$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: bjJv58vdhG4/qyMdY/5dY3dKHfEdws6xl+tChUkcVb4= Subject key identifier: 92:74:ED:9D:14:DF:99:10:6F:06:1B:87:3C:90:3E:82:98:6C:D8:80 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 1349 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 1333 Signing time: Mon 30 Jun 2025 17:12:47 +0000 Manifest this update: Mon 30 Jun 2025 17:12:47 +0000 Manifest next update: Mon 07 Jul 2025 17:12:47 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: WyGeOSnQy7bSjxQuVvOBKq0Z3j1aBzXM/yYNahJhUHE=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: vee2Trog0A8Sa455ioxH/3gGtre4yzjbz6bH8ySXmH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4937 (0x1349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Jun 30 17:12:47 2025 GMT Not After : Jul 7 17:12:47 2025 GMT Subject: CN=6862c58f-aa4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fc:26:ed:2e:4f:a7:b0:83:a4:a8:1f:71:0f: 98:0b:4a:2c:5d:90:bc:fc:9a:28:7b:38:16:1c:3f: ed:88:78:b7:b8:85:9f:d4:be:45:4d:b2:ed:1d:23: 02:0d:31:66:2d:02:57:c5:37:d0:b2:11:98:27:27: d2:1c:9f:c9:5c:da:5a:73:77:6c:55:f8:38:66:9e: 08:10:62:86:37:47:40:4b:6d:16:d2:30:4f:7a:4d: da:22:63:82:24:30:6b:0e:02:2c:42:23:15:12:ff: 31:a5:40:4e:1c:63:f9:f1:e7:cd:03:60:92:0f:d3: b8:69:c4:44:d4:da:53:79:4c:34:1d:5a:31:74:9e: ac:19:b2:50:76:9f:ec:2e:ee:8c:ab:e3:00:10:c9: 09:85:e2:22:99:69:12:d0:21:af:d9:ed:3a:90:87: b2:29:64:c0:df:08:3d:45:98:37:85:1f:98:b4:2f: d3:09:c6:cb:5a:8b:8b:d3:30:00:ec:bd:62:0d:42: c8:fe:9e:8d:fb:6a:0d:df:06:95:de:c8:aa:a5:f2: aa:16:a2:04:7d:63:2a:72:be:1e:fc:53:1b:74:9f: 18:20:f7:64:9b:c4:13:56:04:be:49:54:70:2a:6f: 66:8d:89:10:5c:44:b7:03:08:4a:9f:71:bb:18:2b: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:74:ED:9D:14:DF:99:10:6F:06:1B:87:3C:90:3E:82:98:6C:D8:80 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e4:26:93:f7:fc:a6:53:b5:50:45:38:52:19:c6:24:72:d0: ae:e2:c2:77:93:cc:03:4e:a8:80:70:49:5c:31:8e:90:f6:ad: 5f:bd:39:a8:14:99:50:19:41:a2:ac:7c:c6:45:aa:7f:06:2e: d1:1c:55:7f:0b:3b:8b:e4:39:59:3c:41:4f:b2:ea:7f:3d:80: b2:5c:f3:e8:dc:89:37:fe:2e:99:10:06:de:03:7b:5c:7a:bd: 35:0b:14:a1:a2:27:3c:23:6d:3d:e9:eb:bf:78:d8:84:f8:9e: 12:55:2b:93:c7:c0:74:e5:32:65:82:ac:50:fe:42:78:e5:f0: d3:7f:4e:c4:3f:eb:6a:7a:e0:32:8d:3f:b4:76:1a:13:a1:20: e3:0c:20:ee:1d:57:b6:f4:ff:be:3f:32:a9:c0:0a:1b:7f:f4: df:82:06:29:10:05:b4:f6:6d:7c:a7:55:79:96:3b:6b:93:fe: 25:12:69:aa:d3:6b:37:d6:bd:13:6c:52:54:65:c0:1b:11:31: 2e:66:54:df:b5:67:8c:a0:6e:88:74:e6:2a:37:ef:da:b9:6b: 3d:c9:f6:55:95:aa:67:44:41:8b:e4:ce:c9:34:6c:0c:dd:30: 2f:81:6f:a1:a1:28:ef:74:1e:1f:06:3c:83:44:72:aa:81:73: fe:1f:b2:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjUwNjMwMTcxMjQ3WhcNMjUwNzA3MTcxMjQ3WjAYMRYwFAYD VQQDEw02ODYyYzU4Zi1hYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vwm7S5Pp7CDpKgfcQ+YC0osXZC8/JooezgWHD/tiHi3uIWf1L5FTbLtHSMC DTFmLQJXxTfQshGYJyfSHJ/JXNpac3dsVfg4Zp4IEGKGN0dAS20W0jBPek3aImOC JDBrDgIsQiMVEv8xpUBOHGP58efNA2CSD9O4acRE1NpTeUw0HVoxdJ6sGbJQdp/s Lu6Mq+MAEMkJheIimWkS0CGv2e06kIeyKWTA3wg9RZg3hR+YtC/TCcbLWouL0zAA 7L1iDULI/p6N+2oN3waV3siqpfKqFqIEfWMqcr4e/FMbdJ8YIPdkm8QTVgS+SVRw Km9mjYkQXES3AwhKn3G7GCuQ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJ07Z0U 35kQbwYbhzyQPoKYbNiAMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb5CaT9/ymU7VQRThSGcYkctCu4sJ3k8wDTqiAcElcMY6Q9q1fvTmo FJlQGUGirHzGRap/Bi7RHFV/CzuL5DlZPEFPsup/PYCyXPPo3Ik3/i6ZEAbeA3tc er01CxShoic8I2096eu/eNiE+J4SVSuTx8B05TJlgqxQ/kJ45fDTf07EP+tqeuAy jT+0dhoToSDjDCDuHVe29P++PzKpwAobf/TfggYpEAW09m18p1V5ljtrk/4lEmmq 02s31r0TbFJUZcAbETEuZlTftWeMoG6IdOYqN+/auWs9yfZVlapnREGL5M7JNGwM 3TAvgW+hoSjvdB4fBjyDRHKqgXP+H7Jb -----END CERTIFICATE-----Generated at Wed Jul 2 16:07:10 2025 by rpki-client