$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json) Hash identifier: 0mTShARWIE4lK72zb5/fUwHz/qNJwM6tVqxgs0tJnyc= Subject key identifier: F5:5B:0A:1F:F0:46:BE:6B:74:CF:02:60:FA:38:D1:DC:79:DA:B4:88 Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft Manifest number: 24 Signing time: Tue 01 Jul 2025 08:34:46 +0000 Manifest this update: Tue 01 Jul 2025 08:34:45 +0000 Manifest next update: Tue 08 Jul 2025 08:34:45 +0000 Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: Xnvk4gwRJxEUoRh8pGJPFh/ZRDaBKJtPPOsy1wEnZEs=) 2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: OpKLsw9gUBvgDq3xLq9YboZIcPYYkBwvYdkkqKU3FB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Validity Not Before: Jul 1 08:34:45 2025 GMT Not After : Jul 8 08:34:45 2025 GMT Subject: CN=68639da5-8f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:f5:87:71:a3:e3:d7:ab:6c:49:b1:d1:99: 7b:75:c9:31:23:6a:7b:1a:0b:fa:5a:2c:2f:4b:fd: eb:9c:e8:1f:14:96:70:47:bf:fc:ab:80:3c:37:7b: 21:b7:11:40:3e:51:c6:5f:8b:4c:12:f2:9f:cf:f7: c5:c9:59:85:9f:7f:0d:b3:35:06:f6:72:45:7f:4c: 8d:71:fb:37:e0:59:4c:30:06:fc:9a:03:c0:7e:39: 06:5a:ac:c2:58:b1:bf:7e:11:6f:3b:05:3f:97:8a: 54:49:e1:d8:9c:06:81:e1:ae:be:10:27:18:77:eb: eb:b6:44:06:69:37:88:be:46:ae:44:10:b9:c7:c0: 83:97:6f:b8:55:43:db:11:f8:4c:6c:58:82:d2:d0: f8:38:77:9f:2c:22:d2:0b:9b:59:69:57:41:35:e1: 9c:d4:95:79:16:c5:10:3b:80:89:f0:cb:ae:01:5b: 67:9b:1e:ff:35:60:19:25:3f:f9:c6:99:55:04:ad: e0:84:09:3f:84:f9:2c:be:2c:14:1b:f1:4f:63:f6: 3b:86:da:80:af:2e:de:29:06:fb:65:11:e5:6f:5c: c2:e7:17:13:35:c1:35:c4:b7:66:78:a5:e3:db:09: 5a:f6:ff:15:7f:86:46:3c:5e:af:3f:53:df:7d:c7: d9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5B:0A:1F:F0:46:BE:6B:74:CF:02:60:FA:38:D1:DC:79:DA:B4:88 X509v3 Authority Key Identifier: keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:33:db:49:53:07:4e:00:7e:1e:78:e8:b8:79:60:5b:0d:06: 3a:21:c3:5d:be:ba:d7:55:e8:09:9e:ff:e5:1f:f4:54:88:38: d6:b1:3f:5b:78:6b:d8:88:a3:c9:d6:3d:a6:32:24:bd:10:84: 16:38:df:a4:8b:ee:32:81:f5:69:dd:92:c6:60:c2:44:24:99: f7:26:d1:f7:9f:f7:e9:88:39:0f:ec:7b:b9:b8:9c:be:55:b6: 1a:ac:9c:2e:6b:72:cb:4d:94:4c:60:9b:7c:30:97:6c:94:20: 0f:8f:1f:1d:f4:54:c5:53:6a:ce:3b:42:b2:20:f6:9a:e8:2a: 61:3b:a2:27:63:64:48:4c:55:c1:ba:58:4f:3c:95:da:15:5b: d0:75:96:30:45:38:cb:e3:ff:58:66:f6:bd:9f:fb:34:36:fa: 05:e0:f7:59:7c:21:8d:93:94:15:b1:44:6c:18:59:ce:fa:54: 06:7c:23:68:87:4b:6f:fc:b2:a2:fe:88:24:8c:0f:82:ba:e0: e4:29:24:b2:e2:fe:29:9d:2a:04:12:df:ee:c3:f6:f0:bc:68: 54:87:53:8c:ed:a5:fc:96:67:48:ff:c8:d1:27:df:f2:24:69: 4c:c1:39:d1:85:df:a1:c8:e5:79:03:c7:d5:74:03:10:a5:e0: 34:29:a3:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUZDRjExMC8GA1UEBRMoOThBRTk1NkQ0MjZFMTYwMkNFRDhCQjcyNTg4RjYyQTNE QTEyQTk1NTAeFw0yNTA3MDEwODM0NDVaFw0yNTA3MDgwODM0NDVaMBgxFjAUBgNV BAMTDTY4NjM5ZGE1LThmMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAq/WHcaPj16tsSbHRmXt1yTEjansaC/paLC9L/euc6B8UlnBHv/yrgDw3eyG3 EUA+UcZfi0wS8p/P98XJWYWffw2zNQb2ckV/TI1x+zfgWUwwBvyaA8B+OQZarMJY sb9+EW87BT+XilRJ4dicBoHhrr4QJxh36+u2RAZpN4i+Rq5EELnHwIOXb7hVQ9sR +ExsWILS0Pg4d58sItILm1lpV0E14ZzUlXkWxRA7gInwy64BW2ebHv81YBklP/nG mVUEreCECT+E+Sy+LBQb8U9j9juG2oCvLt4pBvtlEeVvXMLnFxM1wTXEt2Z4pePb CVr2/xV/hkY8Xq8/U999x9kpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9VsKH/BG vmt0zwJg+jjR3HnatIgwHwYDVR0jBBgwFoAUmK6VbUJuFgLO2LtyWI9io9oSqVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RkNGL0I4NEM2MDNBMUU1 RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUs2VmJVSnVGZ0xPMkx0eVdJOWlvOW9TcVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RkNGL0I4NEM2MDNBMUU1RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdM TzJMdHlXSTlpbzlvU3FWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMQz20lTB04Afh546Lh5YFsNBjohw12+utdV6Ame/+Uf9FSIONaxP1t4 a9iIo8nWPaYyJL0QhBY436SL7jKB9WndksZgwkQkmfcm0fef9+mIOQ/se7m4nL5V thqsnC5rcstNlExgm3wwl2yUIA+PHx30VMVTas47QrIg9proKmE7oidjZEhMVcG6 WE88ldoVW9B1ljBFOMvj/1hm9r2f+zQ2+gXg91l8IY2TlBWxRGwYWc76VAZ8I2iH S2/8sqL+iCSMD4K64OQpJLLi/imdKgQS3+7D9vC8aFSHU4ztpfyWZ0j/yNEn3/Ik aUzBOdGF36HI5XkDx9V0AxCl4DQpo20= -----END CERTIFICATE-----Generated at Wed Jul 2 19:17:45 2025 by rpki-client