$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft File: Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json) Hash identifier: 7rDkJzjFwg5ts7fdSHc+ru0OWPEG0VY6DydXtd2iFms= Subject key identifier: 8D:82:64:B5:9D:DE:A4:12:3C:DA:1D:91:57:BD:F4:4C:11:32:5E:B1 Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 Certificate issuer: /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft Manifest number: 72 Signing time: Sun 29 Jun 2025 05:54:31 +0000 Manifest this update: Sun 29 Jun 2025 05:54:30 +0000 Manifest next update: Sun 06 Jul 2025 05:54:30 +0000 Files and hashes: 1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: ZHPPtjqRcTwCLjpeyXcpFFlwRXipfzTUHLME63DFN+w=) 2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: mTvWjDqRpjoE4gToiz3x8YclXADkkIN+m00HGh0rTzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Validity Not Before: Jun 29 05:54:30 2025 GMT Not After : Jul 6 05:54:30 2025 GMT Subject: CN=6860d517-c564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:47:ba:31:25:1b:d5:00:71:c1:f3:d2:96: 9e:6a:b3:c2:93:94:dc:2a:76:75:49:8b:b1:36:22: 75:a0:90:7f:37:af:40:cc:cb:4e:90:25:db:77:3e: d8:63:00:5b:d0:13:01:46:05:d6:91:bd:35:31:f8: 34:b5:4a:c8:38:f7:13:d0:1f:e4:9a:62:eb:fb:e6: b7:24:69:1c:08:de:d9:e2:f8:46:bd:a9:11:d4:27: 41:d6:aa:74:e4:8a:e1:38:fb:f8:02:b7:d9:c6:1e: 01:9d:28:ee:73:1d:ff:ed:b7:25:6f:0f:aa:2e:4d: 5f:e0:c9:9e:35:4a:78:de:91:40:53:bd:2c:7a:1b: 31:6c:8b:d1:47:37:51:59:a9:0b:12:17:79:78:b1: 0b:b7:65:ab:dd:c8:b5:e5:ec:81:8d:a7:de:c1:0c: e8:11:0c:2b:af:90:d6:2d:65:db:13:b6:f3:b6:74: b9:62:f0:e8:4d:49:99:fa:f2:3e:0d:f8:65:5d:dd: b3:6b:c1:87:09:86:f2:9c:e9:e2:3a:05:be:a9:64: 9e:f1:19:b6:8e:8e:7a:4d:16:05:2c:4e:67:46:9c: 8c:cb:46:82:0e:14:9b:d5:d6:95:f6:df:62:fc:ae: 3a:50:2e:94:5f:ab:2e:78:ef:c6:41:0c:23:31:7e: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:82:64:B5:9D:DE:A4:12:3C:DA:1D:91:57:BD:F4:4C:11:32:5E:B1 X509v3 Authority Key Identifier: keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b9:a9:fb:05:66:e5:cb:67:ab:e9:e0:63:75:f3:b5:af:9a: 53:9d:54:1f:83:ea:94:8f:a3:8d:f6:2a:4a:25:eb:3a:fc:14: a5:0e:88:b1:00:46:4e:d0:d2:fa:e2:cf:64:ff:c7:bd:e3:19: ad:e4:b1:45:2f:49:76:37:40:78:bf:42:d5:59:7b:05:28:d1: af:bd:ae:c4:81:8b:73:f9:e9:14:c7:9d:89:03:80:31:60:c9: f4:b2:28:de:67:69:45:f5:2b:40:73:06:a8:a6:67:d2:a3:43: 1d:1c:ea:9e:1d:7e:42:02:3f:fe:88:5a:9d:e0:f7:93:66:f8: 5c:97:88:10:42:9f:64:59:b9:97:3a:d3:33:0d:2c:d7:03:51: 01:14:86:23:bb:d9:23:35:f4:56:63:b3:ac:ce:2d:2b:ad:33: 7f:69:9b:6d:0f:c0:ab:06:dc:1f:ed:fd:a5:91:c5:ed:38:5c: 21:5f:3f:18:6f:6f:1c:a1:18:78:ec:97:cd:36:9c:6e:dc:d5: 84:3c:ed:2b:0d:ff:a5:df:82:f6:ad:db:a1:2c:ca:ae:9b:fe: 5f:e0:56:dc:69:f9:d4:3c:c4:92:12:cf:f2:c0:50:da:78:54: d2:75:f9:d4:78:90:0e:34:91:cf:a1:cf:a9:59:60:b5:34:bf: 14:ce:89:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzlDRjExMC8GA1UEBRMoNEE3RDI2QzRDQkYxNjcwMDI0NUQ2N0ZCRjY5NTBCNzEy OTE4OTkzOTAeFw0yNTA2MjkwNTU0MzBaFw0yNTA3MDYwNTU0MzBaMBgxFjAUBgNV BAMTDTY4NjBkNTE3LWM1NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7j0e6MSUb1QBxwfPSlp5qs8KTlNwqdnVJi7E2InWgkH83r0DMy06QJdt3Pthj AFvQEwFGBdaRvTUx+DS1Ssg49xPQH+SaYuv75rckaRwI3tni+Ea9qRHUJ0HWqnTk iuE4+/gCt9nGHgGdKO5zHf/ttyVvD6ouTV/gyZ41SnjekUBTvSx6GzFsi9FHN1FZ qQsSF3l4sQu3ZavdyLXl7IGNp97BDOgRDCuvkNYtZdsTtvO2dLli8OhNSZn68j4N +GVd3bNrwYcJhvKc6eI6Bb6pZJ7xGbaOjnpNFgUsTmdGnIzLRoIOFJvV1pX232L8 rjpQLpRfqy5478ZBDCMxfkhtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjYJktZ3e pBI82h2RV730TBEyXrEwHwYDVR0jBBgwFoAUSn0mxMvxZwAkXWf79pULcSkYmTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzOUNGLzRERjJCRTUyQTk4 QzExRUZCQTA2ODg2NEM0RjlBRTAyL1NuMG14TXZ4WndBa1hXZjc5cFVMY1NrWW1U ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU24wbXhNdnhad0FrWFdmNzlwVUxjU2tZbVRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz OUNGLzRERjJCRTUyQTk4QzExRUZCQTA2ODg2NEM0RjlBRTAyL1NuMG14TXZ4WndB a1hXZjc5cFVMY1NrWW1Uay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFW5qfsFZuXLZ6vp4GN187WvmlOdVB+D6pSPo432Kkol6zr8FKUOiLEA Rk7Q0vriz2T/x73jGa3ksUUvSXY3QHi/QtVZewUo0a+9rsSBi3P56RTHnYkDgDFg yfSyKN5naUX1K0BzBqimZ9KjQx0c6p4dfkICP/6IWp3g95Nm+FyXiBBCn2RZuZc6 0zMNLNcDUQEUhiO72SM19FZjs6zOLSutM39pm20PwKsG3B/t/aWRxe04XCFfPxhv bxyhGHjsl802nG7c1YQ87SsN/6Xfgvat26Esyq6b/l/gVtxp+dQ8xJISz/LAUNp4 VNJ1+dR4kA40kc+hz6lZYLU0vxTOiTM= -----END CERTIFICATE-----Generated at Tue Jul 1 00:35:25 2025 by rpki-client