$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft File: PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft (raw, json) Hash identifier: mRiRn2Izsidm4+1dzlY2zbscI3sx9yL+SibGB5Uc82s= Subject key identifier: 1F:ED:74:21:35:8A:8E:F4:F1:AF:FD:48:B3:D4:37:D4:6E:E2:E0:A7 Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 Certificate issuer: /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft Manifest number: 72 Signing time: Tue 01 Jul 2025 07:41:31 +0000 Manifest this update: Tue 01 Jul 2025 07:41:30 +0000 Manifest next update: Tue 08 Jul 2025 07:41:30 +0000 Files and hashes: 1: PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl (hash: EcTuSOPdpn6MG/mpwqb+1MAJamUf4z4Ou5u/zynI2jY=) 2: A60814E423E811F0B464ED15C4F9AE02.roa (hash: Gjud9DBV5l2d7shu62YgWfFgE4K+4bhp6xDHyEbycw8=) 3: D428DE9420CD11F0B635AE70C4F9AE02.roa (hash: f3j7ze7nU/HicYJ4iTkEa5H/gPn17vSx4mQuxNQzZnw=) 4: 8284033420CD11F0BCFE4A70C4F9AE02.roa (hash: VRnXPjHcpYrC4h2blRdJhGhCl3ndeqDoavQMjgsusDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919089B, serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Validity Not Before: Jul 1 07:41:30 2025 GMT Not After : Jul 8 07:41:30 2025 GMT Subject: CN=6863912b-ecf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6b:2b:dc:1f:8b:fd:f8:e0:a0:c4:cd:21:64: 89:56:44:cc:3b:55:34:d8:b0:ac:f8:f0:46:ba:4c: 99:d1:c8:0b:f8:76:2b:60:55:f2:9a:dd:ff:9b:60: e7:5a:5d:9d:79:bb:8d:9e:9d:8a:aa:f4:e7:96:d1: 67:fd:13:f4:b7:d2:ec:13:6a:fe:16:1f:b7:42:e3: 7e:2d:75:43:30:5f:da:d3:69:60:55:9d:bd:aa:bf: d7:25:32:0f:6f:9f:8f:99:db:e4:00:dc:1e:1e:7e: 21:68:29:dd:5e:2d:5d:ff:cc:92:b3:87:a0:d4:dc: 01:fb:19:01:5f:dc:40:f6:01:e2:2a:33:e9:b4:b3: 16:bd:c5:cc:72:d8:a5:4a:6d:6c:d3:06:27:30:57: 27:4e:df:e3:c4:d0:7f:2e:c3:7d:36:bb:e3:98:b0: 6e:0e:2c:c6:58:ae:dd:6f:2f:05:ef:bb:29:5f:a7: 16:66:ca:a0:39:34:a2:25:38:f1:d8:d1:6f:18:af: 53:93:d0:99:96:ce:4e:fc:22:d1:24:00:81:f1:ac: f1:52:8b:ad:90:10:1c:87:10:a6:f0:b6:d0:73:b6: e0:cf:e5:49:9c:e1:e2:b0:38:ba:70:e1:99:53:27: 08:67:4a:15:40:4f:7c:59:ba:ce:b9:f7:40:50:a5: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:ED:74:21:35:8A:8E:F4:F1:AF:FD:48:B3:D4:37:D4:6E:E2:E0:A7 X509v3 Authority Key Identifier: keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:16:81:c5:dc:c4:e2:4a:0b:b1:2c:d6:66:b5:9c:18:9f:f5: 17:6e:ef:d9:e0:df:17:c3:12:89:80:9c:ac:8e:12:96:0a:83: 65:cf:12:03:b4:1f:69:d9:76:a8:7a:e5:9f:fc:50:e2:a1:ac: 63:2b:d9:81:5f:d4:39:e6:b0:66:e6:00:f8:a4:3c:be:7e:f6: 8c:89:13:c4:9d:80:eb:47:a2:b2:5a:a8:4d:7d:33:63:d1:eb: ee:8f:0e:2a:13:81:4c:ab:cc:15:f5:2f:7f:51:e5:bd:74:ac: e1:b4:29:83:8d:a6:4d:a6:b8:cc:87:fe:67:09:ad:33:a7:8f: e8:97:dd:44:05:57:19:49:06:c7:57:42:40:18:be:1e:a6:02: bc:3a:43:52:68:a4:86:e5:99:18:62:02:8d:07:2b:c9:e4:76: 57:7b:a5:bc:15:10:67:5f:c1:0e:91:74:c0:7f:d9:5f:fb:c6: 2d:7f:85:99:61:4b:7a:47:ab:5c:09:cf:da:39:47:cc:6a:ed: 55:a8:a0:e5:ad:67:33:c9:09:68:99:ea:43:36:9f:a6:08:f9: 8d:46:75:90:4b:27:36:d1:d3:50:bc:f2:a7:94:4c:63:6f:9b: 98:7b:4b:fb:de:a5:c5:ce:7c:4b:76:42:63:43:09:77:68:50: 43:44:9e:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDg5QjExMC8GA1UEBRMoM0M3NjhGMEMyMzIzRDQ2RDMyMUU4QUM5OTNFNzVCMEIx QjgyMUU1NDAeFw0yNTA3MDEwNzQxMzBaFw0yNTA3MDgwNzQxMzBaMBgxFjAUBgNV BAMTDTY4NjM5MTJiLWVjZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpayvcH4v9+OCgxM0hZIlWRMw7VTTYsKz48Ea6TJnRyAv4ditgVfKa3f+bYOda XZ15u42enYqq9OeW0Wf9E/S30uwTav4WH7dC434tdUMwX9rTaWBVnb2qv9clMg9v n4+Z2+QA3B4efiFoKd1eLV3/zJKzh6DU3AH7GQFf3ED2AeIqM+m0sxa9xcxy2KVK bWzTBicwVydO3+PE0H8uw302u+OYsG4OLMZYrt1vLwXvuylfpxZmyqA5NKIlOPHY 0W8Yr1OT0JmWzk78ItEkAIHxrPFSi62QEByHEKbwttBztuDP5Umc4eKwOLpw4ZlT JwhnShVAT3xZus6590BQpdChAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH+10ITWK jvTxr/1Is9Q31G7i4KcwHwYDVR0jBBgwFoAUPHaPDCMj1G0yHorJk+dbCxuCHlQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODlCLzFCQ0Q0M0I2QjEx MTExRUY4RTIzMDU2RkM0RjlBRTAyL1BIYVBEQ01qMUcweUhvckprLWRiQ3h1Q0hs US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEhhUERDTWoxRzB5SG9ySmstZGJDeHVDSGxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw ODlCLzFCQ0Q0M0I2QjExMTExRUY4RTIzMDU2RkM0RjlBRTAyL1BIYVBEQ01qMUcw eUhvckprLWRiQ3h1Q0hsUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJYWgcXcxOJKC7Es1ma1nBif9Rdu79ng3xfDEomAnKyOEpYKg2XPEgO0 H2nZdqh65Z/8UOKhrGMr2YFf1DnmsGbmAPikPL5+9oyJE8SdgOtHorJaqE19M2PR 6+6PDioTgUyrzBX1L39R5b10rOG0KYONpk2muMyH/mcJrTOnj+iX3UQFVxlJBsdX QkAYvh6mArw6Q1JopIblmRhiAo0HK8nkdld7pbwVEGdfwQ6RdMB/2V/7xi1/hZlh S3pHq1wJz9o5R8xq7VWooOWtZzPJCWiZ6kM2n6YI+Y1GdZBLJzbR01C88qeUTGNv m5h7S/vepcXOfEt2QmNDCXdoUENEnpg= -----END CERTIFICATE-----Generated at Tue Jul 1 17:41:10 2025 by rpki-client