$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json) Hash identifier: HKsggPTDxtpcKAChRnBmmXNDpJx6yZqPoqK6PPcSp6c= Subject key identifier: 69:2B:13:2C:EF:50:89:23:47:D7:C7:59:18:27:CA:F1:64:3E:E7:EE Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 0A41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft Manifest number: 095A Signing time: Sat 28 Jun 2025 20:21:40 +0000 Manifest this update: Sat 28 Jun 2025 20:21:39 +0000 Manifest next update: Sat 05 Jul 2025 20:21:39 +0000 Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: wytkhHz+wGLvxK19Nmk5KKrW/4SHzV2Z02webYAWdjQ=) 2: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: hwOF3wEGPYN9Coi28CC6fcXclDNnN/zPBkBKCSSYw20=) 3: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: SMU4xFi1+BMgC34BsBqVGrlL7Nhi/uMYFKO8+xvL4gc=) 4: E94D73BE291D11EF86792873C4F9AE02.roa (hash: qoIoX0JsFREycCLqPoVIIwH985mBQUcv+rcmwGljHCU=) 5: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: W4Wbfb9YnYtu8VIOO6jpXdYrtPZMihSeu+gvyUB2w5I=) 6: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: /WqiErWrMk0Gg59ZNQRQV8k1iCmu38eqjuLSdgpmAoA=) 7: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: 808jJ7dFgnwvbwRsKTU5jr+nJdVb6zUdp+50FtVbbEI=) 8: 55124B02F3C511EFAD4ACE37C4F9AE02.roa (hash: YP2VDVte8FHDmkWW6T58UQucntTpfXWYapyF9kxt8Zo=) 9: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: auhnazCcpZ7TKgsrAgKTEGN+Zxpu+wqNpKG4gMblQpk=) 10: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: 6gpu6/dBOZ2MchgvmUzyjPzKbIW+kNyxsH+MazWyCl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Jun 28 20:21:39 2025 GMT Not After : Jul 5 20:21:39 2025 GMT Subject: CN=68604ed3-a4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:c3:eb:75:50:5c:bd:fa:c3:9e:19:c0:84: 90:fd:90:77:22:dd:8f:14:bf:71:b8:4f:30:96:59: 4c:43:6b:dd:8f:9e:f6:93:1f:95:d6:17:20:d6:c4: a3:4d:3e:b2:37:b9:36:c8:64:c2:43:24:ae:dc:f3: 65:0c:04:bc:67:fc:94:1d:f3:39:ef:1f:74:6f:a0: e4:2a:cc:cf:6f:45:96:c2:b0:63:a5:43:5b:25:6a: 57:30:c7:67:13:6b:e6:73:58:38:d1:f9:06:4e:ea: a2:87:64:6d:d1:21:23:d1:c7:af:06:fb:c0:81:2b: 80:a8:68:f9:bd:af:6f:62:5d:7f:a3:d7:cf:3c:73: 2b:8f:28:a5:c8:f8:97:3f:f0:04:f2:c2:01:ec:9b: b7:7d:ef:70:6e:d3:6b:15:3c:bb:c9:68:bd:30:1e: 07:67:e0:74:a3:a0:f7:9b:69:7a:0f:c7:ea:72:a6: 49:84:91:65:61:7e:8c:85:bb:64:c7:dd:6b:ec:62: 7c:03:13:26:c8:86:34:45:b6:d6:80:a1:c9:d7:e3: cf:ba:0f:b6:cd:cc:f3:c2:da:ac:9a:aa:9b:5b:a4: 2d:6d:d4:63:81:a7:21:ac:d9:bb:3d:ea:fc:a2:ee: 6a:6b:78:a0:0f:b4:5e:09:56:66:b8:e3:47:f4:db: be:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2B:13:2C:EF:50:89:23:47:D7:C7:59:18:27:CA:F1:64:3E:E7:EE X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:13:1f:c7:8b:41:a8:3d:d3:81:77:a6:54:c5:6e:36:5e:f7: a8:11:42:e0:2c:fd:99:1f:78:96:15:c6:64:9d:62:9c:be:9c: 00:62:14:b6:5d:e5:01:85:04:31:3b:52:98:68:55:3c:5d:77: ce:22:f9:61:33:33:e1:56:21:a2:52:0b:d2:5e:c2:e9:7c:f1: ea:2f:ac:92:74:cf:74:ea:55:b9:38:84:24:c0:16:f3:75:04: 30:65:0b:43:a4:c8:b8:eb:06:f0:ea:dd:14:6d:a3:42:80:99: ce:e0:31:94:18:59:22:b1:de:40:1e:e1:21:5c:f7:40:c9:aa: 51:c4:f4:e0:82:6c:92:99:94:89:2e:a0:45:8b:98:80:15:13: a2:1d:72:cb:0a:07:a3:ff:b7:a0:0c:32:f4:ef:b4:fd:60:0c: bd:44:bb:b4:61:e3:a0:e1:2b:5f:c0:d0:0c:38:bf:b1:94:d1: 03:c0:19:24:30:1a:a9:f2:f0:71:32:07:25:ba:0c:45:5d:38: 6a:86:e6:2e:9b:a5:09:24:22:43:fc:a4:70:58:3d:3c:80:49: 66:34:69:b8:05:d6:a8:2d:13:06:dd:7d:87:72:60:7f:56:fd: 80:90:34:ff:7e:3f:e3:1a:f9:ca:63:da:37:07:e0:3b:35:0f: 20:b0:a4:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjUwNjI4MjAyMTM5WhcNMjUwNzA1MjAyMTM5WjAYMRYwFAYD VQQDEw02ODYwNGVkMy1hNGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0zD63VQXL36w54ZwISQ/ZB3It2PFL9xuE8wlllMQ2vdj572kx+V1hcg1sSj TT6yN7k2yGTCQySu3PNlDAS8Z/yUHfM57x90b6DkKszPb0WWwrBjpUNbJWpXMMdn E2vmc1g40fkGTuqih2Rt0SEj0cevBvvAgSuAqGj5va9vYl1/o9fPPHMrjyilyPiX P/AE8sIB7Ju3fe9wbtNrFTy7yWi9MB4HZ+B0o6D3m2l6D8fqcqZJhJFlYX6Mhbtk x91r7GJ8AxMmyIY0RbbWgKHJ1+PPug+2zczzwtqsmqqbW6QtbdRjgachrNm7Per8 ou5qa3igD7ReCVZmuONH9Nu+owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkrEyzv UIkjR9fHWRgnyvFkPufuMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3NS9EQTgzQUE3QUNBMTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhS Y2VCU1ViTWVLVXBMeDVjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZEx/Hi0GoPdOBd6ZUxW42XveoEULgLP2ZH3iWFcZknWKcvpwAYhS2 XeUBhQQxO1KYaFU8XXfOIvlhMzPhViGiUgvSXsLpfPHqL6ySdM906lW5OIQkwBbz dQQwZQtDpMi46wbw6t0UbaNCgJnO4DGUGFkisd5AHuEhXPdAyapRxPTggmySmZSJ LqBFi5iAFROiHXLLCgej/7egDDL077T9YAy9RLu0YeOg4StfwNAMOL+xlNEDwBkk MBqp8vBxMgclugxFXThqhuYum6UJJCJD/KRwWD08gElmNGm4BdaoLRMG3X2HcmB/ Vv2AkDT/fj/jGvnKY9o3B+A7NQ8gsKSg -----END CERTIFICATE-----Generated at Mon Jun 30 17:32:54 2025 by rpki-client