$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json) Hash identifier: fT0HK4Wr7SshPlZxgctYw86m1qhCiLUxerJu8bCtIlk= Subject key identifier: 2D:0C:6B:A6:33:34:C4:E2:E8:02:40:42:29:07:3C:8B:2B:9A:8E:CB Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft Manifest number: 7B Signing time: Sat 19 Jul 2025 07:01:16 +0000 Manifest this update: Sat 19 Jul 2025 07:01:15 +0000 Manifest next update: Sat 26 Jul 2025 07:01:15 +0000 Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: N/0XZr/1LIKpaK5BkcL+KTg2wWv5Gg5uPJZEiyM5BFc=) 2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: f2L7OBQuOuTd2LqrR7JU6rutnUdXM8FYIeFEOoAz1u8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Validity Not Before: Jul 19 07:01:15 2025 GMT Not After : Jul 26 07:01:15 2025 GMT Subject: CN=687b42bb-4a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:ec:1e:eb:f2:85:06:6f:39:c2:26:b7:83: bb:90:28:80:d0:20:47:e8:88:64:dc:72:1d:fa:bc: d9:c8:e3:85:ee:f5:c9:57:07:45:bc:8a:a5:93:13: 39:a4:b9:d3:5c:2f:ca:20:1d:2e:36:38:b4:2a:30: 05:42:74:82:44:ee:b1:70:38:2c:23:fd:c4:96:71: d3:da:31:b2:95:b4:5c:70:6e:6c:be:26:a6:5e:0a: 29:91:f6:86:ee:90:c5:d7:f3:99:d4:7a:ac:25:c7: d8:10:ba:1e:be:33:0d:10:eb:66:45:6a:dd:4d:6e: 20:ca:4c:c3:39:b2:1c:ab:66:e5:7b:58:fc:54:7e: 99:f3:ba:bc:c9:19:cd:8c:e8:21:6c:52:8f:3a:39: a0:91:8a:78:9d:16:69:40:90:65:94:0b:54:5d:12: 34:5f:eb:5e:fa:8f:a5:77:ac:b6:42:d4:fa:92:75: b4:07:b2:d3:25:cc:56:11:fe:cc:d9:7e:f2:7d:7c: c5:c9:85:06:16:e7:51:27:21:5f:c4:b5:bc:6a:c9: 95:69:5e:f0:01:30:98:c2:20:ac:3e:af:71:cc:84: b4:ae:9b:08:90:67:26:47:d9:84:6d:7d:8c:90:6a: 16:78:f2:86:de:e4:f3:e9:2a:a9:e8:22:20:3e:f7: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0C:6B:A6:33:34:C4:E2:E8:02:40:42:29:07:3C:8B:2B:9A:8E:CB X509v3 Authority Key Identifier: keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b6:7e:e8:03:31:ad:6d:4c:c5:f5:79:e2:2a:0d:a2:c3:84: a6:52:85:ba:f0:fe:02:e9:2f:64:1a:9f:68:43:5e:4e:73:09: 71:b0:37:65:c8:c9:25:fe:d1:48:11:af:b6:1d:c9:58:74:81: 2e:6d:3c:0e:99:a6:5c:92:a4:cb:93:7c:95:87:bf:3f:0e:06: 1f:dd:78:bb:48:27:e0:3f:5d:90:c7:52:4d:f8:cb:2c:12:0b: 6f:46:34:50:a2:76:c8:31:c9:bc:b8:bd:bd:6f:1c:08:e9:0d: a7:a8:26:2d:73:d1:53:6a:0b:e8:8e:58:c3:7e:2f:cf:fb:3c: f6:53:fb:e4:0e:63:1d:7e:23:ff:54:2a:a3:04:83:fc:9b:67: 26:58:11:fd:1f:3a:46:24:cf:c0:69:29:22:17:86:71:59:b2: 13:c7:98:8a:de:6b:52:a1:cd:2d:25:3e:f2:0c:7e:df:56:7a: e2:58:5c:16:92:81:0c:e5:bd:c8:9d:e5:dd:08:52:7f:ec:af: 7c:0c:56:8f:9e:cb:02:3a:44:e1:3b:28:44:5a:d0:40:dc:72: a6:07:ea:db:bd:0d:bc:39:bf:e9:0e:42:ad:4d:71:45:87:e1: 9f:fe:b2:15:36:b9:fc:a6:d7:cf:43:9b:80:f9:c2:f2:32:56: fa:82:86:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUQ1MzExMC8GA1UEBRMoOEY3NEMxNzU1RjE4ODcwOENDRTNBNjdERUMyODU5OTM2 NDhERjE4MzAeFw0yNTA3MTkwNzAxMTVaFw0yNTA3MjYwNzAxMTVaMBgxFjAUBgNV BAMTDTY4N2I0MmJiLTRhNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkz+we6/KFBm85wia3g7uQKIDQIEfoiGTcch36vNnI44Xu9clXB0W8iqWTEzmk udNcL8ogHS42OLQqMAVCdIJE7rFwOCwj/cSWcdPaMbKVtFxwbmy+JqZeCimR9obu kMXX85nUeqwlx9gQuh6+Mw0Q62ZFat1NbiDKTMM5shyrZuV7WPxUfpnzurzJGc2M 6CFsUo86OaCRinidFmlAkGWUC1RdEjRf6176j6V3rLZC1PqSdbQHstMlzFYR/szZ fvJ9fMXJhQYW51EnIV/EtbxqyZVpXvABMJjCIKw+r3HMhLSumwiQZyZH2YRtfYyQ ahZ48obe5PPpKqnoIiA+9yTrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULQxrpjM0 xOLoAkBCKQc8iyuajsswHwYDVR0jBBgwFoAUj3TBdV8YhwjM46Z97ChZk2SN8YMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RDUzL0ZDN0Q2MDg2QUM4 MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdqTTQ2Wjk3Q2haazJTTjhZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvajNUQmRWOFlod2pNNDZaOTdDaFprMlNOOFlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 RDUzL0ZDN0Q2MDg2QUM4MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdq TTQ2Wjk3Q2haazJTTjhZTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACy2fugDMa1tTMX1eeIqDaLDhKZShbrw/gLpL2Qan2hDXk5zCXGwN2XI ySX+0UgRr7YdyVh0gS5tPA6ZplySpMuTfJWHvz8OBh/deLtIJ+A/XZDHUk34yywS C29GNFCidsgxyby4vb1vHAjpDaeoJi1z0VNqC+iOWMN+L8/7PPZT++QOYx1+I/9U KqMEg/ybZyZYEf0fOkYkz8BpKSIXhnFZshPHmIrea1KhzS0lPvIMft9WeuJYXBaS gQzlvcid5d0IUn/sr3wMVo+eywI6ROE7KERa0EDccqYH6tu9Dbw5v+kOQq1NcUWH 4Z/+shU2ufym189Dm4D5wvIyVvqChkg= -----END CERTIFICATE-----Generated at Sun Jul 20 20:42:57 2025 by rpki-client