$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json) Hash identifier: iyd7Ur98ZZHkm9wDOVyLnVwiklWXl3n0kC6Ggy/fOQQ= Subject key identifier: D6:76:54:1A:25:C9:F3:65:90:59:77:2D:C2:B0:AE:76:6D:B6:8E:19 Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft Manifest number: 01A0 Signing time: Thu 07 Aug 2025 03:47:38 +0000 Manifest this update: Thu 07 Aug 2025 03:47:37 +0000 Manifest next update: Thu 14 Aug 2025 03:47:37 +0000 Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: C1eIp6uUSSheB2PzaohpVa5Mcg9jv+1SQhfNR3iHsl8=) 2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: SdXEUbD7bDMQhTYpbl9h+rsPxGL65X2f3Ma+s3etM2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Validity Not Before: Aug 7 03:47:37 2025 GMT Not After : Aug 14 03:47:37 2025 GMT Subject: CN=689421da-ccd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:50:1a:f2:ab:5e:a4:0e:e3:1e:ff:1c:2d: 05:04:12:f6:68:0f:96:89:4a:1f:43:5e:7a:05:8c: 63:3c:70:b3:a4:d6:e0:ee:ed:2a:16:9e:88:84:51: 0f:c9:7a:ad:5f:09:23:3f:49:3e:7c:cf:c0:e8:ba: f7:d8:23:2f:75:c4:c4:27:a1:76:55:fc:2c:9e:e5: 0f:26:64:5a:41:f5:38:cc:10:b0:72:4f:de:53:db: fa:2c:5b:32:58:23:7c:74:d8:31:cf:24:3e:ff:ec: 21:60:3a:51:0b:66:c3:3d:50:ad:15:88:2b:ec:b7: 79:4d:7e:35:51:ac:92:89:cc:a0:31:27:6d:c7:cb: 95:e6:b0:96:e4:b2:9a:04:8a:27:53:95:02:ac:3f: ab:41:6c:87:27:79:2a:04:86:8d:40:2a:3b:d6:f7: 88:28:1f:93:f8:f1:d9:68:da:af:0d:f8:94:f5:eb: a1:03:d6:f3:23:d6:48:a8:38:3c:ff:d3:70:36:60: 5e:81:22:e6:a3:cc:aa:78:b0:6b:06:d9:92:74:49: f6:cf:78:8c:a5:37:cf:76:96:5b:87:ff:f3:5d:23: ac:7a:37:18:92:7b:d2:cd:3f:c9:21:4e:b4:07:0b: 33:f2:fa:1f:f1:67:8b:97:1a:8a:57:07:27:20:8e: 82:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:76:54:1A:25:C9:F3:65:90:59:77:2D:C2:B0:AE:76:6D:B6:8E:19 X509v3 Authority Key Identifier: keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:4f:4f:df:a0:ee:06:25:72:89:4d:b6:d6:bc:12:34:84:59: cb:dd:5b:f9:b5:10:17:aa:65:db:eb:86:7e:ee:71:d1:4d:4e: 2a:1e:38:5d:5b:71:fa:ce:4f:27:a4:08:1c:b4:89:bb:dd:28: 60:9f:1b:3f:9f:94:7c:24:b2:5b:50:80:d2:92:ef:3f:9b:c7: a2:d4:89:33:e5:9d:6b:ea:fe:0f:ac:8f:c1:a9:17:a8:84:68: 61:51:ff:15:0e:55:ea:ff:0b:ca:bd:bc:78:f8:50:57:01:73: 7c:76:30:36:a2:df:90:46:e7:98:ec:6d:dc:b7:97:9a:60:c0: 54:ae:0e:6e:19:86:81:9a:0f:3b:83:44:02:b6:f3:09:77:a3: a9:84:31:5a:22:42:83:ed:67:b7:00:67:3c:59:34:0d:1e:af: d0:59:9d:5f:e4:d8:cd:a3:e2:47:50:42:9e:c7:a3:62:16:d1: 6c:25:15:44:ca:e3:61:c9:48:37:71:79:e9:f3:c2:70:a4:ad: 65:81:c1:c9:cd:66:77:fa:74:34:a4:7d:f1:16:c3:5d:cb:6e: f0:85:5b:00:37:46:a4:6a:af:1c:25:44:7a:cd:b5:1a:7a:7a: 6e:11:2e:87:4b:da:b8:40:2e:fa:d9:70:75:53:3c:59:08:04: 30:a9:2b:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx NzdDODk0RjYwHhcNMjUwODA3MDM0NzM3WhcNMjUwODE0MDM0NzM3WjAYMRYwFAYD VQQDEw02ODk0MjFkYS1jY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDZQGvKrXqQO4x7/HC0FBBL2aA+WiUofQ156BYxjPHCzpNbg7u0qFp6IhFEP yXqtXwkjP0k+fM/A6Lr32CMvdcTEJ6F2VfwsnuUPJmRaQfU4zBCwck/eU9v6LFsy WCN8dNgxzyQ+/+whYDpRC2bDPVCtFYgr7Ld5TX41UaySicygMSdtx8uV5rCW5LKa BIonU5UCrD+rQWyHJ3kqBIaNQCo71veIKB+T+PHZaNqvDfiU9euhA9bzI9ZIqDg8 /9NwNmBegSLmo8yqeLBrBtmSdEn2z3iMpTfPdpZbh//zXSOsejcYknvSzT/JIU60 Bwsz8vof8WeLlxqKVwcnII6C0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZ2VBol yfNlkFl3LcKwrnZtto4ZMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4 OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5 clB3NmFtNkVJZFFYZklsUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQT0/foO4GJXKJTbbWvBI0hFnL3Vv5tRAXqmXb64Z+7nHRTU4qHjhd W3H6zk8npAgctIm73Shgnxs/n5R8JLJbUIDSku8/m8ei1Ikz5Z1r6v4PrI/BqReo hGhhUf8VDlXq/wvKvbx4+FBXAXN8djA2ot+QRueY7G3ct5eaYMBUrg5uGYaBmg87 g0QCtvMJd6OphDFaIkKD7We3AGc8WTQNHq/QWZ1f5NjNo+JHUEKex6NiFtFsJRVE yuNhyUg3cXnp88JwpK1lgcHJzWZ3+nQ0pH3xFsNdy27whVsAN0akaq8cJUR6zbUa enpuES6HS9q4QC762XB1UzxZCAQwqSsK -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:32 2025 by rpki-client