$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: 5A0RZvcDzMMERTTHEs3lyjwFr7SDWHJaIgjCGfp8hoo= Subject key identifier: 3B:27:FF:E4:BA:30:C0:54:8A:B4:26:DF:85:87:B5:8D:EB:C7:B1:D2 Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: BA Signing time: Thu 03 Jul 2025 06:03:40 +0000 Manifest this update: Thu 03 Jul 2025 06:03:39 +0000 Manifest next update: Thu 10 Jul 2025 06:03:39 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: D9ZTTfG3BLZ2+EbMupFuaUbs9EHs4SKs8FOOWGScH7w=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: AFifu1YP8FleMFw0L6x+s4qXy39ubAWolO6tvcH8Ipg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Jul 3 06:03:39 2025 GMT Not After : Jul 10 06:03:39 2025 GMT Subject: CN=68661d3b-f112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:84:cc:b2:b8:3f:ad:93:6a:a9:f5:c3:cc:ac: 96:0c:6c:ac:86:27:92:0d:a2:e8:eb:7e:b3:9c:70: b7:ad:c8:63:b7:89:1f:6e:c8:03:ff:17:d4:f1:f2: 03:c0:6b:8a:22:49:a5:44:3f:74:5d:ec:b7:f4:0c: 2b:34:97:70:a3:5a:d5:25:54:5f:42:7d:53:7b:23: 88:c0:cd:21:0c:36:bd:04:23:9f:d7:f2:dd:a7:fd: 02:4f:1a:53:5a:d5:66:b8:70:99:1c:73:ee:65:6b: cf:04:2e:5a:1e:a7:f7:e0:1a:34:1b:01:12:24:78: 99:df:b4:24:6e:63:a2:48:26:c2:4c:da:fd:5f:af: 84:97:cc:ce:a4:e3:05:c7:05:c0:0e:83:cf:16:42: 10:40:ab:7a:00:c3:6c:3f:b8:30:72:d0:f8:aa:24: f7:ed:8e:cc:06:1c:77:e4:57:6c:bb:0d:a4:6a:a3: ca:21:39:05:74:ac:35:7c:b6:31:cd:a7:ab:dc:5d: db:d6:49:ac:66:ec:9b:4b:5c:db:9b:88:e5:73:9f: 21:dd:52:86:25:d3:e2:21:6d:de:89:77:55:4b:08: ae:3b:00:1a:6c:b9:a7:07:5c:00:a0:61:b2:ff:72: 13:3e:22:65:8f:81:4d:2e:39:20:10:cd:18:42:49: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:27:FF:E4:BA:30:C0:54:8A:B4:26:DF:85:87:B5:8D:EB:C7:B1:D2 X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:01:da:c7:f1:08:04:6e:66:00:f2:9a:be:dc:db:80:e0:71: 2c:5e:44:4d:64:4e:9d:1c:57:06:6d:8b:ec:85:00:29:3b:bf: 2d:60:40:98:31:1f:31:20:5c:4d:05:4c:fd:4f:a1:49:5b:44: 93:89:cf:99:cc:2a:c1:50:39:ad:cc:23:ff:8c:d9:66:34:d7: fa:9d:6d:39:9c:43:3a:b2:21:70:a8:b0:ed:96:3a:04:a3:6e: 43:54:86:db:ac:77:a5:af:e9:ee:c2:54:28:01:70:19:c4:ae: 3e:f8:90:91:f0:d2:15:4f:d2:8c:14:98:ef:ab:f5:f0:4f:2f: 6f:6e:9d:a3:fd:e9:34:3f:09:23:83:c5:ef:da:c4:c9:58:9e: 23:ca:f8:73:94:38:60:9e:3a:15:aa:00:95:cd:00:54:aa:85: d6:b6:e7:73:92:84:61:13:0b:08:7e:df:19:5e:be:91:a9:39: db:35:84:91:76:d7:45:e3:40:38:6b:87:ef:99:7a:e3:36:06: 73:f8:24:c0:9d:52:19:86:b0:72:bc:65:c4:43:61:2c:d5:1b: 20:db:02:c8:00:81:7c:16:59:f2:68:50:83:65:24:29:c8:4d: e0:88:c3:fb:62:c4:29:3c:c5:41:0a:04:a2:97:36:c8:eb:ad: e5:16:0a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjUwNzAzMDYwMzM5WhcNMjUwNzEwMDYwMzM5WjAYMRYwFAYD VQQDEw02ODY2MWQzYi1mMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YTMsrg/rZNqqfXDzKyWDGyshieSDaLo636znHC3rchjt4kfbsgD/xfU8fID wGuKIkmlRD90Xey39AwrNJdwo1rVJVRfQn1TeyOIwM0hDDa9BCOf1/Ldp/0CTxpT WtVmuHCZHHPuZWvPBC5aHqf34Bo0GwESJHiZ37QkbmOiSCbCTNr9X6+El8zOpOMF xwXADoPPFkIQQKt6AMNsP7gwctD4qiT37Y7MBhx35Fdsuw2kaqPKITkFdKw1fLYx zaer3F3b1kmsZuybS1zbm4jlc58h3VKGJdPiIW3eiXdVSwiuOwAabLmnB1wAoGGy /3ITPiJlj4FNLjkgEM0YQkncUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsn/+S6 MMBUirQm34WHtY3rx7HSMB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCAdrH8QgEbmYA8pq+3NuA4HEsXkRNZE6dHFcGbYvshQApO78tYECY MR8xIFxNBUz9T6FJW0STic+ZzCrBUDmtzCP/jNlmNNf6nW05nEM6siFwqLDtljoE o25DVIbbrHelr+nuwlQoAXAZxK4++JCR8NIVT9KMFJjvq/XwTy9vbp2j/ek0Pwkj g8Xv2sTJWJ4jyvhzlDhgnjoVqgCVzQBUqoXWtudzkoRhEwsIft8ZXr6RqTnbNYSR dtdF40A4a4fvmXrjNgZz+CTAnVIZhrByvGXEQ2Es1Rsg2wLIAIF8FlnyaFCDZSQp yE3giMP7YsQpPMVBCgSilzbI663lFgoV -----END CERTIFICATE-----Generated at Thu Jul 3 23:20:00 2025 by rpki-client