vBDIzb4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERTEzLzE1MUZFNDdFMkE1 NjExRjBCODRGNTIyMEM0RjlBRTAyL1NmMHoxdlVhMXFTWWhFYWZvNV92QkRJemI0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2YwejF2VWExcVNZaEVhZm81X3ZCREl6YjRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RTEzLzE1MUZFNDdFMkE1NjExRjBCODRGNTIyMEM0RjlBRTAyL1NmMHoxdlVhMXFT WWhFYWZvNV92QkRJemI0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEi1u7V+fcHcjVt/dMYiQf3/0PMHXqlcWrUsGYkb9ohHOE2xb5UYvdD4 hXR5R2s7sfKapgrypo0K3SHhS5puSOzH5AZsVvxY3XaPa9ISQISdtSMq8kIxyPjc /kJCS3mqYvBbHjbVAVnJd2BFnmXmcMSCtRi6Ha7TKqyT5u4keFb/lghRB08iH6u+ 6vVvWDp5gkGu+g5WGuOrpbwE//dB0fI+ycLBGfNq78EFSiub6xXB0RQd+WJXDbGP A2SGq7Ud+ExPf/HJ9QdFfDHYewqwDBAFW3jDrHYM9VVE7uMdnSAZKj5UFgdl3KtU BbqpPhE5MkTOJTQxeT/WjLnq1rSPnIQ= -----END CERTIFICATE-----Generated at Sun Jul 20 10:38:09 2025 by rpki-client