$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft File: dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json) Hash identifier: MASfYPph9ptrOMworAFTaNnrqFWDshEKxc0p0Qc54wU= Subject key identifier: EA:53:ED:7F:A9:F8:C6:4F:8E:55:FD:7E:E6:CC:75:1F:10:06:BE:19 Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft Manifest number: 033C Signing time: Tue 01 Jul 2025 01:40:12 +0000 Manifest this update: Tue 01 Jul 2025 01:40:11 +0000 Manifest next update: Tue 08 Jul 2025 01:40:11 +0000 Files and hashes: 1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: OkT8CyYEraewgyDc0tUvnMoxtgzNvYzLwHk6svMW1gI=) 2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: yAY/Xp66VBMbd2Lc5/zcmj9DVNGz6j22BacFuet4uZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B Validity Not Before: Jul 1 01:40:11 2025 GMT Not After : Jul 8 01:40:11 2025 GMT Subject: CN=68633c7c-1615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:75:68:ca:ef:f0:a2:21:74:09:8f:40:8b:b7: 8a:1e:8f:f7:8a:f8:10:16:c2:2a:2c:bf:7e:a9:c3: 83:c0:fd:59:8f:d2:3c:e5:ef:a7:e1:5c:2d:23:b1: e9:95:3a:3a:3f:d6:16:71:87:95:45:03:21:7a:15: 58:ee:02:df:ef:5f:9e:89:99:98:39:64:69:56:0e: 04:09:a7:da:67:ff:64:ab:54:e9:ee:41:cc:1e:07: 91:6e:85:40:04:3d:05:88:fa:29:e0:3a:94:59:31: d2:05:38:4f:e3:af:81:ad:69:2d:cd:c9:8e:36:93: 41:dc:6b:c9:3a:82:38:04:c2:0e:bf:66:67:ee:0f: d3:0a:5b:3f:23:76:9f:92:94:ca:d8:58:47:17:b3: fa:59:69:db:a4:e7:65:46:4b:5c:d2:73:0f:5b:ca: 8c:21:7c:3d:c8:92:b0:d7:0f:94:f7:4a:da:de:2b: 72:bb:b4:2d:53:33:58:00:4b:da:e8:a2:54:ff:6d: 6a:0a:79:5a:81:56:71:39:51:70:3d:e1:f3:e9:ae: d5:33:2b:01:3c:d2:24:0d:c1:ba:b2:0d:d5:44:75: ce:c9:aa:42:cb:35:4c:d9:b6:21:5a:da:df:39:23: 69:4d:d1:db:7e:cc:d7:f2:97:6e:88:ac:c8:ff:5e: c4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:53:ED:7F:A9:F8:C6:4F:8E:55:FD:7E:E6:CC:75:1F:10:06:BE:19 X509v3 Authority Key Identifier: keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:14:9a:e4:d8:d6:6a:61:f5:e1:d6:02:91:87:4d:53:c0:eb: 2d:08:47:0c:e0:e9:e9:39:2f:34:31:22:41:af:61:bb:59:da: 23:56:4e:b0:9d:3f:36:9c:c7:a4:b9:64:6b:35:2f:11:84:6b: a0:2d:ed:9d:d6:e2:e0:8c:12:7e:56:a3:ae:0a:89:26:3e:ea: f9:bd:f0:b5:e2:d1:a7:fd:e3:25:3d:91:01:ff:89:69:31:4d: 70:ba:22:74:ac:3d:56:cf:69:b6:93:48:7a:7b:13:e2:d1:6c: 8b:35:a0:af:ea:f9:ab:64:00:7e:fc:1c:eb:c8:d7:cb:5f:a5: 8e:d8:57:3b:e0:33:d1:bd:21:91:0b:6d:b9:f9:c3:ef:81:f8: 93:46:02:1b:06:d6:f1:66:ba:06:3f:95:ce:25:cc:0b:90:99: f6:f6:b5:c4:52:c6:f9:a6:26:52:15:5c:fd:75:c6:e0:a2:70: 7b:c1:bd:cf:5e:3b:f3:5a:1a:71:21:53:ec:5d:2e:ef:60:37: a5:0c:18:e1:9d:fb:11:dd:46:0a:bd:1e:8e:f3:67:2e:ff:29: 0f:fa:1a:69:5c:92:75:0e:cf:fb:7c:67:b8:b5:c5:d4:0d:cf: ad:1a:0c:e7:ca:d3:c7:c7:b0:a2:7f:2e:1b:b0:12:f7:2a:b6: c4:38:d5:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5 Qjg3MERFMUIwHhcNMjUwNzAxMDE0MDExWhcNMjUwNzA4MDE0MDExWjAYMRYwFAYD VQQDEw02ODYzM2M3Yy0xNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03Voyu/woiF0CY9Ai7eKHo/3ivgQFsIqLL9+qcODwP1Zj9I85e+n4VwtI7Hp lTo6P9YWcYeVRQMhehVY7gLf71+eiZmYOWRpVg4ECafaZ/9kq1Tp7kHMHgeRboVA BD0FiPop4DqUWTHSBThP46+BrWktzcmONpNB3GvJOoI4BMIOv2Zn7g/TCls/I3af kpTK2FhHF7P6WWnbpOdlRktc0nMPW8qMIXw9yJKw1w+U90ra3ityu7QtUzNYAEva 6KJU/21qCnlagVZxOVFwPeHz6a7VMysBPNIkDcG6sg3VRHXOyapCyzVM2bYhWtrf OSNpTdHbfszX8pduiKzI/17EwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpT7X+p +MZPjlX9fubMdR8QBr4ZMB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2 QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNGOS8xQ0Y1OTc0NkM2QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpD Tnl4T0NoRGdZM21iaHczaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHFJrk2NZqYfXh1gKRh01TwOstCEcM4OnpOS80MSJBr2G7WdojVk6w nT82nMekuWRrNS8RhGugLe2d1uLgjBJ+VqOuCokmPur5vfC14tGn/eMlPZEB/4lp MU1wuiJ0rD1Wz2m2k0h6exPi0WyLNaCv6vmrZAB+/BzryNfLX6WO2Fc74DPRvSGR C225+cPvgfiTRgIbBtbxZroGP5XOJcwLkJn29rXEUsb5piZSFVz9dcbgonB7wb3P XjvzWhpxIVPsXS7vYDelDBjhnfsR3UYKvR6O82cu/ykP+hppXJJ1Ds/7fGe4tcXU Dc+tGgznytPHx7Cify4bsBL3KrbEONWl -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:51 2025 by rpki-client