$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft File: AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json) Hash identifier: WQZHOXOR/yZbNfvUzlp3tW3X5oRkLG2eAbOwgrhtw4E= Subject key identifier: 79:AE:9D:24:A1:9E:A2:6E:0E:AD:8B:64:64:46:9A:02:3A:57:57:8B Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Certificate serial: 0F6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft Manifest number: 0F63 Signing time: Sat 02 Aug 2025 17:44:40 +0000 Manifest this update: Sat 02 Aug 2025 17:44:39 +0000 Manifest next update: Sat 09 Aug 2025 17:44:39 +0000 Files and hashes: 1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: R0HiQlJGC94DwDNBtZBTlwkE2HB+I5DcDxcsLHxKL2E=) 2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: lww/ZRWFPgZIaev9PDmaV5kjaByxeNEFJJYVjFLwNzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3948 (0xf6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Validity Not Before: Aug 2 17:44:39 2025 GMT Not After : Aug 9 17:44:39 2025 GMT Subject: CN=688e4e87-8117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:06:8a:b6:4e:fd:7f:80:28:94:36:6b:d6:67: 51:3f:0a:ac:bf:e3:64:d8:05:7f:b3:8b:95:78:28: e0:67:05:c1:0e:22:f0:aa:16:e9:95:d8:64:a0:23: e4:55:f7:d0:7b:e8:01:58:dc:46:da:16:1c:cc:f0: 98:f1:26:31:32:65:1d:7a:56:e6:81:9c:ce:32:0f: 85:ce:cd:7f:7b:6d:b2:4d:4d:fd:da:33:62:22:e7: 72:29:13:3c:d4:6d:1d:5b:ef:e6:31:01:16:4e:79: 98:58:dc:52:ed:4c:00:aa:7e:14:32:b6:28:a8:3b: 2f:35:93:07:82:a5:12:96:19:ee:15:28:72:8f:e7: 40:d6:74:5a:d7:68:6c:11:26:62:a2:92:e0:60:90: 31:d1:c3:07:5d:3b:c3:5f:39:e5:94:b4:0d:a3:07: 60:9a:40:d0:11:1e:17:c6:67:08:58:74:f5:fc:a0: d3:0c:3e:c1:82:c2:da:54:35:0e:aa:0e:07:c7:c4: e9:bd:63:cf:5e:f4:ab:e1:ed:00:f1:eb:c5:ec:b0: ce:2e:ef:2b:1e:3c:1a:0d:57:70:72:eb:89:c1:b4: ae:e9:07:7e:a5:84:60:14:44:4c:84:6a:8f:92:eb: 8b:a8:5d:cc:59:09:fd:bb:eb:21:a0:31:7c:04:ba: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AE:9D:24:A1:9E:A2:6E:0E:AD:8B:64:64:46:9A:02:3A:57:57:8B X509v3 Authority Key Identifier: keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:aa:05:c7:f4:4f:a6:19:13:01:20:42:37:1f:8d:84:c1:89: 3f:0b:f1:2f:ed:a9:3a:6a:eb:ea:72:73:6b:9f:99:1b:fb:4b: 80:82:b3:3f:8a:cc:af:4d:9d:bb:32:f5:85:5d:e7:e4:04:a5: d4:28:a6:a1:ac:db:b6:35:5a:73:d7:77:57:37:ff:20:0d:a0: c2:c0:e7:d0:6a:e7:e2:cf:8c:58:ad:38:70:9a:2e:f5:29:03: b5:fb:f0:23:31:14:4e:45:b4:f2:5e:0b:f6:7a:6c:23:35:7d: 1f:2b:d5:74:70:d4:3d:e7:91:ed:ba:af:b6:9d:c4:bb:96:6b: 38:46:a0:90:e1:91:19:67:4c:21:37:65:76:2e:a0:b5:79:36: 9c:a6:81:bd:6e:7a:49:69:5a:24:7a:5a:5c:a2:17:22:3a:ad: b7:c5:06:4d:9c:be:79:ef:33:a9:d9:41:64:5e:2e:14:f4:56: ee:97:0c:51:c0:b3:4b:ff:11:ab:a2:b7:b5:d5:54:71:45:9f: f5:49:04:e5:1f:8b:69:2f:d0:d5:3f:c3:1a:95:77:d4:0b:75: c9:9c:bf:5f:99:0c:2e:a3:00:79:39:34:6e:3e:5b:1f:d2:a9: 98:c8:a4:f7:cb:4f:a7:21:81:05:c1:eb:b8:f9:e9:ea:66:af: 71:8d:33:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF RDc5OUM5MzcwHhcNMjUwODAyMTc0NDM5WhcNMjUwODA5MTc0NDM5WjAYMRYwFAYD VQQDEw02ODhlNGU4Ny04MTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7waKtk79f4AolDZr1mdRPwqsv+Nk2AV/s4uVeCjgZwXBDiLwqhbpldhkoCPk VffQe+gBWNxG2hYczPCY8SYxMmUdelbmgZzOMg+Fzs1/e22yTU392jNiIudyKRM8 1G0dW+/mMQEWTnmYWNxS7UwAqn4UMrYoqDsvNZMHgqUSlhnuFShyj+dA1nRa12hs ESZiopLgYJAx0cMHXTvDXznllLQNowdgmkDQER4XxmcIWHT1/KDTDD7BgsLaVDUO qg4Hx8TpvWPPXvSr4e0A8evF7LDOLu8rHjwaDVdwcuuJwbSu6Qd+pYRgFERMhGqP kuuLqF3MWQn9u+shoDF8BLpRswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmunSSh nqJuDq2LZGRGmgI6V1eLMB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFqgXH9E+mGRMBIEI3H42EwYk/C/Ev7ak6auvqcnNrn5kb+0uAgrM/ isyvTZ27MvWFXefkBKXUKKahrNu2NVpz13dXN/8gDaDCwOfQaufiz4xYrThwmi71 KQO1+/AjMRRORbTyXgv2emwjNX0fK9V0cNQ955Htuq+2ncS7lms4RqCQ4ZEZZ0wh N2V2LqC1eTacpoG9bnpJaVokelpcohciOq23xQZNnL557zOp2UFkXi4U9FbulwxR wLNL/xGrore11VRxRZ/1SQTlH4tpL9DVP8MalXfUC3XJnL9fmQwuowB5OTRuPlsf 0qmYyKT3y0+nIYEFweu4+enqZq9xjTN9 -----END CERTIFICATE-----Generated at Mon Aug 4 11:05:41 2025 by rpki-client