$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json) Hash identifier: 3woGIedqGGJDuOwnsNZmFwjVFBodwfIZa34NFgK4UaM= Subject key identifier: B6:5A:C3:F1:33:D9:A2:4E:87:59:8B:E1:FF:71:45:43:0D:23:49:9C Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft Manifest number: 01BE Signing time: Sun 29 Jun 2025 02:09:47 +0000 Manifest this update: Sun 29 Jun 2025 02:09:47 +0000 Manifest next update: Sun 06 Jul 2025 02:09:47 +0000 Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: pOtowu5cGNhgZwDWLc74dNeRtAGaxL/RNxdFz1LiWKU=) 2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: 5/W5EqvBYrwaBbNXisgVsa/BWjLPbFWwbLiAWCjCMGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: Jun 29 02:09:47 2025 GMT Not After : Jul 6 02:09:47 2025 GMT Subject: CN=6860a06b-dd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:06:fa:c2:ea:e7:e8:25:0e:4e:3f:79:a6: e5:ee:be:8f:59:5f:73:90:00:5e:39:88:5f:e5:d1: da:b2:fc:85:6e:8d:99:f2:c9:a5:50:cd:d1:ca:03: 0c:8a:a5:fa:89:fe:98:6f:2f:90:e4:97:b9:e0:d3: b6:c1:d8:65:42:bd:7b:17:a3:40:21:60:80:17:23: 89:d8:d3:68:b8:34:65:91:51:0b:71:aa:51:e7:74: 3f:70:be:95:c4:01:19:d4:08:b7:90:72:d7:1f:7e: 1e:9b:27:6b:7c:0f:b0:a3:9b:66:c7:c6:4a:52:20: 2a:9a:b6:7c:61:8c:59:6d:42:11:3c:a4:15:7b:2b: e1:cc:65:1c:37:c7:77:58:df:f1:2d:8f:b4:1e:84: 9b:76:8b:fb:49:bc:68:07:97:0e:fe:90:df:85:c3: fc:4c:95:da:93:86:ce:65:e9:74:83:7a:c3:e8:ec: 24:7f:34:d6:ea:ab:ea:90:55:6d:bc:c9:35:b3:ae: 71:7e:72:9a:9d:f4:99:73:5d:36:74:a1:a2:ea:6f: 90:c3:92:44:80:dd:fe:24:89:b5:7c:15:54:c1:a7: 9b:07:42:19:65:1c:3b:34:34:c2:02:30:bc:d4:42: 38:5b:33:88:81:42:23:1f:84:29:85:a6:24:4e:94: 68:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5A:C3:F1:33:D9:A2:4E:87:59:8B:E1:FF:71:45:43:0D:23:49:9C X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:84:1d:5d:5f:39:c6:8e:47:dd:c5:f4:c3:54:89:77:23:0d: 34:9d:b3:79:72:7b:8a:50:2d:bd:f9:0a:d5:2d:f4:f1:f4:57: 73:d3:11:3b:b4:dc:3b:1c:6d:53:a6:ac:7a:f1:ee:dd:f5:6b: e5:2c:16:0a:8f:83:01:84:7a:c4:c6:df:aa:8d:87:30:43:d4: 67:6b:9a:c0:30:b6:02:a8:fb:4e:a1:ef:2c:cb:7f:04:58:38: 33:21:c6:e6:bb:db:2d:dc:f0:4a:6f:e5:c1:58:39:17:13:a9: 96:58:d8:32:5d:e4:6a:10:0a:2d:eb:db:93:ad:6b:49:64:e6: 1a:fd:01:19:50:5d:42:04:21:ea:6e:d9:40:44:b3:04:cd:86: 3f:a5:30:09:f9:aa:53:01:d0:ff:04:2c:3c:71:58:16:d4:08: 7a:bd:52:0f:84:b2:4b:1d:04:70:5b:15:a0:25:38:ae:8b:ce: a0:f0:86:24:fc:e7:bc:e2:c9:f1:96:c3:f8:2e:d7:18:42:38: 68:61:d3:98:e9:42:5d:e1:f2:1b:8f:c7:14:f4:27:cb:98:a7: 4a:48:ef:7a:07:4e:03:e2:fe:50:e1:3e:67:75:88:7d:0b:a4: 1c:3b:14:8c:a3:a0:f0:c1:f2:62:5e:22:8b:61:be:59:8f:5e: 18:cc:49:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjUwNjI5MDIwOTQ3WhcNMjUwNzA2MDIwOTQ3WjAYMRYwFAYD VQQDEw02ODYwYTA2Yi1kZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+kG+sLq5+glDk4/eabl7r6PWV9zkABeOYhf5dHasvyFbo2Z8smlUM3RygMM iqX6if6Yby+Q5Je54NO2wdhlQr17F6NAIWCAFyOJ2NNouDRlkVELcapR53Q/cL6V xAEZ1Ai3kHLXH34emydrfA+wo5tmx8ZKUiAqmrZ8YYxZbUIRPKQVeyvhzGUcN8d3 WN/xLY+0HoSbdov7SbxoB5cO/pDfhcP8TJXak4bOZel0g3rD6OwkfzTW6qvqkFVt vMk1s65xfnKanfSZc102dKGi6m+Qw5JEgN3+JIm1fBVUwaebB0IZZRw7NDTCAjC8 1EI4WzOIgUIjH4QphaYkTpRoCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZaw/Ez 2aJOh1mL4f9xRUMNI0mcMB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf VEdLbVA5OWFfdm5MY09kQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/hB1dXznGjkfdxfTDVIl3Iw00nbN5cnuKUC29+QrVLfTx9Fdz0xE7 tNw7HG1Tpqx68e7d9WvlLBYKj4MBhHrExt+qjYcwQ9Rna5rAMLYCqPtOoe8sy38E WDgzIcbmu9st3PBKb+XBWDkXE6mWWNgyXeRqEAot69uTrWtJZOYa/QEZUF1CBCHq btlARLMEzYY/pTAJ+apTAdD/BCw8cVgW1Ah6vVIPhLJLHQRwWxWgJTiui86g8IYk /Oe84snxlsP4LtcYQjhoYdOY6UJd4fIbj8cU9CfLmKdKSO96B04D4v5Q4T5ndYh9 C6QcOxSMo6DwwfJiXiKLYb5Zj14YzEkR -----END CERTIFICATE-----Generated at Sun Jun 29 17:10:11 2025 by rpki-client