$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json) Hash identifier: I0YVDOyKrYi9dqi9ws5/6C98CeL1gYC0OOLBE+lxIZI= Subject key identifier: C2:AD:0D:A3:87:0B:0D:31:E7:F2:DD:26:B2:80:A0:AF:0E:97:4A:B5 Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft Manifest number: 01A0 Signing time: Sun 03 Aug 2025 03:40:40 +0000 Manifest this update: Sun 03 Aug 2025 03:40:40 +0000 Manifest next update: Sun 10 Aug 2025 03:40:40 +0000 Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: LwolmOxYfIsOHRUvQsbJ5QXXx4XNB/pfUm+5i30D2LY=) 2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: /U2wldHiHrPFBo2wVFsGuIVi0YglDoRZcVdncnVvj2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Validity Not Before: Aug 3 03:40:40 2025 GMT Not After : Aug 10 03:40:40 2025 GMT Subject: CN=688eda38-9ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:fa:b0:20:6f:8d:4a:41:81:d3:59:10:0c: 43:eb:09:12:6e:3e:c4:7e:bb:1f:65:56:96:91:be: ea:7c:ab:33:19:57:5a:5c:fc:79:65:40:1c:29:8a: 0f:86:d1:41:e4:c6:b5:41:95:87:a9:25:40:1c:d0: d0:f1:46:5d:00:5c:36:87:85:6e:46:23:0b:be:e2: 2d:0a:62:c3:26:d3:49:fd:6c:18:04:79:56:14:da: f1:dd:87:7a:65:48:91:83:7a:ad:09:12:1f:d0:22: 0e:9d:74:5c:db:ea:77:87:c0:cf:ef:45:d4:30:61: 08:c5:4f:a4:b2:36:b9:a4:52:b2:66:a9:c0:26:46: e0:c4:3b:3f:af:a9:a4:4e:7a:c0:36:8a:cd:3f:e2: fc:23:ca:ee:b7:9b:0a:be:71:61:96:ba:8f:f8:f0: 76:90:dc:f6:06:dc:30:82:f1:7b:43:02:63:13:4d: df:a2:55:b1:fa:a8:3b:8b:34:96:82:08:d4:17:47: 5b:e0:5d:61:2e:06:5f:5e:98:64:05:77:17:07:82: 87:9a:97:52:46:42:0f:08:5d:1d:38:0f:37:8a:b6: 34:28:fb:cf:00:e1:94:fd:46:9b:8c:de:73:c7:11: 53:9a:82:f2:07:7e:91:52:d1:ef:fb:0e:05:fd:27: 34:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AD:0D:A3:87:0B:0D:31:E7:F2:DD:26:B2:80:A0:AF:0E:97:4A:B5 X509v3 Authority Key Identifier: keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e1:35:04:6e:d6:b6:65:46:b9:52:5d:4f:a4:56:91:50:b0: 3b:28:27:83:98:da:39:12:e9:b1:8a:c2:5e:2f:ce:eb:0e:8b: 9c:8c:9b:3e:ca:f4:1b:a9:67:5c:35:be:79:76:85:b2:d6:14: db:8b:a7:bd:6b:10:b6:88:c3:6b:13:f4:5b:fa:f6:2a:0f:5c: da:41:73:c1:08:db:35:ad:56:fc:ed:53:3f:92:06:78:8d:39: 46:cb:51:db:7b:18:14:76:bf:1b:4a:48:aa:b7:24:3b:26:95: 94:5b:97:94:dc:15:d7:78:bd:8d:ee:a6:ba:3c:bc:f9:09:e9: 5c:fd:0c:4c:a7:ca:fa:c8:81:f5:52:57:9e:0e:6f:f7:5e:c9: 39:1f:ef:c7:88:31:f5:71:b1:85:47:65:63:f3:4a:69:20:6b: dd:11:d3:eb:2e:4b:88:1a:14:85:c8:b5:8a:0a:6b:2b:3e:5d: fa:5a:91:5c:c6:44:50:dd:63:fe:40:4d:28:8f:14:9f:8a:2f: 2c:82:1e:05:a1:cf:b2:2e:db:6d:e9:54:c6:d4:ff:30:09:fa: 0c:c8:d1:5e:fd:66:7f:1f:0c:65:21:c7:33:3e:a6:d4:73:10: e3:d2:6f:7d:fe:3d:c9:a9:1b:ac:c8:08:ec:24:a0:77:df:11: 85:c1:b0:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC OUUxRkYxMDQwHhcNMjUwODAzMDM0MDQwWhcNMjUwODEwMDM0MDQwWjAYMRYwFAYD VQQDEw02ODhlZGEzOC05ZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZz6sCBvjUpBgdNZEAxD6wkSbj7EfrsfZVaWkb7qfKszGVdaXPx5ZUAcKYoP htFB5Ma1QZWHqSVAHNDQ8UZdAFw2h4VuRiMLvuItCmLDJtNJ/WwYBHlWFNrx3Yd6 ZUiRg3qtCRIf0CIOnXRc2+p3h8DP70XUMGEIxU+ksja5pFKyZqnAJkbgxDs/r6mk TnrANorNP+L8I8rut5sKvnFhlrqP+PB2kNz2BtwwgvF7QwJjE03folWx+qg7izSW ggjUF0db4F1hLgZfXphkBXcXB4KHmpdSRkIPCF0dOA83irY0KPvPAOGU/UabjN5z xxFTmoLyB36RUtHv+w4F/Sc0zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKtDaOH Cw0x5/LdJrKAoK8Ol0q1MB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2 M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2 cEdnc3JjTnBObUM1NGY4UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc4TUEbta2ZUa5Ul1PpFaRULA7KCeDmNo5EumxisJeL87rDoucjJs+ yvQbqWdcNb55doWy1hTbi6e9axC2iMNrE/Rb+vYqD1zaQXPBCNs1rVb87VM/kgZ4 jTlGy1HbexgUdr8bSkiqtyQ7JpWUW5eU3BXXeL2N7qa6PLz5Celc/QxMp8r6yIH1 UleeDm/3Xsk5H+/HiDH1cbGFR2Vj80ppIGvdEdPrLkuIGhSFyLWKCmsrPl36WpFc xkRQ3WP+QE0ojxSfii8sgh4Foc+yLttt6VTG1P8wCfoMyNFe/WZ/HwxlIcczPqbU cxDj0m99/j3JqRusyAjsJKB33xGFwbDz -----END CERTIFICATE-----Generated at Mon Aug 4 11:09:47 2025 by rpki-client