$ rpki-client -vvf rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft File: rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft (raw, json) Hash identifier: 8y+u/QQ7JgbLs0Slt+B27IRkIeXAacePU3kEzHDJAD8= Subject key identifier: 9E:4C:88:98:3D:48:60:98:54:F3:35:C8:29:CB:1D:60:4B:F4:7F:A1 Authority key identifier: AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 Certificate issuer: /CN=A91384DF/serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft Manifest number: DF Signing time: Tue 01 Jul 2025 06:12:12 +0000 Manifest this update: Tue 01 Jul 2025 06:12:12 +0000 Manifest next update: Tue 08 Jul 2025 06:12:12 +0000 Files and hashes: 1: rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl (hash: mENKj1t7lA1PrH3pgh3BkvmZSAe/lPsSIQEzX2Ie0UE=) 2: 69BCFB40037711EFBE813223C4F9AE02.roa (hash: su08LeFa0desNztEPIYwzNBVHUg3OxH6645OovpEUEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384DF, serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3 Validity Not Before: Jul 1 06:12:12 2025 GMT Not After : Jul 8 06:12:12 2025 GMT Subject: CN=68637c3c-f2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:c7:de:33:24:d7:f7:f9:52:bf:08:32:86: 88:1d:3c:6c:f9:e4:6c:91:0d:9b:2b:1e:8c:71:48: bb:36:63:2e:87:81:4d:0d:9c:38:7e:c4:a4:ad:76: 45:ab:b6:2b:85:7a:72:e2:a6:c0:41:93:5a:3b:4a: 8e:2f:26:64:ba:00:8f:d8:56:6d:44:e5:18:73:9b: 41:4d:bf:ea:1f:21:0d:12:31:99:04:9d:81:68:c7: d4:95:9b:00:d0:75:30:8e:36:32:4a:73:c8:93:fa: 7e:cc:fd:30:65:bb:07:36:0b:99:a7:8b:44:22:5d: 4d:0c:32:ba:cf:39:52:9c:c0:c2:cb:f1:9e:49:a7: 1a:16:72:32:2a:ef:76:17:8b:81:a3:a0:4b:51:2c: 71:cb:31:c1:14:29:46:44:78:09:0b:26:50:fc:8b: 68:eb:27:48:7e:83:c1:85:3d:d9:5a:59:00:6c:fb: d8:48:fa:55:00:22:f8:23:40:d5:aa:e9:77:92:66: 34:1e:a4:57:09:15:5e:49:b7:4b:71:1e:d2:a5:90: 87:e9:f6:57:a9:f5:11:36:03:27:81:a2:51:96:04: 83:81:e0:2a:42:62:d5:1d:07:0b:7d:cd:8a:d2:27: ce:87:85:a1:f7:57:f5:4f:ad:82:09:61:2f:fd:27: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4C:88:98:3D:48:60:98:54:F3:35:C8:29:CB:1D:60:4B:F4:7F:A1 X509v3 Authority Key Identifier: keyid:AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:34:91:a7:1a:e4:8a:a0:0c:98:0e:d1:96:67:82:cc:74:4c: 7b:3c:61:48:9c:51:60:15:8d:6f:6a:b2:a8:f3:ee:02:c9:d8: 63:79:49:7c:d3:c8:aa:4e:57:81:f8:3a:3c:ed:a6:fd:f4:3e: 50:93:98:94:54:3a:f2:1a:46:d9:74:24:51:14:f0:5b:b8:80: 77:c8:25:75:76:e1:f3:24:57:63:a6:8e:31:9f:d1:f4:08:ee: 3c:a5:bc:f0:1e:2b:5f:d6:f8:a9:c7:82:c4:38:4c:9d:75:69: 4d:12:93:5a:5f:d2:3b:89:c1:1b:d2:20:e6:fd:18:56:a0:2f: e1:5a:f1:e2:1c:45:b5:86:ab:da:43:31:6e:8c:91:06:0b:4f: cf:7c:ff:46:1a:89:66:04:59:00:66:d5:b4:18:1d:fa:24:44: c6:be:37:c7:3b:d1:76:a9:01:fa:7e:ef:cf:1c:60:fa:56:16: 00:4c:18:8c:e9:11:c5:e8:3b:7e:10:c3:16:26:49:f8:84:db: b2:70:ae:df:d5:4c:95:bb:cc:cd:42:e8:1f:41:89:bb:05:53: 6b:49:e2:2c:fe:ff:9c:f4:58:51:f3:cd:6e:7e:6f:0a:fe:2f: 2c:a0:be:09:a9:ef:de:42:47:81:25:cb:e5:ed:7e:1a:34:66: 60:97:e1:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0REYxMTAvBgNVBAUTKEFDOTc4OUYyOEFGMTY4QjI2QzUwOTY0NjE1REYwNkQ3 RUM3MjAyRTMwHhcNMjUwNzAxMDYxMjEyWhcNMjUwNzA4MDYxMjEyWjAYMRYwFAYD VQQDEw02ODYzN2MzYy1mMmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CrH3jMk1/f5Ur8IMoaIHTxs+eRskQ2bKx6McUi7NmMuh4FNDZw4fsSkrXZF q7YrhXpy4qbAQZNaO0qOLyZkugCP2FZtROUYc5tBTb/qHyENEjGZBJ2BaMfUlZsA 0HUwjjYySnPIk/p+zP0wZbsHNguZp4tEIl1NDDK6zzlSnMDCy/GeSacaFnIyKu92 F4uBo6BLUSxxyzHBFClGRHgJCyZQ/Ito6ydIfoPBhT3ZWlkAbPvYSPpVACL4I0DV qul3kmY0HqRXCRVeSbdLcR7SpZCH6fZXqfURNgMngaJRlgSDgeAqQmLVHQcLfc2K 0ifOh4Wh91f1T62CCWEv/Sdm5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5MiJg9 SGCYVPM1yCnLHWBL9H+hMB8GA1UdIwQYMBaAFKyXifKK8WiybFCWRhXfBtfscgLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRERi9BRTE2NEI2MjAz NzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFMSnNVSlpHRmQ4RzEteHlB dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKZUo4b3J4YUxKc1VKWkdGZDhHMS14eUF1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRERi9BRTE2NEI2MjAzNzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFM SnNVSlpHRmQ4RzEteHlBdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDNJGnGuSKoAyYDtGWZ4LMdEx7PGFInFFgFY1varKo8+4CydhjeUl8 08iqTleB+Do87ab99D5Qk5iUVDryGkbZdCRRFPBbuIB3yCV1duHzJFdjpo4xn9H0 CO48pbzwHitf1vipx4LEOEyddWlNEpNaX9I7icEb0iDm/RhWoC/hWvHiHEW1hqva QzFujJEGC0/PfP9GGolmBFkAZtW0GB36JETGvjfHO9F2qQH6fu/PHGD6VhYATBiM 6RHF6Dt+EMMWJkn4hNuycK7f1UyVu8zNQugfQYm7BVNrSeIs/v+c9FhR881ufm8K /i8soL4Jqe/eQkeBJcvl7X4aNGZgl+FL -----END CERTIFICATE-----Generated at Tue Jul 1 21:26:54 2025 by rpki-client