$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft File: RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft (raw, json) Hash identifier: KlE/R377mnF7sPxeOVNvuicLfmHAZUHCvYPhyZJVmgU= Subject key identifier: 8D:5C:DF:E0:01:38:D9:71:58:00:90:62:8E:1E:48:B6:17:2B:59:BE Authority key identifier: 47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17 Certificate issuer: /CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft Manifest number: 0111 Signing time: Tue 01 Jul 2025 05:27:00 +0000 Manifest this update: Tue 01 Jul 2025 05:27:00 +0000 Manifest next update: Tue 08 Jul 2025 05:27:00 +0000 Files and hashes: 1: RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl (hash: DpT7OVhoyBKCbKu9S6Z+kclVQYrr9AglW7Ofs6MImK4=) 2: 939790AAB9BD11EEA19BE74DC4F9AE02.roa (hash: usgNeDoGlzZoBDkMS+oNirA/1DpfH4pmT68FwmH4UH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DD04, serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17 Validity Not Before: Jul 1 05:27:00 2025 GMT Not After : Jul 8 05:27:00 2025 GMT Subject: CN=686371a4-8326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cb:3d:a6:a7:4b:dd:be:6c:8c:8c:52:45:2f: 5f:74:8c:dc:d1:de:b5:b7:88:80:5a:5c:55:5a:7f: 17:44:9e:28:85:3b:24:97:c8:73:45:3b:d5:9a:f5: a0:0b:ec:fa:db:5b:93:d5:5f:44:4d:a0:47:66:b3: f3:2b:82:15:a6:82:11:98:10:52:cb:05:a8:32:bc: da:3c:42:bf:e4:6b:9e:fa:42:cf:70:39:5a:d6:32: 3e:19:89:51:31:1c:3c:e3:84:71:c4:f4:3e:88:89: 90:29:ab:df:b0:74:0a:2a:1d:d9:83:44:14:fe:77: f2:d9:d1:a4:b3:57:1a:c5:89:f6:f3:d7:f3:ca:85: 7b:a0:b9:9b:cd:2d:8b:d1:1d:34:2b:f4:81:93:bf: fd:aa:30:79:e8:d5:de:71:fc:bd:13:49:5d:6e:12: 22:fc:37:c2:e2:43:53:cf:27:c0:91:ac:4b:4b:ca: e6:ad:37:88:9c:63:c1:e1:bf:e9:30:25:19:f0:cc: 41:42:81:b3:0f:82:d8:90:c1:89:9f:5f:c0:e6:93: 6b:02:22:34:42:d6:0a:e3:c2:53:28:9e:93:b4:fb: bf:49:cd:9d:62:a3:75:f6:5b:ff:d4:a1:52:a0:5a: 75:ff:bc:19:71:17:b9:b4:8f:bf:b8:e3:c9:5b:ad: d7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5C:DF:E0:01:38:D9:71:58:00:90:62:8E:1E:48:B6:17:2B:59:BE X509v3 Authority Key Identifier: keyid:47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:2c:fa:5f:10:6f:11:6d:62:a9:ca:e5:94:af:05:a6:f9:e6: 4e:44:2c:f6:ea:c9:f8:8c:8c:5f:ba:40:9f:ec:cb:86:3c:50: fc:b8:45:b4:ef:05:be:f3:53:7c:62:5c:45:6a:64:d8:79:8a: 87:6f:96:66:2c:b8:f0:6d:2d:64:7f:c3:0c:d1:77:8d:49:79: f0:2d:d8:45:6d:2e:ad:92:b1:1f:85:0d:05:58:59:a1:84:91: 08:6d:4d:04:0d:a4:f7:e2:66:74:0d:0f:85:de:84:91:e2:94: 7a:0d:01:6b:0a:60:7f:f8:fc:8c:74:76:31:da:70:96:51:9e: 07:59:3e:40:33:8e:c3:5d:1f:69:ea:08:4c:f6:f3:10:28:20: 6d:f2:99:1b:05:7f:77:bf:8c:39:66:c2:b6:74:1a:a4:6c:99: 48:7c:90:ee:54:31:e2:a5:18:2d:b8:f2:33:fb:dd:53:46:41: d0:5f:35:a6:01:9a:c9:51:5c:41:c4:bb:65:d1:d4:0c:ab:3d: c8:5d:87:87:50:d6:5d:bb:fe:48:86:43:34:25:17:f1:2c:ec: 5c:e3:bd:a6:fd:35:a5:c0:b4:1c:ba:80:09:e5:82:ea:e2:95: d5:04:93:47:e8:b6:8e:ef:8c:2a:35:a4:df:45:0f:10:94:2d: 75:ab:cc:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUREMDQxMTAvBgNVBAUTKDQ3MzQ2NDg0NzE1OUJCMTUyRkJGRTFEQkI1QTFCMDE1 NDY4MjJGMTcwHhcNMjUwNzAxMDUyNzAwWhcNMjUwNzA4MDUyNzAwWjAYMRYwFAYD VQQDEw02ODYzNzFhNC04MzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ss9pqdL3b5sjIxSRS9fdIzc0d61t4iAWlxVWn8XRJ4ohTskl8hzRTvVmvWg C+z621uT1V9ETaBHZrPzK4IVpoIRmBBSywWoMrzaPEK/5Gue+kLPcDla1jI+GYlR MRw844RxxPQ+iImQKavfsHQKKh3Zg0QU/nfy2dGks1caxYn289fzyoV7oLmbzS2L 0R00K/SBk7/9qjB56NXecfy9E0ldbhIi/DfC4kNTzyfAkaxLS8rmrTeInGPB4b/p MCUZ8MxBQoGzD4LYkMGJn1/A5pNrAiI0QtYK48JTKJ6TtPu/Sc2dYqN19lv/1KFS oFp1/7wZcRe5tI+/uOPJW63XYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1c3+AB ONlxWACQYo4eSLYXK1m+MB8GA1UdIwQYMBaAFEc0ZIRxWbsVL7/h27WhsBVGgi8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREQwNC9DM0Q1RkRDNkI5 QkIxMUVFQUEzMjI5NUVDNEY5QUUwMi9SelJraEhGWnV4VXZ2LUhidGFHd0ZVYUNM eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6UmtoSEZadXhVdnYtSGJ0YUd3RlVhQ0x4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REQwNC9DM0Q1RkRDNkI5QkIxMUVFQUEzMjI5NUVDNEY5QUUwMi9SelJraEhGWnV4 VXZ2LUhidGFHd0ZVYUNMeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClLPpfEG8RbWKpyuWUrwWm+eZORCz26sn4jIxfukCf7MuGPFD8uEW0 7wW+81N8YlxFamTYeYqHb5ZmLLjwbS1kf8MM0XeNSXnwLdhFbS6tkrEfhQ0FWFmh hJEIbU0EDaT34mZ0DQ+F3oSR4pR6DQFrCmB/+PyMdHYx2nCWUZ4HWT5AM47DXR9p 6ghM9vMQKCBt8pkbBX93v4w5ZsK2dBqkbJlIfJDuVDHipRgtuPIz+91TRkHQXzWm AZrJUVxBxLtl0dQMqz3IXYeHUNZdu/5IhkM0JRfxLOxc472m/TWlwLQcuoAJ5YLq 4pXVBJNH6LaO74wqNaTfRQ8QlC11q8ya -----END CERTIFICATE-----Generated at Tue Jul 1 19:38:59 2025 by rpki-client