$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: n5dqH7D8wTGDHwzkPtAVtQD6KHNMmuqgXFC4e2pvjLE= Subject key identifier: 2A:72:41:63:FB:71:7D:39:81:6A:A0:7F:3D:4A:EE:8B:7C:F0:6F:51 Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 048E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 047E Signing time: Sat 09 Aug 2025 00:39:13 +0000 Manifest this update: Sat 09 Aug 2025 00:39:12 +0000 Manifest next update: Sat 16 Aug 2025 00:39:12 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: BUscUoMmGVbmlWegwqHYldBsuEbDZghj04dqu5wf9o4=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: naYHhlwgJToIdxwYRVcDTwuzPaQ2WtmkFGMwkiEal6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: Aug 9 00:39:12 2025 GMT Not After : Aug 16 00:39:12 2025 GMT Subject: CN=689698b0-8bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:cc:a4:48:29:d4:89:64:71:68:d2:3b:c6: 76:81:05:f3:8b:96:48:ea:79:d1:04:e7:76:38:5c: fe:cc:0a:b8:d1:1f:89:0a:9a:d5:cd:6b:52:3a:ef: ee:97:0f:8c:a5:6f:73:b9:5c:29:bc:f0:00:ba:a9: 59:bb:28:41:51:28:c8:16:27:91:45:91:a2:36:49: 38:3c:da:8d:e1:ac:bd:a5:b7:5a:63:2d:a7:c5:9a: a2:af:c8:5e:0f:af:19:00:5e:7a:ec:13:1d:40:31: 3f:fa:06:87:6b:2c:f7:e4:ee:c8:c6:4b:69:49:6a: 1a:4d:74:b4:99:7d:f3:46:dc:e4:b2:29:07:5f:33: ce:17:ee:24:b9:29:04:ed:63:45:09:ef:82:0e:77: 60:4c:3a:f2:7f:06:e2:b4:c3:b9:15:48:5f:9a:6c: ce:7c:14:7d:c3:a0:35:12:5c:5a:63:f3:8a:e7:10: f6:e8:61:09:43:08:12:a2:34:da:fb:e4:94:20:e4: c4:1a:c6:11:4e:ac:74:3a:33:60:5c:1e:2d:81:e4: e6:da:12:b1:ec:9f:8d:de:af:fd:60:3f:4b:63:59: c8:bf:20:7f:f6:06:8e:32:04:40:fd:41:4b:81:7c: d1:85:96:c7:06:d5:07:87:5d:bc:8f:03:45:30:36: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:72:41:63:FB:71:7D:39:81:6A:A0:7F:3D:4A:EE:8B:7C:F0:6F:51 X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:44:15:c3:c8:b5:86:27:b5:96:be:31:1a:c4:e0:a3:8e:23: 26:ca:fc:a1:71:ff:61:2d:2b:69:d7:81:c2:0a:ca:86:15:e3: 73:12:24:2d:e3:10:b5:04:64:0a:78:93:f9:98:ef:f2:af:aa: 17:aa:c9:dc:be:34:c3:4a:3d:05:e7:7a:02:0d:0d:43:61:d8: 1e:6a:91:bd:dc:24:9e:60:68:5a:32:bf:64:45:c9:18:05:5d: 8a:b3:cf:76:53:73:a8:69:b8:0e:ce:6d:ad:85:17:39:1d:e9: 0c:b5:98:22:93:14:00:1e:36:79:8a:e7:0a:92:7c:2a:6c:49: 6f:be:e2:95:9a:a3:a4:65:8e:c7:83:8c:f8:9e:e9:58:af:a6: d3:38:b6:06:3a:06:5f:88:c1:ee:8e:11:10:d8:0c:ca:cc:02: 1c:92:bf:a6:85:d4:85:35:a8:22:51:ea:3e:59:9e:ed:97:ad: 15:3e:0b:ed:c3:69:54:56:d0:be:8a:1b:45:54:c7:0d:e3:b8: 5f:f0:80:29:e8:8c:c5:ef:25:03:84:52:69:e7:91:eb:8d:c8: dc:b4:98:1c:3a:8a:ad:aa:2b:c2:ab:47:fa:1e:0e:e5:be:88: 39:47:7f:08:6a:e3:18:ba:ac:ae:1f:10:6a:71:fb:59:8a:58: e4:0f:e1:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjUwODA5MDAzOTEyWhcNMjUwODE2MDAzOTEyWjAYMRYwFAYD VQQDEw02ODk2OThiMC04YmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmzMpEgp1IlkcWjSO8Z2gQXzi5ZI6nnRBOd2OFz+zAq40R+JCprVzWtSOu/u lw+MpW9zuVwpvPAAuqlZuyhBUSjIFieRRZGiNkk4PNqN4ay9pbdaYy2nxZqir8he D68ZAF567BMdQDE/+gaHayz35O7IxktpSWoaTXS0mX3zRtzksikHXzPOF+4kuSkE 7WNFCe+CDndgTDryfwbitMO5FUhfmmzOfBR9w6A1ElxaY/OK5xD26GEJQwgSojTa ++SUIOTEGsYRTqx0OjNgXB4tgeTm2hKx7J+N3q/9YD9LY1nIvyB/9gaOMgRA/UFL gXzRhZbHBtUHh128jwNFMDbRgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpyQWP7 cX05gWqgfz1K7ot88G9RMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClRBXDyLWGJ7WWvjEaxOCjjiMmyvyhcf9hLStp14HCCsqGFeNzEiQt 4xC1BGQKeJP5mO/yr6oXqsncvjTDSj0F53oCDQ1DYdgeapG93CSeYGhaMr9kRckY BV2Ks892U3OoabgOzm2thRc5HekMtZgikxQAHjZ5iucKknwqbElvvuKVmqOkZY7H g4z4nulYr6bTOLYGOgZfiMHujhEQ2AzKzAIckr+mhdSFNagiUeo+WZ7tl60VPgvt w2lUVtC+ihtFVMcN47hf8IAp6IzF7yUDhFJp55HrjcjctJgcOoqtqivCq0f6Hg7l vog5R38IauMYuqyuHxBqcftZiljkD+GV -----END CERTIFICATE-----Generated at Sun Aug 10 05:36:16 2025 by rpki-client