$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft File: j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json) Hash identifier: 1NdppGGKKB0UcpldHn2pFid7/1Eh2W/Wuljmfr9WZ4I= Subject key identifier: A5:3F:9F:8C:58:4A:14:AC:01:0D:73:3B:E2:8A:93:80:C1:C7:F2:B7 Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F Certificate issuer: /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft Manifest number: 02B2 Signing time: Tue 01 Jul 2025 02:07:35 +0000 Manifest this update: Tue 01 Jul 2025 02:07:34 +0000 Manifest next update: Tue 08 Jul 2025 02:07:34 +0000 Files and hashes: 1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: wH7gsH/snLJ0Vv/29xOUzg9WhKGI8l1zkKaLnoCDimQ=) 2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: Bg1GhaBWG9ZnbioiTw4VxZi4hDCzIRIbJ2r9iNJxCVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Validity Not Before: Jul 1 02:07:34 2025 GMT Not After : Jul 8 02:07:34 2025 GMT Subject: CN=686342e6-5215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ad:fa:45:7b:47:a6:f3:e9:41:9a:77:c5:13: 57:c0:34:4f:1c:de:cf:9d:65:23:de:74:ba:94:db: 9a:81:35:16:c6:76:54:5c:e1:0b:94:2e:27:82:d5: 4e:08:b3:7d:47:1d:7a:1f:cd:c2:23:1b:41:94:6f: 6d:18:f6:4a:77:23:1b:cc:cc:44:fc:13:04:ea:42: b9:a6:39:05:3b:18:2f:32:c1:c1:5a:74:9a:2d:65: e0:2f:5f:ba:85:67:f3:34:64:c3:5f:f7:c5:b3:e3: 51:c8:01:5c:cb:2a:fd:a2:07:16:91:5e:35:07:67: ef:7b:04:df:46:94:96:e4:00:7b:1c:4d:65:05:94: e1:07:36:d3:17:82:4c:e1:c3:04:b9:c6:b6:27:14: 38:aa:da:f5:70:c7:47:ff:58:3d:b8:10:7c:88:be: 73:0c:c8:6b:25:7c:5f:32:4f:16:49:6d:37:c7:a0: 93:c5:4f:f5:81:63:12:62:76:6d:14:79:6a:cb:5f: 0d:5d:86:d0:e7:51:e5:ab:28:61:6d:f7:fc:95:d6: c4:2b:d8:5d:28:79:62:1f:f3:2e:ac:7c:02:f8:57: f9:71:ed:c4:1f:9b:23:7d:7d:28:6f:62:86:f5:63: 00:d7:87:6d:4b:09:0f:d3:5d:d9:d9:0e:62:1e:1d: 34:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3F:9F:8C:58:4A:14:AC:01:0D:73:3B:E2:8A:93:80:C1:C7:F2:B7 X509v3 Authority Key Identifier: keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:cb:6d:f4:e2:bb:a0:98:4c:34:3a:52:98:9e:a3:72:cc:8a: 37:ed:33:d2:0b:8e:ea:1b:46:eb:2f:13:dd:71:e9:cb:3f:1e: 39:30:d5:94:f3:89:65:ea:73:a1:2a:e7:7b:c1:82:16:46:56: 1f:60:76:c4:37:f6:d9:0a:f0:74:7b:0a:4c:f1:7c:64:93:f6: dd:17:c3:7a:6c:41:28:fc:fb:b8:2f:18:cf:fd:01:08:45:6c: 56:89:4a:63:ec:3d:43:69:82:87:33:db:2d:29:d1:d7:f1:ba: 46:d7:aa:ff:5d:0a:0e:c1:cd:f0:e0:8f:ea:ac:69:51:ac:b0: f2:0c:a1:63:a8:80:70:f7:5a:b9:da:8a:61:a3:a8:9d:53:3e: be:43:12:b6:83:4e:6e:56:bc:6c:fc:33:25:88:02:9e:8d:b8: 62:92:87:ea:af:af:c6:0d:ed:72:74:2b:f3:86:46:a7:8e:1b: 7d:23:66:8f:c2:69:9d:19:25:54:4e:82:f5:b4:e0:29:f8:c1: 6f:99:9c:42:7a:5d:18:43:5f:58:2b:9d:b0:9e:a5:5e:c1:43: 2c:dc:e3:e6:ad:78:aa:e2:68:15:88:36:02:a4:56:0a:1b:c2: 85:2e:aa:4c:54:03:09:6d:f3:ad:a6:0b:b3:72:9e:ff:a1:6f: 35:51:a0:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFQUMxMTAvBgNVBAUTKDhGNUQ1RTU4NzlBNzUxNThGMkNGRkIzMkFERDk0NDcx Rjk3NDE4M0YwHhcNMjUwNzAxMDIwNzM0WhcNMjUwNzA4MDIwNzM0WjAYMRYwFAYD VQQDEw02ODYzNDJlNi01MjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3K36RXtHpvPpQZp3xRNXwDRPHN7PnWUj3nS6lNuagTUWxnZUXOELlC4ngtVO CLN9Rx16H83CIxtBlG9tGPZKdyMbzMxE/BME6kK5pjkFOxgvMsHBWnSaLWXgL1+6 hWfzNGTDX/fFs+NRyAFcyyr9ogcWkV41B2fvewTfRpSW5AB7HE1lBZThBzbTF4JM 4cMEuca2JxQ4qtr1cMdH/1g9uBB8iL5zDMhrJXxfMk8WSW03x6CTxU/1gWMSYnZt FHlqy18NXYbQ51Hlqyhhbff8ldbEK9hdKHliH/MurHwC+Ff5ce3EH5sjfX0ob2KG 9WMA14dtSwkP013Z2Q5iHh00cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU/n4xY ShSsAQ1zO+KKk4DBx/K3MB8GA1UdIwQYMBaAFI9dXlh5p1FY8s/7Mq3ZRHH5dBg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkVBQy8xQ0QxNDZCMEZE MTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVWanl6X3N5cmRsRWNmbDBH RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxMWVXSG1uVVZqeXpfc3lyZGxFY2ZsMEdEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkVBQy8xQ0QxNDZCMEZEMTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVW anl6X3N5cmRsRWNmbDBHRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmy2304rugmEw0OlKYnqNyzIo37TPSC47qG0brLxPdcenLPx45MNWU 84ll6nOhKud7wYIWRlYfYHbEN/bZCvB0ewpM8Xxkk/bdF8N6bEEo/Pu4LxjP/QEI RWxWiUpj7D1DaYKHM9stKdHX8bpG16r/XQoOwc3w4I/qrGlRrLDyDKFjqIBw91q5 2opho6idUz6+QxK2g05uVrxs/DMliAKejbhikofqr6/GDe1ydCvzhkanjht9I2aP wmmdGSVUToL1tOAp+MFvmZxCel0YQ19YK52wnqVewUMs3OPmrXiq4mgViDYCpFYK G8KFLqpMVAMJbfOtpguzcp7/oW81UaD9 -----END CERTIFICATE-----Generated at Wed Jul 2 04:24:04 2025 by rpki-client