$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft File: fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json) Hash identifier: fxmXFE1AZEnmWtuyK0ISHQdTRwdzn2H/hobsmkLc4+A= Subject key identifier: 07:4E:F4:ED:F1:D4:16:C0:B5:1C:97:21:06:91:3D:47:7E:32:20:43 Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft Manifest number: 0117 Signing time: Fri 08 Aug 2025 23:51:12 +0000 Manifest this update: Fri 08 Aug 2025 23:51:11 +0000 Manifest next update: Fri 15 Aug 2025 23:51:11 +0000 Files and hashes: 1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: maz4N6Y9fT7IA+djjcSk1E/Ruc+YTrVlW3MgRyp2JEM=) 2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: 7qAgqeHaZPQYvPPHuv1+My9lZgN4hj2uJJ26C3QxuHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Validity Not Before: Aug 8 23:51:11 2025 GMT Not After : Aug 15 23:51:11 2025 GMT Subject: CN=68968d70-51c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:fe:ba:ee:2b:d8:27:97:7b:08:68:fc:54: de:68:32:02:b7:ea:fa:1c:57:0f:11:7a:07:df:31: c5:56:70:f7:03:bc:19:c2:a2:a7:a5:34:24:32:30: 40:2b:84:d6:5f:1c:39:de:89:75:2c:78:43:bc:09: 3f:a1:b2:c7:94:2e:a8:35:e6:30:27:c6:23:bb:2f: 22:0c:70:46:49:1b:4b:4a:5d:be:08:74:d1:a7:51: 2f:ca:34:3c:35:58:3a:68:81:fc:b9:e3:70:7f:cb: 03:38:7c:df:5f:04:cf:e6:fc:0d:2d:ad:62:09:81: ca:46:15:4c:f9:96:26:54:bc:da:cc:bc:c7:b4:14: 57:17:99:55:35:bc:99:ef:15:b6:f7:b3:a2:35:6a: 26:04:7c:61:02:5a:f5:2d:18:29:ce:00:a5:da:cd: 5c:00:33:ed:84:0c:cd:c0:df:47:c9:2a:4a:3d:90: ed:84:3a:54:c5:be:9b:5e:4d:12:a1:33:05:61:7b: 0d:4a:81:70:19:29:dd:68:1e:4f:41:f4:ec:51:ef: 2d:59:3a:5a:79:94:a9:5b:7b:86:37:02:8c:6a:a6: 14:db:2f:d8:e8:da:a5:d7:50:56:85:c7:5a:f9:db: 84:5b:7b:28:0f:19:5d:d1:50:c2:f8:fe:b8:ce:cb: de:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4E:F4:ED:F1:D4:16:C0:B5:1C:97:21:06:91:3D:47:7E:32:20:43 X509v3 Authority Key Identifier: keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:60:a4:c2:90:82:75:d7:7c:0e:34:7b:b2:7e:ea:6d:17:ed: 89:af:7a:c1:9e:d5:8e:38:2e:07:f3:b0:91:fc:82:41:c3:4d: 4b:e6:ba:ac:ab:e7:28:1f:93:10:a8:46:a7:76:d9:9b:0d:77: 50:2c:ef:31:2c:b7:8a:13:48:26:b2:ea:cc:29:e3:6e:47:1a: 53:d4:08:ce:fa:cb:d1:3d:41:0d:e2:7d:13:7d:6d:29:5e:3c: 69:e1:18:8e:eb:11:64:0f:f5:be:49:bc:8e:ce:ad:e3:4f:f5: a7:ae:cb:f3:2d:54:7f:1a:62:89:63:1d:99:f2:f4:91:8d:55: f0:2b:ea:9c:74:fb:13:8f:b0:a1:d1:1c:21:0d:3b:f5:53:5d: 1a:86:9f:45:82:17:33:a2:5a:ea:64:82:9f:8c:44:d4:57:b3: 70:0d:23:3a:77:fd:97:8b:9e:bd:71:18:07:7b:d1:e7:65:63: 67:15:f7:ac:0d:c9:77:e6:2b:2c:9e:a2:67:b0:27:49:7d:55: e3:c1:4d:3f:2d:e2:39:55:7a:45:fd:94:23:cd:7f:e0:57:5d: 3d:85:43:c4:18:46:7e:21:bf:a9:48:15:92:0c:8c:cb:7f:6a: ee:b6:7b:be:45:9e:32:66:f4:db:a1:82:76:59:34:ec:79:f6: 58:f2:37:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDdDMTk0RkVEQjhBNUM4Qzk3NkVCREVDODQ5M0RGM0Mz RjA4Q0M4RTIwHhcNMjUwODA4MjM1MTExWhcNMjUwODE1MjM1MTExWjAYMRYwFAYD VQQDEw02ODk2OGQ3MC01MWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvH+uu4r2CeXewho/FTeaDICt+r6HFcPEXoH3zHFVnD3A7wZwqKnpTQkMjBA K4TWXxw53ol1LHhDvAk/obLHlC6oNeYwJ8Yjuy8iDHBGSRtLSl2+CHTRp1EvyjQ8 NVg6aIH8ueNwf8sDOHzfXwTP5vwNLa1iCYHKRhVM+ZYmVLzazLzHtBRXF5lVNbyZ 7xW297OiNWomBHxhAlr1LRgpzgCl2s1cADPthAzNwN9HySpKPZDthDpUxb6bXk0S oTMFYXsNSoFwGSndaB5PQfTsUe8tWTpaeZSpW3uGNwKMaqYU2y/Y6Nql11BWhcda +duEW3soDxld0VDC+P64zsve6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdO9O3x 1BbAtRyXIQaRPUd+MiBDMB8GA1UdIwQYMBaAFHwZT+24pcjJduveyEk988PwjMji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni8wMDNFMTE1OEQ3 OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlNbDI2OTdJU1QzendfQ015 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni8wMDNFMTE1OEQ3OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlN bDI2OTdJU1QzendfQ015T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvYKTCkIJ113wONHuyfuptF+2Jr3rBntWOOC4H87CR/IJBw01L5rqs q+coH5MQqEandtmbDXdQLO8xLLeKE0gmsurMKeNuRxpT1AjO+svRPUEN4n0TfW0p Xjxp4RiO6xFkD/W+SbyOzq3jT/WnrsvzLVR/GmKJYx2Z8vSRjVXwK+qcdPsTj7Ch 0RwhDTv1U10ahp9FghczolrqZIKfjETUV7NwDSM6d/2Xi569cRgHe9HnZWNnFfes Dcl35issnqJnsCdJfVXjwU0/LeI5VXpF/ZQjzX/gV109hUPEGEZ+Ib+pSBWSDIzL f2rutnu+RZ4yZvTboYJ2WTTsefZY8je2 -----END CERTIFICATE-----Generated at Sun Aug 10 16:05:06 2025 by rpki-client