$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: AYIlf1PvnwtXuaH1PNvimvMYlOC7bmP7CdhLzKiouBM= Subject key identifier: B1:57:94:27:4F:4A:9B:39:41:40:AA:56:66:FA:21:28:1F:F8:EA:C0 Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 0127 Signing time: Thu 03 Jul 2025 05:19:34 +0000 Manifest this update: Thu 03 Jul 2025 05:19:34 +0000 Manifest next update: Thu 10 Jul 2025 05:19:34 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: jaoTIma/cKG/ApEjMXfghOa3Z15kR4Cd2wH3C3o1vv8=) 2: 860FE244E7F211EEA82C4340C4F9AE02.roa (hash: MOt4/rtczZ2XuWNA4OgwbPaAH6x2sV9WPLPyaiDEfR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Jul 3 05:19:34 2025 GMT Not After : Jul 10 05:19:34 2025 GMT Subject: CN=686612e6-67da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:97:4f:78:0c:4d:cd:ae:85:ad:22:ea:16: 33:8e:39:2f:7d:33:a6:3c:a4:e0:b5:f9:83:0e:ba: 34:c8:22:a2:83:8e:65:5a:45:03:c8:07:78:1a:22: 39:fc:2a:65:82:65:20:7c:db:16:43:a5:08:d0:3a: ad:e9:a0:0d:60:5f:4f:33:ab:06:46:06:16:6a:0c: 60:53:fa:a3:11:ca:02:29:4b:cf:b5:81:20:68:e3: 04:1b:12:a6:57:17:2a:bc:2a:33:a6:28:98:e8:4c: 06:aa:67:ed:fe:da:c1:82:38:ec:13:d4:da:18:cf: 00:a7:3f:b7:0c:94:c8:3d:11:e5:d3:d4:42:db:64: 2e:5c:44:47:67:ac:10:d4:7b:f4:b3:ab:85:54:8d: b5:d5:3f:92:5c:fb:1c:df:db:b0:ba:c5:f9:96:35: e5:2a:fa:8e:70:b9:af:86:a3:04:41:a5:4b:86:25: d3:35:d8:94:33:44:fd:c9:37:20:aa:63:dd:f8:81: 0f:ab:3c:27:ac:9d:48:29:2e:d9:ee:fd:0c:4b:f8: 4b:04:a1:1b:00:bc:9e:da:46:d6:68:d8:20:10:5c: 80:f8:3b:b9:5e:a3:68:11:a6:70:8d:f3:cd:61:c6: 22:82:50:64:e0:3f:54:26:b3:96:c8:59:e7:9a:59: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:57:94:27:4F:4A:9B:39:41:40:AA:56:66:FA:21:28:1F:F8:EA:C0 X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:af:69:08:32:fe:db:96:02:84:1e:19:72:2b:02:ec:aa:62: ef:fb:fc:62:d3:2f:ca:04:70:ff:0c:ac:9e:ca:d7:f4:2d:26: e2:f0:8f:54:ad:ee:4b:2b:3b:d6:4a:91:73:65:24:23:6a:16: 2f:26:53:ee:1b:d9:43:88:c5:fd:ba:81:58:bf:1e:79:92:5c: 93:ad:1f:ed:c3:3c:a1:fe:86:e9:85:16:c0:26:60:19:b9:d4: 8c:53:37:80:52:a6:42:53:99:34:3f:dd:da:a8:8a:dc:99:73: 64:ad:fe:24:cd:5f:fc:42:3d:42:1b:33:25:97:e6:b8:a3:06: cb:80:08:01:c3:a9:11:50:56:92:f2:86:dc:9a:89:5d:6a:a6: a4:69:f2:4d:10:f8:fc:f6:97:16:cb:be:78:63:c6:36:9d:d0: 23:91:6d:76:6f:58:b4:5d:b3:ec:6e:07:e9:d3:62:13:3d:09: 8b:d3:3f:64:f3:56:bd:99:c3:6e:39:b7:2d:44:41:e7:44:58: d3:f7:d8:ca:5c:f9:be:0d:03:fe:cb:f5:33:7e:15:d7:62:b3: 9b:60:e9:99:81:0a:36:89:85:54:ee:37:29:c2:83:a8:54:cb: c9:52:e1:9f:82:41:b4:4e:c6:c4:dd:51:62:26:0f:98:d3:87: 91:fb:a4:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjUwNzAzMDUxOTM0WhcNMjUwNzEwMDUxOTM0WjAYMRYwFAYD VQQDEw02ODY2MTJlNi02N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOKXT3gMTc2uha0i6hYzjjkvfTOmPKTgtfmDDro0yCKig45lWkUDyAd4GiI5 /CplgmUgfNsWQ6UI0Dqt6aANYF9PM6sGRgYWagxgU/qjEcoCKUvPtYEgaOMEGxKm VxcqvCozpiiY6EwGqmft/trBgjjsE9TaGM8Apz+3DJTIPRHl09RC22QuXERHZ6wQ 1Hv0s6uFVI211T+SXPsc39uwusX5ljXlKvqOcLmvhqMEQaVLhiXTNdiUM0T9yTcg qmPd+IEPqzwnrJ1IKS7Z7v0MS/hLBKEbALye2kbWaNggEFyA+Du5XqNoEaZwjfPN YcYiglBk4D9UJrOWyFnnmlkUfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFXlCdP Sps5QUCqVmb6ISgf+OrAMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCr2kIMv7blgKEHhlyKwLsqmLv+/xi0y/KBHD/DKyeytf0LSbi8I9U re5LKzvWSpFzZSQjahYvJlPuG9lDiMX9uoFYvx55klyTrR/twzyh/obphRbAJmAZ udSMUzeAUqZCU5k0P93aqIrcmXNkrf4kzV/8Qj1CGzMll+a4owbLgAgBw6kRUFaS 8obcmoldaqakafJNEPj89pcWy754Y8Y2ndAjkW12b1i0XbPsbgfp02ITPQmL0z9k 81a9mcNuObctREHnRFjT99jKXPm+DQP+y/UzfhXXYrObYOmZgQo2iYVU7jcpwoOo VMvJUuGfgkG0TsbE3VFiJg+Y04eR+6QY -----END CERTIFICATE-----Generated at Thu Jul 3 16:45:55 2025 by rpki-client