$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: Cd9y2ywffgBMP+pRgm9ZTI51BzoB0UbXHJ9oD/n/HuY= Subject key identifier: F6:89:77:B5:22:22:AB:4E:C0:42:02:7B:94:86:11:C7:05:29:42:12 Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 0277 Signing time: Tue 01 Jul 2025 02:23:49 +0000 Manifest this update: Tue 01 Jul 2025 02:23:48 +0000 Manifest next update: Tue 08 Jul 2025 02:23:48 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: 3TSJO2zduBa2XmJqAbBtPkhah/zk5iEFunVXHtEfZe4=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: zKt5rIlG3Ic7UH3iJOhsHCuRIq5p4/W7QWgInl/Ff3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: Jul 1 02:23:48 2025 GMT Not After : Jul 8 02:23:48 2025 GMT Subject: CN=686346b4-0ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:4f:85:98:98:cc:7f:05:7c:a1:8d:55:1e: c2:75:c2:a7:f2:eb:46:26:e9:8c:07:e3:3d:31:85: 3c:9d:80:23:61:d8:9a:b3:16:3c:df:fc:40:4b:fe: 53:a1:1d:81:d6:73:98:bf:22:3e:25:7a:db:52:b9: 95:b2:69:98:81:0b:13:79:ce:88:d1:9d:dd:ac:8a: 5d:4c:c5:ae:bb:47:6f:35:f0:56:bd:c5:57:59:70: 8a:be:21:9f:b8:9d:9e:3b:a4:50:3c:44:ac:e8:a2: bb:9e:db:dd:65:6f:71:c7:2e:eb:91:1e:b2:df:12: 1f:a7:81:93:be:ab:78:6e:5b:c9:84:0b:15:5f:30: b4:b0:9e:71:1e:0c:2d:0f:0c:93:40:1a:c7:b9:23: b9:62:b6:e6:0d:bc:28:15:9d:b0:6c:05:df:c8:cd: a9:95:ad:c0:11:75:a4:31:f7:4b:7b:22:74:32:dd: 94:da:ba:29:df:2d:fa:6a:23:01:76:96:67:6c:b3: ae:98:93:2a:86:aa:7a:66:a4:a2:8e:bc:1e:15:b3: 55:5e:1b:2c:2d:89:ff:4a:72:8e:79:e6:36:e5:35: 0a:21:72:7d:f2:58:14:22:1c:e8:b1:5e:04:d6:0c: bd:4a:46:3e:72:25:ef:74:87:b8:3a:12:e1:d5:0b: 3c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:89:77:B5:22:22:AB:4E:C0:42:02:7B:94:86:11:C7:05:29:42:12 X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:7b:c3:d8:f6:00:1a:5c:e3:56:f8:13:32:e3:3a:8b:ec:4e: 2b:3d:cb:16:a5:02:20:51:91:f5:83:71:db:7a:d9:c4:22:40: 29:fa:2e:19:e7:7a:f8:71:8a:15:68:f4:8f:74:61:c1:fc:4f: 8a:d9:ab:e0:82:62:3f:c5:2b:7b:60:be:33:d8:17:ad:61:3e: 3a:c6:a8:0e:dd:fe:be:12:9f:f6:a5:c4:bc:a3:3d:27:ca:50: 8f:f6:91:85:56:49:76:90:78:be:12:9a:ca:22:31:5b:60:58: 9e:4f:c5:fe:15:13:de:15:0d:c3:fb:2d:7f:88:58:69:f4:2d: 04:79:7d:52:95:c9:68:1c:23:39:2b:f0:85:02:04:23:c2:0e: 15:7d:32:ba:5c:66:a2:05:07:87:ca:a7:8a:18:18:fa:d7:cd: df:28:ec:03:5f:6a:52:e3:c6:03:12:db:7e:11:7b:23:82:dc: 2f:79:07:88:1d:d2:fc:25:54:0b:04:ad:5b:4f:52:c9:17:b9: 9a:db:6c:e1:a6:74:33:02:72:dc:44:dc:cc:4f:6d:1e:d9:bf: 69:02:47:1c:dc:4a:11:53:27:a7:13:12:67:f3:33:40:39:13: 29:75:5a:53:49:c8:06:98:bc:75:16:71:f5:33:d7:d1:7c:05: e1:9e:d6:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUwNzAxMDIyMzQ4WhcNMjUwNzA4MDIyMzQ4WjAYMRYwFAYD VQQDEw02ODYzNDZiNC0wY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZhPhZiYzH8FfKGNVR7CdcKn8utGJumMB+M9MYU8nYAjYdiasxY83/xAS/5T oR2B1nOYvyI+JXrbUrmVsmmYgQsTec6I0Z3drIpdTMWuu0dvNfBWvcVXWXCKviGf uJ2eO6RQPESs6KK7ntvdZW9xxy7rkR6y3xIfp4GTvqt4blvJhAsVXzC0sJ5xHgwt DwyTQBrHuSO5YrbmDbwoFZ2wbAXfyM2pla3AEXWkMfdLeyJ0Mt2U2rop3y36aiMB dpZnbLOumJMqhqp6ZqSijrweFbNVXhssLYn/SnKOeeY25TUKIXJ98lgUIhzosV4E 1gy9SkY+ciXvdIe4OhLh1Qs8VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaJd7Ui IqtOwEICe5SGEccFKUISMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEe8PY9gAaXONW+BMy4zqL7E4rPcsWpQIgUZH1g3HbetnEIkAp+i4Z 53r4cYoVaPSPdGHB/E+K2avggmI/xSt7YL4z2BetYT46xqgO3f6+Ep/2pcS8oz0n ylCP9pGFVkl2kHi+EprKIjFbYFieT8X+FRPeFQ3D+y1/iFhp9C0EeX1SlcloHCM5 K/CFAgQjwg4VfTK6XGaiBQeHyqeKGBj6183fKOwDX2pS48YDEtt+EXsjgtwveQeI HdL8JVQLBK1bT1LJF7ma22zhpnQzAnLcRNzMT20e2b9pAkcc3EoRUyenExJn8zNA ORMpdVpTScgGmLx1FnH1M9fRfAXhntbV -----END CERTIFICATE-----Generated at Tue Jul 1 18:20:50 2025 by rpki-client