$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: GH718nTK/o/5vV7ldC6gxj4VGGED9odlDTyBAX/gud8= Subject key identifier: 0A:81:02:15:5B:C9:0C:59:B3:10:BD:5E:5E:22:CA:E4:E4:02:EC:22 Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0F09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0EF1 Signing time: Mon 04 Aug 2025 17:50:42 +0000 Manifest this update: Mon 04 Aug 2025 17:50:42 +0000 Manifest next update: Mon 11 Aug 2025 17:50:42 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: UGEZM0Mlrv0M1fTT8ZnLQ/XsxLUc1Er6WuY33A6V8Ms=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: w9f85Y+KRBnRa0YJSmsDyyhylh1UfaYw453pU7HjF1A=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: OKUbU8IYBtUlB8hYEhyLNWGvkxYq3YMYoLZU29fzMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3849 (0xf09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Aug 4 17:50:42 2025 GMT Not After : Aug 11 17:50:42 2025 GMT Subject: CN=6890f2f2-952b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:08:f4:64:5b:34:48:05:ce:b1:66:ee:da: af:cf:38:b7:6d:c9:74:94:6d:67:b0:d4:b2:7a:5f: 1b:d5:4d:87:72:e5:a1:00:3e:53:5d:55:7c:34:80: 9f:ce:77:a1:1f:5b:d6:37:6b:6c:cf:fb:6b:28:48: d6:7d:b3:af:c4:22:7c:d7:4c:b0:77:a3:c8:eb:7f: ac:cd:69:12:6b:29:84:44:21:ea:e7:d0:f4:e2:13: 8d:c3:a9:36:7c:b6:96:af:d3:ea:6b:1b:b6:5b:ad: af:c7:ca:fd:97:4b:66:02:9a:61:3e:c2:ea:5a:bf: 0e:5a:c7:3f:64:40:d5:cd:15:c7:e5:b9:39:23:d5: 00:55:f3:82:7c:f3:15:36:1e:2b:9e:45:60:ef:bc: ab:0a:83:5d:31:a4:07:01:69:87:0b:0a:63:6b:60: 24:4d:7c:83:37:c4:d5:f3:a8:e7:2a:fe:1e:6c:95: 5e:64:e5:30:34:69:5e:06:bf:e9:9d:60:aa:d1:05: 79:a9:af:8a:bc:c2:db:36:55:d0:1e:5a:97:ea:e8: 64:8a:7c:88:41:79:cb:41:1c:a7:cb:8e:e6:f3:12: 22:7c:0f:68:a6:fd:36:91:fc:2c:d5:00:d0:dd:69: 63:6a:cd:15:aa:fa:e5:96:fe:f9:3a:aa:de:c6:96: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:81:02:15:5B:C9:0C:59:B3:10:BD:5E:5E:22:CA:E4:E4:02:EC:22 X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:55:e4:96:25:e9:d1:dd:4d:14:4d:c9:a8:9e:d0:94:f6:e0: c5:1b:53:4a:be:49:7a:f0:a6:67:50:eb:3d:69:da:a4:58:d3: 1d:52:90:25:10:8d:99:cf:54:bd:f6:82:5c:20:db:78:20:16: ba:dc:5f:12:b1:5b:ac:17:69:1b:dd:f8:67:65:1a:4a:d9:64: d7:0f:9e:31:1c:10:bd:f0:46:e3:3c:f0:7d:60:33:50:fd:f2: 4c:16:7f:9b:7d:3b:0c:c6:db:35:11:f0:a1:eb:51:89:ac:bf: 50:af:8a:d8:3c:24:67:44:5f:ad:82:a0:de:9d:8d:e5:d0:b1: 95:7d:2d:b0:4f:6e:32:36:23:6c:7b:a8:7a:a4:78:f3:05:c1: 7f:d4:a1:d6:ea:08:09:bf:12:98:9e:00:ab:1c:18:78:6c:f5: b4:24:5e:8f:f5:9a:c0:d8:ee:c5:af:46:a3:17:b9:64:6f:d4: 92:94:a0:a6:06:57:30:68:71:f7:0b:48:17:48:95:83:26:59: 6b:55:02:a2:dc:41:ea:22:f4:bb:a2:a2:46:bc:94:fd:03:bf: 1b:d9:a0:01:85:66:e2:0e:d1:c7:92:e8:68:3e:7c:11:c0:82: 84:08:48:63:c8:97:ba:ff:e9:18:a0:cc:b2:d1:23:9a:58:39: 22:47:6a:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjUwODA0MTc1MDQyWhcNMjUwODExMTc1MDQyWjAYMRYwFAYD VQQDEw02ODkwZjJmMi05NTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqMI9GRbNEgFzrFm7tqvzzi3bcl0lG1nsNSyel8b1U2HcuWhAD5TXVV8NICf znehH1vWN2tsz/trKEjWfbOvxCJ810ywd6PI63+szWkSaymERCHq59D04hONw6k2 fLaWr9Pqaxu2W62vx8r9l0tmApphPsLqWr8OWsc/ZEDVzRXH5bk5I9UAVfOCfPMV Nh4rnkVg77yrCoNdMaQHAWmHCwpja2AkTXyDN8TV86jnKv4ebJVeZOUwNGleBr/p nWCq0QV5qa+KvMLbNlXQHlqX6uhkinyIQXnLQRyny47m8xIifA9opv02kfws1QDQ 3Wljas0Vqvrllv75OqrexpZELwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqBAhVb yQxZsxC9Xl4iyuTkAuwiMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgVeSWJenR3U0UTcmontCU9uDFG1NKvkl68KZnUOs9adqkWNMdUpAl EI2Zz1S99oJcINt4IBa63F8SsVusF2kb3fhnZRpK2WTXD54xHBC98EbjPPB9YDNQ /fJMFn+bfTsMxts1EfCh61GJrL9Qr4rYPCRnRF+tgqDenY3l0LGVfS2wT24yNiNs e6h6pHjzBcF/1KHW6ggJvxKYngCrHBh4bPW0JF6P9ZrA2O7Fr0ajF7lkb9SSlKCm BlcwaHH3C0gXSJWDJllrVQKi3EHqIvS7oqJGvJT9A78b2aABhWbiDtHHkuhoPnwR wIKECEhjyJe6/+kYoMyy0SOaWDkiR2qV -----END CERTIFICATE-----Generated at Wed Aug 6 00:53:12 2025 by rpki-client