$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: wGqFHqc5baKmYjmEzjEgmSyACl8hxBL8HRlGChryk7U= Subject key identifier: 1B:29:A1:2E:4E:AF:7D:F6:C6:24:15:3A:6A:31:B4:BD:6D:94:89:52 Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 04DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 04CE Signing time: Sun 03 Aug 2025 00:20:23 +0000 Manifest this update: Sun 03 Aug 2025 00:20:23 +0000 Manifest next update: Sun 10 Aug 2025 00:20:22 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: JfoFavXfHziantFr+rPPpvxP8QI60l7d9dakYlePGMM=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3A9tL/jcYlpnzHxxWTOseLkNdsbJRJrgjlY1s6ebsbQ=) 3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: GWx3OJd1vwjGtC5zPk/EszjxixEUkMuQ8v31OyEYOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1242 (0x4da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Aug 3 00:20:23 2025 GMT Not After : Aug 10 00:20:22 2025 GMT Subject: CN=688eab47-65a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:c8:45:60:43:2d:0d:3d:15:34:61:2b:c2: 22:8d:39:46:47:3e:37:b7:f4:3e:dd:c3:0b:b0:07: f8:5d:43:8e:4a:bb:19:f4:24:7e:85:89:9a:d7:42: 2d:4f:85:90:0e:d2:f5:c7:d4:a1:ff:2a:e0:9c:4a: 03:c5:51:83:50:41:02:97:37:58:6e:54:dc:38:87: d6:af:f9:55:42:f0:8b:f1:5a:df:3c:81:fa:b5:47: 3a:b5:a4:c5:d2:b9:90:15:fe:ee:c5:92:cd:9e:2b: 3d:ac:db:e3:16:3e:f7:b6:92:73:5a:1f:82:3e:96: db:b4:c7:fc:84:cc:86:b2:cd:95:f3:6d:be:1c:14: 2c:68:17:84:90:4d:94:7b:f9:60:c3:86:50:4b:8a: fb:1b:4b:95:38:de:a7:d2:9a:87:2a:0c:67:96:9f: 93:eb:45:7b:14:63:f3:7e:45:e1:77:13:44:56:64: 41:d0:b2:db:d2:06:08:95:23:7c:58:ee:42:24:bd: b0:6d:03:76:3c:4a:ac:b7:e5:36:5b:b0:cf:3c:18: 04:c3:8e:e0:e7:a2:d6:75:84:98:c0:67:b6:02:e6: 13:92:db:a6:e3:ca:f9:d7:82:7c:96:37:fd:69:62: 6e:6c:fa:55:33:4e:de:97:10:ce:74:c3:de:b6:61: de:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:29:A1:2E:4E:AF:7D:F6:C6:24:15:3A:6A:31:B4:BD:6D:94:89:52 X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:42:c9:ae:96:69:de:5d:91:05:32:94:ad:d4:f6:37:34:b0: a1:b5:ab:c2:94:af:1e:a1:c9:27:d0:b7:94:16:4a:63:19:04: 91:a1:3f:4a:48:47:8c:36:e8:93:f6:09:84:fe:6e:d2:7b:63: a8:a4:a5:13:a3:66:72:0a:fa:fc:45:31:6b:2b:7d:9b:d7:6e: dd:b4:81:b4:3c:98:b5:d2:42:ea:d0:28:23:a1:4f:07:1a:20: b6:2e:2a:c3:cc:61:c9:84:70:8f:d2:31:69:71:bd:53:45:73: ca:7e:78:9c:b1:82:a3:2f:72:9b:89:8b:21:9b:39:b8:85:e8: 67:51:5e:db:7f:f8:24:0a:10:9e:31:b7:7f:a0:5a:26:72:8d: 9e:d0:a0:3a:ae:c9:fe:9d:a0:8f:1d:0b:f9:fe:f1:1f:e9:bb: 16:8d:d5:ae:48:9e:aa:26:21:21:89:46:5f:7c:5c:54:b1:7f: 18:45:d7:51:eb:d8:81:d4:4c:bd:30:80:50:e4:f3:20:1a:55: 39:57:fb:34:79:86:0b:fb:5c:0f:35:34:74:2e:3f:e8:44:3b: d7:98:ee:a8:18:02:e4:e6:d4:6f:a4:85:54:f1:d0:ca:08:af: 38:0e:fd:5f:c8:f3:0d:6a:24:a0:f1:87:c3:cf:d1:c9:33:c6: ee:16:e0:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjUwODAzMDAyMDIzWhcNMjUwODEwMDAyMDIyWjAYMRYwFAYD VQQDEw02ODhlYWI0Ny02NWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1J7IRWBDLQ09FTRhK8IijTlGRz43t/Q+3cMLsAf4XUOOSrsZ9CR+hYma10It T4WQDtL1x9Sh/yrgnEoDxVGDUEEClzdYblTcOIfWr/lVQvCL8VrfPIH6tUc6taTF 0rmQFf7uxZLNnis9rNvjFj73tpJzWh+CPpbbtMf8hMyGss2V822+HBQsaBeEkE2U e/lgw4ZQS4r7G0uVON6n0pqHKgxnlp+T60V7FGPzfkXhdxNEVmRB0LLb0gYIlSN8 WO5CJL2wbQN2PEqst+U2W7DPPBgEw47g56LWdYSYwGe2AuYTktum48r514J8ljf9 aWJubPpVM07elxDOdMPetmHeowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBspoS5O r332xiQVOmoxtL1tlIlSMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFQsmulmneXZEFMpSt1PY3NLChtavClK8eockn0LeUFkpjGQSRoT9K SEeMNuiT9gmE/m7Se2OopKUTo2ZyCvr8RTFrK32b127dtIG0PJi10kLq0CgjoU8H GiC2LirDzGHJhHCP0jFpcb1TRXPKfnicsYKjL3KbiYshmzm4hehnUV7bf/gkChCe Mbd/oFomco2e0KA6rsn+naCPHQv5/vEf6bsWjdWuSJ6qJiEhiUZffFxUsX8YRddR 69iB1Ey9MIBQ5PMgGlU5V/s0eYYL+1wPNTR0Lj/oRDvXmO6oGALk5tRvpIVU8dDK CK84Dv1fyPMNaiSg8YfDz9HJM8buFuAe -----END CERTIFICATE-----Generated at Mon Aug 4 11:25:38 2025 by rpki-client