$ rpki-client -vvf rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft File: DeK2pi5UoKYbzzFLbi77jzoeOno.mft (raw, json) Hash identifier: j05otwBV1nztaPtB7WSIFZIvjEFlcCmP6QRStl1JCsM= Subject key identifier: BE:B1:7A:2F:54:CD:B4:09:DC:93:0F:7B:AC:E5:66:78:3C:46:A1:BB Authority key identifier: 0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A Certificate issuer: /CN=A916F8DB/serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft Manifest number: 014F Signing time: Tue 01 Jul 2025 04:38:56 +0000 Manifest this update: Tue 01 Jul 2025 04:38:56 +0000 Manifest next update: Tue 08 Jul 2025 04:38:56 +0000 Files and hashes: 1: DeK2pi5UoKYbzzFLbi77jzoeOno.crl (hash: 04YNP9qO4qiHgnUMN/0kcHwEa2K/TZcgomcv2kIwzK8=) 2: 65A459FE54BD11EE8C958973C4F9AE02.roa (hash: iUnEHsfjN1jchtBZnX9gEs2PWdWpqrF2oKCzEFQT8+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F8DB, serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Validity Not Before: Jul 1 04:38:56 2025 GMT Not After : Jul 8 04:38:56 2025 GMT Subject: CN=68636660-504c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:24:08:e5:9f:e7:d0:61:22:c9:af:f1:1a: 0f:58:ca:cf:c5:6f:63:ea:cb:8b:ce:a8:51:73:b4: f4:4c:54:4d:66:7d:6c:e7:57:4d:0d:6f:23:0d:83: f8:4c:a8:62:1c:7b:62:43:9b:4d:3a:e5:8a:4b:b2: a0:8a:0f:ca:25:8e:c5:49:07:db:fc:b4:3f:ec:52: dd:01:cf:14:08:85:bc:56:7d:a6:58:68:89:bd:ca: 3c:c9:60:53:59:ce:06:76:e7:71:c2:d1:1c:12:88: 31:47:88:c6:f9:72:bd:69:69:d7:7c:03:d2:11:8d: ea:50:64:20:61:bf:74:b7:5b:e5:79:12:16:13:a7: 2e:7e:ff:db:6b:2b:c9:a4:78:eb:34:0b:da:e4:77: af:2b:cd:13:c4:1b:3d:4d:e8:d4:4d:42:be:7a:86: ab:78:21:ef:c9:7c:d1:89:72:82:ea:59:39:5f:15: f4:c5:98:2d:03:43:cb:7d:18:7a:32:e6:80:fa:12: 0b:22:1a:16:99:b0:75:94:1a:f7:93:dd:3d:63:35: 23:00:a0:1c:7c:de:a6:e9:45:98:0a:63:c8:1c:8b: d7:a2:22:38:26:d3:72:ea:e4:be:56:0d:19:67:69: f2:89:d9:0f:24:af:c5:f5:9d:01:92:b6:44:8b:86: d2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B1:7A:2F:54:CD:B4:09:DC:93:0F:7B:AC:E5:66:78:3C:46:A1:BB X509v3 Authority Key Identifier: keyid:0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ee:6c:23:ea:da:0c:6a:90:e3:89:53:b3:c0:a1:97:04:c3: b8:77:60:77:4e:8e:0e:86:6b:bc:98:3a:c8:df:6a:57:06:c7: a5:c4:da:77:db:af:31:f2:86:69:86:05:83:80:c5:bd:66:2a: 00:85:0a:a5:10:19:5f:04:4e:22:2a:fe:26:21:2a:3c:df:ad: 8b:9c:1d:9d:c1:59:70:5b:9d:44:f0:46:a1:fd:00:1e:bd:c4: bc:e3:65:75:91:fc:98:f1:1a:7d:a2:2c:6c:a2:22:8d:11:0c: 05:19:c2:31:51:03:1f:d5:40:94:c7:43:a7:87:a9:e6:ec:3f: fb:db:80:9b:c4:cc:2d:b7:43:68:7e:a5:2f:61:97:6b:7e:5f: 32:ff:14:25:46:81:5f:05:7f:43:57:82:8f:ca:d1:ef:6c:7c: e3:c9:c3:7e:5c:43:70:4c:4d:31:32:f3:7b:75:8e:be:c8:c0: 37:ca:c4:20:b2:98:01:16:af:74:4f:6f:99:30:15:66:69:f6: 98:0c:a9:44:27:e6:c2:ab:cc:69:b6:84:17:5c:0c:b9:0c:9b: e1:d8:7d:89:78:f2:a7:f3:6c:7e:25:90:d7:89:1e:cf:65:39: 6b:53:a3:ff:91:ec:d9:09:0d:08:1f:96:9e:84:3a:41:e7:1a: 99:49:1b:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY4REIxMTAvBgNVBAUTKDBERTJCNkE2MkU1NEEwQTYxQkNGMzE0QjZFMkVGQjhG M0ExRTNBN0EwHhcNMjUwNzAxMDQzODU2WhcNMjUwNzA4MDQzODU2WjAYMRYwFAYD VQQDEw02ODYzNjY2MC01MDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxe4kCOWf59BhIsmv8RoPWMrPxW9j6suLzqhRc7T0TFRNZn1s51dNDW8jDYP4 TKhiHHtiQ5tNOuWKS7Kgig/KJY7FSQfb/LQ/7FLdAc8UCIW8Vn2mWGiJvco8yWBT Wc4GdudxwtEcEogxR4jG+XK9aWnXfAPSEY3qUGQgYb90t1vleRIWE6cufv/bayvJ pHjrNAva5HevK80TxBs9TejUTUK+eoareCHvyXzRiXKC6lk5XxX0xZgtA0PLfRh6 MuaA+hILIhoWmbB1lBr3k909YzUjAKAcfN6m6UWYCmPIHIvXoiI4JtNy6uS+Vg0Z Z2nyidkPJK/F9Z0BkrZEi4bSMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6xei9U zbQJ3JMPe6zlZng8RqG7MB8GA1UdIwQYMBaAFA3itqYuVKCmG88xS24u+486Hjp6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjhEQi82QzhCQjg2MjU0 QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9LWWJ6ekZMYmk3N2p6b2VP bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlSzJwaTVVb0tZYnp6RkxiaTc3anpvZU9uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjhEQi82QzhCQjg2MjU0QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9L WWJ6ekZMYmk3N2p6b2VPbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw7mwj6toMapDjiVOzwKGXBMO4d2B3To4Ohmu8mDrI32pXBselxNp3 268x8oZphgWDgMW9ZioAhQqlEBlfBE4iKv4mISo8362LnB2dwVlwW51E8Eah/QAe vcS842V1kfyY8Rp9oixsoiKNEQwFGcIxUQMf1UCUx0Onh6nm7D/724CbxMwtt0No fqUvYZdrfl8y/xQlRoFfBX9DV4KPytHvbHzjycN+XENwTE0xMvN7dY6+yMA3ysQg spgBFq90T2+ZMBVmafaYDKlEJ+bCq8xptoQXXAy5DJvh2H2JePKn82x+JZDXiR7P ZTlrU6P/kezZCQ0IH5aehDpB5xqZSRt8 -----END CERTIFICATE-----Generated at Wed Jul 2 15:35:20 2025 by rpki-client