$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft File: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft (raw, json) Hash identifier: gnUvEBWTtU1COCFuqLo2iWHprpcHPxXJ5TMOkgZMbts= Subject key identifier: 3F:3D:88:76:F6:08:B6:98:E2:4F:A9:DC:3D:D4:FE:72:B4:CA:6E:79 Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft Manifest number: 066B Signing time: Wed 02 Jul 2025 22:43:22 +0000 Manifest this update: Wed 02 Jul 2025 22:43:21 +0000 Manifest next update: Wed 09 Jul 2025 22:43:21 +0000 Files and hashes: 1: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl (hash: 3THukadCiHBUllpyon7NKCU6jBklHgej64SxlYN3LeY=) 2: 3EACF95EEBB511ECA410BF6DC4F9AE02.roa (hash: xFmg051Irl3QGxSaxPh5/PYgXOOm8roreRqol3Gv8es=) 3: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (hash: goZ7BQs8FCZwkLeH44QNaXxFhzltbICpUZt+GahLEkQ=) 4: 5892BB44853E11EB9D9E2D39C4F9AE02.roa (hash: pCDQvhpjTdtiJ3zqTDHJUEvIuviY7SsjRZSRovU8uCc=) 5: 1D526B2E5DB311EEA8990E1BC4F9AE02.roa (hash: SXTVWJ2PMrAIqDEbXazZSPAGB7rgkYD55HYA8ZjO4Yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Validity Not Before: Jul 2 22:43:21 2025 GMT Not After : Jul 9 22:43:21 2025 GMT Subject: CN=6865b609-eb4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b0:d0:40:80:4a:dd:62:6c:6d:58:82:bc:71: b2:80:c1:99:52:14:90:db:a0:18:7b:82:41:45:92: e0:f2:bc:92:80:d9:55:e3:c2:b0:6f:fe:0c:5b:01: a8:bb:4e:57:db:21:70:f2:ad:96:5a:52:3a:6d:44: 9d:61:8f:ee:03:32:de:30:a0:11:18:c7:31:7a:68: 08:c1:89:27:60:a8:6d:2a:cd:7d:34:83:f2:72:a8: 0d:9f:ca:25:bd:69:dd:52:f0:c5:73:73:34:97:cb: 42:79:9c:d7:1a:0a:2e:76:c5:a6:72:2e:25:6a:16: e5:47:24:ce:ae:a0:e9:20:8c:29:0a:11:7e:6e:5b: 1f:27:b9:f3:51:f2:ca:cf:fb:e9:f7:dc:03:58:1a: 4c:3a:95:07:08:fe:71:c4:4b:6e:af:98:49:18:11: 4b:67:4f:03:41:d6:74:6e:c9:cc:07:3d:f6:f1:69: 69:78:12:cd:69:3a:80:d0:4d:35:e3:ce:22:14:50: da:25:65:ea:da:e6:dc:51:6e:2e:17:19:d4:06:c4: 03:74:a2:a1:ac:80:5f:e3:a7:af:d8:41:24:9b:40: 6d:56:9f:65:42:9e:16:e8:47:50:39:8a:a7:42:71: 34:66:41:ed:d9:68:0c:55:3a:0b:3f:60:5d:db:07: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3D:88:76:F6:08:B6:98:E2:4F:A9:DC:3D:D4:FE:72:B4:CA:6E:79 X509v3 Authority Key Identifier: keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:63:10:7a:a7:88:3c:70:8e:3e:5a:c9:0b:8e:3b:27:a6:a0: cf:10:f3:68:b5:70:b2:83:c1:f5:26:56:41:a6:98:8f:34:6d: f4:c4:bc:de:9f:a1:1b:09:83:82:64:5c:67:7b:cb:7b:81:12: c0:1e:90:6b:2f:ed:0f:2f:93:e6:c1:ce:ee:44:62:4e:5b:6a: 19:ea:69:42:71:9d:a2:5d:f6:4c:15:a7:be:ff:0a:3c:e6:37: 03:66:f5:f3:ec:87:bd:d8:22:2a:9a:a6:92:15:a5:14:e4:86: cd:2c:2d:d2:98:16:dd:e0:a8:7c:20:67:2d:a5:c3:48:b1:cb: fe:cb:93:35:b9:a6:5d:23:b9:eb:3d:66:54:67:42:50:09:55: 06:ce:52:1e:2d:98:f2:71:45:1a:26:b0:d3:6d:05:d5:d0:e7: 16:a7:e5:84:5f:f4:30:36:12:0d:ff:e2:49:33:9e:46:0f:1c: ae:09:20:d9:b5:ec:46:fa:73:5d:01:0f:17:00:04:a4:25:5d: ab:16:10:b6:97:f6:a0:ce:1e:36:c1:94:b1:1f:20:f6:9b:e7: 9a:51:24:9e:ef:03:78:32:a7:1c:06:f5:15:f0:3f:7b:b2:3a: cb:91:ab:62:ed:83:3f:a0:35:ff:9b:40:49:ea:95:58:d1:2a: 01:5b:50:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0QjcxMTAvBgNVBAUTKEY4OEI5NzQwNEY5REMxMEY1QUFCMDJGNzRFQzQ5MEY5 OEFEMEQzQjAwHhcNMjUwNzAyMjI0MzIxWhcNMjUwNzA5MjI0MzIxWjAYMRYwFAYD VQQDEw02ODY1YjYwOS1lYjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbDQQIBK3WJsbViCvHGygMGZUhSQ26AYe4JBRZLg8rySgNlV48Kwb/4MWwGo u05X2yFw8q2WWlI6bUSdYY/uAzLeMKARGMcxemgIwYknYKhtKs19NIPycqgNn8ol vWndUvDFc3M0l8tCeZzXGgoudsWmci4lahblRyTOrqDpIIwpChF+blsfJ7nzUfLK z/vp99wDWBpMOpUHCP5xxEtur5hJGBFLZ08DQdZ0bsnMBz328WlpeBLNaTqA0E01 484iFFDaJWXq2ubcUW4uFxnUBsQDdKKhrIBf46ev2EEkm0BtVp9lQp4W6EdQOYqn QnE0ZkHt2WgMVToLP2Bd2wd/HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD89iHb2 CLaY4k+p3D3U/nK0ym55MB8GA1UdIwQYMBaAFPiLl0BPncEPWqsC907EkPmK0NOw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTRCNy9FMTgwQ0U3QTg1 MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdROWFxd0wzVHNTUS1ZclEw N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JdVhRRS1kd1E5YXF3TDNUc1NRLVlyUTA3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTRCNy9FMTgwQ0U3QTg1MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdR OWFxd0wzVHNTUS1ZclEwN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLYxB6p4g8cI4+WskLjjsnpqDPEPNotXCyg8H1JlZBppiPNG30xLze n6EbCYOCZFxne8t7gRLAHpBrL+0PL5Pmwc7uRGJOW2oZ6mlCcZ2iXfZMFae+/wo8 5jcDZvXz7Ie92CIqmqaSFaUU5IbNLC3SmBbd4Kh8IGctpcNIscv+y5M1uaZdI7nr PWZUZ0JQCVUGzlIeLZjycUUaJrDTbQXV0OcWp+WEX/QwNhIN/+JJM55GDxyuCSDZ texG+nNdAQ8XAASkJV2rFhC2l/agzh42wZSxHyD2m+eaUSSe7wN4MqccBvUV8D97 sjrLkati7YM/oDX/m0BJ6pVY0SoBW1CY -----END CERTIFICATE-----Generated at Thu Jul 3 09:23:36 2025 by rpki-client