$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: yk89kpULvk9M4wuFWZitXQI8+s/w04uU39TT0eXDDTk= Subject key identifier: AE:76:3F:7F:1D:73:E5:3B:19:74:29:68:46:FC:05:74:87:FF:57:18 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 14EF Signing time: Mon 04 Aug 2025 17:02:23 +0000 Manifest this update: Mon 04 Aug 2025 17:02:23 +0000 Manifest next update: Mon 11 Aug 2025 17:02:23 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: d4MjIBGp1OsvlbPkDgptZJRVHfyLKnZYK6BCjis2+ak=) 2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: 8U3x6H5bY+5B5oCv6vYfZszgq6gpJHZUkBbn2fzX+3M=) 3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: m0ywv3h/BJrsw2LOsXx/0+PQM3NArl9eNZt1OPifoLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5433 (0x1539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Aug 4 17:02:23 2025 GMT Not After : Aug 11 17:02:23 2025 GMT Subject: CN=6890e79f-b769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:76:6e:02:b1:eb:bc:75:83:5f:cc:ec:e0: e6:82:48:ac:61:3e:0a:85:32:fa:f8:db:23:81:06: 9a:00:a7:b2:4d:de:a3:a4:a3:b5:ee:e8:59:5e:58: 88:8b:23:65:d4:bb:b4:73:f9:44:02:9f:9d:22:9c: 7f:5d:10:74:3b:c0:a1:4b:0c:3c:b5:0c:b2:99:d1: 06:bd:52:bf:95:94:29:ac:d5:c5:e3:a6:99:5f:62: 0e:8c:1f:c5:5b:7f:5a:4d:1a:f3:43:25:cf:c4:5f: 11:03:a3:20:41:2a:91:17:7b:90:e6:87:8a:dc:c4: d4:d9:90:6d:2d:d4:82:e0:dd:34:b2:ac:f3:2d:cd: a5:af:25:11:5d:4f:ee:96:1c:1c:66:d7:d4:93:c6: 7a:76:23:12:71:8c:89:75:22:1e:bc:7b:98:ba:72: 6e:ee:23:7c:a8:ff:d0:98:3c:5b:c7:02:8c:cb:62: e7:89:39:b1:2d:fb:f1:ee:00:f1:e6:f4:23:12:bf: 39:80:ec:48:3b:48:a3:4b:53:14:4c:16:db:c3:18: b1:ed:b6:5a:ea:e2:b5:c3:98:5d:f6:7c:cd:10:6a: 83:37:e2:1d:74:ab:d2:39:d2:45:0f:25:9e:35:f2: 42:2b:a5:7c:a1:b7:46:15:95:1f:65:c6:b5:b0:f1: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:76:3F:7F:1D:73:E5:3B:19:74:29:68:46:FC:05:74:87:FF:57:18 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:66:60:bb:45:39:0c:b0:ff:2a:33:6a:56:0e:fe:d6:c0:78: 64:46:83:8a:3c:7c:2a:90:91:a1:ff:5d:aa:c6:53:79:e9:54: 14:12:4d:cf:ef:81:36:dd:68:88:a7:a4:73:6c:c6:c0:68:48: 0a:90:b3:fc:43:10:3e:77:2c:05:3e:ab:7c:dd:ea:b3:9c:36: 65:7f:3a:62:44:65:76:8b:20:ce:2b:49:61:e0:16:72:68:e9: 57:68:3d:3d:6b:b6:d3:74:e6:c2:49:90:6a:d4:05:89:ed:d9: 84:f4:b2:c5:1c:ea:04:cd:e3:ee:f5:c8:57:6a:99:d2:83:60: 79:3f:71:bc:16:a4:1f:d1:cd:b9:62:fe:e7:18:2a:ef:36:41: 46:34:7a:3c:0d:22:0f:5b:8d:d1:69:b5:da:a3:52:ad:df:bf: be:78:4a:a7:9c:08:ab:dd:88:14:53:cd:52:01:b5:c8:6f:c7: d9:4d:fd:a6:0f:d5:26:7d:b8:28:ca:1a:1f:7b:be:6e:3d:f5: 97:1c:b0:56:05:d6:db:b1:d9:12:93:25:43:ee:fe:c8:61:d4: 2e:67:b2:d0:25:cf:dd:ac:a9:d1:c9:6c:44:32:82:0a:cd:8a: a0:e4:27:0e:9d:7a:cc:ef:61:af:91:c7:4a:a4:ff:a4:b6:3a: 5b:c2:77:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUwODA0MTcwMjIzWhcNMjUwODExMTcwMjIzWjAYMRYwFAYD VQQDEw02ODkwZTc5Zi1iNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuE92bgKx67x1g1/M7ODmgkisYT4KhTL6+NsjgQaaAKeyTd6jpKO17uhZXliI iyNl1Lu0c/lEAp+dIpx/XRB0O8ChSww8tQyymdEGvVK/lZQprNXF46aZX2IOjB/F W39aTRrzQyXPxF8RA6MgQSqRF3uQ5oeK3MTU2ZBtLdSC4N00sqzzLc2lryURXU/u lhwcZtfUk8Z6diMScYyJdSIevHuYunJu7iN8qP/QmDxbxwKMy2LniTmxLfvx7gDx 5vQjEr85gOxIO0ijS1MUTBbbwxix7bZa6uK1w5hd9nzNEGqDN+IddKvSOdJFDyWe NfJCK6V8obdGFZUfZca1sPFcUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK52P38d c+U7GXQpaEb8BXSH/1cYMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6ZmC7RTkMsP8qM2pWDv7WwHhkRoOKPHwqkJGh/12qxlN56VQUEk3P 74E23WiIp6RzbMbAaEgKkLP8QxA+dywFPqt83eqznDZlfzpiRGV2iyDOK0lh4BZy aOlXaD09a7bTdObCSZBq1AWJ7dmE9LLFHOoEzePu9chXapnSg2B5P3G8FqQf0c25 Yv7nGCrvNkFGNHo8DSIPW43RabXao1Kt37++eEqnnAir3YgUU81SAbXIb8fZTf2m D9Umfbgoyhofe75uPfWXHLBWBdbbsdkSkyVD7v7IYdQuZ7LQJc/drKnRyWxEMoIK zYqg5CcOnXrM72GvkcdKpP+ktjpbwncc -----END CERTIFICATE-----Generated at Wed Aug 6 16:26:31 2025 by rpki-client