$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft File: n095sMMg0u--SKvL-paoRdZHlu8.mft (raw, json) Hash identifier: vt5vm58fvZZU/yTNlJ2JQ7L8WebKk5KoDgl3BzBybtQ= Subject key identifier: 5A:FC:FD:2C:33:43:CD:B7:FA:20:9B:36:C0:7F:4D:D5:4E:2A:43:7C Authority key identifier: 9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF Certificate issuer: /CN=A91A78A7/serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft Manifest number: 01EA Signing time: Sat 19 Jul 2025 02:01:46 +0000 Manifest this update: Sat 19 Jul 2025 02:01:46 +0000 Manifest next update: Sat 26 Jul 2025 02:01:46 +0000 Files and hashes: 1: n095sMMg0u--SKvL-paoRdZHlu8.crl (hash: Yp7tEuZamA/Z50ARftlcMVbeSJKdoyjvVZKzwK8f7us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7, serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF Validity Not Before: Jul 19 02:01:46 2025 GMT Not After : Jul 26 02:01:46 2025 GMT Subject: CN=687afc8a-4e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e6:81:41:27:ed:76:42:78:cb:e1:b5:6b:e7: 47:83:f2:78:d8:bc:c4:c3:a2:c7:fa:35:3e:cb:b1: 12:50:46:36:9b:63:83:74:10:61:45:51:50:f3:08: 4a:de:91:8c:25:e9:82:ad:8d:75:09:ec:0c:64:67: fb:53:e2:c3:87:92:27:b4:49:e4:c7:f8:19:16:a6: ff:37:ff:5e:e1:0c:a2:8b:c2:33:6b:18:06:0b:2c: 66:20:1b:d1:bf:d2:8c:37:e5:af:19:0f:f2:c8:b2: 28:bc:50:07:c2:c7:0d:d6:c9:54:51:a0:c9:3d:6b: f8:2c:43:b2:46:dd:1e:2c:be:bf:40:55:87:8f:1f: 5c:10:7b:06:6d:99:cd:6b:57:31:8c:71:89:18:2f: 55:dd:ad:36:49:a8:24:c2:c4:c8:51:c0:24:d0:84: af:76:6e:10:66:06:b8:93:93:e9:ec:e4:bd:9f:b1: 9a:12:b5:0a:2b:78:34:b6:89:ac:d1:b2:b3:5e:9f: 94:bf:5f:1d:76:58:1a:3c:ba:04:0c:d5:7d:13:0b: 3d:28:b5:72:aa:ea:ca:92:f2:44:0a:cd:c8:a6:0a: 03:63:5f:a7:07:0c:4e:f6:f7:77:37:d3:ed:4a:6a: bd:c5:ba:ad:6c:1d:6b:67:3b:d7:bc:4e:dd:46:f5: 37:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FC:FD:2C:33:43:CD:B7:FA:20:9B:36:C0:7F:4D:D5:4E:2A:43:7C X509v3 Authority Key Identifier: keyid:9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:0a:74:4b:ad:61:94:da:ce:a6:68:f9:1e:22:54:49:91:70: f0:5e:71:5a:a5:ef:e1:d5:16:1c:13:aa:52:93:e4:3e:a2:fb: 19:a1:88:10:6e:cb:02:de:e1:bc:63:ec:c7:e5:22:40:d3:16: b8:71:31:5d:67:1f:2f:4a:c6:80:6a:52:66:08:e3:d6:3e:0c: 64:a2:32:d7:bd:8f:70:3d:a8:5d:77:45:72:99:0d:4a:5d:68: 37:7d:fb:10:c0:48:9d:f7:f7:1a:4b:08:4d:98:2e:ff:24:ee: 55:41:0c:12:21:38:49:6c:46:cd:ad:04:87:77:a8:11:fb:2d: 62:b1:cc:d7:2e:34:67:3b:e2:29:17:e8:92:15:c6:37:4a:0f: 15:ab:7e:a8:88:f0:1d:7a:8f:65:2a:a4:8d:ac:a4:86:a7:de: ef:bc:b0:1d:89:be:4d:d6:a2:ad:1d:6c:73:c5:37:59:da:ec: 39:ad:0d:51:fa:b8:5c:31:8f:33:97:11:ae:4c:33:aa:1b:88: 83:61:55:ee:43:47:9c:d5:75:4e:35:c5:7b:cb:41:f5:60:51: 3a:81:1d:f7:90:8b:58:2d:19:3d:b8:9e:fa:ec:ed:6d:c6:fe: 29:df:8b:73:0d:9e:ff:f2:e0:7a:2b:a3:c4:ae:99:27:70:e2: 61:d0:7a:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDlGNEY3OUIwQzMyMEQyRUZCRTQ4QUJDQkZBOTZBODQ1 RDY0Nzk2RUYwHhcNMjUwNzE5MDIwMTQ2WhcNMjUwNzI2MDIwMTQ2WjAYMRYwFAYD VQQDEw02ODdhZmM4YS00ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOaBQSftdkJ4y+G1a+dHg/J42LzEw6LH+jU+y7ESUEY2m2ODdBBhRVFQ8whK 3pGMJemCrY11CewMZGf7U+LDh5IntEnkx/gZFqb/N/9e4Qyii8IzaxgGCyxmIBvR v9KMN+WvGQ/yyLIovFAHwscN1slUUaDJPWv4LEOyRt0eLL6/QFWHjx9cEHsGbZnN a1cxjHGJGC9V3a02SagkwsTIUcAk0ISvdm4QZga4k5Pp7OS9n7GaErUKK3g0toms 0bKzXp+Uv18ddlgaPLoEDNV9Ews9KLVyqurKkvJECs3IpgoDY1+nBwxO9vd3N9Pt Smq9xbqtbB1rZzvXvE7dRvU3zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFr8/Swz Q823+iCbNsB/TdVOKkN8MB8GA1UdIwQYMBaAFJ9PebDDINLvvkiry/qWqEXWR5bv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy81MEQ2MUJCNjcx M0QxMUVEOUZERjNEMTJDNEY5QUUwMi9uMDk1c01NZzB1LS1TS3ZMLXBhb1JkWkhs dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wOTVzTU1nMHUtLVNLdkwtcGFvUmRaSGx1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy81MEQ2MUJCNjcxM0QxMUVEOUZERjNEMTJDNEY5QUUwMi9uMDk1c01NZzB1 LS1TS3ZMLXBhb1JkWkhsdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4CnRLrWGU2s6maPkeIlRJkXDwXnFape/h1RYcE6pSk+Q+ovsZoYgQ bssC3uG8Y+zH5SJA0xa4cTFdZx8vSsaAalJmCOPWPgxkojLXvY9wPahdd0VymQ1K XWg3ffsQwEid9/caSwhNmC7/JO5VQQwSIThJbEbNrQSHd6gR+y1isczXLjRnO+Ip F+iSFcY3Sg8Vq36oiPAdeo9lKqSNrKSGp97vvLAdib5N1qKtHWxzxTdZ2uw5rQ1R +rhcMY8zlxGuTDOqG4iDYVXuQ0ec1XVONcV7y0H1YFE6gR33kItYLRk9uJ767O1t xv4p34tzDZ7/8uB6K6PErpkncOJh0Hra -----END CERTIFICATE-----Generated at Mon Jul 21 00:27:12 2025 by rpki-client