$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: QVGT1GNyhNxF7qrOP/y1fQZ3foC+v/bwjWAeFS2Pufw= Subject key identifier: F1:84:1C:E4:54:3D:0B:CF:62:27:E4:C1:99:EA:F9:07:34:B6:09:32 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 12B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 128B Signing time: Fri 08 Aug 2025 17:16:30 +0000 Manifest this update: Fri 08 Aug 2025 17:16:30 +0000 Manifest next update: Fri 15 Aug 2025 17:16:30 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: 4fbVg3DjCSJUXRTWN+j6P8q6Bipr3Ntk0eixog53Cm4=) 2: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: 8Neml3oC6KcoFUvC+s8BLmWMEpSAAtUFs6SqBjTSq9o=) 3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: IgiJhZRqcSbgHymfJ2UkdTHsUcRz7FOMB1+md3krEv8=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: 3BEJ1gCiaz/4ZdrE3qzkDJ5+ojL/iMHnMesKRyA+c6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4784 (0x12b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: Aug 8 17:16:30 2025 GMT Not After : Aug 15 17:16:30 2025 GMT Subject: CN=689630ee-50c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:61:4e:ab:33:eb:cf:2e:dc:51:5d:da:8b:d4: 0a:d6:89:3d:54:04:90:45:39:43:bf:0b:0b:7b:ab: 40:10:f2:2f:ef:9b:eb:09:ab:6f:d6:ea:57:43:d0: 28:1d:03:61:a4:c0:78:e1:63:e3:27:3b:60:41:f2: 14:38:10:c6:89:a0:0d:48:c1:dd:41:6f:dc:a9:9f: 57:4c:f0:eb:ae:89:47:68:6d:39:b2:83:31:02:e2: f4:9a:78:88:f6:b4:ae:d7:17:38:e3:f4:fe:56:cd: 67:09:4f:21:20:1a:f1:38:03:c7:d2:30:22:fe:36: 5b:eb:e4:eb:5a:ec:9f:b8:cc:3c:5a:b9:9b:e5:fa: be:4a:1c:53:e3:61:81:b7:5b:14:33:91:5f:72:06: 15:fa:1a:f3:7b:58:fc:a5:c6:c3:88:7f:88:34:43: a5:97:a4:96:29:77:fa:19:b3:57:72:b0:41:c6:fa: 6b:05:bf:76:d2:10:ec:05:4b:93:05:85:bb:8b:16: 27:82:f2:cd:95:f7:a4:e2:4d:dd:3a:91:92:6c:29: 64:81:e8:e2:09:2a:b7:84:84:c1:ea:b0:8a:e3:7d: fd:80:87:e0:32:81:51:2b:25:8c:32:c7:a0:97:e3: ce:68:96:c5:8e:5c:85:f8:f1:e6:df:79:bf:bc:a6: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:84:1C:E4:54:3D:0B:CF:62:27:E4:C1:99:EA:F9:07:34:B6:09:32 X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:74:91:2d:cb:da:4a:f5:6a:3a:e4:7d:d5:4a:9d:50:b1:99: a6:99:05:40:20:7d:4e:0b:70:01:ff:e8:03:49:a8:68:3c:d8: 04:f3:c3:5e:2a:e7:e3:68:a4:72:10:4f:fa:7d:0b:2d:98:7b: db:52:f1:26:f4:d6:52:ca:79:1a:19:9f:7f:63:39:15:55:c8: 91:27:53:04:b3:2c:e7:ef:cb:d0:8e:8a:16:50:92:0a:5a:01: dd:79:5c:66:86:76:41:92:b0:48:f7:48:28:87:e6:89:a1:2c: be:4d:d7:f5:a8:72:bb:ac:93:8d:51:c0:95:00:5c:7e:47:c9: f8:aa:28:c8:41:07:51:38:79:7a:eb:41:c2:98:8b:e8:8b:ab: b2:dd:f6:7b:d4:45:24:7c:b6:f7:50:09:ec:d4:2a:97:d3:9e: 3b:83:d4:30:92:69:ba:fa:0d:d1:9b:14:8d:4a:6d:04:f7:6c: 0e:48:87:01:10:21:a9:73:89:2f:4b:e4:70:3f:86:8c:1f:9d: a0:15:1f:e2:46:8c:d6:ac:8d:6d:e0:0a:5d:bb:03:d8:11:2e: 53:c4:8c:07:5d:16:71:0a:47:a8:eb:a0:7b:7e:fa:de:9e:c3: 77:f2:c9:fc:c2:ff:73:b5:46:5d:4f:f0:21:86:e1:7f:42:32: d0:df:3c:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjUwODA4MTcxNjMwWhcNMjUwODE1MTcxNjMwWjAYMRYwFAYD VQQDEw02ODk2MzBlZS01MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWFOqzPrzy7cUV3ai9QK1ok9VASQRTlDvwsLe6tAEPIv75vrCatv1upXQ9Ao HQNhpMB44WPjJztgQfIUOBDGiaANSMHdQW/cqZ9XTPDrrolHaG05soMxAuL0mniI 9rSu1xc44/T+Vs1nCU8hIBrxOAPH0jAi/jZb6+TrWuyfuMw8Wrmb5fq+ShxT42GB t1sUM5FfcgYV+hrze1j8pcbDiH+INEOll6SWKXf6GbNXcrBBxvprBb920hDsBUuT BYW7ixYngvLNlfek4k3dOpGSbClkgejiCSq3hITB6rCK4339gIfgMoFRKyWMMseg l+POaJbFjlyF+PHm33m/vKaRxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGEHORU PQvPYifkwZnq+Qc0tgkyMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGdJEty9pK9Wo65H3VSp1QsZmmmQVAIH1OC3AB/+gDSahoPNgE88Ne KufjaKRyEE/6fQstmHvbUvEm9NZSynkaGZ9/YzkVVciRJ1MEsyzn78vQjooWUJIK WgHdeVxmhnZBkrBI90goh+aJoSy+Tdf1qHK7rJONUcCVAFx+R8n4qijIQQdROHl6 60HCmIvoi6uy3fZ71EUkfLb3UAns1CqX0547g9Qwkmm6+g3RmxSNSm0E92wOSIcB ECGpc4kvS+RwP4aMH52gFR/iRozWrI1t4ApduwPYES5TxIwHXRZxCkeo66B7fvre nsN38sn8wv9ztUZdT/AhhuF/QjLQ3zwB -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:38 2025 by rpki-client