$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft File: r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json) Hash identifier: YU7RxyGe4ubE+VJiqfrgd72FTcEyuQGZl29Qz4D4B/M= Subject key identifier: 98:45:BD:70:C8:13:48:2A:6F:E4:AE:CE:F4:66:69:36:53:1A:B4:2D Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 Certificate issuer: /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Certificate serial: 05F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft Manifest number: 05ED Signing time: Tue 22 Jul 2025 23:18:44 +0000 Manifest this update: Tue 22 Jul 2025 23:18:43 +0000 Manifest next update: Tue 29 Jul 2025 23:18:43 +0000 Files and hashes: 1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: HIkRYLYwG4dsv4+HSSQLqsM6e4GbcHv0PEscqcTE7dk=) 2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: LpIzyfQvDqArXC9hZJ5ZqGifDCSL9ldak3ZwH8S2NRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1522 (0x5f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Validity Not Before: Jul 22 23:18:43 2025 GMT Not After : Jul 29 23:18:43 2025 GMT Subject: CN=68801c54-7a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:80:a8:27:ab:fb:0c:96:72:0c:6f:ef:2b:fc: 9d:64:cc:d0:46:71:1c:ae:f1:4c:2e:d2:d3:c5:ce: f8:25:7d:c8:9c:ea:4a:0c:23:62:e1:b7:fc:f9:0a: 7e:e5:61:84:3b:e1:81:14:fa:15:79:f1:95:09:ff: 31:6c:a0:61:14:e1:7c:7b:1a:60:e6:af:6b:11:81: c5:74:94:e5:55:7a:97:55:c2:91:e0:df:b1:77:cb: 20:92:41:f3:ab:fc:bd:5a:7b:2d:cc:d4:02:85:b9: f0:7a:19:f5:7d:e1:92:9e:8f:61:74:15:7e:15:77: 3e:e4:09:f5:fa:d3:8f:ce:5d:c7:d3:45:78:94:cf: 25:2d:06:f0:d5:0c:5f:30:16:02:1d:39:37:d9:94: 7f:44:50:fe:ae:fe:02:b2:1d:ef:b3:b5:ac:fd:41: e5:e6:77:f6:f9:ae:81:64:e8:fc:d6:3c:c1:61:0e: 30:ef:76:ba:11:9a:85:68:2b:1b:38:e8:e8:38:48: 22:bb:33:3f:a8:44:bb:c4:ea:bd:17:3e:d4:79:33: 33:5e:57:67:98:32:d6:00:81:0f:0c:e5:f1:f8:72: 23:90:35:bd:9c:f0:71:d2:41:08:10:ac:e3:fb:e5: a0:38:7d:00:e1:5e:9d:b9:8e:43:37:28:9c:91:0f: 56:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:45:BD:70:C8:13:48:2A:6F:E4:AE:CE:F4:66:69:36:53:1A:B4:2D X509v3 Authority Key Identifier: keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f9:cf:15:03:63:fa:16:4f:8d:e2:d5:73:b6:c3:17:e7:97: 9f:ce:8a:4d:be:0e:4c:9b:07:d6:08:ad:d8:63:58:11:f7:7d: 14:2a:14:e2:8e:e7:9f:55:a7:a4:93:86:4d:70:4c:3b:bc:c7: 12:5b:cb:88:7b:0e:9f:9c:40:69:85:03:47:ee:79:a5:34:04: ac:e4:2e:01:ed:b0:ca:dd:cd:4f:d5:7e:21:ca:82:67:5c:54: 0f:3a:a8:dc:4e:5f:ba:a3:67:c1:05:29:97:d3:c2:5c:46:2d: f6:e3:d9:25:ee:a6:c1:87:73:e2:c9:42:d7:66:92:01:dd:39: f5:7c:03:d2:d9:89:e9:2f:dc:e3:c3:40:02:0d:f0:a4:c9:b6: a2:90:92:40:92:82:ad:3b:6c:00:d1:59:44:61:14:44:46:96: 24:7e:a7:ba:26:b2:cc:e7:d2:08:a8:34:01:16:9f:83:95:ab: 99:84:68:3d:d1:47:f1:40:40:74:5f:48:08:da:82:ed:bf:b0: 84:8f:87:fe:34:f1:81:6d:b1:a4:82:e3:ad:72:9c:e9:cc:58: 01:6e:aa:6e:e3:1b:60:ef:68:7c:28:43:df:21:b7:e7:51:b3: f0:ed:5a:ec:28:02:74:e1:19:d6:5e:9c:7d:92:f1:59:a1:a1: e2:07:a7:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGMkQxMTAvBgNVBAUTKEFGRUVGN0EyRjgzMUE5NzU1QjEzQjM3RUI2RTlCOTFE ODFFOEE5RTgwHhcNMjUwNzIyMjMxODQzWhcNMjUwNzI5MjMxODQzWjAYMRYwFAYD VQQDEw02ODgwMWM1NC03YTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoCoJ6v7DJZyDG/vK/ydZMzQRnEcrvFMLtLTxc74JX3InOpKDCNi4bf8+Qp+ 5WGEO+GBFPoVefGVCf8xbKBhFOF8expg5q9rEYHFdJTlVXqXVcKR4N+xd8sgkkHz q/y9WnstzNQChbnwehn1feGSno9hdBV+FXc+5An1+tOPzl3H00V4lM8lLQbw1Qxf MBYCHTk32ZR/RFD+rv4Csh3vs7Ws/UHl5nf2+a6BZOj81jzBYQ4w73a6EZqFaCsb OOjoOEgiuzM/qES7xOq9Fz7UeTMzXldnmDLWAIEPDOXx+HIjkDW9nPBx0kEIEKzj ++WgOH0A4V6duY5DNyickQ9WCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhFvXDI E0gqb+SuzvRmaTZTGrQtMB8GA1UdIwQYMBaAFK/u96L4Mal1WxOzfrbpuR2B6Kno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC9GRDg2MEY2OEJD NkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFYVmJFN04tdHVtNUhZSG9x ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItNzNvdmd4cVhWYkU3Ti10dW01SFlIb3FlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkYyRC9GRDg2MEY2OEJDNkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFY VmJFN04tdHVtNUhZSG9xZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX+c8VA2P6Fk+N4tVztsMX55efzopNvg5MmwfWCK3YY1gR930UKhTi juefVaekk4ZNcEw7vMcSW8uIew6fnEBphQNH7nmlNASs5C4B7bDK3c1P1X4hyoJn XFQPOqjcTl+6o2fBBSmX08JcRi3249kl7qbBh3PiyULXZpIB3Tn1fAPS2YnpL9zj w0ACDfCkybaikJJAkoKtO2wA0VlEYRRERpYkfqe6JrLM59IIqDQBFp+DlauZhGg9 0UfxQEB0X0gI2oLtv7CEj4f+NPGBbbGkguOtcpzpzFgBbqpu4xtg72h8KEPfIbfn UbPw7VrsKAJ04RnWXpx9kvFZoaHiB6cI -----END CERTIFICATE-----Generated at Wed Jul 23 12:48:30 2025 by rpki-client