$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json) Hash identifier: ecqEc2FNeIs9hE3wyXB/twptsAnyqcqhqNXngnYSz/I= Subject key identifier: 3B:D3:B7:A4:FC:FF:FA:D0:4A:00:90:E2:F6:A5:FE:54:52:FA:5B:E8 Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft Manifest number: 4C Signing time: Thu 03 Jul 2025 07:32:57 +0000 Manifest this update: Thu 03 Jul 2025 07:32:56 +0000 Manifest next update: Thu 10 Jul 2025 07:32:56 +0000 Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: 471PD0Wq5OfXm4SMyqR1WPxasWtya/ra7zts2LuglUg=) 2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Validity Not Before: Jul 3 07:32:56 2025 GMT Not After : Jul 10 07:32:56 2025 GMT Subject: CN=68663229-ce63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:03:1d:89:d3:a0:1c:3f:1e:7e:ed:f1:10:04: c3:10:14:c3:c2:1d:ea:f1:4d:d4:fd:92:0c:49:fc: 6f:cc:fe:2b:ff:f6:b3:22:e6:e6:71:a6:2d:b4:09: 4f:1b:0a:33:3a:24:58:e8:8a:0d:e6:e7:0e:b8:fb: 1c:8a:f8:1a:b2:aa:81:a1:1d:00:4a:40:c0:29:e9: d3:bc:cb:b7:9a:ba:de:1c:7f:31:60:d4:c9:c5:83: 36:f1:3d:d4:64:11:4f:95:3b:67:51:f7:17:d5:ab: e7:7c:ea:a7:51:3e:61:f8:a6:ac:83:9e:f5:45:6f: 75:91:3c:06:67:3a:2b:f5:17:77:27:b3:21:5c:06: 7b:34:51:a3:34:38:7d:fd:23:44:43:e3:07:8e:d8: 12:7c:bd:5a:58:f4:39:9b:ec:fb:18:22:24:a1:a1: b5:85:8e:c2:19:18:36:e9:99:d7:47:c1:19:bc:ca: fe:2c:d9:8a:75:e9:79:46:64:39:8b:3c:68:aa:fc: 36:d6:d4:11:f3:d1:a3:0f:cc:37:8b:99:59:63:b6: 33:48:88:fe:d7:9b:16:ff:75:5a:73:a1:6c:3d:45: 86:2c:d4:80:2e:07:4d:c9:58:6e:b1:0b:a3:75:d1: d8:86:d5:45:48:9b:ee:b9:e0:e0:07:fd:c0:d2:f2: 34:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D3:B7:A4:FC:FF:FA:D0:4A:00:90:E2:F6:A5:FE:54:52:FA:5B:E8 X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:83:b4:8b:b5:7e:e2:6b:68:19:5f:c9:e6:4e:e2:c4:76:6b: d6:28:51:29:6d:33:5b:f1:84:f8:53:bc:d0:09:5c:e3:f8:cd: dd:71:b1:1f:2a:50:ba:af:16:8d:77:e7:d8:96:04:86:9f:8f: e1:22:eb:8a:dc:c1:da:c1:fc:dd:f3:41:49:ec:c3:17:2a:66: 18:13:ee:a9:7b:79:19:7f:27:70:c1:42:a3:c8:12:7f:f5:e6: d9:01:53:63:86:4e:04:c1:0d:68:80:9e:d7:fe:7d:ef:14:ef: 8f:50:08:2a:75:61:c2:dc:54:6c:55:79:0c:38:ad:01:d9:41: 95:60:54:da:c2:66:f0:3b:de:e0:c6:e3:42:c7:fe:b5:aa:2a: f0:f0:45:98:37:fc:28:e2:ac:b6:f3:8a:a4:51:42:b3:f0:64: 96:c4:74:c7:05:fe:de:06:68:77:9f:25:17:cf:82:b0:54:1f: c0:27:d0:51:eb:b4:e6:27:fe:57:86:9f:c4:49:14:17:d6:80: a9:6d:9c:e8:d3:5b:04:88:02:7f:8c:1e:85:19:ae:ea:2c:1d: 75:b6:44:af:01:78:25:a7:4a:c7:79:4d:2f:af:37:72:47:b8: 4b:ad:ee:27:a3:3f:3c:22:50:78:52:ee:54:d1:21:25:f0:7b: 43:47:21:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoQkI1MDVERkYzMkVDRDQ5MkJGMUVGRjdGRTM5NEYxMjg5 MEFBNjczNDAeFw0yNTA3MDMwNzMyNTZaFw0yNTA3MTAwNzMyNTZaMBgxFjAUBgNV BAMTDTY4NjYzMjI5LWNlNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbAx2J06AcPx5+7fEQBMMQFMPCHerxTdT9kgxJ/G/M/iv/9rMi5uZxpi20CU8b CjM6JFjoig3m5w64+xyK+BqyqoGhHQBKQMAp6dO8y7eaut4cfzFg1MnFgzbxPdRk EU+VO2dR9xfVq+d86qdRPmH4pqyDnvVFb3WRPAZnOiv1F3cnsyFcBns0UaM0OH39 I0RD4weO2BJ8vVpY9Dmb7PsYIiShobWFjsIZGDbpmddHwRm8yv4s2Yp16XlGZDmL PGiq/DbW1BHz0aMPzDeLmVljtjNIiP7Xmxb/dVpzoWw9RYYs1IAuB03JWG6xC6N1 0diG1UVIm+654OAH/cDS8jSDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO9O3pPz/ +tBKAJDi9qX+VFL6W+gwHwYDVR0jBBgwFoAUu1Bd/zLs1JK/Hv9/45TxKJCqZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzUxQkUwMTI0RTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTFCZF96THMxSktfSHY5XzQ1VHhLSkNxWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzUxQkUwMTI0RTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpL X0h2OV80NVR4S0pDcVp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJiDtIu1fuJraBlfyeZO4sR2a9YoUSltM1vxhPhTvNAJXOP4zd1xsR8q ULqvFo1359iWBIafj+Ei64rcwdrB/N3zQUnswxcqZhgT7ql7eRl/J3DBQqPIEn/1 5tkBU2OGTgTBDWiAntf+fe8U749QCCp1YcLcVGxVeQw4rQHZQZVgVNrCZvA73uDG 40LH/rWqKvDwRZg3/CjirLbziqRRQrPwZJbEdMcF/t4GaHefJRfPgrBUH8An0FHr tOYn/leGn8RJFBfWgKltnOjTWwSIAn+MHoUZruosHXW2RK8BeCWnSsd5TS+vN3JH uEut7iejPzwiUHhS7lTRISXwe0NHIZI= -----END CERTIFICATE-----Generated at Fri Jul 4 03:36:42 2025 by rpki-client