$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft File: rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json) Hash identifier: 1xWkXYUyJE85bspKxKaiKW/08nVJ8lnSBgAXOjQKI7k= Subject key identifier: 14:85:29:71:16:07:4B:08:70:C9:C9:E1:E6:F2:9F:6F:76:D7:F5:E7 Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E Certificate issuer: /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E Certificate serial: 08C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft Manifest number: 08BB Signing time: Sat 02 Aug 2025 20:47:49 +0000 Manifest this update: Sat 02 Aug 2025 20:47:49 +0000 Manifest next update: Sat 09 Aug 2025 20:47:49 +0000 Files and hashes: 1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: Xcr922EaYos8ENgHXpK90XqLsaD1q/nGkjesc3rQR0Q=) 2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: r0YFlYuIRf7Aj55A1t3w3hfTwFR/8iacpEclsozeKco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2243 (0x8c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E Validity Not Before: Aug 2 20:47:49 2025 GMT Not After : Aug 9 20:47:49 2025 GMT Subject: CN=688e7975-124e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6a:79:b6:43:42:42:55:e2:a8:d4:4d:6b:5b: f8:b7:6f:d7:4c:57:f1:3c:f8:bf:91:18:9b:d3:65: 25:a1:63:d5:e1:10:f2:6e:1e:40:be:31:e0:d9:2c: d4:3a:0e:4c:61:66:5a:63:60:ff:52:2b:e1:ec:b2: 7c:ae:30:5f:f4:1e:3c:00:e8:ab:5a:72:84:0a:d4: 53:dc:b9:9c:79:24:10:6b:27:5f:56:bb:fc:5f:0c: 67:21:c2:60:58:f5:dd:ce:e2:58:67:3d:61:03:e3: 2a:db:d2:07:54:bc:65:36:91:6a:ab:45:20:30:7f: 01:b2:12:ce:5f:63:76:78:96:0d:03:ce:e1:f5:a7: d8:d5:f7:75:53:a5:e0:0d:f4:db:31:85:25:32:63: ff:0a:8b:20:8b:af:52:b5:cc:44:a6:ce:0b:e5:ae: c1:f4:a2:65:dd:23:3a:f9:40:32:dd:c2:0f:73:7e: b9:c0:fb:34:f6:f7:de:0c:38:28:16:56:e4:70:56: 6d:b3:b3:ac:28:79:fb:62:8d:89:b5:dd:05:2a:93: 99:5e:1c:3c:26:bf:52:c3:6b:8b:ee:9d:7d:9c:4a: f6:8b:5b:87:ed:52:a0:8e:d9:5d:47:97:f6:64:26: 6a:2f:1d:6b:20:6d:5c:96:44:5d:a5:9c:82:69:6a: b2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:85:29:71:16:07:4B:08:70:C9:C9:E1:E6:F2:9F:6F:76:D7:F5:E7 X509v3 Authority Key Identifier: keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:b1:fb:61:48:0c:5c:79:1c:28:94:75:d0:3f:a0:a5:c5:ae: 83:f1:20:9e:77:d2:f6:10:8b:49:c7:86:1d:99:9f:1e:0c:45: ab:6c:fb:1a:24:84:88:cd:91:40:c8:76:1f:05:7c:6d:d8:06: 30:7f:bf:e7:4d:04:63:21:26:82:4b:93:10:db:dd:c2:4a:49: b3:e1:64:ca:b6:7e:a9:8f:ae:eb:30:02:a0:cb:99:a9:fa:63: 67:8b:51:ff:a2:a8:87:b8:af:19:2f:cc:d4:a9:29:0e:ef:4f: 02:18:62:cc:41:34:fc:4a:6a:0a:67:e4:7d:8e:e6:d8:1d:68: 96:2c:75:36:77:34:48:fd:11:c4:ef:08:f2:e4:14:22:3e:7b: 69:ec:a9:dd:42:a6:89:4b:98:85:05:9a:a9:06:83:45:11:9b: 61:9a:e3:ff:c9:c8:10:c0:06:1e:a4:6f:50:ff:66:bd:06:13: 72:08:a3:18:c1:d5:db:80:b5:96:39:e5:53:3e:a4:a6:b7:6b: 1f:68:b2:e0:cc:5b:32:00:67:54:ae:b0:10:3c:09:89:51:a4: 37:2f:b3:5e:6e:2f:e7:c1:79:b8:d6:79:28:32:f3:18:84:c3: e7:d4:7c:20:21:97:06:90:df:d5:4a:9a:48:e5:03:ea:cc:6e: 8d:87:04:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1RTExMTAvBgNVBAUTKEFDMkUwRDNGNDI3MjIxN0ZFRkI5RDMyRENFMUEzMzJE RTk2QTM4NUUwHhcNMjUwODAyMjA0NzQ5WhcNMjUwODA5MjA0NzQ5WjAYMRYwFAYD VQQDEw02ODhlNzk3NS0xMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk2p5tkNCQlXiqNRNa1v4t2/XTFfxPPi/kRib02UloWPV4RDybh5AvjHg2SzU Og5MYWZaY2D/Uivh7LJ8rjBf9B48AOirWnKECtRT3LmceSQQaydfVrv8XwxnIcJg WPXdzuJYZz1hA+Mq29IHVLxlNpFqq0UgMH8BshLOX2N2eJYNA87h9afY1fd1U6Xg DfTbMYUlMmP/Cosgi69StcxEps4L5a7B9KJl3SM6+UAy3cIPc365wPs09vfeDDgo FlbkcFZts7OsKHn7Yo2Jtd0FKpOZXhw8Jr9Sw2uL7p19nEr2i1uH7VKgjtldR5f2 ZCZqLx1rIG1clkRdpZyCaWqyDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSFKXEW B0sIcMnJ4ebyn2921/XnMB8GA1UdIwQYMBaAFKwuDT9CciF/77nTLc4aMy3pajhe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDVFMS8xNjVCN0JGNkJD NkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlYX3Z1ZE10emhvekxlbHFP RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDNE5QMEp5SVhfdnVkTXR6aG96TGVscU9GNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDVFMS8xNjVCN0JGNkJDNkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlY X3Z1ZE10emhvekxlbHFPRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9sfthSAxceRwolHXQP6Clxa6D8SCed9L2EItJx4YdmZ8eDEWrbPsa JISIzZFAyHYfBXxt2AYwf7/nTQRjISaCS5MQ293CSkmz4WTKtn6pj67rMAKgy5mp +mNni1H/oqiHuK8ZL8zUqSkO708CGGLMQTT8SmoKZ+R9jubYHWiWLHU2dzRI/RHE 7wjy5BQiPntp7KndQqaJS5iFBZqpBoNFEZthmuP/ycgQwAYepG9Q/2a9BhNyCKMY wdXbgLWWOeVTPqSmt2sfaLLgzFsyAGdUrrAQPAmJUaQ3L7Nebi/nwXm41nkoMvMY hMPn1HwgIZcGkN/VSppI5QPqzG6NhwQz -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:55 2025 by rpki-client