$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft File: RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft (raw, json) Hash identifier: Jzc7kS/mFR79PwQ0GKWUUcnonehgRLKsfmdPn42N8QU= Subject key identifier: 5D:17:1B:53:05:7B:0D:BD:C9:5F:11:68:9C:A6:12:DE:D3:56:33:07 Authority key identifier: 44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87 Certificate issuer: /CN=A91807BB/serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft Manifest number: 8E Signing time: Tue 01 Jul 2025 07:11:45 +0000 Manifest this update: Tue 01 Jul 2025 07:11:44 +0000 Manifest next update: Tue 08 Jul 2025 07:11:44 +0000 Files and hashes: 1: RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl (hash: 3NE+4pK5VfRwJ8lZGsp+/ToiJXq2nTzWrWYoscxWS9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287 Validity Not Before: Jul 1 07:11:44 2025 GMT Not After : Jul 8 07:11:44 2025 GMT Subject: CN=68638a31-0dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ee:7e:6e:8e:83:de:f7:0a:58:10:c6:c6:d8: 11:45:fb:ce:f1:db:bc:95:96:ed:fc:3a:52:50:4b: 10:50:b2:25:ce:3f:a8:22:db:85:9e:e6:6c:45:3c: 14:ae:34:61:d4:a5:03:60:ac:f6:ea:b9:1b:c0:7b: d0:24:53:5f:b2:ba:5c:d6:eb:2a:70:66:33:7d:04: 25:8b:9d:1b:5e:dc:49:07:41:ba:8c:43:5f:ec:78: ca:51:ef:57:bf:15:7c:5d:eb:cf:78:5b:a6:07:87: e1:0a:dc:4a:44:49:ce:88:db:40:cb:45:8e:d3:ae: 85:b6:f0:db:96:fc:ad:b8:6e:0d:d2:8c:df:4c:c1: c1:43:fd:cd:63:85:7b:b9:ef:7a:29:12:9c:04:47: 6f:f1:c5:d6:24:4d:46:c5:37:25:34:85:e6:ad:71: 36:ad:c9:b3:56:71:99:47:ec:57:cf:b0:6d:0c:6a: d6:93:a2:a3:aa:b5:f7:68:f3:ac:f3:25:25:16:22: 8f:13:7a:0d:c0:4d:6c:9d:6f:e6:88:c1:a5:42:81: ab:94:3c:da:08:dd:2a:6e:e0:c3:3b:15:9f:1c:07: 14:95:2c:a9:07:96:44:c3:6b:ce:31:b7:fc:bd:de: f6:d8:6a:0b:99:2c:09:9e:2b:1a:74:27:37:fc:c1: d6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:17:1B:53:05:7B:0D:BD:C9:5F:11:68:9C:A6:12:DE:D3:56:33:07 X509v3 Authority Key Identifier: keyid:44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:84:7e:fd:1e:76:16:b7:7e:b7:7f:7f:63:53:b8:53:65:6f: bd:c4:fc:b9:68:25:f7:39:cc:09:cd:30:78:68:ef:c8:a3:5d: ec:78:b1:69:5d:c0:51:3d:92:51:3e:8e:b9:62:bb:86:74:5f: 9a:ee:45:d1:a9:5b:8a:cd:f1:0c:86:89:1c:6d:40:8d:e0:75: 55:64:21:ed:69:59:b9:a1:04:e0:ae:4d:66:35:f6:62:d9:f1: df:be:dc:68:dc:ce:b2:ce:46:d6:09:6e:84:10:e6:e6:eb:2e: 9a:9a:55:6e:0a:bd:e9:99:cc:7b:ba:6d:91:6f:82:7e:8a:e8: c5:c2:7c:0c:ad:8e:98:64:87:d5:5b:58:5e:71:87:43:25:29: 51:38:dc:2b:8f:01:74:c2:6a:cd:b1:f8:45:35:ab:33:8f:cc: 04:e9:1e:d4:eb:0e:ce:63:22:1c:01:0a:d9:5b:7c:fe:63:af: b4:a6:c6:27:1d:e1:36:a5:db:41:ac:45:8f:e4:2b:c8:b9:42: 1f:03:b6:ab:b3:5c:ce:9c:6f:b2:15:05:78:b9:ef:9d:5b:b0: ea:e0:9d:8f:e3:9c:a8:a4:1b:35:ed:d3:ae:53:3c:b3:64:f8: b1:8a:f1:58:d6:04:5d:a2:8a:ed:90:69:d0:e8:bf:5a:2a:99: 1b:b0:5d:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKDQ0RjlDNERBNDdFNjM3MUZEMUM5RjlGOEU1NjREMTgw M0EwRjMyODcwHhcNMjUwNzAxMDcxMTQ0WhcNMjUwNzA4MDcxMTQ0WjAYMRYwFAYD VQQDEw02ODYzOGEzMS0wZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4O5+bo6D3vcKWBDGxtgRRfvO8du8lZbt/DpSUEsQULIlzj+oItuFnuZsRTwU rjRh1KUDYKz26rkbwHvQJFNfsrpc1usqcGYzfQQli50bXtxJB0G6jENf7HjKUe9X vxV8XevPeFumB4fhCtxKREnOiNtAy0WO066FtvDblvytuG4N0ozfTMHBQ/3NY4V7 ue96KRKcBEdv8cXWJE1GxTclNIXmrXE2rcmzVnGZR+xXz7BtDGrWk6KjqrX3aPOs 8yUlFiKPE3oNwE1snW/miMGlQoGrlDzaCN0qbuDDOxWfHAcUlSypB5ZEw2vOMbf8 vd722GoLmSwJnisadCc3/MHW9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0XG1MF ew29yV8RaJymEt7TVjMHMB8GA1UdIwQYMBaAFET5xNpH5jcf0cn5+OVk0YA6DzKH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wQUU0ODI5MDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9SUG5FMmtmbU54X1J5Zm40NVdUUmdEb1BN b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQbkUya2ZtTnhfUnlmbjQ1V1RSZ0RvUE1vYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wQUU0ODI5MDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9SUG5FMmtmbU54 X1J5Zm40NVdUUmdEb1BNb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwhH79HnYWt363f39jU7hTZW+9xPy5aCX3OcwJzTB4aO/Io13seLFp XcBRPZJRPo65YruGdF+a7kXRqVuKzfEMhokcbUCN4HVVZCHtaVm5oQTgrk1mNfZi 2fHfvtxo3M6yzkbWCW6EEObm6y6amlVuCr3pmcx7um2Rb4J+iujFwnwMrY6YZIfV W1hecYdDJSlRONwrjwF0wmrNsfhFNaszj8wE6R7U6w7OYyIcAQrZW3z+Y6+0psYn HeE2pdtBrEWP5CvIuUIfA7ars1zOnG+yFQV4ue+dW7Dq4J2P45yopBs17dOuUzyz ZPixivFY1gRdoortkGnQ6L9aKpkbsF1p -----END CERTIFICATE-----Generated at Tue Jul 1 15:20:10 2025 by rpki-client