$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json) Hash identifier: TOCaoT1CesFfWEYYu8bl0IuApm51Kkh8OSLq2Cxyb5E= Subject key identifier: 34:D7:B2:7B:CE:3A:9F:34:FF:10:B2:95:7C:18:33:FF:6D:9D:48:36 Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Certificate serial: 129F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft Manifest number: 4751 Signing time: Wed 02 Jul 2025 14:21:14 +0000 Manifest this update: Wed 02 Jul 2025 14:21:14 +0000 Manifest next update: Wed 09 Jul 2025 14:21:14 +0000 Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: Es3vJvnXrFA22fVga6Z9cw+Tec/JzyU57y/O3R2C4gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4767 (0x129f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Validity Not Before: Jul 2 14:21:14 2025 GMT Not After : Jul 9 14:21:14 2025 GMT Subject: CN=6865405a-412c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8f:cf:55:fb:99:97:41:c4:16:c4:6b:9e:32: 6d:3d:b0:e6:72:3c:bd:e1:7d:61:eb:9f:e0:19:a6: 99:ba:8f:01:13:33:b9:aa:d9:ac:43:c7:42:4a:19: 94:ba:b8:84:23:c5:cf:9c:16:46:a9:7e:c1:92:a9: 0d:5e:66:e8:e6:62:79:49:3e:bd:4b:53:d8:7e:84: 67:eb:52:5d:cb:80:20:2b:6d:7f:25:cc:3c:5a:c3: 9b:07:cc:3a:84:46:bc:39:83:ab:2b:7c:e2:d3:b6: 9d:d6:8a:e0:03:5c:63:68:c3:13:2c:3b:93:95:3c: dd:68:4a:4a:b6:a7:40:a4:d4:7e:cd:36:2d:6a:0a: f5:c1:29:60:0d:ff:91:93:bd:20:1d:6b:03:97:de: f4:7e:c6:b0:b7:3a:8b:89:d6:3e:9c:7b:8d:f9:df: e7:56:c4:50:60:57:84:09:d6:85:21:0e:84:b9:4f: 7e:9b:ea:e7:af:6c:d3:a0:24:ec:27:d0:98:44:57: 79:18:1a:bb:98:3e:37:1c:6d:64:57:9b:68:e6:47: 2a:db:bb:67:08:ab:d9:16:3d:0e:01:8c:d7:1a:a8: df:dd:88:75:ee:5c:7e:50:15:ad:f4:86:78:17:45: a0:e8:44:23:73:f2:29:dd:c9:30:7f:ed:09:90:90: d2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D7:B2:7B:CE:3A:9F:34:FF:10:B2:95:7C:18:33:FF:6D:9D:48:36 X509v3 Authority Key Identifier: keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:82:7c:0a:13:35:b4:38:6c:58:e3:63:49:31:8e:a0:36:17: 12:b8:31:d4:62:b6:f2:e0:87:ef:dc:1b:e6:d1:4d:3d:cf:47: d3:da:3e:bc:ab:55:2a:b3:f2:51:0d:5a:aa:fd:fd:ce:64:3a: 20:82:af:fb:42:c8:81:a7:8c:61:c1:d6:af:a1:80:b5:9a:ed: 2a:ef:88:42:db:bd:ec:ff:d8:eb:28:68:7c:3b:d3:97:50:4f: ce:f3:62:88:6e:81:d3:e9:e0:aa:06:16:5e:88:34:5a:c2:fa: 61:cc:d9:3f:ed:b5:17:89:c4:45:1b:b6:ad:aa:68:41:bc:00: b0:49:af:41:e8:77:dd:76:b8:55:d9:c3:85:a7:77:47:2a:e2: 11:bf:2a:fc:76:72:f9:34:d7:1b:c7:b1:6a:ae:05:ee:48:ba: b3:51:af:e0:d5:7e:44:44:32:f2:3d:de:28:1f:c7:64:b0:c6: f9:e9:42:4a:a0:ae:53:1a:f7:01:16:46:24:59:94:98:06:26: 1b:e5:e9:86:2b:d2:79:28:5b:93:a2:be:ac:25:9f:5b:4e:c5: b0:63:ba:20:98:59:80:5f:68:dd:54:ac:08:a8:92:92:d1:b7: f9:ce:40:1d:19:ee:c2:13:7e:46:6d:57:45:2a:24:a0:28:89: ee:21:6b:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5 RUJDMDE4MjQwHhcNMjUwNzAyMTQyMTE0WhcNMjUwNzA5MTQyMTE0WjAYMRYwFAYD VQQDEw02ODY1NDA1YS00MTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34/PVfuZl0HEFsRrnjJtPbDmcjy94X1h65/gGaaZuo8BEzO5qtmsQ8dCShmU uriEI8XPnBZGqX7BkqkNXmbo5mJ5ST69S1PYfoRn61Jdy4AgK21/Jcw8WsObB8w6 hEa8OYOrK3zi07ad1orgA1xjaMMTLDuTlTzdaEpKtqdApNR+zTYtagr1wSlgDf+R k70gHWsDl970fsawtzqLidY+nHuN+d/nVsRQYFeECdaFIQ6EuU9+m+rnr2zToCTs J9CYRFd5GBq7mD43HG1kV5to5kcq27tnCKvZFj0OAYzXGqjf3Yh17lx+UBWt9IZ4 F0Wg6EQjc/Ip3ckwf+0JkJDS9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTXsnvO Op80/xCylXwYM/9tnUg2MB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq U05namZPTjFsNVdldkFHQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOgnwKEzW0OGxY42NJMY6gNhcSuDHUYrby4Ifv3Bvm0U09z0fT2j68 q1Uqs/JRDVqq/f3OZDoggq/7QsiBp4xhwdavoYC1mu0q74hC273s/9jrKGh8O9OX UE/O82KIboHT6eCqBhZeiDRawvphzNk/7bUXicRFG7atqmhBvACwSa9B6HfddrhV 2cOFp3dHKuIRvyr8dnL5NNcbx7FqrgXuSLqzUa/g1X5ERDLyPd4oH8dksMb56UJK oK5TGvcBFkYkWZSYBiYb5emGK9J5KFuTor6sJZ9bTsWwY7ogmFmAX2jdVKwIqJKS 0bf5zkAdGe7CE35GbVdFKiSgKInuIWu2 -----END CERTIFICATE-----Generated at Thu Jul 3 23:23:32 2025 by rpki-client