$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json) Hash identifier: L5Ikip6SL2w8CicoxBbQoOy2LxdOXm/XtFmluVsvC9s= Subject key identifier: 17:6A:3B:40:EB:1F:F5:19:D4:72:08:49:9F:16:F1:D7:8A:DC:40:57 Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft Manifest number: 0104 Signing time: Tue 01 Jul 2025 05:38:43 +0000 Manifest this update: Tue 01 Jul 2025 05:38:42 +0000 Manifest next update: Tue 08 Jul 2025 05:38:42 +0000 Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: kAgPhed3x14k0jT8ToJBplaki4opTXIphMjxx0X1Yig=) 2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: /tXzmPJpbFpT9Ng+OXe5R9OW1iH2k8GOdLq7rPEZELc=) 3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: C5+FDRdQyQalYR2P8dEPuBXkPFwg+NEWC9TQl/hqp1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Validity Not Before: Jul 1 05:38:42 2025 GMT Not After : Jul 8 05:38:42 2025 GMT Subject: CN=68637462-c9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:a6:8e:6b:b0:f1:e9:18:2b:ac:40:83:88: a6:0c:7a:9f:fb:b1:45:0b:f9:a6:d6:20:17:29:ec: 21:8c:61:77:36:4e:eb:6e:bb:ac:66:33:a9:86:a6: 90:3f:e2:ea:30:55:fb:5f:43:48:be:99:a3:7b:f4: 4e:b8:a5:5d:28:a4:0e:fa:53:86:7c:f7:fb:2a:ca: 78:73:ec:b8:8c:02:b6:ca:cd:91:cb:48:22:5b:4c: 4f:f1:0e:9b:04:aa:86:0f:b8:bb:88:a4:96:3f:e2: 7c:02:3e:29:51:96:cb:96:88:82:53:a2:63:c5:cb: a9:1e:1b:44:94:0f:91:ae:11:79:0f:df:43:e0:df: a6:53:5e:8b:6f:11:0e:30:e7:9a:eb:15:3d:ff:3a: ac:08:72:38:9d:fa:9a:ea:d8:91:a1:f8:c2:80:32: b1:c4:ed:76:8d:76:bf:88:bd:f7:85:de:25:7f:aa: 66:6e:99:c8:86:ac:b8:e2:fb:18:68:50:0d:cd:b1: 08:d2:f0:5d:fd:d1:e5:af:6c:88:83:d1:96:6d:20: cd:dc:63:59:67:67:4d:bb:e7:db:26:47:54:e3:67: 05:bd:e2:61:d9:e3:a6:e3:bc:e0:00:2b:a4:9a:c2: b5:a1:5a:95:65:d1:cb:ed:66:05:7e:c7:80:29:fa: d9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6A:3B:40:EB:1F:F5:19:D4:72:08:49:9F:16:F1:D7:8A:DC:40:57 X509v3 Authority Key Identifier: keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d9:77:04:f9:18:43:63:fe:93:ed:c4:f9:ca:8d:b0:2b:24: 90:39:ca:90:a9:1e:50:c7:5e:88:d5:47:50:69:56:93:7e:f8: 12:99:40:a2:19:c6:e7:e3:6e:4e:2d:18:54:a2:84:3d:ed:46: 15:c9:69:62:e5:02:e4:29:74:ca:b5:96:d2:2a:dc:a0:32:af: 6e:17:8b:c8:05:6b:f2:6d:b9:5c:1e:fa:b5:3a:23:f9:eb:5d: 1d:77:95:80:a7:43:ad:b1:55:d6:c8:d0:34:09:f6:db:fe:7c: 11:d8:a8:75:2f:33:20:bd:bd:6f:d8:06:9c:07:45:44:dd:a6: b6:fe:e9:eb:03:5d:da:59:e9:1e:eb:38:fe:60:76:da:e0:34: 8f:ad:d6:03:e2:27:82:a5:1f:b4:01:22:1f:20:f4:3c:06:ab: 12:52:52:d7:cc:2d:64:46:c4:1c:13:c2:69:8b:33:4a:17:5a: af:bb:ce:d1:b6:ff:24:e7:46:86:e7:fc:97:d2:f9:96:31:ca: 03:ea:c1:88:06:29:1e:b8:f5:2a:f0:71:5a:fe:92:32:ad:b9: f8:06:df:b5:b4:b4:b8:07:97:38:01:30:5f:6a:42:e2:39:25: 82:ca:68:dd:cc:0d:c3:c0:a9:30:2e:65:54:f7:a6:e1:5e:cd: 39:0f:86:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM2NTExMTAvBgNVBAUTKDc2RDZGQTdDRjlCRjhFNDE1RjJGNDI2MTlCODA0Mjg4 NzYzRTY3QTIwHhcNMjUwNzAxMDUzODQyWhcNMjUwNzA4MDUzODQyWjAYMRYwFAYD VQQDEw02ODYzNzQ2Mi1jOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6h2mjmuw8ekYK6xAg4imDHqf+7FFC/mm1iAXKewhjGF3Nk7rbrusZjOphqaQ P+LqMFX7X0NIvpmje/ROuKVdKKQO+lOGfPf7Ksp4c+y4jAK2ys2Ry0giW0xP8Q6b BKqGD7i7iKSWP+J8Aj4pUZbLloiCU6JjxcupHhtElA+RrhF5D99D4N+mU16LbxEO MOea6xU9/zqsCHI4nfqa6tiRofjCgDKxxO12jXa/iL33hd4lf6pmbpnIhqy44vsY aFANzbEI0vBd/dHlr2yIg9GWbSDN3GNZZ2dNu+fbJkdU42cFveJh2eOm47zgACuk msK1oVqVZdHL7WYFfseAKfrZjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdqO0Dr H/UZ1HIISZ8W8deK3EBXMB8GA1UdIwQYMBaAFHbW+nz5v45BXy9CYZuAQoh2Pmei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzY1MS8zMzRGNjhDOENF RUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2prRmZMMEpobTRCQ2lIWS1a NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzY1MS8zMzRGNjhDOENFRUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2pr RmZMMEpobTRCQ2lIWS1aNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ2XcE+RhDY/6T7cT5yo2wKySQOcqQqR5Qx16I1UdQaVaTfvgSmUCi Gcbn425OLRhUooQ97UYVyWli5QLkKXTKtZbSKtygMq9uF4vIBWvybblcHvq1OiP5 610dd5WAp0OtsVXWyNA0Cfbb/nwR2Kh1LzMgvb1v2AacB0VE3aa2/unrA13aWeke 6zj+YHba4DSPrdYD4ieCpR+0ASIfIPQ8BqsSUlLXzC1kRsQcE8JpizNKF1qvu87R tv8k50aG5/yX0vmWMcoD6sGIBikeuPUq8HFa/pIyrbn4Bt+1tLS4B5c4ATBfakLi OSWCymjdzA3DwKkwLmVU96bhXs05D4YP -----END CERTIFICATE-----Generated at Tue Jul 1 07:55:22 2025 by rpki-client