$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: hyAB5etwnf+kR88n72b/3FN1Cu+yfb7133hw54YzYSo= Subject key identifier: FA:9A:2F:C2:83:1B:10:67:83:1C:65:56:78:D2:6C:D8:2C:D0:C1:00 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 03DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 03D6 Signing time: Thu 03 Jul 2025 00:56:47 +0000 Manifest this update: Thu 03 Jul 2025 00:56:47 +0000 Manifest next update: Thu 10 Jul 2025 00:56:47 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: 5JjVIFgYoh1E69m0vGKJHgCuJaAieiprJEHZoH8LynQ=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Jul 3 00:56:47 2025 GMT Not After : Jul 10 00:56:47 2025 GMT Subject: CN=6865d54f-6f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:e3:46:42:e7:95:66:f0:b0:93:25:89:7f: d2:6e:bc:3b:ca:61:79:b0:d4:62:6f:86:7f:45:0f: b5:7b:fd:1f:25:2f:73:c6:02:b4:43:e1:78:c3:42: 19:39:96:45:5c:f9:f8:fd:c2:fa:6c:e0:ef:90:e5: 0b:d6:2d:27:8a:1d:d9:8f:17:f1:bd:1f:52:30:82: ad:9c:18:54:84:61:7f:40:4f:e2:a8:f7:fa:9e:18: 79:6e:e2:ec:be:93:d9:e7:dc:d5:98:e2:ed:8a:74: 90:af:b0:d5:db:a2:4d:3e:64:a2:33:71:92:62:08: 52:ec:7c:fc:65:76:89:0f:09:c3:a5:45:6b:85:08: 89:6b:f6:0d:fc:fb:9e:aa:32:a7:2e:47:c6:73:0d: 8e:81:15:2f:62:d4:1b:b2:5b:1b:d8:b0:4f:f5:2c: d6:e2:0f:53:b2:3d:d7:59:4a:46:47:c7:1c:d4:87: 6d:b4:99:8f:38:13:c6:88:05:f8:72:36:98:00:f7: cc:b7:43:c8:34:63:f0:d2:6a:ae:19:12:38:e3:18: b3:bc:e4:76:58:83:c6:5e:dd:cf:12:38:05:db:50: 8a:8f:93:09:ae:34:e1:ee:ae:25:ca:9d:8a:11:f9: ce:58:66:26:75:06:a0:91:1b:c2:b0:81:5c:62:8b: 60:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9A:2F:C2:83:1B:10:67:83:1C:65:56:78:D2:6C:D8:2C:D0:C1:00 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8e:6b:90:cc:80:71:1c:bb:e4:72:2e:30:40:90:3e:94:0d: b1:57:f0:4f:b1:f1:95:b6:22:ff:92:87:c2:e9:7b:b7:5f:64: 7f:ba:3d:98:b8:9d:ac:72:52:a0:84:e1:e1:64:f1:ba:c9:41: 1f:81:68:af:6c:4c:31:d1:40:41:c7:9b:4f:4b:9f:15:e5:3d: c7:a8:a6:6d:1d:d1:94:d4:58:5f:96:15:45:98:91:1d:39:8f: e8:c3:ba:e2:ae:4c:ee:4a:2d:8b:5a:ad:78:0f:10:5e:6e:2d: c0:26:36:d2:7b:d2:3b:ac:6f:77:91:88:bc:e3:93:ab:a3:4b: 95:2f:0d:16:25:36:b0:57:8e:5a:80:92:96:70:2d:d4:a5:a1: 36:e0:53:10:25:9d:0d:bc:ff:57:6a:5e:b7:f8:07:5b:9a:42: 21:a7:84:8a:53:dd:b2:30:eb:df:e3:70:5a:60:e9:fb:f0:c4: 75:9a:ed:74:10:25:33:04:4c:5b:f5:00:9d:99:fb:5f:67:4f: 3d:ac:e8:e2:91:bd:00:53:34:89:83:67:f5:3c:1d:a0:e6:aa: a7:b0:34:8c:e2:aa:d7:fb:30:95:b4:c3:b4:0f:31:ea:bf:c1: 5e:18:97:9b:37:87:bb:ad:0d:3a:af:e7:6a:84:90:92:7a:6b: de:b6:86:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjUwNzAzMDA1NjQ3WhcNMjUwNzEwMDA1NjQ3WjAYMRYwFAYD VQQDEw02ODY1ZDU0Zi02ZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq63jRkLnlWbwsJMliX/Sbrw7ymF5sNRib4Z/RQ+1e/0fJS9zxgK0Q+F4w0IZ OZZFXPn4/cL6bODvkOUL1i0nih3ZjxfxvR9SMIKtnBhUhGF/QE/iqPf6nhh5buLs vpPZ59zVmOLtinSQr7DV26JNPmSiM3GSYghS7Hz8ZXaJDwnDpUVrhQiJa/YN/Pue qjKnLkfGcw2OgRUvYtQbslsb2LBP9SzW4g9Tsj3XWUpGR8cc1IdttJmPOBPGiAX4 cjaYAPfMt0PINGPw0mquGRI44xizvOR2WIPGXt3PEjgF21CKj5MJrjTh7q4lyp2K EfnOWGYmdQagkRvCsIFcYotg0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqaL8KD GxBngxxlVnjSbNgs0MEAMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBajmuQzIBxHLvkci4wQJA+lA2xV/BPsfGVtiL/kofC6Xu3X2R/uj2Y uJ2sclKghOHhZPG6yUEfgWivbEwx0UBBx5tPS58V5T3HqKZtHdGU1FhflhVFmJEd OY/ow7rirkzuSi2LWq14DxBebi3AJjbSe9I7rG93kYi845Oro0uVLw0WJTawV45a gJKWcC3UpaE24FMQJZ0NvP9Xal63+AdbmkIhp4SKU92yMOvf43BaYOn78MR1mu10 ECUzBExb9QCdmftfZ089rOjikb0AUzSJg2f1PB2g5qqnsDSM4qrX+zCVtMO0DzHq v8FeGJebN4e7rQ06r+dqhJCSemvetoZQ -----END CERTIFICATE-----Generated at Thu Jul 3 07:58:41 2025 by rpki-client