$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: qHMgRd2Lss+Tv7z4HlMBYLyphhO3oYMene1RNhmrgHA= Subject key identifier: 22:85:FB:6F:26:AD:2E:34:53:81:56:C4:AD:FF:EC:15:EA:45:FA:B7 Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 146A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 144B Signing time: Wed 02 Jul 2025 17:25:25 +0000 Manifest this update: Wed 02 Jul 2025 17:25:24 +0000 Manifest next update: Wed 09 Jul 2025 17:25:24 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: rcIkI+RmELEKxid3CUVZyyUD99aDR9OtnflpM1d1os4=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: mVONh3NQlnjf0MZUDakswZaxc0MehtHQqhXF4LN9kTM=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: u7oqRMExCmv2yUvpdQUhy93ikSgUZkKJq35cWOYkBRM=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: HeOXE+l6wkAvsNKS3/V3lYq7PF0s3RP42sMzteWX/Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5226 (0x146a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Jul 2 17:25:24 2025 GMT Not After : Jul 9 17:25:24 2025 GMT Subject: CN=68656b85-7396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cb:c7:40:e8:7b:40:85:da:eb:61:b5:fc:ef: 96:ac:46:22:45:ec:20:c1:14:f4:a2:b5:8a:0d:f3: 76:92:f5:cd:43:1b:a4:fa:71:03:ba:7b:9c:72:43: 46:7d:2e:8d:c1:72:a8:1e:c0:79:7d:14:e2:77:ec: e6:f6:a7:ad:b1:bf:69:ff:f6:dc:be:f2:89:8f:61: 27:95:44:33:05:de:6e:90:37:08:25:9e:46:36:7f: 7b:0a:9c:9f:37:03:32:b6:58:b1:1b:33:ab:24:0c: e9:2d:91:66:22:16:38:b2:e3:e1:71:87:e0:9f:b5: 22:b9:69:32:ad:ea:8b:52:f6:19:3e:01:d5:ba:26: 7b:df:b7:5f:36:4b:a7:b5:3c:8c:30:60:fb:b3:85: 2a:08:21:43:75:02:54:9b:e3:fb:69:81:7f:de:bf: 41:a6:d8:0c:9b:62:43:6e:12:5d:f2:44:ff:54:ec: f7:ef:7a:c7:0e:13:35:45:87:30:3c:fa:34:a7:99: 76:7a:3f:22:fb:6c:fc:4e:c8:f8:f7:e3:71:4d:cb: 70:7e:30:61:73:e0:bb:53:30:c6:4e:c7:f4:f3:96: c0:53:5b:80:84:46:b1:f2:a6:83:e9:28:4d:7e:9d: 1a:d1:6c:f8:80:8b:69:64:a4:c3:73:e6:a9:0c:d7: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:85:FB:6F:26:AD:2E:34:53:81:56:C4:AD:FF:EC:15:EA:45:FA:B7 X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:21:8e:c5:3d:2c:34:da:56:fa:9b:c6:26:61:97:0b:41:b5: e0:82:2c:2a:31:3b:f6:7e:02:49:da:ed:db:12:01:50:63:05: 9c:af:bf:4d:55:4c:9f:90:35:d9:26:43:1a:f9:52:4b:59:6b: f5:bd:d8:fd:88:90:cb:dc:ff:a3:65:cd:4d:f4:4b:74:89:8d: 24:dd:a5:49:86:81:45:1d:0c:51:e5:52:a8:a7:9e:b1:a7:93: 7b:88:55:93:9f:e9:ce:45:9d:af:d1:e1:f7:02:dc:f0:b2:70: b1:a3:71:5d:69:20:a7:9e:98:95:69:6e:2e:98:5e:68:7b:da: ab:88:9c:e5:ee:a9:0b:eb:af:a2:10:25:00:c8:b9:2a:80:e4: ba:b3:20:f3:08:d1:0f:bf:eb:cb:ad:2c:5d:04:2d:ee:f2:8d: 04:67:6b:c7:55:a4:f0:77:31:f9:e7:96:26:75:25:d3:79:d2: 52:14:86:69:1d:2a:e1:ca:da:c1:4c:f5:d1:65:3c:ef:8a:51: 20:7a:b4:b1:3d:37:74:0c:b7:0e:78:58:a5:d8:f4:83:2f:84: 53:24:31:80:35:36:a9:48:dc:91:62:6f:c1:bd:59:8a:27:52: ab:6d:b2:a7:38:95:28:2d:fd:21:96:e5:a4:34:a6:a8:8d:15: 21:e3:b0:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjUwNzAyMTcyNTI0WhcNMjUwNzA5MTcyNTI0WjAYMRYwFAYD VQQDEw02ODY1NmI4NS03Mzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MvHQOh7QIXa62G1/O+WrEYiRewgwRT0orWKDfN2kvXNQxuk+nEDunucckNG fS6NwXKoHsB5fRTid+zm9qetsb9p//bcvvKJj2EnlUQzBd5ukDcIJZ5GNn97Cpyf NwMytlixGzOrJAzpLZFmIhY4suPhcYfgn7UiuWkyreqLUvYZPgHVuiZ737dfNkun tTyMMGD7s4UqCCFDdQJUm+P7aYF/3r9BptgMm2JDbhJd8kT/VOz373rHDhM1RYcw PPo0p5l2ej8i+2z8Tsj49+NxTctwfjBhc+C7UzDGTsf085bAU1uAhEax8qaD6ShN fp0a0Wz4gItpZKTDc+apDNfAywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKF+28m rS40U4FWxK3/7BXqRfq3MB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXIY7FPSw02lb6m8YmYZcLQbXggiwqMTv2fgJJ2u3bEgFQYwWcr79N VUyfkDXZJkMa+VJLWWv1vdj9iJDL3P+jZc1N9Et0iY0k3aVJhoFFHQxR5VKop56x p5N7iFWTn+nORZ2v0eH3AtzwsnCxo3FdaSCnnpiVaW4umF5oe9qriJzl7qkL66+i ECUAyLkqgOS6syDzCNEPv+vLrSxdBC3u8o0EZ2vHVaTwdzH555YmdSXTedJSFIZp HSrhytrBTPXRZTzvilEgerSxPTd0DLcOeFil2PSDL4RTJDGANTapSNyRYm/BvVmK J1KrbbKnOJUoLf0hluWkNKaojRUh47A/ -----END CERTIFICATE-----Generated at Thu Jul 3 13:38:01 2025 by rpki-client