$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft File: bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft (raw, json) Hash identifier: csthhmJ4zosB54SgfPAxpK2ZdFI7j0+T/6K7pznhgAA= Subject key identifier: 70:92:38:B6:09:91:F4:7F:7F:59:EE:F0:AC:3C:17:39:7B:B3:A5:32 Authority key identifier: 6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 Certificate issuer: /CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft Manifest number: 0666 Signing time: Fri 18 Jul 2025 20:29:19 +0000 Manifest this update: Fri 18 Jul 2025 20:29:18 +0000 Manifest next update: Fri 25 Jul 2025 20:29:18 +0000 Files and hashes: 1: bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl (hash: FCqVufhbyZ4UolxEuCb+Z6dFt2NxIW5F7h/RscN0m+M=) 2: 815931708D5411EB9DA31875C4F9AE02.roa (hash: LyuoMJXz1NyXM9pSNW11Fa6fRcMflVH6LhgfRij1kVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Validity Not Before: Jul 18 20:29:18 2025 GMT Not After : Jul 25 20:29:18 2025 GMT Subject: CN=687aae9e-4213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:0a:05:9e:9b:a0:38:51:e7:9d:69:dd:23: 14:eb:76:ac:18:2a:00:b7:f5:4a:7f:43:d6:6f:10: c2:bf:c4:f0:c2:b3:0f:93:22:4f:36:79:ea:50:99: 5e:70:6b:b9:c4:f6:b4:6c:c4:d7:52:4b:2d:2e:96: a6:c5:80:04:50:70:49:43:8e:f2:ce:b1:01:74:72: 49:6b:9e:53:94:0f:34:c0:7f:aa:d1:2a:7b:73:c9: f0:2b:97:a3:e9:e5:bd:d5:e7:8c:eb:37:6e:39:5b: 5b:55:8b:0f:88:c5:d2:3e:72:6f:75:f5:88:0e:a5: 2e:d8:b9:17:f4:96:9c:d4:0a:0f:20:29:1c:d8:74: f1:4e:04:29:ed:12:d0:b6:1b:a4:5e:4a:8a:7e:1c: 7a:c6:ff:bd:42:6b:4f:fb:b8:1c:43:6f:c8:54:d0: c5:4c:72:da:6a:20:86:62:5c:d3:37:98:be:dd:64: f8:ce:79:96:15:f0:d2:e8:53:0a:bc:ab:6a:c8:87: 31:ce:2b:2b:76:bc:52:71:09:5e:a1:c9:2a:77:77: 19:f6:2b:ee:77:46:31:39:ad:48:9d:a0:15:7b:82: f3:74:ac:25:e3:b7:f4:ea:fb:92:98:09:a1:05:cd: 9b:66:91:4b:26:3c:18:33:33:4f:93:4d:93:72:c8: 06:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:92:38:B6:09:91:F4:7F:7F:59:EE:F0:AC:3C:17:39:7B:B3:A5:32 X509v3 Authority Key Identifier: keyid:6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e4:db:84:45:f2:1b:83:d2:62:7d:d7:1e:8c:ab:0b:36:a2: fb:78:dc:b3:67:10:3e:33:9b:67:18:5a:21:b4:30:d1:71:1b: 69:6d:c5:d9:cb:1b:55:c2:86:24:d3:49:c7:c6:9e:db:72:a5: 33:b2:e6:5d:8d:85:81:05:86:3e:55:1d:38:03:ad:80:ee:e6: 4d:02:d5:a3:d3:33:4e:87:7e:95:53:8a:91:8b:7e:b8:54:c2: e7:59:7e:0d:77:7b:e4:c9:6a:61:cd:91:f1:24:72:25:c5:b2: 1a:0b:88:1d:15:6b:72:83:60:f3:9c:80:0f:7b:f4:5d:25:f4: ca:2f:9b:09:df:1a:28:3d:bd:fe:33:e5:31:3f:91:3f:fb:0f: c2:58:47:9e:41:88:3a:5e:52:87:85:be:fd:9e:4e:50:23:45: 85:25:7b:b2:96:f3:61:57:21:1c:58:8c:d2:a0:9e:9c:7a:69: 4b:6d:02:43:a9:69:6f:b8:63:94:e6:7a:66:34:ef:59:0a:13: 58:b0:46:19:d9:41:30:c6:5b:50:8b:f7:fd:3a:d1:2a:1e:ed: bc:91:90:69:8c:85:54:9f:13:a4:a2:b8:48:0d:03:cc:5a:24: d1:a0:e8:53:c5:6d:d6:7d:3a:f0:7e:7c:09:5d:fd:66:95:87: 77:0f:85:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDZFM0Y2QTRDQkQyQzc2NTFCNDkwRUI2NDkwNEJCRkYx RjQ2MjAxRDUwHhcNMjUwNzE4MjAyOTE4WhcNMjUwNzI1MjAyOTE4WjAYMRYwFAYD VQQDEw02ODdhYWU5ZS00MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4EKBZ6boDhR551p3SMU63asGCoAt/VKf0PWbxDCv8TwwrMPkyJPNnnqUJle cGu5xPa0bMTXUkstLpamxYAEUHBJQ47yzrEBdHJJa55TlA80wH+q0Sp7c8nwK5ej 6eW91eeM6zduOVtbVYsPiMXSPnJvdfWIDqUu2LkX9Jac1AoPICkc2HTxTgQp7RLQ thukXkqKfhx6xv+9QmtP+7gcQ2/IVNDFTHLaaiCGYlzTN5i+3WT4znmWFfDS6FMK vKtqyIcxzisrdrxScQleockqd3cZ9ivud0YxOa1InaAVe4LzdKwl47f06vuSmAmh Bc2bZpFLJjwYMzNPk02TcsgGmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCSOLYJ kfR/f1nu8Kw8Fzl7s6UyMB8GA1UdIwQYMBaAFG4/aky9LHZRtJDrZJBLv/H0YgHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8zQzk1MzE5QzhE NTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2RsRzBrT3Rra0V1XzhmUmlB ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JqOXFUTDBzZGxHMGtPdGtrRXVfOGZSaUFkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8zQzk1MzE5QzhENTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2Rs RzBrT3Rra0V1XzhmUmlBZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw5NuERfIbg9JifdcejKsLNqL7eNyzZxA+M5tnGFohtDDRcRtpbcXZ yxtVwoYk00nHxp7bcqUzsuZdjYWBBYY+VR04A62A7uZNAtWj0zNOh36VU4qRi364 VMLnWX4Nd3vkyWphzZHxJHIlxbIaC4gdFWtyg2DznIAPe/RdJfTKL5sJ3xooPb3+ M+UxP5E/+w/CWEeeQYg6XlKHhb79nk5QI0WFJXuylvNhVyEcWIzSoJ6cemlLbQJD qWlvuGOU5npmNO9ZChNYsEYZ2UEwxltQi/f9OtEqHu28kZBpjIVUnxOkorhIDQPM WiTRoOhTxW3WfTrwfnwJXf1mlYd3D4W3 -----END CERTIFICATE-----Generated at Sun Jul 20 20:24:28 2025 by rpki-client