$ rpki-client -vvf rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft File: 81jWhVW6te9ipNz9TzJANe5gJLY.mft (raw, json) Hash identifier: QGrrja+bdyI5yMBivjdfgV9o6NYhXcdCZjQFsXYv27c= Subject key identifier: D8:13:6E:9B:1F:B7:7D:E3:C1:B9:D2:8D:5E:4E:8D:EE:1A:FB:F9:1D Authority key identifier: F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6 Certificate issuer: /CN=A919F64F/serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft Manifest number: 3A Signing time: Tue 01 Jul 2025 08:23:22 +0000 Manifest this update: Tue 01 Jul 2025 08:23:22 +0000 Manifest next update: Tue 08 Jul 2025 08:23:22 +0000 Files and hashes: 1: 81jWhVW6te9ipNz9TzJANe5gJLY.crl (hash: qyQCPeYsFglz/yjL9neLxwakYC+DWPWMgvRJZw5lLlA=) 2: 39E77242050B11F097AB4F3BC4F9AE02.roa (hash: PDiocTjJKaFu9YNf5gjKMiNkfOKqtTVuKhZKfr9ypcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F64F, serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6 Validity Not Before: Jul 1 08:23:22 2025 GMT Not After : Jul 8 08:23:22 2025 GMT Subject: CN=68639afa-0789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7e:09:fd:75:d4:36:d0:ef:a1:e6:92:df:b3: 45:6b:28:8c:74:8b:e9:a1:d3:a7:3b:ff:1f:50:dd: fa:64:b3:b3:2c:ce:26:cf:63:96:57:e9:1c:14:21: c1:fb:e0:f4:71:2f:26:a3:8a:82:48:12:a3:ce:5d: 18:06:b0:f5:6e:7e:61:1b:50:7f:1e:98:ad:39:7b: c2:63:86:cf:61:e2:87:f8:43:9b:b6:04:da:44:65: e1:4a:34:e7:ac:66:70:c9:38:d8:4d:4e:8f:cc:31: 14:2b:ae:d5:20:b7:1c:73:b4:30:a4:ab:1c:5a:0f: 1c:b4:f8:b4:29:54:c2:31:56:b9:e8:2a:13:f9:d4: b6:a5:b8:ff:93:f9:4d:a0:c5:1b:25:a0:46:88:23: 31:f5:8e:4e:ed:f9:9b:58:bb:4d:b0:ba:58:da:40: b4:42:f3:4c:be:30:de:34:28:6b:1a:90:77:ab:40: 0a:50:59:f9:87:68:e7:9e:8a:a7:bd:34:b9:12:2a: 54:6e:86:f3:3b:79:b6:d5:30:67:b2:d4:7d:6d:3c: 8e:7f:a0:28:78:52:d8:a9:77:7f:91:8b:94:f7:55: ae:16:88:ec:59:48:bd:5f:e3:0f:70:40:e3:33:27: 47:f8:bc:44:28:56:0c:1a:3e:cf:11:18:3d:60:f8: 89:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:13:6E:9B:1F:B7:7D:E3:C1:B9:D2:8D:5E:4E:8D:EE:1A:FB:F9:1D X509v3 Authority Key Identifier: keyid:F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:12:8f:e9:c6:e4:ba:3a:28:aa:83:96:a5:62:8f:f1:fc:1b: 20:9b:be:1b:ea:0d:93:f2:f3:9c:1c:9e:43:5c:b7:50:dd:19: a8:a1:3c:29:c4:61:11:e0:7d:5e:45:d2:71:2e:90:8f:3f:23: 3f:70:b9:e4:6e:8c:2d:c3:23:76:78:ee:99:93:d8:5e:2b:ac: 05:d5:de:73:68:bd:d1:3c:2f:35:32:81:1d:2d:0a:e4:91:da: 1a:7f:26:37:c9:ff:8a:52:df:17:63:5c:8a:32:ac:9f:13:fa: 40:7f:a6:e6:5b:e1:db:08:20:57:2a:91:cf:53:c9:a5:78:41: 15:63:d6:08:2e:a2:c3:18:36:27:77:21:94:54:23:1c:c2:32: 14:06:3f:1c:8d:23:02:d9:45:c5:60:71:4b:04:59:25:08:a1: 66:be:72:d5:60:4a:91:77:ea:cb:0a:6d:1c:44:c6:c5:09:b3: 56:f0:a5:34:a8:86:c3:f9:6e:97:9e:45:5b:09:f6:9d:b2:b9: 2c:91:8e:82:99:d7:56:fc:ba:66:c8:c5:70:39:25:fa:67:50: 87:e7:e4:65:56:f2:c4:55:53:8f:f7:c9:ce:fe:68:8e:a6:a7: 79:b1:b6:c0:7d:77:8d:3e:60:98:29:91:a6:33:44:6d:0d:c5: 76:3f:ab:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjY0RjExMC8GA1UEBRMoRjM1OEQ2ODU1NUJBQjVFRjYyQTREQ0ZENEYzMjQwMzVF RTYwMjRCNjAeFw0yNTA3MDEwODIzMjJaFw0yNTA3MDgwODIzMjJaMBgxFjAUBgNV BAMTDTY4NjM5YWZhLTA3ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNfgn9ddQ20O+h5pLfs0VrKIx0i+mh06c7/x9Q3fpks7MszibPY5ZX6RwUIcH7 4PRxLyajioJIEqPOXRgGsPVufmEbUH8emK05e8Jjhs9h4of4Q5u2BNpEZeFKNOes ZnDJONhNTo/MMRQrrtUgtxxztDCkqxxaDxy0+LQpVMIxVrnoKhP51LaluP+T+U2g xRsloEaIIzH1jk7t+ZtYu02wuljaQLRC80y+MN40KGsakHerQApQWfmHaOeeiqe9 NLkSKlRuhvM7ebbVMGey1H1tPI5/oCh4Utipd3+Ri5T3Va4WiOxZSL1f4w9wQOMz J0f4vEQoVgwaPs8RGD1g+ImNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2BNumx+3 fePBudKNXk6N7hr7+R0wHwYDVR0jBBgwFoAU81jWhVW6te9ipNz9TzJANe5gJLYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNjRGL0FCQTYxM0QwMDUw QTExRjA4N0I3NjUzQUM0RjlBRTAyLzgxaldoVlc2dGU5aXBOejlUekpBTmU1Z0pM WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODFqV2hWVzZ0ZTlpcE56OVR6SkFOZTVnSkxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG NjRGL0FCQTYxM0QwMDUwQTExRjA4N0I3NjUzQUM0RjlBRTAyLzgxaldoVlc2dGU5 aXBOejlUekpBTmU1Z0pMWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABwSj+nG5Lo6KKqDlqVij/H8GyCbvhvqDZPy85wcnkNct1DdGaihPCnE YRHgfV5F0nEukI8/Iz9wueRujC3DI3Z47pmT2F4rrAXV3nNovdE8LzUygR0tCuSR 2hp/JjfJ/4pS3xdjXIoyrJ8T+kB/puZb4dsIIFcqkc9TyaV4QRVj1gguosMYNid3 IZRUIxzCMhQGPxyNIwLZRcVgcUsEWSUIoWa+ctVgSpF36ssKbRxExsUJs1bwpTSo hsP5bpeeRVsJ9p2yuSyRjoKZ11b8umbIxXA5JfpnUIfn5GVW8sRVU4/3yc7+aI6m p3mxtsB9d40+YJgpkaYzRG0NxXY/q5U= -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:08 2025 by rpki-client