$ rpki-client -vvf rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft File: bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft (raw, json) Hash identifier: LnBpJ+Iw7+o88L2W8/EQzcf8XJnSmd31PxmmfnTw9TM= Subject key identifier: 75:64:ED:4B:8E:E4:AE:FF:F6:80:6B:5D:6D:1D:7F:A7:54:F7:C1:CA Authority key identifier: 6C:51:79:CB:0C:F8:18:9E:1E:20:81:D4:B6:95:94:84:A3:EB:36:A8 Certificate issuer: /CN=A919F554/serialNumber=6C5179CB0CF8189E1E2081D4B6959484A3EB36A8 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft Manifest number: 19 Signing time: Sun 29 Jun 2025 06:58:44 +0000 Manifest this update: Sun 29 Jun 2025 06:58:43 +0000 Manifest next update: Sun 06 Jul 2025 06:58:43 +0000 Files and hashes: 1: bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl (hash: wfnPUAzOfsh/iu+pRjcfT0unCiBLFaTpvpE5tsQeB3w=) 2: C420C91231F311F0B07AC76AC4F9AE02.roa (hash: XPTUja6J7XFQv+BD9NiOzIrOTCkxWgFmdmQI7JPx3gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F554, serialNumber=6C5179CB0CF8189E1E2081D4B6959484A3EB36A8 Validity Not Before: Jun 29 06:58:43 2025 GMT Not After : Jul 6 06:58:43 2025 GMT Subject: CN=6860e424-cc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5a:2e:5c:ec:53:89:44:42:3a:f1:73:db:3d: 2b:4e:72:60:92:64:b6:0b:b5:60:66:5c:c6:a3:ef: a4:49:92:09:86:be:64:95:c9:7d:51:43:46:c8:0c: 43:19:a8:46:a1:c1:11:a6:85:9c:6f:0a:11:f4:3b: 3a:ac:4a:07:90:b6:88:89:2f:13:cd:09:23:9c:bd: 20:3f:71:37:7c:a9:09:7e:65:ee:9d:f3:ac:3a:13: a7:68:ea:d4:89:af:34:49:71:70:54:31:6f:af:8a: a9:5d:f5:e9:72:b1:8c:06:26:4c:f9:f6:d2:e9:9a: 77:c6:35:ba:26:8f:f4:95:ed:c9:0e:8b:0e:08:22: 2f:5a:81:1b:94:f1:41:9f:b5:27:37:b4:90:8c:c6: 75:25:1e:09:07:a8:f5:51:1a:40:f2:21:c7:37:c7: 81:01:43:c8:21:21:78:78:39:37:4d:46:b0:19:4b: 7f:ec:b2:89:12:b4:ea:82:2d:de:dd:7e:3b:5f:ba: 18:84:49:e5:68:8c:73:03:49:ad:97:dc:67:db:01: 46:6b:b4:a4:08:f8:0e:a5:48:eb:33:ee:57:da:32: 8b:5f:d3:65:6f:5c:0f:1b:4b:e9:43:49:fe:52:71: b2:c3:bf:13:31:19:96:6f:ea:31:c5:f1:20:1a:ba: ca:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:64:ED:4B:8E:E4:AE:FF:F6:80:6B:5D:6D:1D:7F:A7:54:F7:C1:CA X509v3 Authority Key Identifier: keyid:6C:51:79:CB:0C:F8:18:9E:1E:20:81:D4:B6:95:94:84:A3:EB:36:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d3:01:47:42:80:26:fe:ae:7b:15:d0:a0:c5:cb:05:9c:04: 0f:88:d1:81:eb:21:ad:c1:32:2c:7d:dd:1f:a5:10:62:ba:7d: 8e:5e:c9:36:b8:15:95:f0:f5:99:71:01:6c:f8:f0:c3:83:13: c4:e0:c5:51:a9:16:e2:0b:a1:30:cd:b8:2c:f3:56:93:e5:b4: 01:d5:f2:e4:ed:97:a4:e5:aa:88:da:84:6d:df:e0:fe:19:d9: bc:cc:ff:8e:77:c8:7d:4b:98:92:de:55:42:33:e7:2f:73:77: 47:30:34:99:4c:60:64:3a:e8:0a:2b:be:99:d3:69:3c:dd:9e: c6:cf:b1:b1:ab:01:97:e2:48:c8:9c:b2:ed:fa:47:f8:3c:94: b8:89:e4:b3:2c:a0:a1:85:8b:36:8a:2d:bf:2b:ab:3a:1a:fb: 90:64:ba:0e:02:e3:5a:61:24:ff:0f:56:3c:38:eb:ce:53:f1: a8:03:08:84:1d:4b:b9:9f:eb:55:cf:f2:ad:e5:30:bf:ff:ee: 64:20:a5:e4:a0:02:00:38:62:fe:9d:77:2d:ca:67:db:c2:51: 1f:81:11:9c:50:b2:8c:86:76:b9:5b:9f:06:29:6d:f4:21:20: b8:ea:ff:2f:08:9f:d9:6b:3f:26:cd:d1:34:c0:29:eb:fc:85: 54:98:b8:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjU1NDExMC8GA1UEBRMoNkM1MTc5Q0IwQ0Y4MTg5RTFFMjA4MUQ0QjY5NTk0ODRB M0VCMzZBODAeFw0yNTA2MjkwNjU4NDNaFw0yNTA3MDYwNjU4NDNaMBgxFjAUBgNV BAMTDTY4NjBlNDI0LWNjMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZWi5c7FOJREI68XPbPStOcmCSZLYLtWBmXMaj76RJkgmGvmSVyX1RQ0bIDEMZ qEahwRGmhZxvChH0OzqsSgeQtoiJLxPNCSOcvSA/cTd8qQl+Ze6d86w6E6do6tSJ rzRJcXBUMW+viqld9elysYwGJkz59tLpmnfGNbomj/SV7ckOiw4IIi9agRuU8UGf tSc3tJCMxnUlHgkHqPVRGkDyIcc3x4EBQ8ghIXh4OTdNRrAZS3/ssokStOqCLd7d fjtfuhiESeVojHMDSa2X3GfbAUZrtKQI+A6lSOsz7lfaMotf02VvXA8bS+lDSf5S cbLDvxMxGZZv6jHF8SAausqRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdWTtS47k rv/2gGtdbR1/p1T3wcowHwYDVR0jBBgwFoAUbFF5ywz4GJ4eIIHUtpWUhKPrNqgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNTU0LzNGOTVBODUyMzFG MzExRjBBQkJBRTY2OUM0RjlBRTAyL2JGRjV5d3o0R0o0ZUlJSFV0cFdVaEtQck5x Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkZGNXl3ejRHSjRlSUlIVXRwV1VoS1ByTnFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG NTU0LzNGOTVBODUyMzFGMzExRjBBQkJBRTY2OUM0RjlBRTAyL2JGRjV5d3o0R0o0 ZUlJSFV0cFdVaEtQck5xZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAvTAUdCgCb+rnsV0KDFywWcBA+I0YHrIa3BMix93R+lEGK6fY5eyTa4 FZXw9ZlxAWz48MODE8TgxVGpFuILoTDNuCzzVpPltAHV8uTtl6TlqojahG3f4P4Z 2bzM/453yH1LmJLeVUIz5y9zd0cwNJlMYGQ66AorvpnTaTzdnsbPsbGrAZfiSMic su36R/g8lLiJ5LMsoKGFizaKLb8rqzoa+5Bkug4C41phJP8PVjw4685T8agDCIQd S7mf61XP8q3lML//7mQgpeSgAgA4Yv6ddy3KZ9vCUR+BEZxQsoyGdrlbnwYpbfQh ILjq/y8In9lrPybN0TTAKev8hVSYuJs= -----END CERTIFICATE-----Generated at Mon Jun 30 18:12:11 2025 by rpki-client