$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json) Hash identifier: Uib7Rhzrk2RGkaKoR57wj9TQKBm0oeVmu3i7biXhzFQ= Subject key identifier: F1:4F:97:FD:8C:E0:3E:14:61:AC:7C:55:EE:4D:4E:13:DF:44:DE:2D Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft Manifest number: 56 Signing time: Wed 23 Jul 2025 07:32:37 +0000 Manifest this update: Wed 23 Jul 2025 07:32:37 +0000 Manifest next update: Wed 30 Jul 2025 07:32:37 +0000 Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: rWdAxM3U9SwXrQihfgQloPLYxzCs8+Y4g9g90/DyuB0=) 2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Validity Not Before: Jul 23 07:32:37 2025 GMT Not After : Jul 30 07:32:37 2025 GMT Subject: CN=68809015-48c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:6e:7d:8f:e1:55:2e:e5:8e:18:c3:e0:8a: 45:19:b0:8b:3f:f1:9b:ec:02:45:e8:02:07:e4:6c: 1f:79:d0:ec:89:d4:53:31:c3:3c:bb:eb:97:0e:37: fc:26:7e:a0:6c:66:19:37:db:0d:d5:a9:c2:a9:27: a9:48:2f:4e:e1:39:1f:ca:c1:f0:26:09:c1:d8:bf: 50:31:03:0b:b9:fe:3d:da:c8:3f:26:ba:cf:30:db: 4f:1a:e3:b6:f6:9f:6a:9c:db:9a:62:d3:71:28:33: 05:ab:f3:d1:8c:c9:7b:24:ac:c8:30:eb:e2:da:1a: 13:dd:e3:8c:31:86:cf:16:10:7b:63:22:84:4b:d5: 8b:d9:6d:7f:aa:3b:63:84:65:aa:94:b9:74:75:f3: 7b:06:bc:d0:10:68:34:61:5e:f6:99:c2:9e:e5:82: 17:be:b8:58:cb:6d:70:0a:ca:6e:c0:8a:05:ed:ef: bc:60:1d:aa:c7:a5:99:ac:c0:87:52:31:c6:bb:4a: 74:60:2d:79:96:de:e2:4e:36:04:37:b1:c1:5c:ae: db:7a:59:4a:a1:cb:4c:f0:f8:51:5d:36:cd:dd:93: db:77:56:5f:a7:60:8b:ef:22:00:55:ce:b6:f8:87: fa:3a:93:ac:b8:73:73:d3:6b:f0:93:bf:c9:5d:0a: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4F:97:FD:8C:E0:3E:14:61:AC:7C:55:EE:4D:4E:13:DF:44:DE:2D X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:85:40:2f:7a:eb:ba:e7:ce:cd:81:87:8b:f9:c5:a4:a5:12: b6:b3:e3:a3:d7:24:47:b6:0b:61:ea:17:96:86:b8:bf:bb:6e: 79:25:a4:eb:51:e6:1f:76:71:2e:ea:16:c5:93:69:07:d4:4d: e6:34:2e:e1:7e:48:14:55:2d:a0:1f:78:85:91:01:dc:00:ac: c2:1a:15:42:d3:da:d2:c8:f4:f4:0b:7d:41:d0:e1:cf:14:17: 59:92:b4:90:fe:bc:69:cd:96:60:09:53:26:63:6d:72:28:99: 89:ef:11:0b:8f:af:06:7c:a0:88:09:4c:6e:bd:ab:d5:da:bd: 6c:58:67:7d:18:1a:67:ba:87:95:b9:f4:9d:1c:da:73:e5:f7: 77:37:7e:93:5b:6f:b4:a6:86:02:63:2f:97:8b:a6:6a:be:ad: f4:d0:34:3f:21:29:85:77:62:a0:73:63:1e:3f:6c:9c:f1:9a: 11:1c:e8:87:2b:32:84:c1:c5:6a:46:9d:e1:8e:ed:d1:1e:c8: f6:b5:dc:24:71:0c:5a:cb:c1:ef:92:bf:ae:33:52:c9:66:5a: db:4a:11:07:99:fe:a2:43:60:5c:c2:cd:1c:81:20:80:8a:54: 94:21:e9:95:c3:e7:a1:f0:fd:7c:4c:93:10:49:72:4b:d7:c2: dd:53:d7:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoQkI1MDVERkYzMkVDRDQ5MkJGMUVGRjdGRTM5NEYxMjg5 MEFBNjczNDAeFw0yNTA3MjMwNzMyMzdaFw0yNTA3MzAwNzMyMzdaMBgxFjAUBgNV BAMTDTY4ODA5MDE1LTQ4YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZxG59j+FVLuWOGMPgikUZsIs/8ZvsAkXoAgfkbB950OyJ1FMxwzy765cON/wm fqBsZhk32w3VqcKpJ6lIL07hOR/KwfAmCcHYv1AxAwu5/j3ayD8mus8w208a47b2 n2qc25pi03EoMwWr89GMyXskrMgw6+LaGhPd44wxhs8WEHtjIoRL1YvZbX+qO2OE ZaqUuXR183sGvNAQaDRhXvaZwp7lghe+uFjLbXAKym7AigXt77xgHarHpZmswIdS Mca7SnRgLXmW3uJONgQ3scFcrtt6WUqhy0zw+FFdNs3dk9t3Vl+nYIvvIgBVzrb4 h/o6k6y4c3PTa/CTv8ldCsP1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8U+X/Yzg PhRhrHxV7k1OE99E3i0wHwYDVR0jBBgwFoAUu1Bd/zLs1JK/Hv9/45TxKJCqZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzUxQkUwMTI0RTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTFCZF96THMxSktfSHY5XzQ1VHhLSkNxWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzUxQkUwMTI0RTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpL X0h2OV80NVR4S0pDcVp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADmFQC9667rnzs2Bh4v5xaSlEraz46PXJEe2C2HqF5aGuL+7bnklpOtR 5h92cS7qFsWTaQfUTeY0LuF+SBRVLaAfeIWRAdwArMIaFULT2tLI9PQLfUHQ4c8U F1mStJD+vGnNlmAJUyZjbXIomYnvEQuPrwZ8oIgJTG69q9XavWxYZ30YGme6h5W5 9J0c2nPl93c3fpNbb7SmhgJjL5eLpmq+rfTQND8hKYV3YqBzYx4/bJzxmhEc6Icr MoTBxWpGneGO7dEeyPa13CRxDFrLwe+Sv64zUslmWttKEQeZ/qJDYFzCzRyBIICK VJQh6ZXD56Hw/XxMkxBJckvXwt1T1+I= -----END CERTIFICATE-----Generated at Thu Jul 24 05:04:06 2025 by rpki-client