$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft File: MEsColZqFjrazh-lIaMKfmJqwR4.mft (raw, json) Hash identifier: d/QmH+MPAmAtKi+aARZcKXrydKABmmYdFTsQe80Wv4I= Subject key identifier: 5B:54:51:4F:64:38:B7:D8:E9:6A:8C:35:5D:3C:0D:8E:6F:40:98:5A Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E Certificate issuer: /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft Manifest number: 3C Signing time: Sun 03 Aug 2025 07:54:46 +0000 Manifest this update: Sun 03 Aug 2025 07:54:46 +0000 Manifest next update: Sun 10 Aug 2025 07:54:46 +0000 Files and hashes: 1: MEsColZqFjrazh-lIaMKfmJqwR4.crl (hash: GoQLauqLCxHPaDINGGVrPZaeDO8eFVBCHbu53SE50Qo=) 2: 07063FA4134B11F0B48EFA0AC4F9AE02.roa (hash: WNVrInNAUMIDrW85MacHTXC8HeXu1LqrkLU97EbnyxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Validity Not Before: Aug 3 07:54:46 2025 GMT Not After : Aug 10 07:54:46 2025 GMT Subject: CN=688f15c6-481a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:24:2a:56:b8:82:4b:5a:0b:91:59:7f:71: ac:04:df:84:f3:b9:31:57:93:e9:ce:b2:83:1d:be: 9c:5d:93:de:3d:9c:d1:b0:dd:3e:6e:90:cb:7d:d1: ad:3f:2c:07:48:9a:86:33:f1:67:eb:3a:ea:80:9d: 76:b0:f1:2b:4a:31:22:6a:12:9d:3c:b9:fe:f5:86: ad:8d:a0:eb:59:54:71:d7:65:7b:0c:2f:a6:11:cb: 43:ef:b5:35:14:ff:5f:b2:b0:ee:41:ca:96:f0:8b: dd:a9:33:09:b2:18:31:ca:0c:e6:ef:e1:09:53:47: 47:4e:b9:b7:ee:7f:85:fc:9c:d6:6c:7d:3c:8b:a3: 25:cf:09:73:96:3e:be:e7:39:f4:ab:a4:53:e9:30: b6:0b:58:7c:4c:2c:73:25:71:10:30:9f:98:5f:37: 5a:83:ec:42:4d:ac:e6:5a:7d:56:ac:54:f2:90:d0: 00:e7:35:47:11:77:42:07:03:a6:70:eb:05:4a:1f: b3:71:6b:98:1d:33:42:82:76:99:21:d5:48:66:70: 23:7a:59:bd:a1:3f:a0:b7:99:20:a2:dc:0b:10:b2: 14:d6:4c:86:ed:e3:ef:b3:b8:5c:2e:e9:96:0f:b0: c2:6e:3c:da:33:4e:45:89:cf:10:9a:b9:9c:94:74: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:54:51:4F:64:38:B7:D8:E9:6A:8C:35:5D:3C:0D:8E:6F:40:98:5A X509v3 Authority Key Identifier: keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:3e:97:7f:d2:e0:0d:37:23:83:2c:09:54:eb:ac:85:58:e7: e0:20:3d:39:50:bb:1e:47:4f:d6:8f:a3:f0:a7:fa:e8:a5:7e: c8:cf:ac:08:f4:e8:44:a1:18:12:c7:52:fc:98:2e:f1:68:21: 5f:7d:07:78:24:6e:2c:11:bb:77:52:ec:18:f3:ea:08:d4:fe: ad:b9:b5:ea:30:e1:38:ff:b9:da:d0:fa:db:9c:26:21:06:94: 85:5e:1e:38:fe:77:b1:15:38:db:cf:36:f8:25:ac:6c:b5:8e: 18:d6:cb:76:83:ef:e2:65:e9:d2:8a:53:b9:54:eb:a4:f8:8f: fb:61:b6:62:8d:a4:a3:7f:b4:37:b1:ab:86:69:03:de:33:81: 7a:33:04:64:b5:1e:1f:e4:5e:26:b9:c6:4b:89:65:23:84:fa: ed:8b:50:aa:dc:ce:c4:4e:fa:ca:37:22:7e:e6:ce:c7:70:ec: 27:96:52:55:e7:cd:8e:b5:bb:2c:d4:9c:bf:41:24:c4:1a:5d: 57:9b:7b:bc:b9:78:fd:f8:78:68:9f:7d:8e:20:ac:70:74:71: 6e:27:da:3b:89:01:dc:76:a7:a3:a2:56:4a:b5:0c:a7:a0:3c: 87:d0:57:cb:d5:8d:fe:cf:59:15:9b:33:87:8a:ba:a9:10:d2: 90:67:a3:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QUVDRTExMC8GA1UEBRMoMzA0QjAyQTI1NjZBMTYzQURBQ0UxRkE1MjFBMzBBN0U2 MjZBQzExRTAeFw0yNTA4MDMwNzU0NDZaFw0yNTA4MTAwNzU0NDZaMBgxFjAUBgNV BAMTDTY4OGYxNWM2LTQ4MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6niQqVriCS1oLkVl/cawE34TzuTFXk+nOsoMdvpxdk949nNGw3T5ukMt90a0/ LAdImoYz8WfrOuqAnXaw8StKMSJqEp08uf71hq2NoOtZVHHXZXsML6YRy0PvtTUU /1+ysO5Bypbwi92pMwmyGDHKDObv4QlTR0dOubfuf4X8nNZsfTyLoyXPCXOWPr7n OfSrpFPpMLYLWHxMLHMlcRAwn5hfN1qD7EJNrOZafVasVPKQ0ADnNUcRd0IHA6Zw 6wVKH7Nxa5gdM0KCdpkh1UhmcCN6Wb2hP6C3mSCi3AsQshTWTIbt4++zuFwu6ZYP sMJuPNozTkWJzxCauZyUdMJHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW1RRT2Q4 t9jpaow1XTwNjm9AmFowHwYDVR0jBBgwFoAUMEsColZqFjrazh+lIaMKfmJqwR4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBRUNFLzNERjREQzkyMTM0 QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpyYXpoLWxJYU1LZm1KcXdS NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUVzQ29sWnFGanJhemgtbElhTUtmbUpxd1I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB RUNFLzNERjREQzkyMTM0QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpy YXpoLWxJYU1LZm1KcXdSNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAY+l3/S4A03I4MsCVTrrIVY5+AgPTlQux5HT9aPo/Cn+uilfsjPrAj0 6EShGBLHUvyYLvFoIV99B3gkbiwRu3dS7Bjz6gjU/q25teow4Tj/udrQ+tucJiEG lIVeHjj+d7EVONvPNvglrGy1jhjWy3aD7+Jl6dKKU7lU66T4j/thtmKNpKN/tDex q4ZpA94zgXozBGS1Hh/kXia5xkuJZSOE+u2LUKrczsRO+so3In7mzsdw7CeWUlXn zY61uyzUnL9BJMQaXVebe7y5eP34eGiffY4grHB0cW4n2juJAdx2p6OiVkq1DKeg PIfQV8vVjf7PWRWbM4eKuqkQ0pBno+M= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:48 2025 by rpki-client