$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft File: u759h-rKuKMp6DvLD_fVAIi-Cc0.mft (raw, json) Hash identifier: HxpBgmFgQS0qs3Gl+5O/fqgLQrrq+jOcRtJE9agPT34= Subject key identifier: D4:DF:41:8D:E9:D3:3D:D3:73:67:88:70:D2:15:FF:77:5E:8A:63:08 Authority key identifier: BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD Certificate issuer: /CN=A91AF15E/serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft Manifest number: 029E Signing time: Tue 01 Jul 2025 02:11:34 +0000 Manifest this update: Tue 01 Jul 2025 02:11:33 +0000 Manifest next update: Tue 08 Jul 2025 02:11:33 +0000 Files and hashes: 1: u759h-rKuKMp6DvLD_fVAIi-Cc0.crl (hash: hVlfYY3zMgE0Dtu1+gqXgYj6lRKQ4pW8dQ8Ud/4nMx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF15E, serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD Validity Not Before: Jul 1 02:11:33 2025 GMT Not After : Jul 8 02:11:33 2025 GMT Subject: CN=686343d6-4845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:7f:98:08:2b:bd:f4:ae:01:e4:8c:bb:34: 58:85:ea:f7:a7:f1:ff:91:61:81:b8:4a:79:67:60: 52:4b:2e:94:3f:ae:34:a3:1e:fb:23:68:9e:6b:48: 41:8d:c8:26:78:df:6b:a5:89:07:00:7f:ce:1f:dc: 15:03:35:d7:c3:32:f5:26:8e:20:38:33:28:ac:2d: 52:ad:41:44:1c:09:34:0c:fe:cb:35:9e:65:3d:96: 91:49:d2:3a:e3:e0:bc:3e:1e:dc:10:36:b9:cb:41: e8:f1:58:4f:0d:02:7c:99:91:ea:f9:85:33:d5:b1: 63:df:13:99:23:e9:51:1b:5b:6a:cc:67:38:f3:b8: ff:da:e6:36:74:61:31:4c:e7:be:8e:1e:27:93:44: 22:df:5f:c2:39:de:c8:0d:bf:08:d0:a6:b8:2d:f3: d1:89:a2:04:2e:23:c6:0f:20:2a:ff:e5:5f:48:5e: 93:5d:aa:85:e3:c1:89:bf:73:2e:0b:8d:20:2a:6d: 08:4a:b1:fb:ef:1a:bf:6b:72:2c:07:fe:90:8b:08: 91:33:32:10:8d:6f:6d:df:23:eb:19:5a:5c:a7:5d: f1:49:03:25:db:eb:a3:ab:98:7f:d7:55:34:59:e3: db:98:14:23:12:e7:4f:60:33:7c:3c:aa:07:b4:ce: 6c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DF:41:8D:E9:D3:3D:D3:73:67:88:70:D2:15:FF:77:5E:8A:63:08 X509v3 Authority Key Identifier: keyid:BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ab:4a:f5:b3:92:cc:20:20:8c:34:dd:9c:e2:47:99:cd:a6: 64:8d:16:c3:e7:25:7b:45:64:f1:64:cf:b0:20:3c:75:d2:00: f9:87:e1:40:4d:df:2a:03:1c:43:0c:3f:25:49:dd:fd:c4:de: 9b:04:ea:07:75:6b:da:53:9a:d8:51:8d:f9:8c:11:5b:e5:04: 13:ee:f6:c1:b3:e6:68:96:17:ec:29:45:6d:9d:7c:65:d2:16: 7f:9c:46:7b:9a:86:d8:5d:26:9c:bb:b4:4a:db:2f:54:0c:b5: 8e:b8:a1:dd:b6:e6:c2:ac:e2:d1:57:4d:1e:71:4d:39:6f:9d: ad:54:1e:ae:bf:ab:5c:5f:58:f0:62:3f:14:61:16:94:b7:85: 8e:37:7d:57:4a:ec:54:be:c6:50:bf:42:c9:4c:81:9a:fd:70: 6a:0a:bd:9d:18:fa:4d:e8:5b:01:cc:45:dc:7b:20:ea:cd:4a: 9a:71:cb:fc:43:0c:1b:30:8f:47:dc:66:97:12:92:c8:c1:24: 8e:1c:bf:b7:b9:6f:2f:a9:af:c8:19:b7:b1:61:bc:a3:35:12: 34:6b:f4:9e:ce:96:96:af:17:9a:4d:2f:aa:66:83:9e:03:02: c8:02:00:31:e1:41:77:33:21:9a:1c:f7:df:0c:0b:e7:d8:c5: 7f:ec:7f:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNUUxMTAvBgNVBAUTKEJCQkU3RDg3RUFDQUI4QTMyOUU4M0JDQjBGRjdENTAw ODhCRTA5Q0QwHhcNMjUwNzAxMDIxMTMzWhcNMjUwNzA4MDIxMTMzWjAYMRYwFAYD VQQDEw02ODYzNDNkNi00ODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucB/mAgrvfSuAeSMuzRYher3p/H/kWGBuEp5Z2BSSy6UP640ox77I2iea0hB jcgmeN9rpYkHAH/OH9wVAzXXwzL1Jo4gODMorC1SrUFEHAk0DP7LNZ5lPZaRSdI6 4+C8Ph7cEDa5y0Ho8VhPDQJ8mZHq+YUz1bFj3xOZI+lRG1tqzGc487j/2uY2dGEx TOe+jh4nk0Qi31/COd7IDb8I0Ka4LfPRiaIELiPGDyAq/+VfSF6TXaqF48GJv3Mu C40gKm0ISrH77xq/a3IsB/6QiwiRMzIQjW9t3yPrGVpcp13xSQMl2+ujq5h/11U0 WePbmBQjEudPYDN8PKoHtM5sCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTfQY3p 0z3Tc2eIcNIV/3deimMIMB8GA1UdIwQYMBaAFLu+fYfqyrijKeg7yw/31QCIvgnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE1RS85NEIyRDM3NjAz MUQxMUVEOTlGMjlFMUNDNEY5QUUwMi91NzU5aC1yS3VLTXA2RHZMRF9mVkFJaS1D YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3NTloLXJLdUtNcDZEdkxEX2ZWQUlpLUNjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE1RS85NEIyRDM3NjAzMUQxMUVEOTlGMjlFMUNDNEY5QUUwMi91NzU5aC1yS3VL TXA2RHZMRF9mVkFJaS1DYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNq0r1s5LMICCMNN2c4keZzaZkjRbD5yV7RWTxZM+wIDx10gD5h+FA Td8qAxxDDD8lSd39xN6bBOoHdWvaU5rYUY35jBFb5QQT7vbBs+ZolhfsKUVtnXxl 0hZ/nEZ7mobYXSacu7RK2y9UDLWOuKHdtubCrOLRV00ecU05b52tVB6uv6tcX1jw Yj8UYRaUt4WON31XSuxUvsZQv0LJTIGa/XBqCr2dGPpN6FsBzEXceyDqzUqaccv8 QwwbMI9H3GaXEpLIwSSOHL+3uW8vqa/IGbexYbyjNRI0a/SezpaWrxeaTS+qZoOe AwLIAgAx4UF3MyGaHPffDAvn2MV/7H9H -----END CERTIFICATE-----Generated at Thu Jul 3 00:49:41 2025 by rpki-client