$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json) Hash identifier: zExduVOsT490MnHkocP2dknjZJwGfc9Nu8WZfgJYEeE= Subject key identifier: AC:95:F2:04:4B:C4:28:82:C5:BC:84:BA:C4:F6:AF:CE:A9:75:D7:90 Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft Manifest number: 79 Signing time: Tue 01 Jul 2025 07:30:03 +0000 Manifest this update: Tue 01 Jul 2025 07:30:03 +0000 Manifest next update: Tue 08 Jul 2025 07:30:03 +0000 Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: RtInXVzstyqvniXdoBocJ4t31zD2whHql7HmJThaiIM=) 2: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: buSMZTKEc3PdwiMwBtG/n0gmpQCMqdjfMf4AjKQfjyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Jul 1 07:30:03 2025 GMT Not After : Jul 8 07:30:03 2025 GMT Subject: CN=68638e7b-3688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:26:45:fa:d3:0e:64:78:f9:dd:02:d7:f5: aa:4e:4d:dc:8c:0b:3a:9f:9c:53:c8:b7:28:91:5c: ac:f4:a8:fa:21:a8:86:a7:46:4d:73:a1:cf:6d:47: c3:7f:b0:ff:50:c8:69:0e:75:d1:67:b2:b7:9f:6b: 94:ec:1e:f1:71:86:ae:b1:22:02:95:2d:10:98:28: bf:c0:2b:47:99:41:41:88:48:ea:5c:a2:0d:38:76: e2:0f:ea:f4:3b:13:e5:e6:d1:dd:04:37:45:e2:f8: 50:b9:ad:02:6a:43:f9:64:bc:ec:22:ea:8b:73:78: b8:0b:57:48:35:1f:17:6d:ae:f6:2a:d2:11:09:98: c2:3f:9e:c0:53:4c:23:5c:16:cc:70:2b:ad:af:11: 7d:34:20:46:a2:53:7a:10:f2:b4:06:ae:01:ac:9b: d4:94:85:b2:90:5e:ce:d7:f8:7f:c8:85:3f:cb:ff: d8:65:b7:35:f5:97:55:7c:0b:4a:e6:e6:08:65:f9: 44:f0:70:92:a9:0f:25:1c:1a:6d:50:cf:ea:7e:60: 06:5e:80:43:73:9a:62:2b:68:8f:44:59:29:6f:63: e9:f3:c5:2b:b5:65:32:91:a3:8d:55:6e:5c:3a:0f: c9:78:0a:b4:45:3c:c6:5d:20:a4:e3:7d:fd:51:a2: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:95:F2:04:4B:C4:28:82:C5:BC:84:BA:C4:F6:AF:CE:A9:75:D7:90 X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:4d:e2:cb:c5:ee:f2:d0:4e:18:ca:9a:30:d7:e9:32:c7:fa: 06:b2:4b:28:25:b0:28:f7:9f:5b:08:3d:57:9d:90:df:00:cf: e3:bb:94:84:a4:95:b2:bf:24:7f:fb:be:30:de:8a:ae:13:54: 62:bc:d3:7a:54:85:54:a8:0d:c0:3b:f6:22:59:fe:e9:a2:46: 73:7e:b4:98:22:54:5d:54:7e:fc:46:dd:7d:47:13:a6:98:b8: b7:cf:4f:e1:c9:0f:4b:47:a4:da:ee:9f:3b:c4:e9:39:86:12: 38:79:6f:13:27:56:a4:3d:44:56:c3:01:62:d7:c6:9d:53:a2: 39:a7:eb:d8:3d:5e:33:b4:40:01:8c:67:16:86:bd:09:95:0b: a3:04:08:1b:45:0d:0e:5d:17:11:e7:49:f3:4e:ed:57:80:cf: 75:15:3f:39:15:d6:fa:a6:70:97:21:80:76:98:8b:d3:e3:78: f2:dc:39:95:87:92:a2:19:d2:3a:af:2d:64:a8:b5:10:17:40: 32:fd:cf:29:36:82:19:cd:18:2c:12:8c:8f:ac:50:97:89:1a: 38:a2:96:cc:27:a3:7c:25:8d:a8:8f:61:0d:a0:8f:49:21:81: 7b:02:b9:b0:e1:07:37:ab:3a:ca:c3:76:e4:4b:e5:2d:e7:64: 81:3f:4c:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkZCRTExMC8GA1UEBRMoN0Y5NkFFMEEyMkNBOTM4QkQ1RjlEOUE3MzI4QUY1ODM2 MkVCMjJDMTAeFw0yNTA3MDEwNzMwMDNaFw0yNTA3MDgwNzMwMDNaMBgxFjAUBgNV BAMTDTY4NjM4ZTdiLTM2ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh7yZF+tMOZHj53QLX9apOTdyMCzqfnFPItyiRXKz0qPohqIanRk1zoc9tR8N/ sP9QyGkOddFnsrefa5TsHvFxhq6xIgKVLRCYKL/AK0eZQUGISOpcog04duIP6vQ7 E+Xm0d0EN0Xi+FC5rQJqQ/lkvOwi6otzeLgLV0g1HxdtrvYq0hEJmMI/nsBTTCNc FsxwK62vEX00IEaiU3oQ8rQGrgGsm9SUhbKQXs7X+H/IhT/L/9hltzX1l1V8C0rm 5ghl+UTwcJKpDyUcGm1Qz+p+YAZegENzmmIraI9EWSlvY+nzxSu1ZTKRo41Vblw6 D8l4CrRFPMZdIKTjff1RohGrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrJXyBEvE KILFvIS6xPavzql115AwHwYDVR0jBBgwFoAUf5auCiLKk4vV+dmnMor1g2LrIsEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRkJFLzQyMTU5RjVBOUQw MjExRUY5OUNDODYwOUM0RjlBRTAyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZjVhdUNpTEtrNHZWLWRtbk1vcjFnMkxySXNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RkJFLzQyMTU5RjVBOUQwMjExRUY5OUNDODYwOUM0RjlBRTAyL2Y1YXVDaUxLazR2 Vi1kbW5Nb3IxZzJMcklzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALBN4svF7vLQThjKmjDX6TLH+gaySyglsCj3n1sIPVedkN8Az+O7lISk lbK/JH/7vjDeiq4TVGK803pUhVSoDcA79iJZ/umiRnN+tJgiVF1UfvxG3X1HE6aY uLfPT+HJD0tHpNrunzvE6TmGEjh5bxMnVqQ9RFbDAWLXxp1Tojmn69g9XjO0QAGM ZxaGvQmVC6MECBtFDQ5dFxHnSfNO7VeAz3UVPzkV1vqmcJchgHaYi9PjePLcOZWH kqIZ0jqvLWSotRAXQDL9zyk2ghnNGCwSjI+sUJeJGjiilswno3wljaiPYQ2gj0kh gXsCubDhBzerOsrDduRL5S3nZIE/TIo= -----END CERTIFICATE-----Generated at Thu Jul 3 05:59:53 2025 by rpki-client