$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json) Hash identifier: Y1yk9sPii9j8foew0CSPe4vIBBAApiPCVkJi57WyHAc= Subject key identifier: 09:32:B6:2F:81:AC:F8:7F:6B:70:85:D0:DB:3A:A9:CB:00:7F:FD:B2 Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft Manifest number: 4E Signing time: Mon 07 Jul 2025 07:39:00 +0000 Manifest this update: Mon 07 Jul 2025 07:39:00 +0000 Manifest next update: Mon 14 Jul 2025 07:38:59 +0000 Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: /iO7Md/gGmHazIpILWgstzDRvaBZ5veM+kyqTsFOjio=) 2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Jul 2025 07:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Validity Not Before: Jul 7 07:39:00 2025 GMT Not After : Jul 14 07:38:59 2025 GMT Subject: CN=686b7994-f7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:d3:43:47:81:8e:0a:e3:86:2d:ca:6f:5c: 0e:ff:ed:29:ed:82:fa:e1:9e:ce:92:91:60:d9:b8: 3e:82:21:e5:a3:b4:ca:d6:a9:7b:cd:fe:56:a0:f8: 4b:ff:50:3d:09:b4:08:dc:e2:8f:97:d4:d3:09:46: 5a:ad:20:42:b9:60:d3:5b:8a:f5:51:2b:76:27:56: 7c:76:85:92:f2:d0:9b:82:83:3a:d4:4a:16:3e:e7: 8d:1e:c5:fa:42:3a:91:51:ae:24:a0:6a:a7:dc:ec: db:83:0d:e8:33:eb:ab:70:b3:18:c3:81:0a:47:4b: 5d:47:55:52:5d:b4:d8:b4:6e:ba:58:52:e3:87:e9: 67:fc:dc:0a:3f:85:52:6d:8b:f0:cd:48:a5:77:f2: 18:6c:55:cf:c9:de:16:4c:59:dc:04:3e:9c:dc:0a: 24:80:58:cd:dc:d9:95:50:3b:4e:b5:a0:45:59:d5: 9c:b0:7c:6e:ec:95:52:19:57:21:95:41:e3:8d:20: 77:75:15:dc:28:d4:d9:32:77:0a:58:3a:bb:40:89: 98:e7:ba:9c:df:30:eb:ff:32:36:5b:43:05:88:cd: 49:b1:eb:3e:fb:39:6b:33:8d:9e:68:5f:f4:ac:32: 1f:32:f1:bf:38:88:4e:5f:25:99:4b:d5:f7:44:26: 72:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:32:B6:2F:81:AC:F8:7F:6B:70:85:D0:DB:3A:A9:CB:00:7F:FD:B2 X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:4c:cd:34:66:56:49:fd:61:c3:29:fa:a1:d1:10:1f:ef:09: a1:9a:4d:77:6e:18:05:85:e7:69:4a:38:6e:b7:5d:96:bc:45: 03:48:41:91:7b:56:5b:3b:19:73:c8:1d:60:e1:f3:9d:16:86: f2:58:26:c4:34:87:82:14:62:8a:6a:e8:38:43:8d:6a:b5:5b: 3b:e5:7e:1f:d8:81:69:bb:13:bb:7e:18:d2:7f:f1:a9:fd:ca: bd:c1:39:63:ed:f8:66:0c:54:7a:5a:4b:92:10:9f:d3:53:c7: af:6c:e7:3b:bb:6e:9b:3d:68:f6:1d:1a:17:26:93:d7:a2:9b: e2:50:f3:07:c2:78:af:c6:fc:79:36:c2:32:d8:28:3c:87:d5: 6a:b6:59:6e:9b:59:97:05:5d:2a:58:93:d8:99:3e:1f:21:96: 1e:09:a4:ae:a0:5e:66:d2:26:ab:dd:2b:da:4e:84:85:6b:15: a8:59:0c:ca:8c:b8:2f:b8:e4:bd:7d:76:18:c4:01:aa:48:67: 0e:02:da:29:c9:ba:50:c2:8b:4a:4a:75:81:42:05:2d:37:a2: 15:b8:4b:36:8d:64:4d:61:a0:a8:31:a9:26:05:f2:9c:4d:9a: ac:7f:61:71:2a:7e:52:ee:e4:ef:0d:aa:c8:54:8e:40:e2:2e: e6:f6:3e:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoQkI1MDVERkYzMkVDRDQ5MkJGMUVGRjdGRTM5NEYxMjg5 MEFBNjczNDAeFw0yNTA3MDcwNzM5MDBaFw0yNTA3MTQwNzM4NTlaMBgxFjAUBgNV BAMTDTY4NmI3OTk0LWY3ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXQNNDR4GOCuOGLcpvXA7/7Sntgvrhns6SkWDZuD6CIeWjtMrWqXvN/lag+Ev/ UD0JtAjc4o+X1NMJRlqtIEK5YNNbivVRK3YnVnx2hZLy0JuCgzrUShY+540exfpC OpFRriSgaqfc7NuDDegz66twsxjDgQpHS11HVVJdtNi0brpYUuOH6Wf83Ao/hVJt i/DNSKV38hhsVc/J3hZMWdwEPpzcCiSAWM3c2ZVQO061oEVZ1ZywfG7slVIZVyGV QeONIHd1Fdwo1NkydwpYOrtAiZjnupzfMOv/MjZbQwWIzUmx6z77OWszjZ5oX/Ss Mh8y8b84iE5fJZlL1fdEJnIFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCTK2L4Gs +H9rcIXQ2zqpywB//bIwHwYDVR0jBBgwFoAUu1Bd/zLs1JK/Hv9/45TxKJCqZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzUxQkUwMTI0RTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTFCZF96THMxSktfSHY5XzQ1VHhLSkNxWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzUxQkUwMTI0RTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpL X0h2OV80NVR4S0pDcVp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALNMzTRmVkn9YcMp+qHREB/vCaGaTXduGAWF52lKOG63XZa8RQNIQZF7 Vls7GXPIHWDh850WhvJYJsQ0h4IUYopq6DhDjWq1Wzvlfh/YgWm7E7t+GNJ/8an9 yr3BOWPt+GYMVHpaS5IQn9NTx69s5zu7bps9aPYdGhcmk9eim+JQ8wfCeK/G/Hk2 wjLYKDyH1Wq2WW6bWZcFXSpYk9iZPh8hlh4JpK6gXmbSJqvdK9pOhIVrFahZDMqM uC+45L19dhjEAapIZw4C2inJulDCi0pKdYFCBS03ohW4SzaNZE1hoKgxqSYF8pxN mqx/YXEqflLu5O8NqshUjkDiLub2PmE= -----END CERTIFICATE-----Generated at Wed Jul 9 09:26:39 2025 by rpki-client