$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: PKcOIqK33/K8+DzdzJNt7hh8Fg+5l5y9i6DUwbnhW/0= Subject key identifier: 17:FB:6A:7C:C7:CD:FE:C1:74:99:15:E7:D5:AD:B9:BB:16:1A:86:16 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 0854 Signing time: Mon 30 Jun 2025 20:55:36 +0000 Manifest this update: Mon 30 Jun 2025 20:55:35 +0000 Manifest next update: Mon 07 Jul 2025 20:55:35 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: zbultjZmKF8qgO4RgmyS+ahixmH+V8ChHuhXa0mZ9nA=) 2: 3443D714D46111ECB708EA24C4F9AE02.roa (hash: cLcDxJaeMDwKIqi4j9iCoiD5WtzTHERGSbREs6JVCus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Jun 30 20:55:35 2025 GMT Not After : Jul 7 20:55:35 2025 GMT Subject: CN=6862f9c8-9699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1c:83:be:d9:0c:0a:aa:aa:31:7a:c3:5e:5c: ab:b2:9c:2d:71:6e:f1:3c:d8:4e:fa:c8:e6:e7:86: b8:66:99:49:14:5a:60:90:7c:3a:02:fd:2f:d2:c5: 78:77:9b:91:86:f3:63:45:e0:21:61:85:29:4e:39: 17:d6:64:06:85:54:77:46:dd:de:59:52:1f:ba:a5: 82:eb:62:b2:29:af:ba:11:dd:85:72:80:68:fc:75: c4:17:19:76:d3:bd:70:97:d2:bc:f5:61:49:f8:32: 11:70:f3:99:14:95:0b:c6:65:c8:4e:52:36:68:73: cc:c1:9f:cb:9c:9b:ff:24:66:87:7f:dc:08:97:3f: 45:0f:39:f6:f7:b3:91:e1:a6:41:68:16:e0:4e:c4: 8d:a5:19:57:c4:0f:d5:5b:09:04:6b:0c:6f:5b:b1: 1f:84:e8:4c:55:fd:3e:7a:28:1a:dc:fa:41:5f:3f: 64:6f:a0:40:a0:00:ff:61:42:60:e2:b5:23:e0:e2: 2a:39:ed:92:c9:b8:94:7e:d5:c0:c6:de:44:63:31: 14:3c:da:e4:d0:c3:8e:bb:d7:d7:bf:2d:14:35:b9: d3:a1:5f:b3:e7:6c:2c:60:a3:06:45:2a:b3:58:25: 4f:90:1c:df:cd:37:ba:b5:e6:f0:db:b9:03:13:bb: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FB:6A:7C:C7:CD:FE:C1:74:99:15:E7:D5:AD:B9:BB:16:1A:86:16 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:08:70:d5:f0:8b:46:2f:3b:1b:1b:8a:0d:43:5c:e4:e4:26: 5e:1f:97:82:0b:d1:cf:36:85:40:ab:f6:43:57:aa:8d:58:68: fe:46:f1:80:24:84:4d:0f:c6:6a:80:0a:8f:af:00:96:a6:7c: 9f:49:42:64:c9:2e:4f:29:27:77:86:b3:4e:7c:55:02:fd:9f: 29:73:fb:42:30:24:a3:65:85:05:1b:74:33:70:c9:e3:d7:1f: 13:91:b4:5c:37:d5:36:a1:3a:df:92:62:19:fc:8b:75:67:48: 4e:88:c8:0e:7b:53:7f:51:bb:fd:18:9d:e4:b9:af:cb:4c:8d: 32:e3:5d:90:0d:e3:00:b1:94:61:93:a2:96:7e:39:80:e6:01: 5f:55:d3:e0:1e:ec:31:f4:27:2b:19:b7:3e:1d:65:2d:7f:4a: c3:b5:e6:f7:d2:fe:f2:70:8d:48:89:5a:b2:01:ef:5b:47:5b: 94:56:b5:85:ba:18:2f:67:b1:d1:b6:a5:25:2e:f6:6a:3c:ec: b9:29:bc:ff:bf:0e:0e:48:73:24:96:ed:bc:16:a0:a2:d8:bb: 64:af:4d:89:76:05:38:29:33:16:8a:f3:f9:54:7f:53:e3:08: 7d:4b:d4:e9:bb:20:7b:b1:6a:14:55:8a:54:f3:d3:f6:a7:cc: 8a:9c:0b:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUwNjMwMjA1NTM1WhcNMjUwNzA3MjA1NTM1WjAYMRYwFAYD VQQDEw02ODYyZjljOC05Njk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RyDvtkMCqqqMXrDXlyrspwtcW7xPNhO+sjm54a4ZplJFFpgkHw6Av0v0sV4 d5uRhvNjReAhYYUpTjkX1mQGhVR3Rt3eWVIfuqWC62KyKa+6Ed2FcoBo/HXEFxl2 071wl9K89WFJ+DIRcPOZFJULxmXITlI2aHPMwZ/LnJv/JGaHf9wIlz9FDzn297OR 4aZBaBbgTsSNpRlXxA/VWwkEawxvW7EfhOhMVf0+eiga3PpBXz9kb6BAoAD/YUJg 4rUj4OIqOe2SybiUftXAxt5EYzEUPNrk0MOOu9fXvy0UNbnToV+z52wsYKMGRSqz WCVPkBzfzTe6tebw27kDE7tS+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf7anzH zf7BdJkV59WtubsWGoYWMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8CHDV8ItGLzsbG4oNQ1zk5CZeH5eCC9HPNoVAq/ZDV6qNWGj+RvGA JIRND8ZqgAqPrwCWpnyfSUJkyS5PKSd3hrNOfFUC/Z8pc/tCMCSjZYUFG3QzcMnj 1x8TkbRcN9U2oTrfkmIZ/It1Z0hOiMgOe1N/Ubv9GJ3kua/LTI0y412QDeMAsZRh k6KWfjmA5gFfVdPgHuwx9CcrGbc+HWUtf0rDteb30v7ycI1IiVqyAe9bR1uUVrWF uhgvZ7HRtqUlLvZqPOy5Kbz/vw4OSHMklu28FqCi2Ltkr02JdgU4KTMWivP5VH9T 4wh9S9TpuyB7sWoUVYpU89P2p8yKnAtX -----END CERTIFICATE-----Generated at Tue Jul 1 20:57:04 2025 by rpki-client