$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: kpZObrlEPT0HUNIwMCmHcpAjvNRjKWJ4fzWJFStueYk= Subject key identifier: AB:1C:E4:1E:33:47:2F:33:D6:6E:5F:7C:D4:A4:6E:D6:C5:59:F9:2B Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 049B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 0494 Signing time: Sun 03 Aug 2025 00:32:29 +0000 Manifest this update: Sun 03 Aug 2025 00:32:29 +0000 Manifest next update: Sun 10 Aug 2025 00:32:29 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: gtaa+wKhXDoD3d2d6skRZdVys3KHnu8XwMGUOJ8x4yI=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: Aug 3 00:32:29 2025 GMT Not After : Aug 10 00:32:29 2025 GMT Subject: CN=688eae1d-ba9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:a9:80:15:92:fc:c0:41:a0:a4:2a:91:cf: 94:02:0a:b9:32:1a:20:fe:dd:c0:18:2b:08:96:74: f4:d4:c4:d6:0b:0f:3b:5d:3a:d7:fc:e8:15:57:6c: 1e:27:7a:2e:17:25:1a:07:6b:32:3d:f1:2b:2c:12: 42:c1:3d:3a:3d:1c:88:f6:9b:64:ef:02:73:de:52: 9e:70:68:82:ab:07:69:64:69:3f:41:2c:79:24:03: 5b:6f:cc:db:c3:b6:16:8a:37:3a:fb:a1:9b:37:31: 3c:1c:38:63:9e:d1:44:8d:4f:6c:b0:fd:bf:0e:af: ff:49:65:3b:25:3e:f2:c8:1b:78:c5:5c:d4:06:ec: 45:b9:ef:84:77:1d:61:2f:7c:8c:4f:8f:5c:79:25: 38:cb:39:c8:4d:ff:01:9f:b8:ff:65:ad:96:2d:63: c2:d2:0c:e9:e0:d6:80:33:19:89:bb:af:41:a9:68: b2:0a:06:7f:c2:60:31:d2:5b:90:68:62:93:12:6a: 87:85:c9:60:b0:d8:78:55:21:30:27:af:3a:bf:9e: e1:db:71:9c:ba:4e:bf:ea:ca:e3:a2:e1:f3:15:19: fa:56:ab:3e:6b:d4:65:54:8a:ab:74:01:46:44:03: e8:7c:01:dd:a2:66:94:13:c9:ed:cf:50:41:fd:ad: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1C:E4:1E:33:47:2F:33:D6:6E:5F:7C:D4:A4:6E:D6:C5:59:F9:2B X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3e:de:58:d1:c1:f1:8f:53:41:61:fc:c9:bf:e4:3f:00:8a: 03:e8:4b:74:1d:d6:3a:a1:8b:99:e8:1c:ea:8b:2f:bd:6f:01: c8:38:79:73:e5:8f:86:35:74:3a:30:c4:06:f5:b9:36:55:0e: 06:28:5c:d5:bd:8c:dc:33:d6:18:50:a1:87:96:97:a5:bb:c1: 7c:6c:a2:83:0f:21:87:c2:31:65:b0:e7:78:5a:67:9f:52:be: 4a:18:65:dc:63:d2:8a:88:27:07:80:7f:0f:18:99:00:6e:c5: c0:c7:5f:ba:c5:3d:8e:66:c2:62:33:00:0c:8a:e1:51:78:f6: 71:51:b0:d3:26:10:0b:bf:e3:7f:5f:85:0a:9c:01:cb:28:5b: d8:5e:60:b8:52:01:c9:45:45:99:84:02:83:a7:00:0c:68:69: 16:25:d8:92:44:83:fd:88:15:c5:82:8b:1f:7b:d1:6a:a3:11: 8a:51:41:1d:82:33:d3:25:97:11:9a:93:f1:94:a3:eb:20:00: e0:d9:f3:21:87:ea:49:d8:0f:f5:e9:fa:9a:ec:85:4c:10:23: 7d:bc:c8:35:09:c1:ed:28:5e:22:06:2d:94:10:5b:c3:9b:2a: 30:50:dd:ce:a8:b0:96:c7:85:82:4b:f1:02:56:89:24:81:c1: d6:4d:f6:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUwODAzMDAzMjI5WhcNMjUwODEwMDAzMjI5WjAYMRYwFAYD VQQDEw02ODhlYWUxZC1iYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1CpgBWS/MBBoKQqkc+UAgq5Mhog/t3AGCsIlnT01MTWCw87XTrX/OgVV2we J3ouFyUaB2syPfErLBJCwT06PRyI9ptk7wJz3lKecGiCqwdpZGk/QSx5JANbb8zb w7YWijc6+6GbNzE8HDhjntFEjU9ssP2/Dq//SWU7JT7yyBt4xVzUBuxFue+Edx1h L3yMT49ceSU4yznITf8Bn7j/Za2WLWPC0gzp4NaAMxmJu69BqWiyCgZ/wmAx0luQ aGKTEmqHhclgsNh4VSEwJ686v57h23Gcuk6/6srjouHzFRn6Vqs+a9RlVIqrdAFG RAPofAHdomaUE8ntz1BB/a15eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsc5B4z Ry8z1m5ffNSkbtbFWfkrMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvPt5Y0cHxj1NBYfzJv+Q/AIoD6Et0HdY6oYuZ6Bzqiy+9bwHIOHlz 5Y+GNXQ6MMQG9bk2VQ4GKFzVvYzcM9YYUKGHlpelu8F8bKKDDyGHwjFlsOd4Wmef Ur5KGGXcY9KKiCcHgH8PGJkAbsXAx1+6xT2OZsJiMwAMiuFRePZxUbDTJhALv+N/ X4UKnAHLKFvYXmC4UgHJRUWZhAKDpwAMaGkWJdiSRIP9iBXFgosfe9FqoxGKUUEd gjPTJZcRmpPxlKPrIADg2fMhh+pJ2A/16fqa7IVMECN9vMg1CcHtKF4iBi2UEFvD myowUN3OqLCWx4WCS/ECVokkgcHWTfax -----END CERTIFICATE-----Generated at Mon Aug 4 11:10:15 2025 by rpki-client