$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: lGFRBJkVTo0Dn3xFSsmXjOSqCdav+SQVdsKs8PFPvAY= Subject key identifier: C7:1B:9F:76:26:8F:FA:EE:54:F2:12:7D:DF:63:EF:C9:C2:D8:BF:E0 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 129D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 1278 Signing time: Wed 02 Jul 2025 17:17:38 +0000 Manifest this update: Wed 02 Jul 2025 17:17:37 +0000 Manifest next update: Wed 09 Jul 2025 17:17:37 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: aGWeXz5FkyuIA+GfF4mG3YN9A1F9d0D9nPSjgpWVPtY=) 2: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: 8Neml3oC6KcoFUvC+s8BLmWMEpSAAtUFs6SqBjTSq9o=) 3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: IgiJhZRqcSbgHymfJ2UkdTHsUcRz7FOMB1+md3krEv8=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: 3BEJ1gCiaz/4ZdrE3qzkDJ5+ojL/iMHnMesKRyA+c6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4765 (0x129d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: Jul 2 17:17:37 2025 GMT Not After : Jul 9 17:17:37 2025 GMT Subject: CN=686569b2-91e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:fe:f8:78:d8:e2:94:bf:6c:1a:43:56:b5: 4b:8d:d1:59:67:cf:81:7b:8b:f4:8a:a0:01:70:fc: e6:4c:ab:7d:5b:91:b9:02:b5:0f:2d:49:6d:62:79: fd:c6:b5:0e:32:7a:2e:a3:d4:4e:c1:cd:79:db:f8: 3f:69:32:75:d7:23:e7:ca:e1:aa:06:5d:97:02:84: 07:fe:2a:e7:75:b3:cc:08:52:2a:ee:d7:fa:c5:87: 8d:8d:bd:c6:53:de:fb:1e:2a:cc:8e:a7:18:c4:4b: f9:89:84:78:8a:f4:72:a3:71:63:b3:3d:f4:6b:52: 94:39:b1:1f:89:76:55:74:bf:57:57:d0:1d:b7:42: c8:ba:8c:44:1d:57:09:e8:8a:3b:db:8f:d7:ea:2d: 4e:ce:5b:d6:ca:44:dc:3e:d7:b1:02:f4:d4:e3:bb: 55:4c:81:09:86:f5:34:54:a8:c0:06:fc:d4:30:d9: 50:8c:af:37:65:5c:c4:a8:c9:e6:5a:67:67:25:d9: 15:ef:af:c8:2c:8b:fc:23:61:f2:82:8c:12:57:51: c8:58:99:07:4f:2e:1f:4f:b5:c2:c3:47:05:d4:60: 6b:c3:fa:06:d1:b4:26:66:67:4d:a6:ef:a2:fe:c8: 23:47:ad:ae:6f:a3:dd:f6:68:58:39:2e:b0:10:22: f6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1B:9F:76:26:8F:FA:EE:54:F2:12:7D:DF:63:EF:C9:C2:D8:BF:E0 X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:30:28:31:ed:29:48:9a:94:76:c2:4e:d9:a9:d3:57:c2:cd: f1:46:68:12:90:be:04:01:a2:2c:44:5e:5f:b5:ba:b6:d2:5a: 97:ac:ef:a8:eb:bc:54:4a:e8:08:bd:81:4c:7c:f5:fe:8b:21: 43:23:47:51:2e:76:ef:f5:01:c0:f8:9d:ea:22:11:dd:55:39: 26:f0:fb:72:64:9f:0d:d4:2a:2b:b9:a9:92:ae:96:f3:b3:9e: 54:c2:c6:80:4c:8e:0c:cc:93:92:3d:95:e1:65:13:ee:0a:cf: ec:72:a0:35:c4:4f:ce:70:3c:39:b2:5b:24:ab:fb:e9:c1:b1: f9:04:6a:46:42:29:69:0f:3a:c0:48:6c:a4:fb:1f:ef:a1:59: dc:c8:ad:fa:24:4e:97:0a:46:22:44:6f:74:64:9e:a4:4c:70: 24:eb:1f:03:06:c6:08:17:d5:da:0b:e0:f9:27:5f:83:50:c2: a6:a5:e4:38:39:43:15:9d:25:ef:31:7e:d1:cf:b6:e9:b8:2e: f9:1a:7a:33:b0:25:1f:1c:d9:14:9a:0b:4a:91:42:39:98:5d: aa:04:f6:f7:8d:51:d9:27:72:7f:9f:3d:c6:0c:82:58:9a:ba: d4:d7:24:1a:36:06:68:02:84:8b:2f:ec:28:ff:c0:90:55:a4: 73:48:ce:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjUwNzAyMTcxNzM3WhcNMjUwNzA5MTcxNzM3WjAYMRYwFAYD VQQDEw02ODY1NjliMi05MWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/D++HjY4pS/bBpDVrVLjdFZZ8+Be4v0iqABcPzmTKt9W5G5ArUPLUltYnn9 xrUOMnouo9ROwc152/g/aTJ11yPnyuGqBl2XAoQH/irndbPMCFIq7tf6xYeNjb3G U977HirMjqcYxEv5iYR4ivRyo3Fjsz30a1KUObEfiXZVdL9XV9Adt0LIuoxEHVcJ 6Io724/X6i1OzlvWykTcPtexAvTU47tVTIEJhvU0VKjABvzUMNlQjK83ZVzEqMnm WmdnJdkV76/ILIv8I2HygowSV1HIWJkHTy4fT7XCw0cF1GBrw/oG0bQmZmdNpu+i /sgjR62ub6Pd9mhYOS6wECL2MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcbn3Ym j/ruVPISfd9j78nC2L/gMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkMCgx7SlImpR2wk7ZqdNXws3xRmgSkL4EAaIsRF5ftbq20lqXrO+o 67xUSugIvYFMfPX+iyFDI0dRLnbv9QHA+J3qIhHdVTkm8PtyZJ8N1CoruamSrpbz s55UwsaATI4MzJOSPZXhZRPuCs/scqA1xE/OcDw5slskq/vpwbH5BGpGQilpDzrA SGyk+x/voVncyK36JE6XCkYiRG90ZJ6kTHAk6x8DBsYIF9XaC+D5J1+DUMKmpeQ4 OUMVnSXvMX7Rz7bpuC75GnozsCUfHNkUmgtKkUI5mF2qBPb3jVHZJ3J/nz3GDIJY mrrU1yQaNgZoAoSLL+wo/8CQVaRzSM7U -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:01 2025 by rpki-client