$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: EtEXxrMTKV87bcQPPwe74sIEjAr5XICkqA9nvYuUOLY= Subject key identifier: 72:33:59:77:3E:C6:A7:71:77:E8:1B:72:A1:B7:28:1F:9B:26:4B:FA Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 2650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 262A Signing time: Mon 04 Aug 2025 15:49:12 +0000 Manifest this update: Mon 04 Aug 2025 15:49:12 +0000 Manifest next update: Mon 11 Aug 2025 15:49:12 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: pm6mQpS1KwV4poR2KoZyn/Ja3CA8lZCVhReFirTzryk=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: Bub+bmfe4PnreQ1ZPIst7Ck9C3Kep4qMMCvN4ZXfJXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9808 (0x2650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: Aug 4 15:49:12 2025 GMT Not After : Aug 11 15:49:12 2025 GMT Subject: CN=6890d678-cfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:52:ad:b6:8d:49:6d:65:f9:61:3d:56:38:f7: 8e:8f:50:74:22:c2:34:00:ac:de:91:2b:4b:cc:0e: 02:7c:18:ef:f8:e7:81:0d:de:b3:fb:16:50:ee:a1: 6f:d5:9d:b6:fe:89:d2:ea:0b:d8:7f:26:76:dc:b4: 55:7b:32:03:5d:3d:63:f7:b0:60:52:ff:68:b3:02: d8:ea:af:5c:cb:de:21:16:92:1c:98:4c:c3:9c:54: e0:04:01:2d:16:0d:26:aa:3f:d1:60:ab:9f:b9:f0: 35:5c:92:88:68:b9:f9:b1:62:f0:19:a7:77:b4:ba: 28:eb:fd:ff:9c:b2:57:2d:a4:6d:96:42:5c:90:32: 45:6f:2e:3b:c5:53:c3:a3:77:15:f1:15:d3:19:45: ae:7c:92:c0:64:80:e8:bf:2b:79:23:fe:17:f8:9d: fc:2a:f0:20:ce:c7:ea:c4:0b:90:bd:b6:b6:34:1e: 96:76:a3:91:a9:b0:c8:6e:8b:2c:e8:31:19:51:26: 0d:db:ab:c7:6e:4a:1a:12:db:73:d2:f8:09:11:9c: b2:1f:37:d1:b7:72:32:6b:98:d1:fc:8a:bc:df:c2: 4c:11:32:e4:19:14:9f:ff:66:20:8a:ea:86:78:e1: 36:fc:30:67:15:b2:e4:4b:fc:c8:8e:02:f8:ac:08: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:33:59:77:3E:C6:A7:71:77:E8:1B:72:A1:B7:28:1F:9B:26:4B:FA X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:43:62:03:7b:2e:f9:45:f8:b1:b6:cf:02:20:30:d1:80:66: f8:ce:3c:02:dc:0e:cc:3f:66:87:8b:00:ee:2a:76:2f:15:a2: a0:21:f9:2a:29:dc:8c:70:92:da:b1:b1:fe:3d:0d:4f:e1:d1: 2f:c2:a4:c4:8b:39:b3:0f:59:cb:e9:49:12:d6:5e:06:bf:61: 93:3d:f7:40:e4:28:55:70:d4:2b:89:72:29:37:5a:22:c2:ff: 65:b7:31:6f:d4:eb:d7:69:b9:fd:e3:27:24:36:b3:f7:6f:0f: d5:61:65:13:91:ce:be:8e:e3:7c:d8:ca:ef:e6:bb:34:38:07: 1b:a3:36:57:c7:cc:b9:7c:61:d1:9c:45:c8:90:bb:e0:e1:38: 9a:81:77:cc:4b:af:60:d5:d3:5c:7c:c7:55:63:0f:10:44:72: c1:cf:de:79:bb:94:fe:b3:26:0f:6c:2f:a5:3b:cf:22:18:13: 70:3d:aa:46:9a:33:bc:a4:5a:ea:54:52:63:2d:29:4f:78:68: 1a:03:d6:03:58:89:e0:04:7c:fa:77:4b:f2:08:8d:0b:40:9f: 9c:14:0c:29:2a:04:02:62:73:d0:e7:d5:fe:ea:4b:07:a2:47: 3e:22:1c:c6:4d:18:3e:0c:18:e3:70:06:b3:0a:29:9d:3e:35: 7e:80:b4:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjUwODA0MTU0OTEyWhcNMjUwODExMTU0OTEyWjAYMRYwFAYD VQQDEw02ODkwZDY3OC1jZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21Ktto1JbWX5YT1WOPeOj1B0IsI0AKzekStLzA4CfBjv+OeBDd6z+xZQ7qFv 1Z22/onS6gvYfyZ23LRVezIDXT1j97BgUv9oswLY6q9cy94hFpIcmEzDnFTgBAEt Fg0mqj/RYKufufA1XJKIaLn5sWLwGad3tLoo6/3/nLJXLaRtlkJckDJFby47xVPD o3cV8RXTGUWufJLAZIDovyt5I/4X+J38KvAgzsfqxAuQvba2NB6WdqORqbDIboss 6DEZUSYN26vHbkoaEttz0vgJEZyyHzfRt3Iya5jR/Iq838JMETLkGRSf/2YgiuqG eOE2/DBnFbLkS/zIjgL4rAg+NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIzWXc+ xqdxd+gbcqG3KB+bJkv6MB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsQ2IDey75Rfixts8CIDDRgGb4zjwC3A7MP2aHiwDuKnYvFaKgIfkq KdyMcJLasbH+PQ1P4dEvwqTEizmzD1nL6UkS1l4Gv2GTPfdA5ChVcNQriXIpN1oi wv9ltzFv1OvXabn94yckNrP3bw/VYWUTkc6+juN82Mrv5rs0OAcbozZXx8y5fGHR nEXIkLvg4TiagXfMS69g1dNcfMdVYw8QRHLBz955u5T+syYPbC+lO88iGBNwPapG mjO8pFrqVFJjLSlPeGgaA9YDWIngBHz6d0vyCI0LQJ+cFAwpKgQCYnPQ59X+6ksH okc+IhzGTRg+DBjjcAazCimdPjV+gLTn -----END CERTIFICATE-----Generated at Wed Aug 6 11:21:38 2025 by rpki-client