$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: ryIVNlrchM1ojnWoJtAySaTeYyPfmPLy8K8VMTmycz0= Subject key identifier: D4:3F:8F:CE:B7:89:CB:C2:04:4D:D4:C0:FE:CF:A8:D6:72:96:E7:06 Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: 6B Signing time: Tue 01 Jul 2025 07:49:54 +0000 Manifest this update: Tue 01 Jul 2025 07:49:54 +0000 Manifest next update: Tue 08 Jul 2025 07:49:53 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: zJOx5XKpxVLhLIvLXF2ZO35cqMVV1q9GgQa6FxiHaJw=) 2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: hu1JiBFiyTnMySrt80yNdScgCjSfSkHINTEYjzYfdUg=) 3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: PlQx8+H4QWwRWOJyC7w29KW+ohdqt59u/vmKToMRgGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Jul 1 07:49:54 2025 GMT Not After : Jul 8 07:49:53 2025 GMT Subject: CN=68639322-81ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:9e:d0:88:33:b1:22:41:d7:22:e2:55:0e: de:b2:43:64:b5:4f:29:c6:a4:45:56:e2:49:a7:f6: 3b:44:77:52:23:7e:4e:3d:3e:c3:61:1b:f6:ca:f2: 7d:dc:25:ce:eb:18:aa:b5:f3:3f:01:a9:71:e9:47: cf:28:1d:6c:c9:ae:f8:cf:5a:3a:21:2c:49:99:a6: b4:c2:8d:4e:c4:7c:95:a2:65:d4:6d:d6:fc:0f:6a: 61:1f:71:f1:d5:46:09:7c:c1:a2:7a:4a:09:0a:a9: a3:2c:20:23:53:ac:b6:91:eb:99:ac:6c:ce:b2:bf: e8:a6:f8:d9:08:43:9e:b9:cc:f2:84:4d:07:36:52: fc:4d:1c:75:36:3b:0b:d0:18:8a:b4:59:fd:be:54: 16:71:e6:89:0e:cb:cf:ab:11:21:b4:4f:1c:77:5b: 30:73:60:55:16:5a:4f:3f:c2:ac:c2:ac:bd:4b:96: 57:7e:4e:97:04:a8:f6:37:4e:ae:e3:e9:5e:a5:a3: 40:2f:26:4b:9f:a8:14:0e:e2:43:c7:dd:c6:f0:63: d7:d9:39:f7:18:4e:6c:5a:85:99:47:57:59:f0:50: 54:f3:a6:16:54:8c:7a:50:75:8e:e5:b5:6c:51:ce: ca:90:08:d3:dc:81:ef:64:c8:fa:5b:ae:5e:26:18: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3F:8F:CE:B7:89:CB:C2:04:4D:D4:C0:FE:CF:A8:D6:72:96:E7:06 X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:7d:7c:c1:a0:0f:08:09:0c:49:d6:f4:14:7e:60:b5:84:c3: dc:27:21:2f:d0:ea:e6:2b:c8:72:00:02:aa:ba:6e:d6:b0:33: d9:0e:a7:94:65:9b:39:30:20:65:a2:a8:1a:d6:4c:01:06:f3: 0d:b3:fe:6a:40:39:30:9a:c1:68:14:b6:4d:ae:05:a2:27:eb: 31:6a:7d:0d:0b:fe:1d:a1:2c:70:aa:1d:e2:e0:6d:70:24:79: 8c:aa:12:f1:37:34:ec:e8:a6:8b:8c:a3:40:ac:bf:72:7f:59: c0:8a:cf:32:7c:16:ae:3e:15:6e:41:b5:1c:bc:24:9e:34:16: f0:2f:e5:1b:09:3c:ba:c2:58:32:39:5a:a2:bf:32:11:ac:d6: 28:4a:8a:c6:26:a5:7c:57:80:9c:c0:71:7e:31:b0:bd:53:6f: bb:5f:51:1d:49:f2:d1:25:a9:a2:15:84:2d:8b:c0:e6:f9:a3: d1:42:2c:b2:e3:13:f8:63:d4:7b:c5:72:a2:07:99:6e:12:41: 57:5a:2e:a9:14:41:d0:cb:cc:93:84:30:e5:4d:35:47:8f:d3: ac:bd:be:77:90:1f:5d:d7:8b:03:1d:b8:50:93:8a:52:74:69: 5e:12:e1:f4:cb:ac:20:e5:77:e3:c7:5d:63:3b:07:29:3f:88: 7e:02:8b:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OEI2NzExMC8GA1UEBRMoRDQ1OUQyNjc1MjUyMzRBMDUzNUVDMzhEOENDQzg5OTAx OTRERTE4OTAeFw0yNTA3MDEwNzQ5NTRaFw0yNTA3MDgwNzQ5NTNaMBgxFjAUBgNV BAMTDTY4NjM5MzIyLTgxZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCMJ7QiDOxIkHXIuJVDt6yQ2S1TynGpEVW4kmn9jtEd1Ijfk49PsNhG/bK8n3c Jc7rGKq18z8BqXHpR88oHWzJrvjPWjohLEmZprTCjU7EfJWiZdRt1vwPamEfcfHV Rgl8waJ6SgkKqaMsICNTrLaR65msbM6yv+im+NkIQ565zPKETQc2UvxNHHU2OwvQ GIq0Wf2+VBZx5okOy8+rESG0Txx3WzBzYFUWWk8/wqzCrL1Llld+TpcEqPY3Tq7j 6V6lo0AvJkufqBQO4kPH3cbwY9fZOfcYTmxahZlHV1nwUFTzphZUjHpQdY7ltWxR zsqQCNPcge9kyPpbrl4mGKHDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1D+PzreJ y8IETdTA/s+o1nKW5wYwHwYDVR0jBBgwFoAU1FnSZ1JSNKBTXsONjMyJkBlN4Ykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4QjY3LzJGQTAwRDNFQzZB QTExRUY4NEZCMEQwREM0RjlBRTAyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUZuU1oxSlNOS0JUWHNPTmpNeUprQmxONFlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 QjY3LzJGQTAwRDNFQzZBQTExRUY4NEZCMEQwREM0RjlBRTAyLzFGblNaMUpTTktC VFhzT05qTXlKa0JsTjRZay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHh9fMGgDwgJDEnW9BR+YLWEw9wnIS/Q6uYryHIAAqq6btawM9kOp5Rl mzkwIGWiqBrWTAEG8w2z/mpAOTCawWgUtk2uBaIn6zFqfQ0L/h2hLHCqHeLgbXAk eYyqEvE3NOzopouMo0Csv3J/WcCKzzJ8Fq4+FW5BtRy8JJ40FvAv5RsJPLrCWDI5 WqK/MhGs1ihKisYmpXxXgJzAcX4xsL1Tb7tfUR1J8tElqaIVhC2LwOb5o9FCLLLj E/hj1HvFcqIHmW4SQVdaLqkUQdDLzJOEMOVNNUeP06y9vneQH13XiwMduFCTilJ0 aV4S4fTLrCDld+PHXWM7Byk/iH4Ciy0= -----END CERTIFICATE-----Generated at Thu Jul 3 07:05:40 2025 by rpki-client