$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft File: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json) Hash identifier: enAzVImweTgDt624ATD6uIIIkpkZfpCG47weRMSa54c= Subject key identifier: 76:10:4D:6A:A9:B2:23:EA:EE:39:7C:8F:CA:9E:EE:0B:7E:60:41:4B Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F Certificate issuer: /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft Manifest number: 058F Signing time: Wed 02 Jul 2025 23:33:12 +0000 Manifest this update: Wed 02 Jul 2025 23:33:11 +0000 Manifest next update: Wed 09 Jul 2025 23:33:11 +0000 Files and hashes: 1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: gLoNMhMGr8Zr9jOg6vL+CwEIA709RaZRF7/nbaIXIWw=) 2: 05A2A4008FE811EEACB1296AC4F9AE02.roa (hash: OvWek+7GoTr0MOzRQOUQXIl3oHCUTRccIlCGDYFLUR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F Validity Not Before: Jul 2 23:33:11 2025 GMT Not After : Jul 9 23:33:11 2025 GMT Subject: CN=6865c1b7-2423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:bf:71:59:b0:a0:ba:ce:e2:1d:72:55:77: 19:41:0c:2c:6e:40:e8:d0:9e:02:22:14:25:a5:fa: 46:1b:48:ef:14:b6:3c:fc:f6:14:9b:81:ec:b0:f4: 93:17:1a:ac:14:ed:b4:0c:73:4d:f5:9c:0d:68:aa: 5b:83:66:2e:7f:67:ec:39:b3:13:ad:bb:1e:3c:b1: 74:1c:ed:6b:47:2a:41:8b:fe:82:9b:f4:de:4a:be: 35:b8:98:a0:89:83:9b:75:37:67:f5:06:4b:4b:e8: ff:21:2f:32:4c:6d:ac:63:98:6c:c8:34:a1:72:1f: 61:04:65:16:f3:a8:68:c3:36:a3:58:65:5a:93:91: e7:f9:fe:f1:42:ea:f2:e3:a0:ce:fc:45:4d:4b:ed: 90:ab:08:88:dc:a0:9c:ce:be:3d:9d:d1:be:f3:7d: f7:2d:4f:45:e7:7f:3c:e1:a0:67:39:66:a0:24:ce: 8d:ff:ba:18:b8:ea:c6:4a:65:dd:a7:f8:e2:40:3a: f7:45:63:72:72:3d:09:0a:17:a8:7c:be:40:90:f7: 4d:d9:d3:44:3f:cc:31:31:41:52:af:ff:fb:e9:ba: 5a:19:4a:95:d3:5c:16:04:16:78:7d:9a:a6:66:87: 9f:bb:9b:1c:62:d8:da:3a:d5:96:88:95:5c:c2:1c: fd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:10:4D:6A:A9:B2:23:EA:EE:39:7C:8F:CA:9E:EE:0B:7E:60:41:4B X509v3 Authority Key Identifier: keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:33:ae:43:cc:47:9e:78:93:cd:e7:83:01:15:dd:07:3c:78: ab:46:8a:4d:5e:f8:b0:cd:ce:b1:ae:92:b2:0d:bb:e0:3a:8c: 37:f8:bf:cf:3c:21:18:18:20:76:5b:9b:ea:54:7b:9a:97:fb: 83:38:b5:bf:7d:c4:74:20:d0:60:42:be:27:3f:cb:75:c9:d9: ea:9b:9e:9d:9c:d8:ac:79:23:0d:28:1a:1d:3d:4d:d2:99:00: ea:1b:bd:c4:33:2a:ff:4f:b4:1c:0e:7e:72:9a:7f:de:c6:f5: fc:a7:5f:14:18:cb:e2:72:0b:2d:35:ca:6b:49:e2:d0:ee:4a: cd:26:a8:4d:a4:c4:02:f4:58:89:57:64:4a:08:9b:2e:f4:ee: 31:2b:7d:b3:6e:e4:1c:2a:9d:0d:31:cd:4a:26:00:6e:77:14: 4a:37:ac:46:64:32:1f:81:6f:08:a1:cc:75:cd:23:41:5a:b5: d1:23:d4:c6:cd:a7:3d:bb:ec:ae:86:22:70:ad:9c:f0:d3:b1: b0:11:ae:82:ec:ae:b9:d5:18:10:f9:51:b4:05:3f:65:59:8d: 96:e7:80:5b:85:0f:14:29:93:ab:51:b5:13:7b:50:f9:03:5b: 8a:43:1a:ca:23:a0:5c:cc:81:04:19:2f:b9:af:fd:a1:28:55: 03:0c:30:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQkUxMTAvBgNVBAUTKEQ3MEU1OTRCODFBMTY1OEMyQURERjRBMzI2OEVGOUNG MDhGOTY1MEYwHhcNMjUwNzAyMjMzMzExWhcNMjUwNzA5MjMzMzExWjAYMRYwFAYD VQQDEw02ODY1YzFiNy0yNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnO/cVmwoLrO4h1yVXcZQQwsbkDo0J4CIhQlpfpGG0jvFLY8/PYUm4HssPST FxqsFO20DHNN9ZwNaKpbg2Yuf2fsObMTrbsePLF0HO1rRypBi/6Cm/TeSr41uJig iYObdTdn9QZLS+j/IS8yTG2sY5hsyDShch9hBGUW86howzajWGVak5Hn+f7xQury 46DO/EVNS+2QqwiI3KCczr49ndG+8333LU9F53884aBnOWagJM6N/7oYuOrGSmXd p/jiQDr3RWNycj0JCheofL5AkPdN2dNEP8wxMUFSr//76bpaGUqV01wWBBZ4fZqm Zoefu5scYtjaOtWWiJVcwhz9EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYQTWqp siPq7jl8j8qe7gt+YEFLMB8GA1UdIwQYMBaAFNcOWUuBoWWMKt30oyaO+c8I+WUP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZCRS83NDIyMzcwNkRB RkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZd3EzZlNqSm83NXp3ajVa UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF3NVpTNEdoWll3cTNmU2pKbzc1endqNVpROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZCRS83NDIyMzcwNkRBRkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZ d3EzZlNqSm83NXp3ajVaUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4M65DzEeeeJPN54MBFd0HPHirRopNXviwzc6xrpKyDbvgOow3+L/P PCEYGCB2W5vqVHual/uDOLW/fcR0INBgQr4nP8t1ydnqm56dnNiseSMNKBodPU3S mQDqG73EMyr/T7QcDn5ymn/exvX8p18UGMvicgstNcprSeLQ7krNJqhNpMQC9FiJ V2RKCJsu9O4xK32zbuQcKp0NMc1KJgBudxRKN6xGZDIfgW8Iocx1zSNBWrXRI9TG zac9u+yuhiJwrZzw07GwEa6C7K651RgQ+VG0BT9lWY2W54BbhQ8UKZOrUbUTe1D5 A1uKQxrKI6BczIEEGS+5r/2hKFUDDDB2 -----END CERTIFICATE-----Generated at Thu Jul 3 11:41:36 2025 by rpki-client