$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json) Hash identifier: wqPmDbXdtqRSyqKIX3FmiipxUgAu9rV2xm390DM3RsA= Subject key identifier: CB:1E:07:4E:AC:DC:ED:37:49:6A:BD:AA:A0:83:8C:4F:D9:CD:68:08 Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Certificate serial: 044F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft Manifest number: 044B Signing time: Sun 03 Aug 2025 00:47:56 +0000 Manifest this update: Sun 03 Aug 2025 00:47:55 +0000 Manifest next update: Sun 10 Aug 2025 00:47:55 +0000 Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: EWYgfC5rs1aqgxpzLgOiFfFqs7Zo/k8c1qw/Acqmeho=) 2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: /+PqdcGfeQGq1JSsbPZ7utBGw8SAzSRzzxhLFAim1J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Validity Not Before: Aug 3 00:47:55 2025 GMT Not After : Aug 10 00:47:55 2025 GMT Subject: CN=688eb1bb-1f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:28:f7:7d:90:57:7f:b8:54:d9:c8:22:ca: 0c:1f:5c:88:6c:1e:d6:8a:2a:6e:4b:1f:7f:4a:bf: ab:d4:ed:a9:3b:6a:d4:c7:b9:1c:06:7c:96:f3:c6: e3:51:fc:28:6f:96:e9:22:8b:9d:8e:1b:f1:0e:f5: 17:6f:dc:0e:15:b4:a8:62:d0:3e:48:8b:3b:ff:45: df:0c:73:ab:14:f0:be:1f:da:b1:b0:05:95:58:17: 8e:c6:2a:e6:04:5b:cb:8c:0e:5a:92:3f:64:3e:bc: c1:77:9d:e8:87:a4:d5:11:b6:3b:f3:79:e0:7b:1f: 3f:4c:c1:58:cf:56:83:38:a9:69:be:82:de:f5:9c: e9:a3:b7:8f:64:b7:3a:30:d0:89:a0:f6:6e:61:79: 03:a5:1c:de:40:37:b2:3e:b0:1f:db:23:51:29:26: c8:ef:02:9f:65:d3:61:df:0e:8c:ed:56:84:6f:de: f4:d2:ea:40:68:b5:f7:1b:70:d9:d5:22:88:e3:7e: 2b:44:6b:54:0b:e0:59:4f:3b:49:43:45:12:61:f7: 47:ef:0d:74:f5:4e:45:9a:42:6a:7b:88:1c:bd:e5: 4e:27:c0:74:ae:d0:1f:db:e5:04:a8:2c:0a:39:0b: 40:96:a0:2f:d8:ad:96:72:d0:18:b2:84:1f:01:7d: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1E:07:4E:AC:DC:ED:37:49:6A:BD:AA:A0:83:8C:4F:D9:CD:68:08 X509v3 Authority Key Identifier: keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:ef:2b:57:9e:e6:f2:62:63:86:7f:45:89:23:ff:30:54:b0: 46:27:f4:bf:0a:0e:f6:16:86:8e:05:6a:4e:6f:a3:12:1a:84: 5a:ac:d6:76:68:0d:26:d4:a0:83:34:22:91:49:3a:31:41:18: 19:9a:18:79:fb:a0:d0:d3:80:f5:b2:e9:78:ab:d9:63:33:b2: 50:0e:fa:80:87:81:8b:3a:0d:6b:3f:31:28:e9:c5:cb:0f:19: a0:40:bd:f9:27:cd:31:ac:09:99:7b:0c:da:2e:5f:97:b9:18: 98:01:94:b9:73:7b:c9:b2:e7:8e:27:58:17:62:54:e0:ad:f3: db:0f:b6:12:b5:d4:29:96:08:5b:81:34:6d:8f:ed:86:17:a3: 9d:51:39:f8:fd:3a:b8:e0:4e:a0:32:2c:04:e9:1a:90:5e:37: 32:86:2e:79:a2:9c:fc:c1:0a:0d:2e:7d:5c:01:1d:ae:8b:d8: b0:e4:0e:ab:01:cc:84:fc:75:a3:d4:6d:b8:d8:4b:8a:10:b1: a3:7b:5f:ed:f6:3e:90:aa:95:74:86:9f:95:42:ba:ea:a7:f3: d5:77:01:a0:8d:19:c6:6e:f5:3b:cb:fb:49:07:e5:12:10:83: 40:0c:20:6c:f9:d5:6b:5d:24:b5:91:14:14:db:95:15:55:50: 69:d7:24:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJCRDYxMTAvBgNVBAUTKDZBOThDMEMwOENCRDM0MTlBOTA4MkI4NjBEMjlCRkE5 NzJGREYyQTcwHhcNMjUwODAzMDA0NzU1WhcNMjUwODEwMDA0NzU1WjAYMRYwFAYD VQQDEw02ODhlYjFiYi0xZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTYo932QV3+4VNnIIsoMH1yIbB7WiipuSx9/Sr+r1O2pO2rUx7kcBnyW88bj Ufwob5bpIoudjhvxDvUXb9wOFbSoYtA+SIs7/0XfDHOrFPC+H9qxsAWVWBeOxirm BFvLjA5akj9kPrzBd53oh6TVEbY783ngex8/TMFYz1aDOKlpvoLe9Zzpo7ePZLc6 MNCJoPZuYXkDpRzeQDeyPrAf2yNRKSbI7wKfZdNh3w6M7VaEb9700upAaLX3G3DZ 1SKI434rRGtUC+BZTztJQ0USYfdH7w109U5FmkJqe4gcveVOJ8B0rtAf2+UEqCwK OQtAlqAv2K2WctAYsoQfAX2RTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMseB06s 3O03SWq9qqCDjE/ZzWgIMB8GA1UdIwQYMBaAFGqYwMCMvTQZqQgrhg0pv6ly/fKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkJENi85QzU4NURCMDYz MTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5CbXBDQ3VHRFNtX3FYTDk4 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwakF3SXk5TkJtcENDdUdEU21fcVhMOThxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkJENi85QzU4NURCMDYzMTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5C bXBDQ3VHRFNtX3FYTDk4cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDL7ytXnubyYmOGf0WJI/8wVLBGJ/S/Cg72FoaOBWpOb6MSGoRarNZ2 aA0m1KCDNCKRSToxQRgZmhh5+6DQ04D1sul4q9ljM7JQDvqAh4GLOg1rPzEo6cXL DxmgQL35J80xrAmZewzaLl+XuRiYAZS5c3vJsueOJ1gXYlTgrfPbD7YStdQplghb gTRtj+2GF6OdUTn4/Tq44E6gMiwE6RqQXjcyhi55opz8wQoNLn1cAR2ui9iw5A6r AcyE/HWj1G242EuKELGje1/t9j6QqpV0hp+VQrrqp/PVdwGgjRnGbvU7y/tJB+US EINADCBs+dVrXSS1kRQU25UVVVBp1ySv -----END CERTIFICATE-----Generated at Mon Aug 4 11:21:45 2025 by rpki-client