$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft File: aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json) Hash identifier: r0fe4lw5ID10xfoTkTQiSZnb2PgNk+tk+VqLQV0M6Nk= Subject key identifier: 9D:B8:67:DB:51:F9:8D:FB:27:BF:62:5F:95:88:6D:77:95:F5:50:51 Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 Certificate issuer: /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Certificate serial: 09DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft Manifest number: 09D8 Signing time: Mon 30 Jun 2025 20:03:40 +0000 Manifest this update: Mon 30 Jun 2025 20:03:40 +0000 Manifest next update: Mon 07 Jul 2025 20:03:40 +0000 Files and hashes: 1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: kSv/SS64rDXmygUExa92rxBzXhsoFxn5C1x35ISNVFY=) 2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: EKd9VQ360ebUJ8WlZXHE7k1r87p0QtlOPC8jxoN1cJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2526 (0x9de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A618B, serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Validity Not Before: Jun 30 20:03:40 2025 GMT Not After : Jul 7 20:03:40 2025 GMT Subject: CN=6862ed9c-71fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:1e:a7:9b:55:75:c1:47:9b:b0:81:9f:df: 62:7d:d2:a6:c2:00:81:a0:0d:63:5b:f8:60:56:4c: bc:15:c0:6e:cc:8c:bb:7f:5b:84:5f:81:8d:38:36: 23:2e:0c:e5:54:40:4a:a7:7b:1e:af:a7:d8:f2:05: d4:5e:55:a5:d3:cf:da:a5:31:e6:1f:11:60:54:f0: 82:95:c8:ff:49:4f:95:f9:20:b5:7b:59:57:51:90: 0f:eb:b9:77:0c:b3:3f:3c:82:00:4f:5f:94:9c:b6: e6:88:77:b7:f4:5a:d0:e3:4c:09:48:90:62:38:65: da:b3:e5:59:62:23:50:1b:e7:48:54:4c:1f:fe:95: c1:b0:2f:b3:77:63:a4:a8:aa:af:47:f1:59:76:05: 88:37:85:a9:33:4b:a0:01:b9:29:41:82:12:a8:9e: 79:15:93:0a:be:94:3c:8d:07:84:19:67:b0:6f:36: 2e:32:dd:e9:d1:62:2a:12:f4:3c:65:33:3a:93:2f: ae:16:8d:cf:eb:04:f7:6a:1f:37:41:54:51:2f:c7: bc:99:e6:f4:01:9f:c4:94:89:93:b2:7a:01:dc:e1: 89:62:c4:16:d7:b1:d3:ea:b3:03:66:3c:68:1c:15: ad:96:f4:f1:7e:e0:6d:c4:66:fe:9e:c2:10:92:4b: 58:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B8:67:DB:51:F9:8D:FB:27:BF:62:5F:95:88:6D:77:95:F5:50:51 X509v3 Authority Key Identifier: keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:4f:16:88:5d:29:18:c2:ee:77:62:33:29:5d:cd:f9:b0:db: 31:a3:83:ea:f6:ed:f7:cc:3d:70:0f:75:6b:70:e1:c5:75:7b: 89:c0:06:8b:44:7b:21:c5:70:7f:2c:5e:f3:b2:5c:1d:f5:b8: 7a:62:21:12:05:b7:91:6c:e7:44:73:21:2d:78:e6:ea:2d:73: 02:42:fe:af:66:f2:60:95:84:1c:f6:49:79:c5:de:a5:fa:e4: 75:7f:b0:5d:57:66:6a:e4:5c:c0:f2:63:69:a5:76:e2:e0:f5: da:2c:79:4d:89:50:22:74:24:11:52:4e:f4:a1:a5:58:0f:82: a2:a6:37:ef:b2:0d:e1:ec:95:5b:a0:f0:47:c2:8a:16:a3:1b: dd:e1:fb:a4:f8:74:36:ea:41:44:1d:b1:20:6f:b2:18:fc:04: 61:86:10:05:57:5d:59:cc:f4:5b:0d:05:55:03:98:e2:95:f3: a7:7c:3a:70:b7:be:be:52:e9:34:d8:ea:61:61:d3:5d:59:7f: f7:0a:38:6c:81:ea:42:9c:c9:48:50:c7:16:6b:e8:c6:1a:25: b5:0f:f1:3d:5c:58:44:7e:f8:3b:e9:54:63:83:4d:4c:c2:33: 3d:c4:76:d6:07:af:73:70:fb:b5:01:30:8a:f3:ad:74:ba:94: b0:42:37:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYxOEIxMTAvBgNVBAUTKDY5NjkxRjU1MTY0OTUyRjJGNEYxRkVFODA0QUExNTgz NUZGRTg2RDUwHhcNMjUwNjMwMjAwMzQwWhcNMjUwNzA3MjAwMzQwWjAYMRYwFAYD VQQDEw02ODYyZWQ5Yy03MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM4ep5tVdcFHm7CBn99ifdKmwgCBoA1jW/hgVky8FcBuzIy7f1uEX4GNODYj LgzlVEBKp3ser6fY8gXUXlWl08/apTHmHxFgVPCClcj/SU+V+SC1e1lXUZAP67l3 DLM/PIIAT1+UnLbmiHe39FrQ40wJSJBiOGXas+VZYiNQG+dIVEwf/pXBsC+zd2Ok qKqvR/FZdgWIN4WpM0ugAbkpQYISqJ55FZMKvpQ8jQeEGWewbzYuMt3p0WIqEvQ8 ZTM6ky+uFo3P6wT3ah83QVRRL8e8meb0AZ/ElImTsnoB3OGJYsQW17HT6rMDZjxo HBWtlvTxfuBtxGb+nsIQkktYFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ24Z9tR +Y37J79iX5WIbXeV9VBRMB8GA1UdIwQYMBaAFGlpH1UWSVLy9PH+6ASqFYNf/obV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjE4Qi85QkEyQjI1NDgw M0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2TDA4ZjdvQktvVmcxXy1o dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXa2ZWUlpKVXZMMDhmN29CS29WZzFfLWh0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjE4Qi85QkEyQjI1NDgwM0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2 TDA4ZjdvQktvVmcxXy1odFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDATxaIXSkYwu53YjMpXc35sNsxo4Pq9u33zD1wD3VrcOHFdXuJwAaL RHshxXB/LF7zslwd9bh6YiESBbeRbOdEcyEteObqLXMCQv6vZvJglYQc9kl5xd6l +uR1f7BdV2Zq5FzA8mNppXbi4PXaLHlNiVAidCQRUk70oaVYD4Kipjfvsg3h7JVb oPBHwooWoxvd4fuk+HQ26kFEHbEgb7IY/ARhhhAFV11ZzPRbDQVVA5jilfOnfDpw t76+Uuk02OphYdNdWX/3CjhsgepCnMlIUMcWa+jGGiW1D/E9XFhEfvg76VRjg01M wjM9xHbWB69zcPu1ATCK8610upSwQjcO -----END CERTIFICATE-----Generated at Tue Jul 1 18:21:57 2025 by rpki-client