$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json) Hash identifier: h/hshKeTcMescfVq21WUuRFPplwKaEQfxqyXVBCX8d0= Subject key identifier: 6B:C4:10:39:37:DC:35:F5:D7:1D:F5:79:A7:51:B2:51:BF:74:5E:53 Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 2536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft Manifest number: 2522 Signing time: Mon 30 Jun 2025 15:48:25 +0000 Manifest this update: Mon 30 Jun 2025 15:48:25 +0000 Manifest next update: Mon 07 Jul 2025 15:48:25 +0000 Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: UJnWmNNztb7+sIo8IWGRbRH3VYVgSM3oes8C17bi0PA=) 2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: cn19kmgTI5pykmKU6ztYW1fuk/UgkkZVZQRR4mCHAg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9526 (0x2536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: Jun 30 15:48:25 2025 GMT Not After : Jul 7 15:48:25 2025 GMT Subject: CN=6862b1c9-1772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:b1:ea:0f:95:b1:b5:8e:7e:49:e2:1c:e0: 81:c1:2b:dc:11:c5:17:eb:ca:51:82:65:0a:55:56: 19:64:fc:16:40:5e:53:95:f7:7a:1a:63:c7:10:55: 92:f1:20:7e:c1:ad:67:14:73:04:ad:8c:51:6d:3b: dc:69:47:7e:3c:13:e3:0e:b8:4a:36:25:52:38:e0: 4e:a8:19:e9:3d:7f:fc:08:fd:41:64:ad:64:10:c4: c4:55:57:a3:bb:4a:ff:30:51:83:c8:7a:23:7b:4e: 96:54:74:ca:ce:66:a3:ff:4f:45:20:79:b4:46:79: 7a:9e:94:56:2a:c3:00:87:59:97:21:df:d8:6e:02: 79:3f:8a:00:57:80:15:63:ca:fb:e1:1c:06:c5:d7: ad:cb:41:73:04:c7:e5:5c:2c:16:a6:3e:3d:a7:b1: cc:fe:54:4c:9a:25:94:76:c9:66:0f:f4:4b:71:1d: cc:6b:88:a1:d0:a9:a7:9b:b8:1d:74:8b:15:bb:cb: 59:99:0f:41:2c:0d:f2:1c:c5:b7:aa:77:24:2c:fe: 52:e4:30:09:9d:e9:1c:ed:e9:d5:5a:c4:6c:19:d8: cb:b3:5b:2d:ad:0d:77:ac:0b:93:c4:eb:96:3a:15: 3a:ac:3b:b3:9c:8a:16:6f:39:87:a8:32:c6:e1:9a: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C4:10:39:37:DC:35:F5:D7:1D:F5:79:A7:51:B2:51:BF:74:5E:53 X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:fe:30:88:f0:df:01:ed:83:a0:bf:82:15:7f:4c:c3:0c:3c: 4c:99:01:4b:3e:fa:de:3e:57:76:23:e9:ec:65:20:f0:99:54: 3b:11:e0:64:00:e0:02:33:91:17:e3:90:a1:90:5e:c9:75:c6: 45:5f:19:69:8c:a2:e0:d1:7d:32:d0:d8:0f:33:7d:ac:c8:86: 42:68:e8:8a:49:db:a6:be:f2:b4:8a:12:e1:01:5a:4e:ed:44: 0c:91:a9:9d:cb:8d:53:0f:6d:1d:99:63:ca:63:a6:f4:77:83: 0a:91:c9:42:de:47:e8:64:de:cc:a5:13:b7:a9:b8:c5:ad:47: 39:56:53:bb:2c:58:4b:6a:20:a7:13:06:5d:06:95:46:db:6b: 73:aa:17:40:49:22:bd:e0:d8:0b:c6:9a:7b:0d:00:9c:7c:3c: 6a:1b:b9:d0:54:80:6c:05:9a:99:9a:3d:90:70:7b:7b:08:25: 6e:cf:1f:94:ed:a7:0e:72:7b:11:aa:bb:eb:e1:25:23:fe:16: fb:ba:e3:d3:3a:92:24:2a:8b:d2:9a:49:96:66:6b:2c:d2:ed: e3:dc:e6:21:fa:8f:41:e8:55:a9:6e:f0:45:70:ff:40:73:91: 47:cf:ba:14:8e:f5:19:61:86:c3:6a:50:e4:d4:8e:fb:96:28: 1d:63:bc:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjUwNjMwMTU0ODI1WhcNMjUwNzA3MTU0ODI1WjAYMRYwFAYD VQQDEw02ODYyYjFjOS0xNzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBOx6g+VsbWOfkniHOCBwSvcEcUX68pRgmUKVVYZZPwWQF5Tlfd6GmPHEFWS 8SB+wa1nFHMErYxRbTvcaUd+PBPjDrhKNiVSOOBOqBnpPX/8CP1BZK1kEMTEVVej u0r/MFGDyHoje06WVHTKzmaj/09FIHm0Rnl6npRWKsMAh1mXId/YbgJ5P4oAV4AV Y8r74RwGxdety0FzBMflXCwWpj49p7HM/lRMmiWUdslmD/RLcR3Ma4ih0Kmnm7gd dIsVu8tZmQ9BLA3yHMW3qnckLP5S5DAJnekc7enVWsRsGdjLs1strQ13rAuTxOuW OhU6rDuznIoWbzmHqDLG4ZoPMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvEEDk3 3DX11x31eadRslG/dF5TMB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC/jCI8N8B7YOgv4IVf0zDDDxMmQFLPvrePld2I+nsZSDwmVQ7EeBk AOACM5EX45ChkF7JdcZFXxlpjKLg0X0y0NgPM32syIZCaOiKSdumvvK0ihLhAVpO 7UQMkamdy41TD20dmWPKY6b0d4MKkclC3kfoZN7MpRO3qbjFrUc5VlO7LFhLaiCn EwZdBpVG22tzqhdASSK94NgLxpp7DQCcfDxqG7nQVIBsBZqZmj2QcHt7CCVuzx+U 7acOcnsRqrvr4SUj/hb7uuPTOpIkKovSmkmWZmss0u3j3OYh+o9B6FWpbvBFcP9A c5FHz7oUjvUZYYbDalDk1I77ligdY7yJ -----END CERTIFICATE-----Generated at Wed Jul 2 04:18:12 2025 by rpki-client