$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json) Hash identifier: n+I5wDznd9gekrvqNfe9uibomgIW/Wuf0yu/00b1W/M= Subject key identifier: 72:A9:2C:71:16:D8:CF:42:AC:CD:DE:25:9C:C2:1F:3F:60:6F:57:61 Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft Manifest number: 0147 Signing time: Sat 19 Jul 2025 04:34:06 +0000 Manifest this update: Sat 19 Jul 2025 04:34:05 +0000 Manifest next update: Sat 26 Jul 2025 04:34:05 +0000 Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: ZpiA1/w6PdX8e+as5oyf4vOPqM5HggVDjZMrtglP9m8=) 2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: qZFxZlK/s9XuD9ZwE9EGQRrcfUALnpisB8t9uJ9BMCk=) 3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: YumOlFepqCcL4/FMk4aKjlchGI7ETUe9t0yQ6qtDs+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Validity Not Before: Jul 19 04:34:05 2025 GMT Not After : Jul 26 04:34:05 2025 GMT Subject: CN=687b203d-f89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:c2:26:46:29:4b:5b:59:52:20:dd:a9:18: 89:87:0c:d2:b3:a8:c8:b5:ba:d8:be:a3:7f:63:bb: f5:f3:d0:32:ca:2e:45:45:64:16:51:31:32:45:9d: ef:59:c9:5e:37:39:25:02:f9:fe:b7:a5:01:95:ad: f1:b7:61:e6:f5:9e:4e:62:64:91:8e:60:99:a3:46: 7b:39:b4:59:ca:d3:09:0a:ba:ff:46:f2:aa:d2:b2: 60:b0:2d:67:39:23:dd:6a:51:79:d9:53:67:2f:dc: 25:dd:1c:08:f8:a6:cc:28:34:ad:f1:07:56:ee:e9: c0:32:49:48:53:34:e8:0d:40:05:d1:6d:cc:9e:0c: cc:56:69:83:95:2a:33:44:2f:ea:57:36:25:a8:00: c8:ba:a9:5c:f1:b9:76:8b:61:5e:cf:62:b3:bf:a2: df:b3:e0:2f:ec:fb:cb:fb:18:b3:a5:a0:8a:a4:10: 8c:77:da:50:d8:75:14:62:e9:a4:aa:0a:6e:60:14: 16:d4:8d:26:dc:2e:33:0a:ab:e1:c9:d4:e8:f7:8f: 5c:1a:c2:5c:41:ba:7a:aa:d0:6e:fb:c9:fb:07:b2: b3:92:ba:98:12:c8:12:e2:85:8f:4a:f2:6d:2f:88: 4e:2c:60:94:b0:90:92:16:9c:e3:8c:91:3b:a5:77: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A9:2C:71:16:D8:CF:42:AC:CD:DE:25:9C:C2:1F:3F:60:6F:57:61 X509v3 Authority Key Identifier: keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:37:ea:f6:62:a7:7a:13:82:61:ab:57:8a:a5:e9:ea:96:92: 99:df:80:08:58:da:32:e9:da:4b:c9:d3:33:41:a0:f1:dd:07: 48:48:90:9d:24:ad:24:61:7c:5c:8b:45:0d:17:46:ba:c2:b8: cb:a7:60:0e:12:77:65:8f:b6:c8:69:ef:79:e3:5a:dc:17:e4: 03:23:51:6c:03:6d:a8:68:a5:fe:53:90:97:c5:16:01:55:0c: dc:3d:0c:36:9b:27:e1:be:49:d1:fd:7b:ba:c4:69:26:8b:9d: 32:9e:67:a0:0c:72:ec:36:85:ea:3e:7f:75:9e:fa:b6:9d:46: 74:30:ba:2b:dd:b1:3a:13:6f:75:8b:2b:a5:fc:d1:88:85:ad: 53:9b:ac:75:d5:6a:4e:65:64:a0:4c:01:03:c0:3d:ba:cb:55: 91:4a:19:8b:22:5c:b1:34:4b:0c:6b:09:b6:f1:a1:8f:85:d2: b7:ba:8d:be:46:42:2f:72:83:ad:67:c8:38:5d:83:47:cf:dd: 23:24:30:c7:55:a9:c0:5e:79:96:f8:cc:cc:0a:45:9d:9e:35: 86:87:fd:bd:31:18:13:00:62:15:35:46:39:86:00:fb:f8:c0: 63:93:c5:f7:30:08:46:22:bb:0d:23:18:c0:8c:1a:c0:82:31: 09:7d:bf:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKDI3MkQ3MUFENjI2NDU3NzVDQ0RGQkI1NzcwNDc4RTU5 NDNFQTY1OTUwHhcNMjUwNzE5MDQzNDA1WhcNMjUwNzI2MDQzNDA1WjAYMRYwFAYD VQQDEw02ODdiMjAzZC1mODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrTCJkYpS1tZUiDdqRiJhwzSs6jItbrYvqN/Y7v189Ayyi5FRWQWUTEyRZ3v WcleNzklAvn+t6UBla3xt2Hm9Z5OYmSRjmCZo0Z7ObRZytMJCrr/RvKq0rJgsC1n OSPdalF52VNnL9wl3RwI+KbMKDSt8QdW7unAMklIUzToDUAF0W3MngzMVmmDlSoz RC/qVzYlqADIuqlc8bl2i2Fez2Kzv6Lfs+Av7PvL+xizpaCKpBCMd9pQ2HUUYumk qgpuYBQW1I0m3C4zCqvhydTo949cGsJcQbp6qtBu+8n7B7KzkrqYEsgS4oWPSvJt L4hOLGCUsJCSFpzjjJE7pXdVhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKpLHEW 2M9CrM3eJZzCHz9gb1dhMB8GA1UdIwQYMBaAFCctca1iZFd1zN+7V3BHjllD6mWV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC9GOUMwRTExRTc5 MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1YzWE0zN3RYY0VlT1dVUHFa WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p5MXhyV0prVjNYTTM3dFhjRWVPV1VQcVpaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC9GOUMwRTExRTc5MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1Yz WE0zN3RYY0VlT1dVUHFaWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApN+r2Yqd6E4Jhq1eKpenqlpKZ34AIWNoy6dpLydMzQaDx3QdISJCd JK0kYXxci0UNF0a6wrjLp2AOEndlj7bIae9541rcF+QDI1FsA22oaKX+U5CXxRYB VQzcPQw2myfhvknR/Xu6xGkmi50ynmegDHLsNoXqPn91nvq2nUZ0MLor3bE6E291 iyul/NGIha1Tm6x11WpOZWSgTAEDwD26y1WRShmLIlyxNEsMawm28aGPhdK3uo2+ RkIvcoOtZ8g4XYNHz90jJDDHVanAXnmW+MzMCkWdnjWGh/29MRgTAGIVNUY5hgD7 +MBjk8X3MAhGIrsNIxjAjBrAgjEJfb+Y -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:32 2025 by rpki-client