$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft File: MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json) Hash identifier: yMRldswuGDfCvq6fjuRMpj1dSH0HKgW+pAfcTCeUsB4= Subject key identifier: 56:BD:78:19:E4:AD:B9:CE:28:4A:61:BC:70:70:D5:8D:C0:11:CE:B6 Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 Certificate issuer: /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft Manifest number: 5F Signing time: Thu 03 Jul 2025 07:18:12 +0000 Manifest this update: Thu 03 Jul 2025 07:18:11 +0000 Manifest next update: Thu 10 Jul 2025 07:18:11 +0000 Files and hashes: 1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: TUpJX1BeD1ERoKtd6K8JMFWGdFfU9kLeC9Vt3VddSIU=) 2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: sUWfAuRTWaVVgcAthywuFU4ZlijXzthACuza893doh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Validity Not Before: Jul 3 07:18:11 2025 GMT Not After : Jul 10 07:18:11 2025 GMT Subject: CN=68662eb4-b241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f5:21:1b:9e:50:c0:cc:d9:7a:bc:5e:9d:fe: de:f0:f8:7c:bf:86:f1:c5:ff:dd:b1:f3:53:45:56: e6:39:9b:fd:c2:56:02:b5:dd:19:9f:c2:57:91:d7: c4:bc:56:50:44:90:cc:a7:43:ae:5e:c6:7c:c5:7a: 66:9e:13:a8:99:d1:6d:1f:9f:7b:cb:59:d1:a0:2b: ad:9e:16:80:2e:fa:38:78:93:39:61:27:92:d1:05: a4:0d:19:31:a4:60:5d:eb:79:97:e3:f7:e3:d6:92: 08:6d:15:7b:67:f2:62:3e:3e:e0:ae:32:6f:21:50: be:be:4b:74:19:d4:bc:54:0c:3d:2c:90:11:56:9b: 70:3c:8b:aa:e2:0a:a4:64:9f:01:40:33:4e:9d:b0: 11:20:68:d9:40:6f:ba:49:dd:81:05:35:af:56:07: 73:a2:c7:55:b5:b8:4b:16:1b:d0:dc:ca:50:35:d9: c0:62:90:f9:b6:0a:e6:d6:73:80:96:0e:f4:e2:c6: c5:29:58:88:b6:0f:21:a3:86:d1:b8:f5:b1:e1:51: 94:53:41:56:33:73:15:1b:70:14:20:5a:8f:e3:05: ca:7e:9d:53:85:fd:97:ef:7b:84:61:2f:ab:47:24: ec:5e:fe:7c:17:50:71:f8:a7:48:3c:3a:ed:37:3b: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BD:78:19:E4:AD:B9:CE:28:4A:61:BC:70:70:D5:8D:C0:11:CE:B6 X509v3 Authority Key Identifier: keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:bd:67:f8:58:18:9f:77:f1:b7:0a:f6:1a:68:ec:91:aa:58: 3c:df:9f:80:e7:35:e4:db:41:98:55:5e:b1:cd:6c:bc:8f:11: a8:97:ea:25:45:5a:a7:53:0b:b5:5f:d1:ab:ab:66:8c:38:8e: 23:89:3a:aa:5f:10:b1:99:0d:ff:a1:00:76:5f:b1:69:17:de: 74:d9:69:5a:63:23:d3:75:43:56:ed:4f:07:75:95:33:64:27: 50:00:ae:a4:4d:75:70:f6:8d:39:3c:6d:e5:7f:f3:57:5b:10: 3d:b8:ff:e1:4c:84:2c:ed:56:f8:45:00:78:41:bc:5f:a4:8f: 9a:af:aa:40:15:18:5a:92:09:b2:69:c5:c7:74:49:3d:d4:08: d3:8d:53:b6:8b:76:1e:b8:2c:d0:f8:fb:37:54:21:af:69:ae: c2:ee:37:92:08:ba:7f:57:93:02:07:f5:d6:1a:75:7d:b4:78: d9:9f:e2:e9:6d:1d:57:fe:24:59:f7:1d:8f:7a:4f:a2:54:06: 10:95:0c:f8:a0:df:d1:7b:f5:37:b8:82:33:27:73:41:64:95: 0a:6b:42:25:49:20:5b:cf:28:13:a7:0a:d0:90:44:cb:27:57: 60:56:8d:52:5b:80:10:f5:5f:7c:68:e3:7e:90:cf:7e:fe:84: 32:93:10:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MThCQjExMC8GA1UEBRMoMzFBQzk2NDdDN0Y4NzBBNjZCQTJERTc4ODU0NENEOEMz MjZCREZGOTAeFw0yNTA3MDMwNzE4MTFaFw0yNTA3MTAwNzE4MTFaMBgxFjAUBgNV BAMTDTY4NjYyZWI0LWIyNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH9SEbnlDAzNl6vF6d/t7w+Hy/hvHF/92x81NFVuY5m/3CVgK13RmfwleR18S8 VlBEkMynQ65exnzFemaeE6iZ0W0fn3vLWdGgK62eFoAu+jh4kzlhJ5LRBaQNGTGk YF3reZfj9+PWkghtFXtn8mI+PuCuMm8hUL6+S3QZ1LxUDD0skBFWm3A8i6riCqRk nwFAM06dsBEgaNlAb7pJ3YEFNa9WB3Oix1W1uEsWG9DcylA12cBikPm2CubWc4CW DvTixsUpWIi2DyGjhtG49bHhUZRTQVYzcxUbcBQgWo/jBcp+nVOF/Zfve4RhL6tH JOxe/nwXUHH4p0g8Ou03O6zJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVr14GeSt uc4oSmG8cHDVjcARzrYwHwYDVR0jBBgwFoAUMayWR8f4cKZrot54hUTNjDJr3/kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxOEJCLzZBMEIyMDU0QzhD NTExRUY4RUM1NTU2NUM0RjlBRTAyL01heVdSOGY0Y0tacm90NTRoVVROakRKcjNf ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTWF5V1I4ZjRjS1pyb3Q1NGhVVE5qREpyM19rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx OEJCLzZBMEIyMDU0QzhDNTExRUY4RUM1NTU2NUM0RjlBRTAyL01heVdSOGY0Y0ta cm90NTRoVVROakRKcjNfay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHW9Z/hYGJ938bcK9hpo7JGqWDzfn4DnNeTbQZhVXrHNbLyPEaiX6iVF WqdTC7Vf0aurZow4jiOJOqpfELGZDf+hAHZfsWkX3nTZaVpjI9N1Q1btTwd1lTNk J1AArqRNdXD2jTk8beV/81dbED24/+FMhCztVvhFAHhBvF+kj5qvqkAVGFqSCbJp xcd0ST3UCNONU7aLdh64LND4+zdUIa9prsLuN5IIun9XkwIH9dYadX20eNmf4ult HVf+JFn3HY96T6JUBhCVDPig39F79Te4gjMnc0FklQprQiVJIFvPKBOnCtCQRMsn V2BWjVJbgBD1X3xo436Qz37+hDKTEEY= -----END CERTIFICATE-----Generated at Thu Jul 3 23:06:44 2025 by rpki-client