$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: obkPD7pzPh87g5xuCgQAobG/RFINceTY8XtrpDShIgI= Subject key identifier: EF:65:A9:DD:2B:9E:29:0C:3D:85:C2:F1:69:5A:EA:C4:15:AC:38:10 Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0CC0 Signing time: Fri 08 Aug 2025 18:20:50 +0000 Manifest this update: Fri 08 Aug 2025 18:20:49 +0000 Manifest next update: Fri 15 Aug 2025 18:20:49 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: W79uGekoOZUTUJvIM2ln/1GZwdPxP3kqPyif1KE8zEM=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: Wbd4SNbG7n2IN5fFqW7xiw4LueCafFj4BsRNKFvE840=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: Aug 8 18:20:49 2025 GMT Not After : Aug 15 18:20:49 2025 GMT Subject: CN=68964002-69c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:c9:05:6f:05:eb:d4:7c:ce:fc:7f:2a:33: b7:63:a9:70:e6:a4:c3:77:ef:55:84:15:2b:4b:aa: b6:88:0a:1c:22:bd:d9:dd:e6:8d:6a:b8:85:bd:05: c4:5c:5a:57:74:47:bc:08:60:91:31:ee:54:2a:af: 3f:df:32:a6:6d:d3:c9:ca:a1:6d:b3:bc:61:60:be: de:06:48:c5:f0:d8:4c:b9:d5:9c:3d:06:e7:4a:bd: f1:30:c7:83:5f:96:f8:0e:de:d3:d7:63:31:12:f3: e1:bd:dd:08:4b:eb:cc:c5:92:37:00:d0:e0:77:e8: b4:ec:df:a3:c1:fe:9a:89:ed:a1:03:c1:40:62:71: 7e:f4:bc:80:ad:ce:c0:a3:01:42:27:c8:d2:db:4b: 12:79:52:17:b7:74:47:1a:60:ac:11:45:e5:51:54: 4e:21:ef:d0:58:b8:50:d1:5b:7d:ac:9e:97:7e:a8: 47:f3:19:7d:b4:1d:40:c6:42:5e:4e:76:8b:30:7b: 16:03:c6:74:94:a4:45:45:c2:f5:31:3a:6d:a7:bd: 04:20:bf:5e:01:ac:0c:18:f5:7e:68:86:a2:3a:61: 26:76:23:dc:1a:ee:60:f3:ae:13:61:d1:d6:ef:dc: 2f:7e:45:5c:85:27:47:77:75:ea:90:56:84:31:88: 2e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:65:A9:DD:2B:9E:29:0C:3D:85:C2:F1:69:5A:EA:C4:15:AC:38:10 X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:78:ff:f0:96:59:e4:19:f5:63:7f:e1:30:fd:e9:17:40:bb: aa:2d:82:a0:30:5d:0e:5c:e1:c7:73:3c:6a:09:ff:9a:0f:d8: bb:84:58:e7:c2:9c:5d:6e:9b:84:a8:64:82:4a:bb:24:b8:19: dd:ad:f1:78:33:13:d2:98:0b:f4:01:cd:ef:59:6e:29:38:9c: 5d:22:72:ea:41:9f:91:2a:c7:ae:de:63:b2:93:15:f2:18:fa: ae:0e:49:53:60:10:b8:59:ce:06:6f:4a:5c:61:0b:a1:99:47: ca:e6:8a:c4:79:8e:0d:33:f0:73:f0:36:56:ee:3f:fa:6c:2f: 5d:21:9b:77:0f:d0:60:74:a9:2c:4d:6c:f7:8f:07:58:fa:a5: b5:fd:8b:4f:b9:22:9a:56:8b:1e:9f:c8:35:c6:15:a2:d8:19: cd:24:49:c9:6a:c2:f7:57:2d:68:f1:31:6f:33:ce:a7:98:9e: 25:ad:15:17:e6:ed:02:78:4b:e8:95:11:bd:99:98:14:0d:69: e4:87:fa:9f:ac:42:47:dc:46:35:01:fe:67:c0:24:98:1e:04: 89:3b:ec:88:73:06:bb:ae:ef:5c:54:c9:52:4a:9c:9b:81:b5: b3:2d:78:f9:a3:a1:66:d3:75:97:36:7e:b2:d9:19:5c:bb:5b: fe:72:ce:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjUwODA4MTgyMDQ5WhcNMjUwODE1MTgyMDQ5WjAYMRYwFAYD VQQDEw02ODk2NDAwMi02OWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMXJBW8F69R8zvx/KjO3Y6lw5qTDd+9VhBUrS6q2iAocIr3Z3eaNariFvQXE XFpXdEe8CGCRMe5UKq8/3zKmbdPJyqFts7xhYL7eBkjF8NhMudWcPQbnSr3xMMeD X5b4Dt7T12MxEvPhvd0IS+vMxZI3ANDgd+i07N+jwf6aie2hA8FAYnF+9LyArc7A owFCJ8jS20sSeVIXt3RHGmCsEUXlUVROIe/QWLhQ0Vt9rJ6XfqhH8xl9tB1AxkJe TnaLMHsWA8Z0lKRFRcL1MTptp70EIL9eAawMGPV+aIaiOmEmdiPcGu5g864TYdHW 79wvfkVchSdHd3XqkFaEMYguJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9lqd0r nikMPYXC8Wla6sQVrDgQMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3eP/wllnkGfVjf+Ew/ekXQLuqLYKgMF0OXOHHczxqCf+aD9i7hFjn wpxdbpuEqGSCSrskuBndrfF4MxPSmAv0Ac3vWW4pOJxdInLqQZ+RKseu3mOykxXy GPquDklTYBC4Wc4Gb0pcYQuhmUfK5orEeY4NM/Bz8DZW7j/6bC9dIZt3D9BgdKks TWz3jwdY+qW1/YtPuSKaVosen8g1xhWi2BnNJEnJasL3Vy1o8TFvM86nmJ4lrRUX 5u0CeEvolRG9mZgUDWnkh/qfrEJH3EY1Af5nwCSYHgSJO+yIcwa7ru9cVMlSSpyb gbWzLXj5o6Fm03WXNn6y2Rlcu1v+cs67 -----END CERTIFICATE-----Generated at Fri Aug 8 20:45:37 2025 by rpki-client