$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft File: dD54xFmO_HLaCEZGUOuPnNoW-YA.mft (raw, json) Hash identifier: uHN/NVtSmbrvsbuV6CBa1QCqrs6vUapVr//Qw1B2FaY= Subject key identifier: BD:35:5F:F7:34:AD:20:93:3D:C7:55:4D:BE:02:8A:94:CE:A3:DC:DC Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 Certificate issuer: /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft Manifest number: 021F Signing time: Mon 21 Jul 2025 05:03:51 +0000 Manifest this update: Mon 21 Jul 2025 05:03:50 +0000 Manifest next update: Mon 28 Jul 2025 05:03:50 +0000 Files and hashes: 1: dD54xFmO_HLaCEZGUOuPnNoW-YA.crl (hash: g1QW3KzBVk4OJ2jrpLQimfImTNP+6+WEA22fIhnMkTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Validity Not Before: Jul 21 05:03:50 2025 GMT Not After : Jul 28 05:03:50 2025 GMT Subject: CN=687dca36-f00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9b:e0:da:a1:31:5b:4a:3c:2d:bc:57:36:a2: ec:dd:a3:2d:d1:e1:7f:7a:ac:d7:70:0d:92:85:4e: f4:43:6e:77:dd:0a:6a:2c:18:8a:4e:85:59:8a:64: 12:70:de:e6:38:38:d4:98:86:6d:9f:55:15:fb:7c: 47:d0:aa:f2:f9:84:35:96:9c:03:a5:e9:72:98:3e: b6:91:38:d7:4b:61:b1:7c:9f:8e:e5:00:42:9d:bc: 81:b8:6f:48:92:3f:f7:a9:5c:ef:98:e0:0f:b6:0e: fa:1c:af:d2:f2:85:31:ba:ca:f7:a2:18:3c:a8:e6: 78:4f:09:fe:d4:a5:67:6d:16:23:0d:b4:02:18:0e: 94:a4:48:34:fb:1d:e7:30:51:96:21:06:30:c9:cb: f0:e0:33:2e:89:08:2a:29:d5:f3:e6:e1:2e:c8:b3: cd:92:06:11:be:23:2b:07:a5:d6:12:89:7b:83:bc: c9:ee:95:93:a8:de:76:18:6f:c3:06:d5:6c:f7:2d: 21:9d:b7:30:26:09:26:6e:3e:ce:fd:72:47:42:9d: f3:1e:ac:28:16:5b:ce:88:d3:3d:e8:3e:57:ab:c2: 4c:0c:2d:34:ed:e8:0b:30:e2:87:a4:41:66:4e:5c: 02:20:e1:0a:9b:95:b0:22:08:67:59:f4:36:c4:71: 24:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:35:5F:F7:34:AD:20:93:3D:C7:55:4D:BE:02:8A:94:CE:A3:DC:DC X509v3 Authority Key Identifier: keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:be:34:f0:a0:82:9a:ed:80:61:96:87:0c:d0:aa:34:c3:fb: da:fa:65:f1:ec:01:a2:8e:1a:88:b9:a6:30:c5:c9:9e:24:e4: b7:b5:83:07:e6:c5:b2:e8:be:a9:9b:96:b3:29:f9:ce:61:e6: 1a:ba:c0:c4:71:06:db:f6:8c:ba:c3:c9:26:83:38:44:a5:2d: c2:d4:cc:8c:36:de:41:8f:28:ec:b4:e8:4f:38:1e:7c:48:a6: 55:0b:01:d0:47:ea:fd:d5:a2:8f:ca:8f:3b:3b:42:72:45:26: 6b:83:d0:3c:c6:7e:b2:c6:b9:38:95:b6:58:19:0a:64:df:c9: db:e1:fd:86:3b:82:9e:91:10:38:9e:c3:14:48:01:11:db:b0: 4e:a5:4e:b4:24:bd:2b:8c:db:36:0e:f5:33:33:13:dc:8f:8b: 50:ec:66:83:84:b6:4e:e9:f9:e1:70:b2:07:68:fa:7c:49:db: 18:10:dc:88:6e:9b:8e:23:15:02:9d:ac:fd:c1:53:9f:69:12: e1:17:d0:72:fa:3c:f5:b2:4d:a2:b5:ce:b5:19:1d:7a:8a:06: 3b:f3:d6:5d:fb:d1:88:bd:99:3f:50:3b:a7:7a:4c:b0:c8:bf: b3:04:a3:e0:a6:4b:df:93:25:b6:7e:a2:da:41:c1:94:70:cd: 7f:ca:bc:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDc0M0U3OEM0NTk4RUZDNzJEQTA4NDY0NjUwRUI4RjlD REExNkY5ODAwHhcNMjUwNzIxMDUwMzUwWhcNMjUwNzI4MDUwMzUwWjAYMRYwFAYD VQQDEw02ODdkY2EzNi1mMDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8pvg2qExW0o8LbxXNqLs3aMt0eF/eqzXcA2ShU70Q2533QpqLBiKToVZimQS cN7mODjUmIZtn1UV+3xH0Kry+YQ1lpwDpelymD62kTjXS2GxfJ+O5QBCnbyBuG9I kj/3qVzvmOAPtg76HK/S8oUxusr3ohg8qOZ4Twn+1KVnbRYjDbQCGA6UpEg0+x3n MFGWIQYwycvw4DMuiQgqKdXz5uEuyLPNkgYRviMrB6XWEol7g7zJ7pWTqN52GG/D BtVs9y0hnbcwJgkmbj7O/XJHQp3zHqwoFlvOiNM96D5Xq8JMDC007egLMOKHpEFm TlwCIOEKm5WwIghnWfQ2xHEkbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL01X/c0 rSCTPcdVTb4CipTOo9zcMB8GA1UdIwQYMBaAFHQ+eMRZjvxy2ghGRlDrj5zaFvmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19ITGFDRVpHVU91UG5Ob1ct WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RENTR4Rm1PX0hMYUNFWkdVT3VQbk5vVy1ZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19I TGFDRVpHVU91UG5Ob1ctWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXvjTwoIKa7YBhlocM0Ko0w/va+mXx7AGijhqIuaYwxcmeJOS3tYMH 5sWy6L6pm5azKfnOYeYausDEcQbb9oy6w8kmgzhEpS3C1MyMNt5BjyjstOhPOB58 SKZVCwHQR+r91aKPyo87O0JyRSZrg9A8xn6yxrk4lbZYGQpk38nb4f2GO4KekRA4 nsMUSAER27BOpU60JL0rjNs2DvUzMxPcj4tQ7GaDhLZO6fnhcLIHaPp8SdsYENyI bpuOIxUCnaz9wVOfaRLhF9By+jz1sk2itc61GR16igY789Zd+9GIvZk/UDunekyw yL+zBKPgpkvfkyW2fqLaQcGUcM1/yrwH -----END CERTIFICATE-----Generated at Tue Jul 22 04:59:28 2025 by rpki-client