$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: lPQDhcOoPyYerXxqoEPtqo4ldX2uf5/NK1lt4S54C38= Subject key identifier: 75:78:B4:85:CE:0A:D7:95:8A:18:BC:BB:BB:43:80:A6:8D:DD:DA:F5 Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 0155 Signing time: Thu 03 Jul 2025 04:14:51 +0000 Manifest this update: Thu 03 Jul 2025 04:14:50 +0000 Manifest next update: Thu 10 Jul 2025 04:14:50 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: WX9tcLnADxc/zBn4gMT4OD2agugoxQu5w2tNaqJ3pTE=) 2: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: W2nP9JOONlKqK4NCPj/Qx89sx6/xDl/kU79SU2cQL5s=) 3: 6171A1E0F3FC11EF8D463030C4F9AE02.roa (hash: SaPyXfhw3tZDk0uJ1qGtWHP6Pbo8zXu054TW5a1GfAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: Jul 3 04:14:50 2025 GMT Not After : Jul 10 04:14:50 2025 GMT Subject: CN=686603ba-d763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:40:d3:82:de:7b:26:93:51:6b:d1:f1:1a: d9:53:85:f4:d8:78:64:d0:18:89:2c:b8:82:fb:34: 01:97:bb:fb:c3:61:aa:99:b8:93:8f:9d:34:a0:9b: 2d:41:7e:6e:48:b2:d2:15:f5:66:9b:af:28:bf:ad: 24:d3:88:eb:ba:6d:7e:19:cf:26:af:c4:8b:3d:4a: b1:33:b1:a2:45:a0:38:01:48:2a:c7:fe:e1:e6:1c: 4a:fb:8e:1b:0f:66:d1:8a:88:52:56:16:90:4e:ec: dc:3c:b3:90:a0:e6:e5:b7:6c:2a:70:59:90:99:a5: 2d:9d:6e:fd:4b:f9:28:6f:1f:c7:05:ff:bb:49:76: 61:1f:7b:3a:67:f7:57:0c:70:0d:b5:ed:4f:73:ac: 3e:72:ee:74:b9:c1:ea:8f:b6:9c:24:dc:7e:d9:a6: bf:2d:6f:35:7f:a5:a7:e2:e8:0e:5d:3f:5a:6a:eb: 23:0e:6e:75:04:06:0d:f2:7f:54:6b:c3:66:bd:e7: 42:f0:bf:99:9f:01:8c:08:93:65:a8:1f:7d:3f:e6: 35:36:f4:fa:21:a8:20:1f:a0:10:4c:47:8a:d9:09: 69:4d:e9:fc:5c:ee:24:ac:d9:18:3d:67:f4:06:f8: d8:7f:6d:bd:97:65:cf:5c:ab:62:e3:3e:64:6d:19: 08:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:78:B4:85:CE:0A:D7:95:8A:18:BC:BB:BB:43:80:A6:8D:DD:DA:F5 X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:10:1b:c8:b2:fd:30:ae:a3:40:e5:85:35:8f:b0:92:3c:de: 6b:c5:e5:5d:ee:9a:fd:aa:d5:70:7d:d6:5a:35:4c:c3:39:0e: 2e:de:9f:d4:2a:91:5a:42:9f:01:35:93:a2:53:53:2c:c7:d2: cb:b4:f4:b9:98:46:15:e6:88:98:b9:21:f1:82:14:79:3d:61: d9:9f:81:f4:76:5e:43:e8:e7:6b:e5:00:5e:3f:0c:65:1a:0c: f7:52:3d:e9:e8:74:e0:80:f7:5c:ca:af:ac:c9:2c:39:19:d8: 3c:15:ad:dd:53:07:64:bd:80:1e:b3:81:bd:ff:4a:fd:6f:4a: 6f:8b:76:2f:48:f2:d0:c1:14:46:04:ae:ca:cc:82:b8:c5:9b: 41:09:8a:19:7c:ea:a9:b5:da:0f:74:19:98:3a:26:63:39:7f: 85:e2:4f:67:c1:08:10:e0:a1:10:a2:e8:96:df:0a:47:19:99: 5f:f5:0c:a9:31:15:63:fb:95:04:51:ff:eb:53:67:3f:57:b9: 1f:95:ac:1d:54:10:2e:ef:01:14:73:e2:5f:5c:4a:3e:00:31: 12:14:60:33:08:9f:bd:6f:45:01:50:6d:04:95:3f:47:d0:98: 10:63:e1:b0:f9:2d:d5:7e:65:fb:3b:b0:c2:5e:69:ad:f2:b2: 44:28:fc:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjUwNzAzMDQxNDUwWhcNMjUwNzEwMDQxNDUwWjAYMRYwFAYD VQQDEw02ODY2MDNiYS1kNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumtA04LeeyaTUWvR8RrZU4X02Hhk0BiJLLiC+zQBl7v7w2GqmbiTj500oJst QX5uSLLSFfVmm68ov60k04jrum1+Gc8mr8SLPUqxM7GiRaA4AUgqx/7h5hxK+44b D2bRiohSVhaQTuzcPLOQoOblt2wqcFmQmaUtnW79S/kobx/HBf+7SXZhH3s6Z/dX DHANte1Pc6w+cu50ucHqj7acJNx+2aa/LW81f6Wn4ugOXT9aausjDm51BAYN8n9U a8NmvedC8L+ZnwGMCJNlqB99P+Y1NvT6IaggH6AQTEeK2QlpTen8XO4krNkYPWf0 BvjYf229l2XPXKti4z5kbRkIDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHV4tIXO CteVihi8u7tDgKaN3dr1MB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/EBvIsv0wrqNA5YU1j7CSPN5rxeVd7pr9qtVwfdZaNUzDOQ4u3p/U KpFaQp8BNZOiU1Msx9LLtPS5mEYV5oiYuSHxghR5PWHZn4H0dl5D6Odr5QBePwxl Ggz3Uj3p6HTggPdcyq+sySw5Gdg8Fa3dUwdkvYAes4G9/0r9b0pvi3YvSPLQwRRG BK7KzIK4xZtBCYoZfOqptdoPdBmYOiZjOX+F4k9nwQgQ4KEQouiW3wpHGZlf9Qyp MRVj+5UEUf/rU2c/V7kflawdVBAu7wEUc+JfXEo+ADESFGAzCJ+9b0UBUG0ElT9H 0JgQY+Gw+S3VfmX7O7DCXmmt8rJEKPxQ -----END CERTIFICATE-----Generated at Thu Jul 3 17:26:26 2025 by rpki-client