$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft File: wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json) Hash identifier: rBBFHMei/q+DR0UOeGPO/p5rYZNq/uOE44pYf29IhBQ= Subject key identifier: E2:46:C3:9D:5E:FC:73:D4:0E:16:DB:29:2E:E3:52:BE:11:4E:88:FE Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED Certificate issuer: /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft Manifest number: 71 Signing time: Tue 15 Jul 2025 06:04:52 +0000 Manifest this update: Tue 15 Jul 2025 06:04:52 +0000 Manifest next update: Tue 22 Jul 2025 06:04:52 +0000 Files and hashes: 1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: FZ0eYWIkZVXYEs9bOOnL//Ny67q1bcbjUHT8SiNc+yM=) 2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: 6QazPAViDz/vpoTr8YQep/2te+BhGM7kc2XHX85fKFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 06:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Validity Not Before: Jul 15 06:04:52 2025 GMT Not After : Jul 22 06:04:52 2025 GMT Subject: CN=6875ef84-3d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:de:9e:15:da:cc:9d:cd:ec:86:a4:c5:94:22: f0:fe:bd:7b:45:c1:64:80:b1:ab:57:96:bd:cf:0a: ea:d4:bb:8c:83:6e:b2:4e:4e:9d:9a:cb:87:b2:78: 7f:5b:00:71:de:88:3d:76:5b:35:72:6a:4a:41:a5: 63:1f:fa:50:26:47:db:23:72:32:16:0b:5b:53:4f: b8:48:1e:bf:95:95:0e:05:7c:af:a8:1e:90:c9:79: 8e:da:53:37:c8:df:ff:50:ec:eb:50:5a:37:83:75: 0e:bb:9f:db:14:cf:57:01:bd:98:aa:d6:12:83:bd: 93:81:d3:2a:35:75:60:a7:fc:28:71:29:d6:ae:9a: 4d:1a:f0:ce:63:b4:b7:48:25:ec:35:31:7c:3a:56: fd:42:54:b3:8e:d8:63:5f:64:f3:d0:9d:14:22:c3: 41:47:56:d9:4d:c6:af:3c:b8:62:a0:55:b8:ea:40: 9e:7a:e8:19:ae:a9:6a:98:d8:e4:50:e7:bd:5e:8a: e1:44:cd:75:fd:3b:14:b5:ef:c0:28:4f:d2:e1:6c: 05:e5:d8:00:00:58:12:5c:5d:ee:9f:01:64:93:d6: fa:9b:e7:55:b3:1b:a7:3e:f5:3d:5b:99:de:97:b6: 02:40:7e:a3:e3:13:53:d6:57:e5:1e:ca:95:8d:45: 36:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:46:C3:9D:5E:FC:73:D4:0E:16:DB:29:2E:E3:52:BE:11:4E:88:FE X509v3 Authority Key Identifier: keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:84:e1:77:ce:15:de:af:01:24:85:eb:1a:3e:75:09:83:5a: b4:39:1e:7b:6b:1d:4a:57:ab:79:f1:2a:6a:e6:fd:f6:c9:09: 6c:e7:8c:b5:b0:42:3f:6b:8f:80:22:c2:7c:9a:cc:41:06:9e: 11:06:df:f7:91:b2:77:13:5b:0d:eb:de:39:37:72:22:e5:31: 21:7e:6e:38:fd:c0:51:16:96:fe:f7:48:4b:78:74:5a:f9:b0: 2c:73:96:e6:98:89:88:58:d3:00:f7:df:b4:a2:dc:f1:4f:a0: e7:ba:ca:13:b4:d5:56:45:fd:05:ca:f4:e9:43:5e:b4:be:88: 47:b7:fa:9e:9b:df:5e:e3:9b:f1:ba:b4:ab:46:5a:c0:3d:c1: 16:54:6a:4f:85:87:0b:e7:44:b9:fe:db:45:63:b2:6a:de:8b: ad:67:a8:f0:38:22:ca:1f:99:4a:ad:a7:ac:b1:b6:e5:24:a4: ae:4a:72:7f:88:8c:54:07:f1:98:31:6b:26:cc:e6:af:1a:7f: 0c:08:9e:c9:7f:53:b3:72:2e:80:5d:c4:0b:fe:0a:91:99:bc: 5d:19:ce:d4:b1:80:60:19:84:bf:9c:a2:da:e8:bf:99:2b:ce: b6:2a:fa:c2:ba:53:89:bd:05:b1:6a:0e:d0:c9:5d:22:fe:26: ce:16:bd:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTYxODExMC8GA1UEBRMoQzEzQThBQkQ1NzA0M0FBRkE1OEY1ODUzQkUyRkFCQ0E5 RjI2RjBFRDAeFw0yNTA3MTUwNjA0NTJaFw0yNTA3MjIwNjA0NTJaMBgxFjAUBgNV BAMTDTY4NzVlZjg0LTNkMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs3p4V2sydzeyGpMWUIvD+vXtFwWSAsatXlr3PCurUu4yDbrJOTp2ay4eyeH9b AHHeiD12WzVyakpBpWMf+lAmR9sjcjIWC1tTT7hIHr+VlQ4FfK+oHpDJeY7aUzfI 3/9Q7OtQWjeDdQ67n9sUz1cBvZiq1hKDvZOB0yo1dWCn/ChxKdaumk0a8M5jtLdI Jew1MXw6Vv1CVLOO2GNfZPPQnRQiw0FHVtlNxq88uGKgVbjqQJ566BmuqWqY2ORQ 571eiuFEzXX9OxS178AoT9LhbAXl2AAAWBJcXe6fAWST1vqb51WzG6c+9T1bmd6X tgJAfqPjE1PWV+UeypWNRTYTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4kbDnV78 c9QOFtspLuNSvhFOiP4wHwYDVR0jBBgwFoAUwTqKvVcEOq+lj1hTvi+ryp8m8O0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNjE4L0U2RjY2REQyQkVD MzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3EtbGoxaFR2aS1yeXA4bThP MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd1RxS3ZWY0VPcS1sajFoVHZpLXJ5cDhtOE8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NjE4L0U2RjY2REQyQkVDMzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3Et bGoxaFR2aS1yeXA4bThPMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHyE4XfOFd6vASSF6xo+dQmDWrQ5HntrHUpXq3nxKmrm/fbJCWznjLWw Qj9rj4AiwnyazEEGnhEG3/eRsncTWw3r3jk3ciLlMSF+bjj9wFEWlv73SEt4dFr5 sCxzluaYiYhY0wD337Si3PFPoOe6yhO01VZF/QXK9OlDXrS+iEe3+p6b317jm/G6 tKtGWsA9wRZUak+FhwvnRLn+20Vjsmrei61nqPA4IsofmUqtp6yxtuUkpK5Kcn+I jFQH8ZgxaybM5q8afwwInsl/U7NyLoBdxAv+CpGZvF0ZztSxgGAZhL+cotrov5kr zrYq+sK6U4m9BbFqDtDJXSL+Js4Wvac= -----END CERTIFICATE-----Generated at Wed Jul 16 23:09:51 2025 by rpki-client