$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: SJbbwBqraepU24nU5GfJ7aT2HLobf2Hgx0jhvrbDJJE= Subject key identifier: FB:05:78:2D:DF:E3:F8:87:A6:4D:98:2A:45:71:80:EC:5B:08:A8:39 Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 0453 Signing time: Tue 01 Jul 2025 00:45:57 +0000 Manifest this update: Tue 01 Jul 2025 00:45:57 +0000 Manifest next update: Tue 08 Jul 2025 00:45:57 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: rNS4BUzVwKhwcievC6eFJM1jBexxvYGb2b3uMYqJGQ4=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: 6uFvpip5xKUGRghNdeTpeBy3R93KivQ5uvgIzsfjzEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Jul 1 00:45:57 2025 GMT Not After : Jul 8 00:45:57 2025 GMT Subject: CN=68632fc5-8779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:59:de:61:b3:45:ec:d6:1b:4d:81:b1:2a: 62:e7:58:b1:bd:7f:3d:b0:ed:68:a3:86:2f:1d:6f: 18:11:10:a9:e7:e1:01:f7:48:63:9c:3b:7f:1c:72: 44:31:b6:5b:50:ea:90:2e:b4:e6:e6:51:fd:7f:fe: 77:a4:d2:3f:b7:b5:fc:86:37:d8:c8:28:77:fa:fe: 99:85:f4:91:51:53:99:c2:f3:01:66:20:08:fa:a4: 4c:3e:1a:b3:90:f2:bd:99:33:1b:be:59:77:9f:bf: 4b:e7:da:7b:21:09:7c:c8:72:fd:53:a5:75:33:2c: bb:26:3b:7a:60:7f:dc:60:23:fd:76:6c:e0:7d:8e: b0:89:05:5a:e6:11:5e:3b:07:da:d6:24:c1:07:32: f5:06:a2:b0:4c:41:77:2b:b5:f8:59:a7:2d:17:ed: be:e8:ad:1a:0e:6f:96:43:1e:4f:36:cf:7a:66:66: 33:35:d1:6a:0c:b3:14:b1:cc:5e:2c:6f:8d:08:91: 38:c7:12:da:dc:90:4a:26:32:29:44:cb:bc:05:c7: 80:75:d7:c1:24:9e:e5:86:d2:50:47:e1:36:ea:f0: cd:72:35:61:ae:1f:9b:dc:b9:ec:c0:38:7b:77:27: 98:68:3d:dd:08:ad:b8:16:03:98:90:66:e9:cc:ee: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:78:2D:DF:E3:F8:87:A6:4D:98:2A:45:71:80:EC:5B:08:A8:39 X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:30:fe:98:5e:d0:b2:4c:e2:d1:d2:4a:8c:f1:df:ea:d7:85: 17:42:a4:4d:38:9a:33:cc:73:4d:eb:39:e3:ae:f8:6d:2e:04: 04:c1:08:f5:0b:a9:bb:24:26:27:1b:02:77:eb:de:c0:2c:42: a4:88:ae:08:07:0f:f3:93:fb:f2:75:1c:2a:a2:e0:c7:e8:88: c2:ed:d4:14:70:56:91:96:ea:9b:b7:90:07:f9:b5:56:cf:9d: d2:b7:7c:b4:d7:fd:27:a2:ff:70:aa:10:6c:81:c5:43:03:56: 09:6c:54:d9:8b:62:0c:67:d4:31:35:0a:df:82:a0:53:2c:ca: ff:d8:3b:29:c4:ce:ae:d1:c3:02:be:37:5f:44:a6:1b:19:9b: e3:72:2d:1f:fe:91:81:4f:2c:7c:8f:5b:12:50:68:54:d6:90: f5:4a:c7:6a:a0:27:8c:7e:8d:8b:71:d5:96:a2:96:8c:22:e1: b0:04:ea:f6:f6:46:53:fc:1c:be:d5:6b:e1:9e:6d:ad:dd:0a: 03:7d:9d:e3:6b:e1:ba:a4:05:9c:c2:f7:c2:6e:ce:dc:c3:7e: 3e:fe:e2:e2:41:ce:cd:d1:cb:51:5f:83:11:75:98:37:09:46: f0:e3:98:6c:7f:5b:4b:66:8d:5f:66:5c:bd:fe:dc:3e:40:9a: d8:7c:6e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjUwNzAxMDA0NTU3WhcNMjUwNzA4MDA0NTU3WjAYMRYwFAYD VQQDEw02ODYzMmZjNS04Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvj1Z3mGzRezWG02BsSpi51ixvX89sO1oo4YvHW8YERCp5+EB90hjnDt/HHJE MbZbUOqQLrTm5lH9f/53pNI/t7X8hjfYyCh3+v6ZhfSRUVOZwvMBZiAI+qRMPhqz kPK9mTMbvll3n79L59p7IQl8yHL9U6V1Myy7Jjt6YH/cYCP9dmzgfY6wiQVa5hFe Owfa1iTBBzL1BqKwTEF3K7X4WactF+2+6K0aDm+WQx5PNs96ZmYzNdFqDLMUscxe LG+NCJE4xxLa3JBKJjIpRMu8BceAddfBJJ7lhtJQR+E26vDNcjVhrh+b3LnswDh7 dyeYaD3dCK24FgOYkGbpzO7hIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsFeC3f 4/iHpk2YKkVxgOxbCKg5MB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZMP6YXtCyTOLR0kqM8d/q14UXQqRNOJozzHNN6znjrvhtLgQEwQj1 C6m7JCYnGwJ3697ALEKkiK4IBw/zk/vydRwqouDH6IjC7dQUcFaRluqbt5AH+bVW z53St3y01/0nov9wqhBsgcVDA1YJbFTZi2IMZ9QxNQrfgqBTLMr/2DspxM6u0cMC vjdfRKYbGZvjci0f/pGBTyx8j1sSUGhU1pD1SsdqoCeMfo2LcdWWopaMIuGwBOr2 9kZT/By+1Wvhnm2t3QoDfZ3ja+G6pAWcwvfCbs7cw34+/uLiQc7N0ctRX4MRdZg3 CUbw45hsf1tLZo1fZly9/tw+QJrYfG7c -----END CERTIFICATE-----Generated at Thu Jul 3 01:55:11 2025 by rpki-client