$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft File: 66pMRPJIk3FKHVs2Ci17LYYFsWM.mft (raw, json) Hash identifier: pc1XaOzVLIKwqFN5AVRwcUUn03c9QRPucq3RQ/c6Ahg= Subject key identifier: 0B:90:5A:86:89:66:8A:F2:7C:37:A2:9C:42:9E:B9:9B:AD:BD:A1:C0 Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 Certificate issuer: /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft Manifest number: C1 Signing time: Tue 01 Jul 2025 06:28:20 +0000 Manifest this update: Tue 01 Jul 2025 06:28:20 +0000 Manifest next update: Tue 08 Jul 2025 06:28:20 +0000 Files and hashes: 1: 66pMRPJIk3FKHVs2Ci17LYYFsWM.crl (hash: DtbYk3rmvvCr2wl/CqmSXQgEQhmvD9zo9KrCUa70AnI=) 2: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (hash: 6SVIugHlnaJdlkKtpec/q8AF54HgJPVuchm8bN57MAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163 Validity Not Before: Jul 1 06:28:20 2025 GMT Not After : Jul 8 06:28:20 2025 GMT Subject: CN=68638004-cf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0e:94:dd:4f:fb:be:0d:76:86:65:bd:bd:3d: c2:5d:68:45:bd:3d:9f:b3:ee:d3:bf:e1:22:39:12: ea:2d:7b:5b:25:1b:24:5a:d1:6d:ba:5c:ad:36:4c: a9:65:1b:e1:d3:4e:ff:33:a4:58:99:30:cf:bd:57: 62:3c:ae:ae:57:cc:61:8e:f3:a8:fa:a6:cf:92:b2: c2:ea:e3:4a:7e:e1:b7:1d:91:c3:18:07:8d:c8:6c: 89:ed:f0:fe:69:81:84:0f:65:1e:ca:ee:04:37:ba: a2:73:56:7c:7a:a6:d8:1b:d5:c3:f5:d2:06:aa:6e: bb:f4:a0:30:f1:98:2d:dd:46:0a:c9:31:bd:ca:aa: a4:8d:63:23:c8:d8:00:0a:90:a8:c6:37:66:64:02: e2:23:c4:45:70:3b:31:a7:34:67:eb:5b:51:bd:4c: 15:c8:c4:3f:cb:1f:ed:ef:a9:79:e7:78:ba:d2:a6: 2f:69:1a:7c:68:d5:21:91:99:d1:3c:d6:72:1a:9a: ff:5d:5f:0e:5c:db:64:75:42:e4:10:e9:8d:b7:76: 9c:c9:f2:f3:05:35:de:51:36:a4:c8:6b:d9:e5:cf: 2d:6f:88:93:d6:ba:9e:9a:72:64:cc:56:2e:70:00: 91:38:53:cf:48:b0:8e:c0:87:bf:31:1e:61:49:d8: 30:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:90:5A:86:89:66:8A:F2:7C:37:A2:9C:42:9E:B9:9B:AD:BD:A1:C0 X509v3 Authority Key Identifier: keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f6:48:c0:01:fc:67:ec:03:43:ab:b2:c6:ef:d4:15:16:59: 29:85:ae:69:ec:bb:a1:92:b4:ca:e6:9c:e2:b8:40:82:84:30: 15:4a:b6:ba:3d:35:6b:d6:ba:c4:c4:79:f6:0a:be:70:27:4d: 3c:ed:5a:2d:74:98:e0:da:28:43:39:85:6b:bd:0d:86:45:20: 4d:ed:e8:64:28:11:df:95:ec:95:12:22:28:12:9c:eb:13:93: 62:28:28:df:c9:d0:90:19:46:fe:e9:33:67:57:23:b1:09:52: 99:66:0e:76:ea:7b:ce:15:8b:d2:f7:cb:40:31:2a:d5:02:4b: 1a:65:5e:f6:cc:3c:a2:40:24:0d:26:9c:7f:dd:97:19:4e:e1: 81:d8:96:84:ba:21:6c:0d:b6:9d:2e:87:76:93:b4:90:e6:a2: f8:b3:29:11:d1:5b:98:64:2c:39:6d:11:3a:b0:e1:8c:e9:89: 29:dc:35:bb:f2:33:7e:6e:2b:5e:05:1c:8f:49:fd:4c:e8:56: 6b:1f:91:40:b6:81:33:45:b0:40:ad:d0:6b:6b:74:a5:2a:86: 6d:2e:0e:6a:fd:16:48:03:18:ea:aa:e8:e3:8d:cf:71:aa:9f: 73:7b:69:29:fd:9b:eb:cd:76:09:7e:8a:13:b0:d9:93:57:19: 4e:31:72:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA0RDYxMTAvBgNVBAUTKEVCQUE0QzQ0RjI0ODkzNzE0QTFENUIzNjBBMkQ3QjJE ODYwNUIxNjMwHhcNMjUwNzAxMDYyODIwWhcNMjUwNzA4MDYyODIwWjAYMRYwFAYD VQQDEw02ODYzODAwNC1jZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4A6U3U/7vg12hmW9vT3CXWhFvT2fs+7Tv+EiORLqLXtbJRskWtFtulytNkyp ZRvh007/M6RYmTDPvVdiPK6uV8xhjvOo+qbPkrLC6uNKfuG3HZHDGAeNyGyJ7fD+ aYGED2Ueyu4EN7qic1Z8eqbYG9XD9dIGqm679KAw8Zgt3UYKyTG9yqqkjWMjyNgA CpCoxjdmZALiI8RFcDsxpzRn61tRvUwVyMQ/yx/t76l553i60qYvaRp8aNUhkZnR PNZyGpr/XV8OXNtkdULkEOmNt3acyfLzBTXeUTakyGvZ5c8tb4iT1rqemnJkzFYu cACROFPPSLCOwIe/MR5hSdgwlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuQWoaJ ZoryfDeinEKeuZutvaHAMB8GA1UdIwQYMBaAFOuqTETySJNxSh1bNgotey2GBbFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDRENi9BRDBDQUMxRTMx QTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWszRktIVnMyQ2kxN0xZWUZz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzY2cE1SUEpJazNGS0hWczJDaTE3TFlZRnNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDRENi9BRDBDQUMxRTMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWsz RktIVnMyQ2kxN0xZWUZzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB9kjAAfxn7ANDq7LG79QVFlkpha5p7LuhkrTK5pziuECChDAVSra6 PTVr1rrExHn2Cr5wJ0087VotdJjg2ihDOYVrvQ2GRSBN7ehkKBHfleyVEiIoEpzr E5NiKCjfydCQGUb+6TNnVyOxCVKZZg526nvOFYvS98tAMSrVAksaZV72zDyiQCQN Jpx/3ZcZTuGB2JaEuiFsDbadLod2k7SQ5qL4sykR0VuYZCw5bRE6sOGM6Ykp3DW7 8jN+biteBRyPSf1M6FZrH5FAtoEzRbBArdBra3SlKoZtLg5q/RZIAxjqqujjjc9x qp9ze2kp/ZvrzXYJfooTsNmTVxlOMXL4 -----END CERTIFICATE-----Generated at Thu Jul 3 05:06:46 2025 by rpki-client