$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft File: DS1vMynFa_bo-UG9_adJbb4lMOU.mft (raw, json) Hash identifier: SzO8SMYOcMwzZJqgYZ3zMAfGCS5TbgGEYgKo/+IYSgA= Subject key identifier: 46:9D:84:F8:75:3E:29:FB:5D:B3:DB:60:4C:C8:19:34:57:91:61:BB Authority key identifier: 0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5 Certificate issuer: /CN=A915479A/serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft Manifest number: 5D Signing time: Tue 05 Aug 2025 07:41:48 +0000 Manifest this update: Tue 05 Aug 2025 07:41:47 +0000 Manifest next update: Tue 12 Aug 2025 07:41:47 +0000 Files and hashes: 1: DS1vMynFa_bo-UG9_adJbb4lMOU.crl (hash: 6vzZWtyaFSKTIRxZRdp8UIpW0ZVe+OEHfdJqqRDXDAo=) 2: 8836D872E37B11EFB4D75458C4F9AE02.roa (hash: SXO1+0APe7z5DY3Hw4Iwvndpe+8U4RSEIeHcUiLcev8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915479A, serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5 Validity Not Before: Aug 5 07:41:47 2025 GMT Not After : Aug 12 07:41:47 2025 GMT Subject: CN=6891b5bb-8d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:80:c8:77:c1:c8:d2:71:9f:23:0e:88:3f: 65:64:4d:5a:58:c2:a0:3f:74:bf:fa:4a:98:7f:cb: b1:1c:bf:be:95:33:71:ff:a7:1c:f7:c4:01:bd:1a: d7:98:99:6e:4a:31:55:d3:c8:e9:41:08:4d:0d:ec: 45:4c:dd:43:d1:45:be:85:5d:7b:8d:39:8e:8d:98: 0a:78:07:d9:6b:23:19:df:be:0a:92:31:9f:0b:60: 4b:b8:06:99:c3:02:5d:fa:b9:60:77:ce:a0:58:a4: 74:2e:fc:98:b5:7f:a1:f3:ac:56:8b:cd:d9:10:ab: 73:47:73:a3:ca:21:5a:e3:ad:89:4e:a2:f4:f9:d9: 3e:ba:47:75:5c:49:18:11:e2:5e:73:c8:d2:49:ed: ba:5e:0b:3a:40:77:f1:91:51:f2:91:e5:cf:fa:76: 21:76:7f:b3:eb:80:ee:1a:55:c0:09:9c:ec:66:62: 9f:58:ca:83:7b:08:e6:b4:bd:d5:2a:0e:b8:1f:d2: 72:f9:2b:f5:10:86:d6:95:ad:62:a5:e1:b4:e5:b4: 75:5a:8a:3f:d7:6f:80:d9:28:95:65:1c:76:d9:8d: 1d:fa:ab:39:50:c0:b8:7a:20:ac:19:c4:11:ba:d6: a6:8c:7f:5d:4f:ba:aa:69:d3:93:36:ae:89:b4:c2: 5d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9D:84:F8:75:3E:29:FB:5D:B3:DB:60:4C:C8:19:34:57:91:61:BB X509v3 Authority Key Identifier: keyid:0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:34:12:a5:bc:bc:fc:bb:ee:3a:4f:53:bc:1e:06:e4:e3:30: 6a:20:6f:25:91:54:d9:5c:15:0d:83:a2:09:61:db:31:28:0d: d7:07:b3:7b:bb:a2:7f:b0:dc:e6:aa:fb:52:d1:39:54:e2:3c: d0:22:b9:c5:3b:5c:f9:a3:dc:d9:d7:da:d6:1c:3e:fb:8e:97: 70:bc:90:12:aa:62:ea:86:ce:99:ae:0a:fb:77:7e:e7:b0:43: 15:74:d3:e2:ff:69:25:72:e1:b6:63:f1:b3:98:cd:1a:1d:ef: 96:52:90:01:6a:ec:ca:f2:bb:0a:9e:bb:26:dc:66:fc:38:d8: da:94:6c:eb:94:f0:72:79:51:46:cd:66:65:ff:6f:3e:63:94: 68:8a:5f:da:ff:41:38:9e:7b:29:7e:34:d2:29:dd:80:0c:86: 73:ce:fb:f0:f9:1c:d8:b9:7b:48:c2:be:00:93:63:3b:69:7b: 82:e4:ce:42:c5:f9:1c:fd:64:f6:87:2c:0e:d4:10:d3:07:7c: 09:d1:a0:79:33:66:af:ac:d1:91:19:80:c5:4f:2e:07:94:02: 3e:91:46:cd:ee:21:06:86:c2:59:0d:3a:2a:ed:62:8a:c1:d6: 3c:c9:1f:23:d4:af:16:2b:83:52:38:9e:77:cd:31:a3:46:27: 61:1e:b4:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDc5QTExMC8GA1UEBRMoMEQyRDZGMzMyOUM1NkJGNkU4Rjk0MUJERkRBNzQ5NkRC RTI1MzBFNTAeFw0yNTA4MDUwNzQxNDdaFw0yNTA4MTIwNzQxNDdaMBgxFjAUBgNV BAMTDTY4OTFiNWJiLThkNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkooDId8HI0nGfIw6IP2VkTVpYwqA/dL/6Sph/y7Ecv76VM3H/pxz3xAG9GteY mW5KMVXTyOlBCE0N7EVM3UPRRb6FXXuNOY6NmAp4B9lrIxnfvgqSMZ8LYEu4BpnD Al36uWB3zqBYpHQu/Ji1f6HzrFaLzdkQq3NHc6PKIVrjrYlOovT52T66R3VcSRgR 4l5zyNJJ7bpeCzpAd/GRUfKR5c/6diF2f7PrgO4aVcAJnOxmYp9YyoN7COa0vdUq Drgf0nL5K/UQhtaVrWKl4bTltHVaij/Xb4DZKJVlHHbZjR36qzlQwLh6IKwZxBG6 1qaMf11Puqpp05M2rom0wl0zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURp2E+HU+ Kftds9tgTMgZNFeRYbswHwYDVR0jBBgwFoAUDS1vMynFa/bo+UG9/adJbb4lMOUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NzlBLzI0QTQ4Mzg4RTM3 OTExRUZCNDY2NkIzMUM0RjlBRTAyL0RTMXZNeW5GYV9iby1VRzlfYWRKYmI0bE1P VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRFMxdk15bkZhX2JvLVVHOV9hZEpiYjRsTU9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 NzlBLzI0QTQ4Mzg4RTM3OTExRUZCNDY2NkIzMUM0RjlBRTAyL0RTMXZNeW5GYV9i by1VRzlfYWRKYmI0bE1PVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACg0EqW8vPy77jpPU7weBuTjMGogbyWRVNlcFQ2Doglh2zEoDdcHs3u7 on+w3Oaq+1LROVTiPNAiucU7XPmj3NnX2tYcPvuOl3C8kBKqYuqGzpmuCvt3fuew QxV00+L/aSVy4bZj8bOYzRod75ZSkAFq7MryuwqeuybcZvw42NqUbOuU8HJ5UUbN ZmX/bz5jlGiKX9r/QTieeyl+NNIp3YAMhnPO+/D5HNi5e0jCvgCTYztpe4LkzkLF +Rz9ZPaHLA7UENMHfAnRoHkzZq+s0ZEZgMVPLgeUAj6RRs3uIQaGwlkNOirtYorB 1jzJHyPUrxYrg1I4nnfNMaNGJ2EetEw= -----END CERTIFICATE-----Generated at Wed Aug 6 06:05:46 2025 by rpki-client