$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: vd/kgpOcGm0nxVgKup4Gb9qiwhGR5rjZStV0Hq78icM= Subject key identifier: F4:34:C0:FA:3A:D1:A4:EE:06:B6:E2:A8:67:DA:96:44:A0:3D:D7:94 Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 0144 Signing time: Fri 01 Aug 2025 05:51:31 +0000 Manifest this update: Fri 01 Aug 2025 05:51:30 +0000 Manifest next update: Fri 08 Aug 2025 05:51:30 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: uVT57RuWMzK6PiHtviN1kHOM4U32zWai7R9amyMqLAQ=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: D3GA9GI+1ZpOYK34vPRNum86peu3I5thgqu5liFntgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Aug 1 05:51:30 2025 GMT Not After : Aug 8 05:51:30 2025 GMT Subject: CN=688c55e3-b7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:27:32:a7:39:42:99:2f:27:e6:6f:0a:62: 78:59:6b:42:65:7a:72:d5:75:89:ad:a2:38:83:0c: 81:47:f6:9d:e0:5a:6f:16:27:d1:82:ab:6a:34:2c: c8:da:51:86:b4:18:d4:90:ef:64:1d:c4:bd:66:f3: a5:6c:0c:18:9b:35:e7:d9:ed:e3:9b:7f:e4:33:40: 3f:9b:56:f7:fe:c0:23:23:68:66:42:37:36:a5:3f: 89:cf:94:96:1c:bf:0a:51:ed:10:9e:38:aa:82:c2: bb:52:ac:5a:24:93:1b:e8:4d:b9:c2:9b:31:d9:6e: ca:2e:7e:e6:51:be:f7:cf:ff:af:e3:57:77:0a:bf: 91:15:10:b0:5a:4d:ae:35:dd:56:8d:25:07:86:3d: b6:f2:0d:4a:04:8b:e1:77:6a:22:38:42:43:dd:f7: af:5e:fe:8a:66:6e:c5:53:3d:db:cd:04:d0:7b:9e: f1:e3:d9:ce:ae:be:b6:1b:3c:61:56:9a:cf:b5:2c: e3:3e:c5:68:39:50:b3:30:15:39:12:ba:c5:fb:90: d9:51:f0:a3:2e:f6:23:01:3e:7a:63:1d:c6:07:41: df:77:fd:58:a0:33:83:c8:3f:bb:de:59:c1:f5:bc: 4a:ea:eb:0a:75:bd:79:ca:5b:80:d8:2a:3b:9f:b2: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:34:C0:FA:3A:D1:A4:EE:06:B6:E2:A8:67:DA:96:44:A0:3D:D7:94 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:6a:a4:a5:30:a8:b6:10:b9:ae:cf:7f:84:c8:4a:43:75:49: 99:fa:73:3b:fc:22:c3:de:b7:60:af:3b:ca:cd:54:e5:1a:b1: 8f:2d:ee:3b:21:28:fc:7b:61:ae:79:b5:75:7f:25:23:b5:0d: a7:67:2e:3b:ae:ef:0d:05:2e:52:6d:66:f6:44:0a:76:10:7e: a3:90:0c:11:37:27:e6:cf:82:de:a1:14:2a:59:f1:b2:bc:13: 7e:8a:7b:07:42:2e:24:2b:a6:7e:0b:58:18:51:5f:1e:4e:df: dd:24:6c:84:78:41:61:f8:66:2b:2e:16:9d:5e:d6:66:ab:9d: 97:14:3c:16:f8:12:ad:b8:ad:88:09:29:2d:da:24:a7:33:02: bf:db:3b:6d:86:d5:28:96:b3:f3:6c:60:de:66:6c:71:9d:64: 93:ca:2b:79:4a:36:2a:85:ea:52:f8:48:4f:7f:18:dd:18:d4: 92:50:db:96:13:b0:40:bc:84:bf:25:1c:47:34:70:05:99:8e: 8f:c3:da:1e:5f:18:32:c1:5e:7e:92:e5:bd:13:71:81:fb:6d: e3:fa:ae:29:9c:09:7f:89:1f:19:a4:f5:20:d3:18:db:df:1b: 9f:f7:df:b8:e5:4a:7c:66:5d:de:61:8c:33:31:75:28:12:35: b4:25:56:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjUwODAxMDU1MTMwWhcNMjUwODA4MDU1MTMwWjAYMRYwFAYD VQQDEw02ODhjNTVlMy1iN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVYnMqc5QpkvJ+ZvCmJ4WWtCZXpy1XWJraI4gwyBR/ad4FpvFifRgqtqNCzI 2lGGtBjUkO9kHcS9ZvOlbAwYmzXn2e3jm3/kM0A/m1b3/sAjI2hmQjc2pT+Jz5SW HL8KUe0QnjiqgsK7UqxaJJMb6E25wpsx2W7KLn7mUb73z/+v41d3Cr+RFRCwWk2u Nd1WjSUHhj228g1KBIvhd2oiOEJD3fevXv6KZm7FUz3bzQTQe57x49nOrr62Gzxh VprPtSzjPsVoOVCzMBU5ErrF+5DZUfCjLvYjAT56Yx3GB0Hfd/1YoDODyD+73lnB 9bxK6usKdb15yluA2Co7n7K8JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQ0wPo6 0aTuBrbiqGfalkSgPdeUMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClaqSlMKi2ELmuz3+EyEpDdUmZ+nM7/CLD3rdgrzvKzVTlGrGPLe47 ISj8e2GuebV1fyUjtQ2nZy47ru8NBS5SbWb2RAp2EH6jkAwRNyfmz4LeoRQqWfGy vBN+insHQi4kK6Z+C1gYUV8eTt/dJGyEeEFh+GYrLhadXtZmq52XFDwW+BKtuK2I CSkt2iSnMwK/2ztthtUolrPzbGDeZmxxnWSTyit5SjYqhepS+EhPfxjdGNSSUNuW E7BAvIS/JRxHNHAFmY6Pw9oeXxgywV5+kuW9E3GB+23j+q4pnAl/iR8ZpPUg0xjb 3xuf99+45Up8Zl3eYYwzMXUoEjW0JVZV -----END CERTIFICATE-----Generated at Sat Aug 2 05:33:02 2025 by rpki-client