$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: 2BTxvSoIrEt933Z++YN9XkqkGsDPQbdkIZN2RWajR/o= Subject key identifier: 38:51:A7:1E:05:5B:E9:5E:6E:CA:43:8A:F1:17:F4:62:AD:B5:E3:32 Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 044D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 0443 Signing time: Mon 21 Jul 2025 00:32:49 +0000 Manifest this update: Mon 21 Jul 2025 00:32:49 +0000 Manifest next update: Mon 28 Jul 2025 00:32:49 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: XwmBnM8yAiZjvpacvD1aGDQ0Lw4/fLYXJcQN2cZawjc=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: IyhV9MGtQ1VyJp3y60dauCI+itu5hIIH24D+SkqtwwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: Jul 21 00:32:49 2025 GMT Not After : Jul 28 00:32:49 2025 GMT Subject: CN=687d8ab1-e0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:73:e0:e0:83:5d:e2:71:dc:73:b0:34:b1: 2a:8f:c0:5d:e1:10:ef:46:56:51:53:69:41:47:fa: 30:da:e2:51:f6:3e:c1:46:fb:12:6e:ad:c9:5c:a5: 2c:78:f0:2d:cd:5c:a3:36:70:d9:bd:a1:a3:e2:36: 66:1b:69:23:ff:06:cd:f7:44:8f:ad:1f:23:a4:c2: dc:f2:7a:4c:62:60:d6:0f:61:73:e6:46:12:eb:51: 1b:bc:82:f9:3d:fb:b0:e7:94:cf:3e:96:09:69:79: da:92:d2:64:90:b2:fc:d3:37:6c:9c:1a:83:df:3b: ec:eb:4a:aa:a5:a6:c3:ec:ea:c3:31:c2:00:f8:47: 2c:4f:05:51:41:48:10:be:ce:95:1f:8d:49:9e:43: 34:14:54:3e:ae:0f:9b:f8:2c:8e:f3:95:02:9a:cb: 06:f1:5f:65:8b:c7:40:bd:c6:be:ab:c8:42:47:b8: c2:42:da:62:42:42:94:59:bd:8c:98:4e:1e:2d:67: 3e:04:f4:10:0b:d5:00:46:56:5b:cd:52:2e:f7:63: bd:e9:6e:74:9a:06:47:4a:22:75:2e:11:96:c4:5c: 4f:5e:04:3a:36:b4:83:27:27:1b:e1:7c:4a:3f:46: e3:a2:5c:e0:f4:10:06:d4:d5:55:ab:ce:4d:4a:64: 98:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:A7:1E:05:5B:E9:5E:6E:CA:43:8A:F1:17:F4:62:AD:B5:E3:32 X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:33:17:4e:97:41:3a:06:08:d7:07:d7:74:81:2e:2f:02:10: 01:64:39:18:c9:6e:4c:9d:20:4d:df:40:90:df:a6:7c:fa:ac: 91:91:f4:8e:da:82:75:08:68:98:03:55:57:6c:5e:5f:0a:0e: 6b:57:2d:f2:35:92:5f:3f:84:33:25:ce:8e:5b:6f:a1:a7:4c: 69:fe:e3:a7:b5:3d:32:3d:e4:3f:47:08:20:77:f7:a2:b5:2d: e3:c8:25:1e:66:f0:6b:d0:06:e6:de:40:4d:16:bb:cf:81:51: fc:dc:20:f8:e6:51:ac:35:7b:57:b4:61:a8:fa:ab:d1:d6:7e: b5:64:bb:ca:df:83:22:9e:82:17:e2:e0:cd:61:e1:76:f0:1c: a1:ba:eb:e6:52:1d:f2:84:f9:7f:a9:64:f4:3c:5e:c3:cc:88: 5d:23:a2:63:93:80:3a:10:5c:ba:7d:c2:90:17:13:9d:f7:ee: 83:f3:20:c6:78:12:78:d2:ea:48:c1:d2:d1:45:fd:d2:fe:e7: d2:77:06:d3:db:f6:bd:bd:99:0b:86:92:61:de:86:ed:45:19: 73:6f:27:05:84:63:1a:36:a7:df:3e:79:d8:b3:25:11:5a:43: 5e:07:e1:2e:43:87:62:b9:e8:c5:35:bf:d3:17:a1:f1:55:80: 26:f2:34:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjUwNzIxMDAzMjQ5WhcNMjUwNzI4MDAzMjQ5WjAYMRYwFAYD VQQDEw02ODdkOGFiMS1lMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Upz4OCDXeJx3HOwNLEqj8Bd4RDvRlZRU2lBR/ow2uJR9j7BRvsSbq3JXKUs ePAtzVyjNnDZvaGj4jZmG2kj/wbN90SPrR8jpMLc8npMYmDWD2Fz5kYS61EbvIL5 Pfuw55TPPpYJaXnaktJkkLL80zdsnBqD3zvs60qqpabD7OrDMcIA+EcsTwVRQUgQ vs6VH41JnkM0FFQ+rg+b+CyO85UCmssG8V9li8dAvca+q8hCR7jCQtpiQkKUWb2M mE4eLWc+BPQQC9UARlZbzVIu92O96W50mgZHSiJ1LhGWxFxPXgQ6NrSDJycb4XxK P0bjolzg9BAG1NVVq85NSmSYkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhRpx4F W+lebspDivEX9GKtteMyMB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBMxdOl0E6BgjXB9d0gS4vAhABZDkYyW5MnSBN30CQ36Z8+qyRkfSO 2oJ1CGiYA1VXbF5fCg5rVy3yNZJfP4QzJc6OW2+hp0xp/uOntT0yPeQ/Rwggd/ei tS3jyCUeZvBr0Abm3kBNFrvPgVH83CD45lGsNXtXtGGo+qvR1n61ZLvK34MinoIX 4uDNYeF28ByhuuvmUh3yhPl/qWT0PF7DzIhdI6Jjk4A6EFy6fcKQFxOd9+6D8yDG eBJ40upIwdLRRf3S/ufSdwbT2/a9vZkLhpJh3obtRRlzbycFhGMaNqffPnnYsyUR WkNeB+EuQ4diuejFNb/TF6HxVYAm8jSe -----END CERTIFICATE-----Generated at Mon Jul 21 07:18:41 2025 by rpki-client