$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json) Hash identifier: D8k7e2t/yYs/m2pdKKX3lvw5TuFjIt4W08/A2PRrg6Y= Subject key identifier: 87:FE:84:2D:79:1C:8C:AD:05:E6:6C:49:FD:DE:8B:7B:48:7B:1B:E9 Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft Manifest number: D1 Signing time: Tue 01 Jul 2025 06:12:15 +0000 Manifest this update: Tue 01 Jul 2025 06:12:14 +0000 Manifest next update: Tue 08 Jul 2025 06:12:14 +0000 Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: 2KvQB+zctvnqE7eW/y4pnPsrGLFtQk4ot1Y3f5fjA2s=) 2: E051D150541011F0B6603436C4F9AE02.roa (hash: E2oqWwr53NGSjEQOiUfa1ZvXKiP9C4AXhHfYuN6mnQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Validity Not Before: Jul 1 06:12:14 2025 GMT Not After : Jul 8 06:12:14 2025 GMT Subject: CN=68637c3f-ef9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9c:ed:64:f0:db:6e:b9:8f:94:3b:da:79:77: 3b:41:39:d6:4f:38:0c:be:1b:0a:ec:ff:cf:e6:b4: d6:ad:3a:64:d4:6e:11:00:c0:0d:bc:ad:02:73:65: 39:bc:aa:07:ce:4e:50:7a:8d:75:75:90:8d:6b:7f: ac:30:f1:2e:c8:c1:78:de:42:a9:53:2b:b7:6e:6b: 7d:73:91:79:bd:01:e4:e9:28:42:6c:c0:a9:5d:eb: e5:68:b0:0e:87:70:29:8b:0d:3c:63:30:21:95:5e: f5:c7:1a:c6:bc:b5:3e:43:c2:a6:f1:30:d2:3c:1b: 42:72:cf:a0:45:e4:98:4f:5b:44:22:0c:e8:fd:65: 0d:ec:34:ec:61:4f:3e:96:36:a3:35:c6:cc:45:4d: e3:f0:f3:55:40:15:54:0a:bf:a7:d6:3d:f4:a6:30: 2d:42:28:dd:89:75:82:39:22:11:60:af:a7:2a:64: b9:e8:5a:27:4c:7a:6a:5e:90:24:22:cb:f2:e6:2a: f2:14:ec:5f:0f:a9:0a:99:a0:90:91:11:a4:a0:da: c0:2f:c4:42:44:ab:56:86:ce:db:56:06:a1:e6:19: a1:b4:f9:b8:f4:7a:90:c2:13:b4:31:99:af:da:5a: 6e:0b:c3:ba:08:59:24:ad:0a:48:8f:94:08:ef:4e: 12:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FE:84:2D:79:1C:8C:AD:05:E6:6C:49:FD:DE:8B:7B:48:7B:1B:E9 X509v3 Authority Key Identifier: keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:28:79:23:41:73:7d:16:c7:cb:b7:38:1d:0a:de:e2:b0:6a: 02:31:4b:81:ca:47:ce:3c:38:85:a8:3a:f4:62:e0:79:2d:87: 0f:36:95:12:d9:e6:56:93:98:f4:0f:e7:a2:3a:34:fe:37:55: 89:f1:24:e0:a7:4d:1e:55:89:f1:4e:bc:2f:70:5f:91:b1:d9: 96:1c:a5:7c:56:b6:d3:20:d7:18:f3:f5:80:53:bd:e3:a0:b7: e4:98:1d:4f:b1:27:02:45:f0:4c:eb:c6:dc:1e:d3:dd:8c:d7: 60:37:fe:1f:1f:04:f0:08:83:17:91:fc:2b:7a:97:e1:00:6a: 6d:74:c8:27:0d:6d:ff:1c:84:3c:1c:bc:62:d7:d8:70:dd:a6: b7:28:e1:72:bf:b1:ff:74:8f:8f:c6:02:c2:74:23:7b:dd:15: 65:32:ad:37:ff:66:a7:d7:d0:c8:a5:89:e3:82:78:62:91:54: 47:fa:8d:40:bf:77:93:fc:5a:c3:d1:bf:6c:56:ac:07:5f:c8: b7:28:91:bf:8e:df:b5:01:b1:3c:97:0f:24:d9:85:8e:db:c5: 71:9d:3c:08:ce:2f:b2:7e:8c:1c:fd:f5:8b:af:25:46:1a:ec: e7:f5:3e:a0:f8:a7:d8:e4:5d:1a:4b:a6:30:56:e8:8a:99:eb: cf:85:ae:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5 ODhEQTNCOUEwHhcNMjUwNzAxMDYxMjE0WhcNMjUwNzA4MDYxMjE0WjAYMRYwFAYD VQQDEw02ODYzN2MzZi1lZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pztZPDbbrmPlDvaeXc7QTnWTzgMvhsK7P/P5rTWrTpk1G4RAMANvK0Cc2U5 vKoHzk5Qeo11dZCNa3+sMPEuyMF43kKpUyu3bmt9c5F5vQHk6ShCbMCpXevlaLAO h3Apiw08YzAhlV71xxrGvLU+Q8Km8TDSPBtCcs+gReSYT1tEIgzo/WUN7DTsYU8+ ljajNcbMRU3j8PNVQBVUCr+n1j30pjAtQijdiXWCOSIRYK+nKmS56FonTHpqXpAk Isvy5iryFOxfD6kKmaCQkRGkoNrAL8RCRKtWhs7bVgah5hmhtPm49HqQwhO0MZmv 2lpuC8O6CFkkrQpIj5QI704SMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIf+hC15 HIytBeZsSf3ei3tIexvpMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCKHkjQXN9FsfLtzgdCt7isGoCMUuBykfOPDiFqDr0YuB5LYcPNpUS 2eZWk5j0D+eiOjT+N1WJ8STgp00eVYnxTrwvcF+RsdmWHKV8VrbTINcY8/WAU73j oLfkmB1PsScCRfBM68bcHtPdjNdgN/4fHwTwCIMXkfwrepfhAGptdMgnDW3/HIQ8 HLxi19hw3aa3KOFyv7H/dI+PxgLCdCN73RVlMq03/2an19DIpYnjgnhikVRH+o1A v3eT/FrD0b9sVqwHX8i3KJG/jt+1AbE8lw8k2YWO28VxnTwIzi+yfowc/fWLryVG Guzn9T6g+KfY5F0aS6YwVuiKmevPha79 -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:50 2025 by rpki-client