$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft File: 83VHbzI13D1SUXHivpIRY45JCEc.mft (raw, json) Hash identifier: D56M1vwMybj3jXu90bm8WgVvhdXkLN/RVP1zF6nAB0g= Subject key identifier: C8:C7:CC:65:26:CC:6F:26:B4:E3:E9:2B:9D:31:A1:CB:E3:86:1B:45 Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47 Certificate issuer: /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft Manifest number: 50 Signing time: Tue 01 Jul 2025 08:07:52 +0000 Manifest this update: Tue 01 Jul 2025 08:07:51 +0000 Manifest next update: Tue 08 Jul 2025 08:07:51 +0000 Files and hashes: 1: 83VHbzI13D1SUXHivpIRY45JCEc.crl (hash: E4zhrIS+jLyTw/+q+5xm8hFpuPbjQRjBUncLW62JOn0=) 2: BA8DB662085911F082EDFD31C4F9AE02.roa (hash: +kDevtWz9Zb8E9hUtq+Uoh1dNdwrgx3ww0ByNbhsSc4=) 3: 99E2D388E9C411EFAFABDD0BC4F9AE02.roa (hash: HyBY5t49VXGObL7xNBvYsj3P5DUndJz8OLCiO0M3LtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627F9, serialNumber=F375476F3235DC3D525171E2BE9211638E490847 Validity Not Before: Jul 1 08:07:51 2025 GMT Not After : Jul 8 08:07:51 2025 GMT Subject: CN=68639757-6812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:70:8d:20:fb:10:f9:78:db:29:fc:f4:f5:04: b9:b9:e0:3e:88:6f:27:2e:dd:7c:5a:7d:45:60:20: be:25:af:d6:26:50:6d:42:10:68:36:5d:ed:13:af: 3a:4e:fa:bb:b6:83:1e:dc:3c:11:23:c1:19:dd:58: 90:53:36:7d:6e:d1:60:40:ad:2a:be:47:b4:a3:31: 39:7f:41:b4:22:39:35:0e:05:67:e5:18:33:6b:a5: aa:7c:49:40:ef:8d:71:3d:ca:2a:cf:e6:bb:01:51: 98:e6:ca:32:2e:c2:8f:c6:bc:ee:7d:f1:dd:6c:e0: c0:70:0d:6f:60:03:bc:57:0f:6e:8f:c2:5b:a4:21: 34:e4:cc:d0:ff:bc:51:c3:14:4e:d3:a9:9c:ed:39: 9c:3c:7a:5e:0a:52:e2:a6:dc:33:12:8b:f0:7c:16: 4c:0e:41:ec:29:c1:72:23:59:cd:ee:b8:23:47:7e: 95:3e:db:24:ea:ca:5c:03:57:c9:6a:e3:bd:6d:a1: 49:69:8d:91:78:ca:5d:a1:04:68:06:9c:ac:d1:a7: fa:20:08:59:48:76:f8:13:be:a1:54:e1:4e:3f:a9: 7c:78:f1:76:0c:cd:f5:71:40:b4:3e:ef:3d:46:06: 21:c5:1d:ba:32:f9:45:2a:f3:fb:8a:da:1b:01:69: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C7:CC:65:26:CC:6F:26:B4:E3:E9:2B:9D:31:A1:CB:E3:86:1B:45 X509v3 Authority Key Identifier: keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:93:3d:d6:99:0d:e7:ec:ac:e2:cf:a1:d3:a9:b6:53:c2:cd: 09:93:c5:2e:95:3f:eb:8c:7e:cc:30:c9:bd:7a:4f:06:89:f3: b9:25:46:9b:25:99:76:4e:ae:cb:09:0b:19:f6:a6:bf:1d:0e: 54:da:b8:a4:04:12:68:1d:a3:ba:07:9d:75:9a:0d:7f:17:09: 0e:bf:34:e6:bb:a6:23:95:ea:c4:02:09:73:50:3a:92:3b:3d: 88:fa:5e:2c:fa:8e:de:9d:c1:3c:c0:1b:7d:37:f1:6b:28:1e: f1:03:3e:8c:6a:0a:4c:26:99:e7:13:9e:d7:b7:b2:be:6b:fd: af:22:6d:ca:2e:84:ee:b5:d6:36:15:10:43:e8:5a:a5:d5:d3: bf:23:9b:58:eb:1f:d3:9c:5e:79:b4:d1:7e:c7:64:3c:50:78: 5d:24:d1:7c:f4:c7:b9:5b:e8:54:a7:65:48:a6:a3:e8:63:28: d4:83:96:e4:d7:89:fa:e9:1c:2e:ce:fe:a2:65:92:f1:3a:2a: f5:c2:7a:24:11:ce:f3:7c:a1:ab:f7:a7:78:4f:45:07:dd:e5: 33:4c:f7:02:a5:b9:c3:d6:e3:72:5b:39:41:8e:1a:7c:7f:6b: 59:d3:4e:53:17:0c:aa:77:1e:0b:6b:2b:72:da:73:1c:33:36: 91:82:b8:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjdGOTExMC8GA1UEBRMoRjM3NTQ3NkYzMjM1REMzRDUyNTE3MUUyQkU5MjExNjM4 RTQ5MDg0NzAeFw0yNTA3MDEwODA3NTFaFw0yNTA3MDgwODA3NTFaMBgxFjAUBgNV BAMTDTY4NjM5NzU3LTY4MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxcI0g+xD5eNsp/PT1BLm54D6Ibycu3XxafUVgIL4lr9YmUG1CEGg2Xe0TrzpO +ru2gx7cPBEjwRndWJBTNn1u0WBArSq+R7SjMTl/QbQiOTUOBWflGDNrpap8SUDv jXE9yirP5rsBUZjmyjIuwo/GvO598d1s4MBwDW9gA7xXD26PwlukITTkzND/vFHD FE7TqZztOZw8el4KUuKm3DMSi/B8FkwOQewpwXIjWc3uuCNHfpU+2yTqylwDV8lq 471toUlpjZF4yl2hBGgGnKzRp/ogCFlIdvgTvqFU4U4/qXx48XYMzfVxQLQ+7z1G BiHFHboy+UUq8/uK2hsBaTbLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyMfMZSbM bya04+krnTGhy+OGG0UwHwYDVR0jBBgwFoAU83VHbzI13D1SUXHivpIRY45JCEcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyN0Y5LzI4OERGMTRBRTlD NDExRUY5OTIwOTMwQUM0RjlBRTAyLzgzVkhiekkxM0QxU1VYSGl2cElSWTQ1SkNF Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODNWSGJ6STEzRDFTVVhIaXZwSVJZNDVKQ0VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy N0Y5LzI4OERGMTRBRTlDNDExRUY5OTIwOTMwQUM0RjlBRTAyLzgzVkhiekkxM0Qx U1VYSGl2cElSWTQ1SkNFYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGaTPdaZDefsrOLPodOptlPCzQmTxS6VP+uMfswwyb16TwaJ87klRpsl mXZOrssJCxn2pr8dDlTauKQEEmgdo7oHnXWaDX8XCQ6/NOa7piOV6sQCCXNQOpI7 PYj6Xiz6jt6dwTzAG3038WsoHvEDPoxqCkwmmecTnte3sr5r/a8ibcouhO611jYV EEPoWqXV078jm1jrH9OcXnm00X7HZDxQeF0k0Xz0x7lb6FSnZUimo+hjKNSDluTX ifrpHC7O/qJlkvE6KvXCeiQRzvN8oav3p3hPRQfd5TNM9wKlucPW43JbOUGOGnx/ a1nTTlMXDKp3HgtrK3LacxwzNpGCuME= -----END CERTIFICATE-----Generated at Thu Jul 3 01:11:08 2025 by rpki-client