$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json) Hash identifier: U9r/UacV7VOMmZmuOqzYUXDSCoykgBIN8BORDucEi78= Subject key identifier: 56:0F:63:D7:87:2E:2B:4B:93:15:D5:D0:8C:84:F3:24:B3:A9:9E:87 Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft Manifest number: 03CF Signing time: Thu 03 Jul 2025 00:59:37 +0000 Manifest this update: Thu 03 Jul 2025 00:59:37 +0000 Manifest next update: Thu 10 Jul 2025 00:59:37 +0000 Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: 9aqY+G8Ep+O1d98dWhoD2cSqQFFtDSRlOmsdQaKaIik=) 2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: 9DfUOxvFR13SpwnP9dE6JJ+qwtWuEZ4XB8tC3ndW1gI=) 3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: dBKzmRV5kLqxEgnT/9vEMvol4LmNVdPd79i3sVZVmJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Validity Not Before: Jul 3 00:59:37 2025 GMT Not After : Jul 10 00:59:37 2025 GMT Subject: CN=6865d5f9-557d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:57:be:d4:4a:5c:c3:34:88:1b:5c:14:8a:aa: a0:2c:f9:d4:66:f9:af:eb:9e:5b:1c:60:d0:60:7e: 60:0f:09:3b:c1:b2:44:59:15:76:0c:c8:56:a5:53: da:2a:8f:93:69:98:e9:53:0d:6c:8f:f3:78:e6:e3: 95:6e:df:ab:1f:02:d2:12:b2:55:79:fc:59:35:2a: 58:ec:6b:a5:8f:e3:a2:d3:ac:08:b4:ff:52:18:7c: 63:29:7b:4e:f1:90:b1:e7:ae:92:bb:bc:34:40:f4: 73:06:90:cf:56:15:77:7d:95:fe:c1:0c:e6:5f:5b: 45:61:23:d2:cc:df:cc:ec:a3:d2:b7:99:30:b4:f8: 39:e5:f8:b3:15:32:ea:14:d0:15:4e:93:fe:a5:8e: 52:38:f8:be:4b:ed:b7:95:b9:8b:90:ba:17:b3:30: 11:9e:44:ba:9d:00:68:ad:1b:18:a7:e9:81:8a:47: c6:6c:1a:20:67:31:a6:27:9b:b2:0d:4f:7a:7d:ae: 30:cf:7d:9b:79:41:97:f2:bf:c1:cb:10:ec:c6:85: cb:a4:6e:8d:10:ee:b9:8e:47:fa:bf:00:67:7a:b9: 26:da:73:93:20:66:85:e5:ce:a2:44:61:6d:5e:ce: f0:e6:06:6b:15:a0:42:29:f7:6f:2f:ff:83:e2:7f: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0F:63:D7:87:2E:2B:4B:93:15:D5:D0:8C:84:F3:24:B3:A9:9E:87 X509v3 Authority Key Identifier: keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:e7:21:6d:eb:43:a0:b3:6e:4b:96:f8:3e:dc:f1:67:3f:95: 88:15:2e:97:ba:85:1d:22:4d:64:39:a6:8b:53:f6:62:9c:76: b0:cb:3e:27:7d:4b:46:db:9a:c5:67:c2:5f:56:89:3f:b6:e2: a8:84:8a:c8:20:2c:46:8b:62:14:fc:2c:fe:73:99:93:d6:46: d2:4a:16:21:5c:b8:a9:67:ff:f1:3d:c5:eb:a6:f5:8c:f2:79: 3f:9b:76:f0:56:bd:61:48:d7:4c:89:1d:7f:86:e7:ea:73:44: 1c:97:73:a1:78:ce:48:7a:33:05:e5:96:d5:d8:64:2b:f6:d1: 80:5f:c4:80:0b:a2:80:11:19:94:93:2e:f2:bd:3d:ab:b2:17: fa:95:91:18:79:0c:a0:d3:6c:38:6c:0b:82:cc:aa:f4:fc:9d: 94:80:5b:0e:a4:a8:01:fa:30:f0:dd:c3:d2:33:13:56:3e:e7: a7:9c:4f:f8:73:24:2f:36:a7:6c:ec:2f:3c:2f:48:ae:c7:12: b3:3c:8b:13:2d:b3:4c:12:fd:32:8c:7b:d6:93:88:9e:59:35: f4:46:09:84:93:89:33:16:13:ce:56:9d:b0:1f:17:8c:4d:73: f6:57:b9:a2:e3:c8:f1:5a:3c:00:51:cf:d7:f8:7d:05:cb:7b: e0:fd:ba:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU1NjcxMTAvBgNVBAUTKEZCNEFCNUE5QTREQzM3QkJENjVFNjFFNDJBNDI1NkNG OTUxQjhDNzMwHhcNMjUwNzAzMDA1OTM3WhcNMjUwNzEwMDA1OTM3WjAYMRYwFAYD VQQDEw02ODY1ZDVmOS01NTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Ve+1EpcwzSIG1wUiqqgLPnUZvmv655bHGDQYH5gDwk7wbJEWRV2DMhWpVPa Ko+TaZjpUw1sj/N45uOVbt+rHwLSErJVefxZNSpY7Gulj+Oi06wItP9SGHxjKXtO 8ZCx566Su7w0QPRzBpDPVhV3fZX+wQzmX1tFYSPSzN/M7KPSt5kwtPg55fizFTLq FNAVTpP+pY5SOPi+S+23lbmLkLoXszARnkS6nQBorRsYp+mBikfGbBogZzGmJ5uy DU96fa4wz32beUGX8r/ByxDsxoXLpG6NEO65jkf6vwBnerkm2nOTIGaF5c6iRGFt Xs7w5gZrFaBCKfdvL/+D4n/VOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYPY9eH LitLkxXV0IyE8ySzqZ6HMB8GA1UdIwQYMBaAFPtKtamk3De71l5h5CpCVs+VG4xz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTU2Ny9FNjc5OTRERThG RjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043dldYbUhrS2tKV3o1VWJq SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wcTFxYVRjTjd2V1htSGtLa0pXejVVYmpITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTU2Ny9FNjc5OTRERThGRjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043 dldYbUhrS2tKV3o1VWJqSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT5yFt60Ogs25Llvg+3PFnP5WIFS6XuoUdIk1kOaaLU/ZinHawyz4n fUtG25rFZ8JfVok/tuKohIrIICxGi2IU/Cz+c5mT1kbSShYhXLipZ//xPcXrpvWM 8nk/m3bwVr1hSNdMiR1/hufqc0Qcl3OheM5IejMF5ZbV2GQr9tGAX8SAC6KAERmU ky7yvT2rshf6lZEYeQyg02w4bAuCzKr0/J2UgFsOpKgB+jDw3cPSMxNWPuennE/4 cyQvNqds7C88L0iuxxKzPIsTLbNMEv0yjHvWk4ieWTX0RgmEk4kzFhPOVp2wHxeM TXP2V7mi48jxWjwAUc/X+H0Fy3vg/bqe -----END CERTIFICATE-----Generated at Thu Jul 3 10:21:23 2025 by rpki-client