$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft File: cljf1W-lpIfw1KzGnK2xvqwvlw4.mft (raw, json) Hash identifier: kO1lUnExX4DRHLjnZFRK3KcRmO9z1UaidSBSgZqJHDs= Subject key identifier: F8:9B:42:AE:2C:78:5F:9C:D7:22:9D:1C:FD:8E:10:8C:D9:32:8D:5A Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E Certificate issuer: /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft Manifest number: 53 Signing time: Tue 01 Jul 2025 08:01:46 +0000 Manifest this update: Tue 01 Jul 2025 08:01:46 +0000 Manifest next update: Tue 08 Jul 2025 08:01:46 +0000 Files and hashes: 1: cljf1W-lpIfw1KzGnK2xvqwvlw4.crl (hash: i3RVmhifglTbZoi9Mg/wE/Q5l1bx1cChRA80SwOkNIw=) 2: 99AB65EEDA2C11EFAC53882EC4F9AE02.roa (hash: uGejxwookglu2iCow+tcNdEybEx5MchvlLEGb/BsAIc=) 3: 9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (hash: pXIC9lifhNka63uxRfDrQycVb+TaKUuZE602Ci63ILU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E Validity Not Before: Jul 1 08:01:46 2025 GMT Not After : Jul 8 08:01:46 2025 GMT Subject: CN=686395ea-b1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:8f:28:b1:e0:ae:ae:c0:c6:61:97:0f:c5: 24:60:c9:f2:92:2b:ab:87:48:0c:04:30:d9:21:8b: 92:3a:81:d4:c8:8f:7c:db:5c:ad:fd:f5:72:18:31: fe:68:c8:7b:cb:72:70:96:45:00:13:1d:45:8e:13: 93:b2:f0:0e:b1:83:92:17:5a:cb:c1:48:9d:89:67: f3:f0:b6:0f:bb:6b:26:a3:53:80:ae:ce:89:d5:27: e2:e1:b0:67:e0:59:2b:41:5c:79:ef:60:99:78:1e: 54:19:87:9f:ee:cc:57:39:76:41:17:d7:7a:ff:1f: 55:06:18:5e:61:eb:34:85:1d:c8:00:4c:9b:ec:e1: 20:64:48:4b:28:5a:d5:f7:ef:3f:f0:1d:15:28:d1: f7:01:f0:89:98:8e:f9:51:9a:59:57:57:fd:9f:28: 36:21:c5:1a:ba:80:ed:22:f6:01:1a:ee:72:e0:6c: a4:9c:bf:ad:d5:d9:d7:0b:85:e1:96:96:2f:68:69: cd:66:7d:6e:a7:5c:0b:b5:c0:46:80:24:81:df:3f: a5:42:d9:36:09:28:58:00:6b:0f:3d:b4:f2:ef:70: 5b:af:a3:7c:89:00:24:30:3b:92:25:d9:d7:d4:cc: 8f:a3:27:71:e4:91:d7:40:8d:cc:a4:5f:a7:5c:9d: bb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9B:42:AE:2C:78:5F:9C:D7:22:9D:1C:FD:8E:10:8C:D9:32:8D:5A X509v3 Authority Key Identifier: keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:02:79:1a:e3:f1:c0:32:fb:cf:81:b2:8a:9f:58:3f:8c:a8: 18:4e:1c:57:48:d3:ff:43:6f:f6:3f:3c:57:89:c4:50:de:3e: df:78:0d:44:df:a1:9e:eb:31:76:fc:ea:80:6e:1f:a1:f5:f3: 28:55:ab:cc:d2:66:93:2a:76:7f:c0:7a:a2:d4:75:bc:04:2d: c0:89:dd:6a:99:e0:32:51:ff:99:6f:80:c4:70:c6:d5:d4:b8: eb:81:96:4e:cc:c9:bc:fe:7d:ab:91:96:29:3e:66:b7:ca:ef: c8:3b:2e:ba:c4:6a:ac:27:7e:0b:bf:dd:25:37:91:0d:d8:2c: 4e:30:1f:28:f2:35:1e:f2:6c:53:e0:20:8c:36:75:91:ea:19: 07:c8:d1:b7:a1:2c:04:6d:49:14:6e:2e:f2:25:b7:af:f9:3f: 48:7c:d6:af:6b:a2:07:87:a3:7d:33:a8:4b:0e:ec:c4:f4:52: 7c:58:c7:00:4d:75:21:e2:17:bf:48:bc:00:bd:d7:fb:ac:fa: 2e:03:e4:9e:e9:e4:27:6d:bd:26:15:ad:15:45:2a:f7:fa:2c: 6c:71:62:36:85:7d:c3:89:2e:ab:ac:75:51:e5:ee:6f:61:44: c4:b3:6f:c5:04:dd:40:8b:25:d9:e8:29:3a:a3:1a:5b:8c:5b: 62:a9:cf:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDU5RTExMC8GA1UEBRMoNzI1OERGRDU2RkE1QTQ4N0YwRDRBQ0M2OUNBREIxQkVB QzJGOTcwRTAeFw0yNTA3MDEwODAxNDZaFw0yNTA3MDgwODAxNDZaMBgxFjAUBgNV BAMTDTY4NjM5NWVhLWIxZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2Go8oseCursDGYZcPxSRgyfKSK6uHSAwEMNkhi5I6gdTIj3zbXK399XIYMf5o yHvLcnCWRQATHUWOE5Oy8A6xg5IXWsvBSJ2JZ/Pwtg+7ayajU4CuzonVJ+LhsGfg WStBXHnvYJl4HlQZh5/uzFc5dkEX13r/H1UGGF5h6zSFHcgATJvs4SBkSEsoWtX3 7z/wHRUo0fcB8ImYjvlRmllXV/2fKDYhxRq6gO0i9gEa7nLgbKScv63V2dcLheGW li9oac1mfW6nXAu1wEaAJIHfP6VC2TYJKFgAaw89tPLvcFuvo3yJACQwO5Il2dfU zI+jJ3HkkddAjcykX6dcnbvBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+JtCrix4 X5zXIp0c/Y4QjNkyjVowHwYDVR0jBBgwFoAUcljf1W+lpIfw1KzGnK2xvqwvlw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNTlFLzU1NjY2QjU2RDlE MDExRUY5OEI4NUU2REM0RjlBRTAyL2NsamYxVy1scElmdzFLekduSzJ4dnF3dmx3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2xqZjFXLWxwSWZ3MUt6R25LMnh2cXd2bHc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NTlFLzU1NjY2QjU2RDlEMDExRUY5OEI4NUU2REM0RjlBRTAyL2NsamYxVy1scElm dzFLekduSzJ4dnF3dmx3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALECeRrj8cAy+8+BsoqfWD+MqBhOHFdI0/9Db/Y/PFeJxFDePt94DUTf oZ7rMXb86oBuH6H18yhVq8zSZpMqdn/AeqLUdbwELcCJ3WqZ4DJR/5lvgMRwxtXU uOuBlk7Mybz+fauRlik+ZrfK78g7LrrEaqwnfgu/3SU3kQ3YLE4wHyjyNR7ybFPg IIw2dZHqGQfI0behLARtSRRuLvIlt6/5P0h81q9rogeHo30zqEsO7MT0UnxYxwBN dSHiF79IvAC91/us+i4D5J7p5CdtvSYVrRVFKvf6LGxxYjaFfcOJLqusdVHl7m9h RMSzb8UE3UCLJdnoKTqjGluMW2KpzyM= -----END CERTIFICATE-----Generated at Wed Jul 2 14:51:29 2025 by rpki-client