$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft File: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json) Hash identifier: 07djUtWT0SoaVL0Wh0OoGBDO1iywCpWk6JBlgve8aFA= Subject key identifier: 23:95:B0:56:EE:DF:61:72:21:28:E1:74:3C:5B:8E:0A:AC:E4:20:1B Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft Manifest number: 60 Signing time: Thu 07 Aug 2025 08:09:44 +0000 Manifest this update: Thu 07 Aug 2025 08:09:43 +0000 Manifest next update: Thu 14 Aug 2025 08:09:43 +0000 Files and hashes: 1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: dZ5vkMW1AQ3yCTld0u61kIJ2wyc1LKlwOaGccC7SYPo=) 2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: 61Maf4HdTVjL1p15SmMO0sDKtCDOS9JEKlRjMIwn4Cg=) 3: 151DF27C622811F0B73BE516C4F9AE02.roa (hash: ryWZk4WLGGcXKcudFMNiB3yA26BHUntG7BSh+vyHPp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Validity Not Before: Aug 7 08:09:43 2025 GMT Not After : Aug 14 08:09:43 2025 GMT Subject: CN=68945f48-0b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:48:2d:1e:f5:31:5f:e9:88:b3:9a:b0:83:b9: 1f:08:95:31:5b:40:ac:70:ef:67:17:a7:60:c2:8c: 78:04:ec:33:9b:6e:06:d9:02:db:83:86:7d:7c:67: 1e:a0:4f:ef:46:bd:e4:fe:d7:d6:fd:b8:48:4a:0b: 47:79:c9:70:1e:20:10:a8:64:eb:9b:73:45:12:19: 95:b8:12:87:75:4e:5c:93:3b:20:2d:8b:54:31:66: 73:d1:ad:7c:4e:48:bc:9b:52:f0:7e:10:14:16:a6: 60:0c:66:cd:08:fc:a3:7c:27:1e:11:b6:e1:0c:77: dd:3c:0b:a7:24:35:0c:e6:38:87:7d:a9:9a:82:00: 8b:96:0b:03:00:82:6a:fd:2d:73:66:15:b1:26:29: 53:66:b9:0e:c6:d9:11:2e:09:94:09:d5:0d:77:8e: c2:4b:77:48:d9:e5:60:3e:36:0a:ab:73:96:38:b1: f6:c2:7c:ba:3d:e0:2b:6b:b1:75:67:4f:47:07:b7: d8:fa:4a:5c:c2:85:23:8e:a1:f9:ee:77:d5:71:cc: 53:ba:4e:4b:0a:db:a1:7f:9f:53:38:ca:87:df:09: 10:51:c1:51:ad:f5:c5:8e:c9:78:1e:43:16:72:3a: cf:c3:22:be:52:1b:e3:37:2f:41:05:5e:d1:8b:22: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:95:B0:56:EE:DF:61:72:21:28:E1:74:3C:5B:8E:0A:AC:E4:20:1B X509v3 Authority Key Identifier: keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:0d:c4:b2:f3:af:c8:af:bd:91:b8:2e:4b:24:0f:63:e1:f9: 3b:37:7a:21:54:ac:b7:39:85:3b:11:0a:77:c2:40:91:4d:c5: ee:40:90:1b:71:6d:48:f5:06:0b:58:fb:f7:bb:a4:ee:d1:c4: 78:9c:21:b7:a9:81:56:55:b8:5e:fd:0d:71:44:be:fe:75:cf: 35:b2:39:10:5f:1e:8b:5e:fe:1e:06:35:a5:1f:55:c8:c8:df: f5:6d:30:bd:cc:02:27:32:2a:f5:03:d6:6c:25:37:d9:52:ea: fb:3d:14:24:b4:36:01:5a:02:7b:bc:4e:4e:c3:89:03:f6:c1: 45:6d:4c:a9:8a:f6:f8:6d:53:e9:79:74:71:09:d0:5a:26:f3: bb:09:b1:9b:9c:d1:df:eb:de:37:5f:73:ea:7b:77:54:be:52: 0e:d0:9c:5b:e6:38:ab:7a:17:01:10:b1:a1:5f:ea:70:93:81: af:eb:f8:1b:c1:0c:3d:d2:19:57:4f:9d:0c:d1:3f:ef:a4:50: c2:4c:73:15:46:62:d6:51:c9:45:52:c9:14:42:3f:ba:c2:75: 0a:11:4d:97:f4:86:8d:24:17:f8:f9:2c:66:56:7f:74:f9:4f: 9f:9e:67:a8:51:e0:ec:30:64:af:cc:a5:89:dc:4f:52:ed:ae: fc:c8:0f:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0FBNTExMC8GA1UEBRMoRjcyNjdFODBCRTgxN0YwNDNEMjhGQjdFNzMwNUY0QzQ4 OEE4MzkxQTAeFw0yNTA4MDcwODA5NDNaFw0yNTA4MTQwODA5NDNaMBgxFjAUBgNV BAMTDTY4OTQ1ZjQ4LTBiOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkSC0e9TFf6YizmrCDuR8IlTFbQKxw72cXp2DCjHgE7DObbgbZAtuDhn18Zx6g T+9GveT+19b9uEhKC0d5yXAeIBCoZOubc0USGZW4Eod1TlyTOyAti1QxZnPRrXxO SLybUvB+EBQWpmAMZs0I/KN8Jx4RtuEMd908C6ckNQzmOId9qZqCAIuWCwMAgmr9 LXNmFbEmKVNmuQ7G2REuCZQJ1Q13jsJLd0jZ5WA+Ngqrc5Y4sfbCfLo94CtrsXVn T0cHt9j6SlzChSOOofnud9VxzFO6TksK26F/n1M4yoffCRBRwVGt9cWOyXgeQxZy Os/DIr5SG+M3L0EFXtGLIo/JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI5WwVu7f YXIhKOF0PFuOCqzkIBswHwYDVR0jBBgwFoAU9yZ+gL6BfwQ9KPt+cwX0xIioORow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QUE1L0JBRkIzNTc0MTVC QjExRjBCRkQ1NDg4MUM0RjlBRTAyLzl5Wi1nTDZCZndROUtQdC1jd1gweElpb09S by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXlaLWdMNkJmd1E5S1B0LWN3WDB4SWlvT1JvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 QUE1L0JBRkIzNTc0MTVCQjExRjBCRkQ1NDg4MUM0RjlBRTAyLzl5Wi1nTDZCZndR OUtQdC1jd1gweElpb09Sby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHENxLLzr8ivvZG4LkskD2Ph+Ts3eiFUrLc5hTsRCnfCQJFNxe5AkBtx bUj1BgtY+/e7pO7RxHicIbepgVZVuF79DXFEvv51zzWyORBfHote/h4GNaUfVcjI 3/VtML3MAicyKvUD1mwlN9lS6vs9FCS0NgFaAnu8Tk7DiQP2wUVtTKmK9vhtU+l5 dHEJ0Fom87sJsZuc0d/r3jdfc+p7d1S+Ug7QnFvmOKt6FwEQsaFf6nCTga/r+BvB DD3SGVdPnQzRP++kUMJMcxVGYtZRyUVSyRRCP7rCdQoRTZf0ho0kF/j5LGZWf3T5 T5+eZ6hR4OwwZK/MpYncT1LtrvzID+Q= -----END CERTIFICATE-----Generated at Fri Aug 8 00:15:29 2025 by rpki-client