$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft File: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft (raw, json) Hash identifier: jJRwfCMh3dq6PrtjFY2QAIGqu8iymYyb3zxFo7J8J+w= Subject key identifier: CE:55:FB:86:60:11:E0:11:AF:F9:F2:2F:74:BF:FD:76:84:24:9B:9E Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC Certificate issuer: /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft Manifest number: 05 Signing time: Sun 03 Aug 2025 08:37:27 +0000 Manifest this update: Sun 03 Aug 2025 08:37:27 +0000 Manifest next update: Sun 10 Aug 2025 08:37:26 +0000 Files and hashes: 1: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl (hash: W1pB8AdbqBfaCxHwJ/KkgLRhkWkC16LFAIshB2Llrug=) 2: 053416126DB211F0962DC55BC4F9AE02.roa (hash: x2PuVPfM9opRCGhS75prbzNf+RUMoFINYisW+YfHaDY=) 3: 39926F626DB211F0AC1D0420C4F9AE02.roa (hash: kEFMUW+00UAEsPjX4mZ1eO2YdFDM6+IhBX5a3Q9IDw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Validity Not Before: Aug 3 08:37:27 2025 GMT Not After : Aug 10 08:37:26 2025 GMT Subject: CN=688f1fc7-d7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:f2:e0:e8:d9:4f:49:51:d6:34:8a:9d:18: e4:48:4e:88:aa:63:54:51:0f:d4:25:dc:03:5e:f2: 83:4a:4f:db:2e:e8:cf:5a:a9:ce:c8:57:45:7b:5c: 1d:f6:32:a5:70:d2:bb:be:95:6e:fc:a8:9f:d3:91: 55:ed:69:5e:c3:d1:c4:4a:1a:9f:48:86:c4:63:11: 08:55:fa:52:2b:33:1a:9f:f8:4d:ea:5f:25:12:98: 48:5e:4b:66:3c:5d:b3:21:db:96:00:1e:8f:77:7c: 75:0a:8a:d3:ed:f8:9d:12:57:a1:ac:3f:ec:7b:38: 52:f6:d9:c3:72:7c:c8:46:36:df:8b:b3:9f:7f:d7: a2:8a:5d:4a:04:83:9f:2d:31:4c:1a:9f:fd:ec:7e: 27:c5:1a:9d:07:7f:21:42:c4:f4:9a:98:4a:d5:73: 6f:49:86:ae:b8:22:e4:a0:f3:1f:86:8c:ca:f9:eb: ec:ab:2b:81:84:b1:19:a9:f6:a3:c5:46:bb:14:e2: 25:56:96:c4:7f:4a:b8:f8:85:61:f9:d1:7e:e8:36: 31:ed:b0:3e:0e:c9:e4:48:80:bd:94:48:15:fa:0c: cb:83:a7:32:53:eb:9d:4e:d2:d9:10:62:8d:af:2c: 54:b7:e1:64:9a:41:e7:52:0c:e3:b8:f8:92:3b:35: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:55:FB:86:60:11:E0:11:AF:F9:F2:2F:74:BF:FD:76:84:24:9B:9E X509v3 Authority Key Identifier: keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a3:bd:e0:e4:a7:60:0a:1c:7a:da:b9:f5:28:45:c7:b4:b9: 06:b8:bc:e3:d7:26:81:0d:54:40:40:cc:c5:65:b1:7e:48:d4: 14:44:91:f6:6c:8e:b2:56:cf:4b:21:65:64:38:d6:1f:02:0f: 9a:75:9b:fa:b2:97:26:2a:3c:bb:44:a7:75:63:54:e7:2c:ea: 6e:3c:ee:60:5e:ac:88:41:40:13:9f:d5:5c:33:78:d7:5b:9d: 9e:66:a2:78:ab:5d:37:18:0d:a1:dc:01:d4:12:8c:99:72:71: 2f:2a:06:d7:a2:41:72:c5:90:ad:ee:b7:1c:5c:f8:1d:14:5a: c5:38:b6:88:3a:25:31:f2:ec:fb:de:00:51:04:fa:b5:0e:b8: db:7e:b5:c8:37:41:99:84:98:af:00:8c:84:97:7e:eb:52:4d: ca:9c:23:79:b7:c1:7c:47:04:5c:06:f6:a2:48:88:1e:b0:71: 65:28:9b:99:7f:6c:db:05:b9:ab:4b:f8:c5:60:b0:49:e4:00: c4:b2:c2:ba:37:ae:a0:58:c1:7c:0a:2c:8b:b5:9f:c2:68:80: c9:9a:a4:72:6a:68:d1:b4:04:b8:bb:31:e7:e0:8b:54:1e:29: 19:dd:25:9e:a1:00:d1:b4:02:f2:6c:58:d3:d6:e5:b5:b8:0f: c2:4a:67:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDZBMDExMC8GA1UEBRMoRDE4RDQ0NUQyNjU3RUFGREQ0QTY2RTc1QjBGQkQ2MDMw M0YwMjVGQzAeFw0yNTA4MDMwODM3MjdaFw0yNTA4MTAwODM3MjZaMBgxFjAUBgNV BAMTDTY4OGYxZmM3LWQ3YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJwPLg6NlPSVHWNIqdGORIToiqY1RRD9Ql3ANe8oNKT9su6M9aqc7IV0V7XB32 MqVw0ru+lW78qJ/TkVXtaV7D0cRKGp9IhsRjEQhV+lIrMxqf+E3qXyUSmEheS2Y8 XbMh25YAHo93fHUKitPt+J0SV6GsP+x7OFL22cNyfMhGNt+Ls59/16KKXUoEg58t MUwan/3sfifFGp0HfyFCxPSamErVc29Jhq64IuSg8x+GjMr56+yrK4GEsRmp9qPF RrsU4iVWlsR/Srj4hWH50X7oNjHtsD4OyeRIgL2USBX6DMuDpzJT651O0tkQYo2v LFS34WSaQedSDOO4+JI7NRGFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzlX7hmAR 4BGv+fIvdL/9doQkm54wHwYDVR0jBBgwFoAU0Y1EXSZX6v3Upm51sPvWAwPwJfww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENkEwLzc4REY2MDdDNkRC MTExRjBBRDRCNUU1QUM0RjlBRTAyLzBZMUVYU1pYNnYzVXBtNTFzUHZXQXdQd0pm dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFkxRVhTWlg2djNVcG01MXNQdldBd1B3SmZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NkEwLzc4REY2MDdDNkRCMTExRjBBRDRCNUU1QUM0RjlBRTAyLzBZMUVYU1pYNnYz VXBtNTFzUHZXQXdQd0pmdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACyjveDkp2AKHHraufUoRce0uQa4vOPXJoENVEBAzMVlsX5I1BREkfZs jrJWz0shZWQ41h8CD5p1m/qylyYqPLtEp3VjVOcs6m487mBerIhBQBOf1VwzeNdb nZ5monirXTcYDaHcAdQSjJlycS8qBteiQXLFkK3utxxc+B0UWsU4tog6JTHy7Pve AFEE+rUOuNt+tcg3QZmEmK8AjISXfutSTcqcI3m3wXxHBFwG9qJIiB6wcWUom5l/ bNsFuatL+MVgsEnkAMSywro3rqBYwXwKLIu1n8JogMmapHJqaNG0BLi7Mefgi1Qe KRndJZ6hANG0AvJsWNPW5bW4D8JKZ1Y= -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:46 2025 by rpki-client