$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft File: fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json) Hash identifier: hEzE7aFzIz4mKzk8XkNGa2xHH6vLUeigPf+xBvU0BnI= Subject key identifier: 14:A6:1B:4B:7C:A7:B1:EA:79:52:02:DC:87:2F:52:79:E7:EB:53:D2 Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft Manifest number: 0104 Signing time: Wed 02 Jul 2025 23:46:40 +0000 Manifest this update: Wed 02 Jul 2025 23:46:40 +0000 Manifest next update: Wed 09 Jul 2025 23:46:40 +0000 Files and hashes: 1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: 9Tmhy+GyvDpXiGDuo8Dka3J4RpEW1TJDeUzY5He3S2A=) 2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: 7qAgqeHaZPQYvPPHuv1+My9lZgN4hj2uJJ26C3QxuHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Validity Not Before: Jul 2 23:46:40 2025 GMT Not After : Jul 9 23:46:40 2025 GMT Subject: CN=6865c4e0-87e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:7c:6c:b9:76:61:3f:34:6a:7c:eb:f7:c2: 23:f1:68:f9:cf:b0:b9:57:39:bc:e5:8f:6f:07:c1: 4a:1b:58:3d:70:34:31:8b:c6:54:c1:4a:bd:8d:c0: 9d:5a:45:5d:c5:8f:5b:6a:0f:9d:51:ff:13:e3:2a: 18:95:37:bb:7b:ec:d4:2a:2e:ef:3a:0e:02:50:02: 27:fb:e4:fb:be:44:81:8e:98:eb:bc:b7:cf:47:91: 87:9c:b1:de:86:c5:08:51:d4:20:d1:a3:6b:3b:cc: ae:86:5f:2f:7d:d0:f0:f1:dc:08:64:39:d1:56:aa: a8:b8:c4:71:73:07:b2:d3:f4:e3:d1:6b:ac:74:27: 34:36:05:61:45:c4:6d:a8:02:8b:89:6a:86:7c:9a: 92:0a:9d:73:4d:ec:04:94:28:c3:7d:78:a1:a4:5d: b7:4a:54:61:c5:8e:b4:b1:1b:fc:24:68:36:f3:65: 7b:90:58:cf:d2:9f:67:5d:eb:af:4c:57:fb:82:f7: a2:71:ff:c6:6d:b6:81:04:66:f9:31:a1:66:a7:95: 9e:c3:d0:43:43:ab:32:a5:fb:8a:8e:00:c9:73:6e: 96:03:a9:8a:b5:68:6c:d3:52:79:10:f7:cf:d6:73: 46:7a:f8:f9:b6:7f:af:1f:29:14:78:0b:47:3d:40: b4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A6:1B:4B:7C:A7:B1:EA:79:52:02:DC:87:2F:52:79:E7:EB:53:D2 X509v3 Authority Key Identifier: keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7a:20:ef:3a:89:ac:16:0f:62:d6:00:53:56:56:e1:85:18: 9e:84:b8:aa:74:8d:35:fa:bb:36:9e:09:c0:f2:64:26:d8:12: c4:07:94:f5:59:3c:8e:d7:49:17:d8:d8:9a:aa:a3:34:ae:6a: 96:65:25:e9:53:c5:6e:f0:a8:8e:1e:a6:41:24:5b:44:1a:cf: 90:25:36:c1:c6:86:1c:d6:02:f3:b2:6b:db:69:9a:43:ff:ae: 6e:2e:48:9f:75:8d:70:05:26:5f:1c:39:a7:20:3c:13:f1:08: 3d:36:a5:88:05:6d:de:f5:1f:31:a0:d9:16:90:7e:36:2e:47: fd:02:11:0a:99:bf:f7:51:35:f0:6c:15:ce:f1:b0:c6:82:96: d2:4b:28:18:b8:a4:3d:b6:2b:dd:71:2a:8b:96:2e:78:4f:97: fe:69:1f:97:1e:b6:a6:3f:fc:43:80:a7:81:79:81:24:0f:04: 3a:8d:80:89:cb:e8:72:ae:6e:88:55:a0:59:8f:6b:d6:1f:00: 58:8e:7b:ea:bb:06:25:21:fc:aa:20:25:fc:b2:d2:5a:bb:40: 8c:42:65:af:38:6e:2b:16:c1:1a:b1:63:a8:d0:c7:78:db:33: 2d:23:e9:79:32:ea:8a:d8:a8:25:39:ab:de:0c:82:bc:1e:93: d6:b9:fb:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDdDMTk0RkVEQjhBNUM4Qzk3NkVCREVDODQ5M0RGM0Mz RjA4Q0M4RTIwHhcNMjUwNzAyMjM0NjQwWhcNMjUwNzA5MjM0NjQwWjAYMRYwFAYD VQQDEw02ODY1YzRlMC04N2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuet8bLl2YT80anzr98Ij8Wj5z7C5Vzm85Y9vB8FKG1g9cDQxi8ZUwUq9jcCd WkVdxY9bag+dUf8T4yoYlTe7e+zUKi7vOg4CUAIn++T7vkSBjpjrvLfPR5GHnLHe hsUIUdQg0aNrO8yuhl8vfdDw8dwIZDnRVqqouMRxcwey0/Tj0WusdCc0NgVhRcRt qAKLiWqGfJqSCp1zTewElCjDfXihpF23SlRhxY60sRv8JGg282V7kFjP0p9nXeuv TFf7gveicf/GbbaBBGb5MaFmp5Wew9BDQ6sypfuKjgDJc26WA6mKtWhs01J5EPfP 1nNGevj5tn+vHykUeAtHPUC0xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSmG0t8 p7HqeVIC3IcvUnnn61PSMB8GA1UdIwQYMBaAFHwZT+24pcjJduveyEk988PwjMji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni8wMDNFMTE1OEQ3 OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlNbDI2OTdJU1QzendfQ015 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni8wMDNFMTE1OEQ3OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlN bDI2OTdJU1QzendfQ015T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8eiDvOomsFg9i1gBTVlbhhRiehLiqdI01+rs2ngnA8mQm2BLEB5T1 WTyO10kX2NiaqqM0rmqWZSXpU8Vu8KiOHqZBJFtEGs+QJTbBxoYc1gLzsmvbaZpD /65uLkifdY1wBSZfHDmnIDwT8Qg9NqWIBW3e9R8xoNkWkH42Lkf9AhEKmb/3UTXw bBXO8bDGgpbSSygYuKQ9tivdcSqLli54T5f+aR+XHramP/xDgKeBeYEkDwQ6jYCJ y+hyrm6IVaBZj2vWHwBYjnvquwYlIfyqICX8stJau0CMQmWvOG4rFsEasWOo0Md4 2zMtI+l5MuqK2KglOaveDIK8HpPWufsR -----END CERTIFICATE-----Generated at Thu Jul 3 23:51:33 2025 by rpki-client