$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json) Hash identifier: KH91MitHoLgR67mPWYgrh/nCl/3aWLJR8sqnnPsqRMs= Subject key identifier: DF:B4:78:4E:8F:27:AF:93:8A:EA:FC:CA:85:63:5E:AB:19:14:31:31 Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft Manifest number: 79 Signing time: Tue 01 Jul 2025 07:31:14 +0000 Manifest this update: Tue 01 Jul 2025 07:31:14 +0000 Manifest next update: Tue 08 Jul 2025 07:31:14 +0000 Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: d6oqXrpwK7F5H8VpxH92hwf69PFDzlm9nuGp9yTNde4=) 2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: +tAlw28NvGVDo5cCezaQKFVIMHfW8hqdMwBD9HYIeLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Validity Not Before: Jul 1 07:31:14 2025 GMT Not After : Jul 8 07:31:14 2025 GMT Subject: CN=68638ec2-c3b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:87:ad:3c:24:4b:78:45:7a:9c:c9:a2:f1: 44:79:21:1e:3c:6e:4f:d0:61:82:f7:1b:fe:a0:59: f7:11:ca:0f:47:27:9e:79:82:80:63:ef:ab:d8:28: fd:bd:29:fe:42:98:1d:b9:fe:8f:ca:01:9a:69:6c: 51:1e:f9:50:e9:f2:7c:ee:88:40:83:4f:18:f2:c3: 6a:ff:d8:33:d3:0f:a2:41:a2:b5:20:ac:c7:40:ce: f9:de:6d:c4:fd:e3:0c:13:2b:6b:1d:cd:b3:89:2f: 8d:57:9c:95:39:38:df:39:e4:6e:06:34:f0:16:2e: 36:4b:e5:dd:15:18:c4:02:40:a3:ff:ca:0d:69:4a: e3:80:22:c1:8b:75:9c:44:94:0f:4a:46:dc:08:8c: f5:5f:f6:65:39:7c:c7:ce:2a:9f:b5:5e:0c:5f:ee: 1e:91:7f:44:9d:fb:30:8e:47:ca:63:bc:f1:e9:30: f9:7f:08:8c:67:6b:7a:c7:a2:3d:b9:d8:1b:58:af: 37:f1:71:f0:67:78:94:56:a5:39:c2:75:30:d4:d9: 0a:32:17:59:2a:a0:c9:5d:4c:f5:e9:6e:c1:4e:94: f4:31:2c:8e:de:14:c6:ba:2b:40:cb:b2:95:1b:c1: 10:73:08:fa:6c:1f:90:27:91:86:8d:a7:84:76:49: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B4:78:4E:8F:27:AF:93:8A:EA:FC:CA:85:63:5E:AB:19:14:31:31 X509v3 Authority Key Identifier: keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f8:a7:f8:69:0e:ac:9b:e6:7b:d0:3e:61:0c:06:e5:48:4c: 37:d3:38:75:0d:7c:35:60:99:ad:44:23:74:90:7f:19:e6:0f: e6:be:c6:c4:dd:b4:cd:dd:61:52:20:a5:61:04:89:91:ef:53: 37:76:aa:e1:8b:fc:49:17:4d:18:48:00:8f:b3:1f:61:30:98: a7:6f:5a:c6:f5:dc:35:00:9a:eb:8f:9b:8f:04:24:a9:50:00: ac:d3:7f:af:af:d2:1f:4c:52:a2:a1:2b:da:29:13:99:ee:b5: 0c:55:14:52:4d:8f:3e:ae:21:e5:ac:58:cb:b3:8f:26:38:c2: f9:81:1f:f8:9c:0b:13:77:75:a0:ef:35:75:2e:48:c6:86:98: a5:55:17:a3:27:f1:26:2f:94:78:fa:e1:68:61:9d:7d:65:bd: 8f:1d:0c:f0:ac:ae:57:32:9f:88:11:60:09:32:de:6e:20:9c: 13:77:25:3b:59:da:12:9d:0d:fd:5c:61:41:39:84:89:53:87: 45:27:f2:79:55:68:dc:25:b7:54:c2:b8:77:04:84:9f:a4:fb: e6:de:8a:3d:97:a3:c5:2b:ba:fb:77:1a:6a:ab:53:87:95:ea: d5:04:11:80:c9:33:a5:83:c4:28:b2:ff:25:a3:46:95:fa:a6: 59:c8:20:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTk0MTExMC8GA1UEBRMoNzMxN0Q3NzdCREFBNjMzM0NEOTZBODEwNEI5NERFMEZB NDc1MjExMzAeFw0yNTA3MDEwNzMxMTRaFw0yNTA3MDgwNzMxMTRaMBgxFjAUBgNV BAMTDTY4NjM4ZWMyLWMzYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCldYetPCRLeEV6nMmi8UR5IR48bk/QYYL3G/6gWfcRyg9HJ555goBj76vYKP29 Kf5CmB25/o/KAZppbFEe+VDp8nzuiECDTxjyw2r/2DPTD6JBorUgrMdAzvnebcT9 4wwTK2sdzbOJL41XnJU5ON855G4GNPAWLjZL5d0VGMQCQKP/yg1pSuOAIsGLdZxE lA9KRtwIjPVf9mU5fMfOKp+1Xgxf7h6Rf0Sd+zCOR8pjvPHpMPl/CIxna3rHoj25 2BtYrzfxcfBneJRWpTnCdTDU2QoyF1kqoMldTPXpbsFOlPQxLI7eFMa6K0DLspUb wRBzCPpsH5AnkYaNp4R2SUrpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU37R4To8n r5OK6vzKhWNeqxkUMTEwHwYDVR0jBBgwFoAUcxfXd72qYzPNlqgQS5TeD6R1IRMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBOTQxLzlCM0QyNTQ4QTBB MDExRUY5MDUyMzI1RkM0RjlBRTAyL2N4ZlhkNzJxWXpQTmxxZ1FTNVRlRDZSMUlS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hmWGQ3MnFZelBObHFnUVM1VGVENlIxSVJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB OTQxLzlCM0QyNTQ4QTBBMDExRUY5MDUyMzI1RkM0RjlBRTAyL2N4ZlhkNzJxWXpQ TmxxZ1FTNVRlRDZSMUlSTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADv4p/hpDqyb5nvQPmEMBuVITDfTOHUNfDVgma1EI3SQfxnmD+a+xsTd tM3dYVIgpWEEiZHvUzd2quGL/EkXTRhIAI+zH2EwmKdvWsb13DUAmuuPm48EJKlQ AKzTf6+v0h9MUqKhK9opE5nutQxVFFJNjz6uIeWsWMuzjyY4wvmBH/icCxN3daDv NXUuSMaGmKVVF6Mn8SYvlHj64WhhnX1lvY8dDPCsrlcyn4gRYAky3m4gnBN3JTtZ 2hKdDf1cYUE5hIlTh0Un8nlVaNwlt1TCuHcEhJ+k++beij2Xo8Uruvt3GmqrU4eV 6tUEEYDJM6WDxCiy/yWjRpX6plnIIBM= -----END CERTIFICATE-----Generated at Thu Jul 3 06:16:48 2025 by rpki-client