$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft File: 4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json) Hash identifier: o+ARDRVUXSWXY2btUU4nL3jrzlv2o5z5An/cv3tcefo= Subject key identifier: B4:C5:A3:DC:1C:67:FC:37:EC:09:F9:0A:9D:C3:35:3A:A4:17:35:A8 Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Certificate serial: 1810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft Manifest number: 17D6 Signing time: Wed 02 Jul 2025 16:41:51 +0000 Manifest this update: Wed 02 Jul 2025 16:41:50 +0000 Manifest next update: Wed 09 Jul 2025 16:41:50 +0000 Files and hashes: 1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: MK9v9l4dQ7fI9FeSVm1AQ8/vaLfKpD57p8naRM19/rk=) 2: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: wcQu6qDmYL8RSwTWQdHq8swDuqsLZ/b+WksTXiVZeUI=) 3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: ukI4z4ZMWUWet1XkTlAm00Pda4+ffxxraVEq+pStj8k=) 4: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: mm0VJeRGh/+0foB6ENfn+0Td2KUkG+rfML9gCL5EGhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6160 (0x1810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Validity Not Before: Jul 2 16:41:50 2025 GMT Not After : Jul 9 16:41:50 2025 GMT Subject: CN=6865614f-6f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:64:31:80:41:9a:5c:78:3a:4d:98:c4:94: a6:c9:af:61:00:5a:db:23:e8:8d:19:f0:48:a7:16: c4:6f:0e:54:42:b7:3f:b0:97:2f:f8:92:e8:99:e5: 0e:0b:98:bc:8b:ac:75:9f:fa:d4:cd:cd:ea:cd:9f: a5:4c:6f:61:e8:f6:0b:2d:73:b0:e7:d3:48:af:7c: 8f:30:42:b4:1e:82:02:2a:5a:36:78:b5:df:aa:ba: 6e:58:aa:7f:4f:fd:d2:a2:92:2d:9d:bd:0c:c8:98: fa:5b:6a:2d:7f:67:65:81:8a:b0:eb:47:b4:61:b7: b8:3c:af:5a:b1:5b:d1:0a:cd:f1:1a:83:ee:b4:81: 43:26:fb:09:4c:21:9d:f6:3e:8f:72:71:24:80:bb: a0:41:80:20:b2:b9:50:d8:9f:00:8b:27:2a:88:26: ee:46:84:5c:bd:00:41:2e:4f:c2:ba:0e:ea:bc:7d: 98:a5:f6:2b:4c:64:6f:f0:c2:35:33:f3:df:8d:b9: b4:2c:f5:9f:0a:a6:95:c8:2c:12:e2:8a:d7:b4:05: 9f:b6:30:f7:50:c3:19:da:88:36:12:0e:74:e1:fa: 13:20:aa:7b:35:4b:99:4d:da:e6:d4:99:29:8e:50: 44:8c:3e:a3:ae:a6:a6:be:58:6b:b4:ca:b3:f4:14: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C5:A3:DC:1C:67:FC:37:EC:09:F9:0A:9D:C3:35:3A:A4:17:35:A8 X509v3 Authority Key Identifier: keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:07:81:0c:12:91:36:33:45:40:ad:0e:21:16:06:ea:74:6a: 60:e1:8b:6f:16:69:ce:21:1a:58:14:1c:30:e9:77:1d:20:44: de:5f:79:91:91:d0:b8:12:d8:e3:50:d2:94:4f:76:03:39:a4: 20:69:43:05:3e:83:38:4e:80:0f:26:71:ac:d5:25:4b:09:fe: 4a:53:d2:40:19:0a:da:1f:8c:dd:a5:ed:76:6a:2c:d5:0d:9b: 49:4f:00:df:86:c7:ad:88:9a:27:67:fb:6d:9d:c6:77:c0:f3: 4e:f0:b3:6a:17:e3:18:98:6b:f2:a4:fa:ec:5c:cc:22:00:41: 02:09:11:d0:10:ba:7b:b2:5f:63:b9:0b:77:d0:fc:fa:7d:2d: 59:96:8a:6f:f1:36:92:c0:88:de:ce:6e:fd:f8:d7:49:c4:8e: 5d:c5:fc:f3:63:fb:49:db:d5:c9:d9:b1:d2:0e:1f:a0:75:71: 6d:84:c6:0d:f5:fd:d1:fd:2b:87:1e:36:3c:a9:cc:d5:88:dc: b1:8a:5e:77:7e:8b:c5:08:57:e7:fa:e7:98:5c:2a:2e:2c:03: 18:db:13:bb:d9:38:44:aa:82:01:ee:04:4d:1b:a0:49:1d:72: dc:a7:66:28:59:54:3c:8b:78:49:c7:e5:5e:9c:f6:61:35:9a: 7f:46:55:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy Q0UyNDUxOTYwHhcNMjUwNzAyMTY0MTUwWhcNMjUwNzA5MTY0MTUwWjAYMRYwFAYD VQQDEw02ODY1NjE0Zi02ZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07hkMYBBmlx4Ok2YxJSmya9hAFrbI+iNGfBIpxbEbw5UQrc/sJcv+JLomeUO C5i8i6x1n/rUzc3qzZ+lTG9h6PYLLXOw59NIr3yPMEK0HoICKlo2eLXfqrpuWKp/ T/3SopItnb0MyJj6W2otf2dlgYqw60e0Ybe4PK9asVvRCs3xGoPutIFDJvsJTCGd 9j6PcnEkgLugQYAgsrlQ2J8AiycqiCbuRoRcvQBBLk/Cug7qvH2YpfYrTGRv8MI1 M/Pfjbm0LPWfCqaVyCwS4orXtAWftjD3UMMZ2og2Eg504foTIKp7NUuZTdrm1Jkp jlBEjD6jrqamvlhrtMqz9BSmSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTFo9wc Z/w37An5Cp3DNTqkFzWoMB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4 Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxRS9DMUZBMDgyQ0M4Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3 TWlEX2tqeldvUm9zNGtVWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/B4EMEpE2M0VArQ4hFgbqdGpg4YtvFmnOIRpYFBww6XcdIETeX3mR kdC4EtjjUNKUT3YDOaQgaUMFPoM4ToAPJnGs1SVLCf5KU9JAGQraH4zdpe12aizV DZtJTwDfhsetiJonZ/ttncZ3wPNO8LNqF+MYmGvypPrsXMwiAEECCRHQELp7sl9j uQt30Pz6fS1Zlopv8TaSwIjezm79+NdJxI5dxfzzY/tJ29XJ2bHSDh+gdXFthMYN 9f3R/SuHHjY8qczViNyxil53fovFCFfn+ueYXCouLAMY2xO72ThEqoIB7gRNG6BJ HXLcp2YoWVQ8i3hJx+VenPZhNZp/RlXa -----END CERTIFICATE-----Generated at Thu Jul 3 15:38:45 2025 by rpki-client