$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json) Hash identifier: U01tz4DbWQ2twiEeUaRRB6uRBaEVgswFyAD1q4Qp9bo= Subject key identifier: A2:6B:FB:90:93:2B:31:AB:B9:04:D0:BB:53:3D:7D:6D:71:2F:FF:BC Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft Manifest number: 0139 Signing time: Tue 05 Aug 2025 04:59:33 +0000 Manifest this update: Tue 05 Aug 2025 04:59:33 +0000 Manifest next update: Tue 12 Aug 2025 04:59:33 +0000 Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: Gj0f5ar2nCreSnRZxgWc848AfpYijnJ58mgZj4DzMWI=) 2: D4F8CEB8FE4211EF958ABE3BC4F9AE02.roa (hash: e+itOOHa2GS7haggfAySbnRHvgH3I9TscI3l9ZgslXk=) 3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: pCYjff74rDvqaSSHh6b2YJXJxIU8kNQvxw7uQ6aFFQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Validity Not Before: Aug 5 04:59:33 2025 GMT Not After : Aug 12 04:59:33 2025 GMT Subject: CN=68918fb5-14a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:bd:c4:98:80:15:53:ce:5d:0d:f4:70:97: 7c:a6:61:71:45:90:2f:67:52:1c:f6:1b:46:0d:3e: b5:4e:6b:31:cc:d8:4e:5e:4b:0c:58:6f:5f:fe:30: 11:49:44:4d:de:9d:88:8b:f8:9a:3d:7b:a6:0a:f8: 1b:20:da:b5:7a:79:ca:55:e9:5c:dd:3a:05:e4:e5: e2:a2:52:cd:23:93:59:34:41:83:42:0c:29:01:b9: 45:d0:37:42:a6:2c:48:9a:df:5a:fb:1b:06:10:20: 68:63:62:2a:bf:a6:9f:a9:63:2c:54:80:bb:d8:4d: 58:2d:90:bb:75:1c:8a:41:7f:e0:03:b8:2d:45:60: 6e:45:1d:af:35:ba:40:90:63:36:c3:68:9f:b9:05: 06:d4:f0:8b:5a:3c:df:d9:e2:b5:c4:74:3c:21:cd: 1e:4d:49:9a:95:c2:fa:5a:5f:74:b4:5c:29:9a:7e: 81:32:4e:a4:f9:34:eb:b7:05:d9:5a:32:a9:ae:0b: 74:3a:5f:8d:94:fe:e8:1c:58:60:3d:71:22:01:e5: 69:ba:04:79:5e:75:4b:76:42:a6:32:c8:90:de:e7: 1f:95:c1:c7:ef:57:20:75:3c:ac:7e:a8:e6:b1:cf: 7d:62:14:b0:db:3b:0a:58:d5:c4:b3:67:8d:b7:bb: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6B:FB:90:93:2B:31:AB:B9:04:D0:BB:53:3D:7D:6D:71:2F:FF:BC X509v3 Authority Key Identifier: keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3b:ed:b9:72:f3:ea:d6:5f:10:bc:c2:84:6e:3e:eb:37:ec: e3:e7:01:c4:4e:16:5e:bd:89:26:2d:a9:6d:fc:4d:c9:da:7b: 5b:cf:a8:b7:04:c4:1f:ea:9a:4d:84:96:99:a0:67:67:22:e2: fa:7f:18:f0:fc:fe:7f:d0:94:e7:f4:23:ad:60:4c:a1:33:39: ac:6f:2f:78:b6:12:78:33:46:c9:6f:2c:b4:1b:80:af:35:8f: fc:e1:d8:57:5d:3b:ae:43:3f:92:d8:9c:8b:12:93:50:f5:e7: 35:ed:e4:18:34:73:09:0b:7f:de:5a:97:66:64:ee:95:94:d2: 26:e7:f4:f3:83:f2:b3:1a:44:e6:88:88:e4:44:f6:29:74:f5: 9d:28:a3:cf:6a:8f:7d:11:9b:83:8d:03:ef:9d:b6:9e:f2:1b: ce:1d:8c:0c:52:a6:b8:3e:3d:89:94:66:d6:f7:84:b3:c8:80: d6:d8:62:24:c1:0c:d6:69:d3:b7:68:bb:36:e7:5e:f0:8c:5a: 23:20:54:7a:08:32:75:90:ba:85:a5:b4:87:37:d2:cd:aa:98: 3c:7b:e5:e2:6b:d5:ae:fd:75:41:40:f1:20:70:4b:2d:f4:e7: 3f:ef:a8:ce:4d:f2:6c:6e:56:2d:d7:4c:1f:6a:35:75:27:f1: e8:88:07:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4 MDgwRTk3MzAwHhcNMjUwODA1MDQ1OTMzWhcNMjUwODEyMDQ1OTMzWjAYMRYwFAYD VQQDEw02ODkxOGZiNS0xNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnW9xJiAFVPOXQ30cJd8pmFxRZAvZ1Ic9htGDT61TmsxzNhOXksMWG9f/jAR SURN3p2Ii/iaPXumCvgbINq1ennKVelc3ToF5OXiolLNI5NZNEGDQgwpAblF0DdC pixImt9a+xsGECBoY2Iqv6afqWMsVIC72E1YLZC7dRyKQX/gA7gtRWBuRR2vNbpA kGM2w2ifuQUG1PCLWjzf2eK1xHQ8Ic0eTUmalcL6Wl90tFwpmn6BMk6k+TTrtwXZ WjKprgt0Ol+NlP7oHFhgPXEiAeVpugR5XnVLdkKmMsiQ3ucflcHH71cgdTysfqjm sc99YhSw2zsKWNXEs2eNt7sxNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJr+5CT KzGruQTQu1M9fW1xL/+8MB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE eVFBUFpmY0Z5VzZBZ09sekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALO+25cvPq1l8QvMKEbj7rN+zj5wHEThZevYkmLalt/E3J2ntbz6i3 BMQf6ppNhJaZoGdnIuL6fxjw/P5/0JTn9COtYEyhMzmsby94thJ4M0bJbyy0G4Cv NY/84dhXXTuuQz+S2JyLEpNQ9ec17eQYNHMJC3/eWpdmZO6VlNIm5/Tzg/KzGkTm iIjkRPYpdPWdKKPPao99EZuDjQPvnbae8hvOHYwMUqa4Pj2JlGbW94SzyIDW2GIk wQzWadO3aLs2517wjFojIFR6CDJ1kLqFpbSHN9LNqpg8e+Xia9Wu/XVBQPEgcEst 9Oc/76jOTfJsblYt10wfajV1J/HoiAen -----END CERTIFICATE-----Generated at Tue Aug 5 20:18:02 2025 by rpki-client