$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft File: _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json) Hash identifier: BYygsiL7w63mHeYuYmGLZqTeX9wx2u/UogPG8Juf2uk= Subject key identifier: A2:86:28:1E:81:41:BB:67:F0:8A:37:26:2B:94:15:62:1F:0B:EF:CE Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 Certificate issuer: /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft Manifest number: 01F9 Signing time: Tue 01 Jul 2025 02:48:45 +0000 Manifest this update: Tue 01 Jul 2025 02:48:45 +0000 Manifest next update: Tue 08 Jul 2025 02:48:45 +0000 Files and hashes: 1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: nz2w98fISYJDyjoSeVdRPTOkWGV2fNhC6wKTlPDq/uQ=) 2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: ezVuFYLFE5nPFWmkFpb3o3Zc1r5CWJVIlBRAQm/fLig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Validity Not Before: Jul 1 02:48:45 2025 GMT Not After : Jul 8 02:48:45 2025 GMT Subject: CN=68634c8d-e10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:48:e2:e1:2f:58:c8:9c:25:20:de:02:cb: ec:8b:2b:16:89:f0:6d:52:bc:ba:f6:be:6f:b9:54: 3e:bf:5f:e5:99:bf:7c:8a:c9:4d:d0:e2:42:dd:7c: 84:d8:52:53:cd:78:8d:a7:94:63:7b:88:20:ee:10: 0a:42:c7:76:72:41:b8:3c:69:72:05:68:b7:32:fa: 11:49:a8:b7:30:2a:28:40:c9:b9:04:ac:fe:be:83: b0:72:5d:6d:a0:a1:13:2e:58:63:20:20:b2:70:56: d3:c7:82:16:fe:8b:13:6c:fd:85:6f:cd:8b:b9:92: 79:f2:e6:a7:f3:d9:90:9f:cf:e7:36:ca:b6:3a:0c: 8c:71:27:9a:24:fb:f3:f9:32:bc:ed:cb:11:60:17: 9e:61:b7:89:92:98:ea:11:09:7d:8e:9a:77:c3:a2: 79:a8:5b:b2:b3:66:2f:83:b5:8d:de:18:31:3e:53: d2:c8:ab:be:48:bc:6c:d5:a8:33:94:aa:a1:82:83: b4:ff:f7:32:ea:23:b1:75:23:8a:d8:02:21:a8:f1: da:72:bc:92:2f:39:e3:70:bd:a0:03:dc:16:fd:42: 11:e7:45:be:e7:3d:6c:66:e8:a8:02:13:73:ed:23: de:4e:89:84:9e:7e:38:d6:96:b0:e8:24:5c:0d:f3: 7d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:86:28:1E:81:41:BB:67:F0:8A:37:26:2B:94:15:62:1F:0B:EF:CE X509v3 Authority Key Identifier: keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:82:4c:d6:d4:9e:52:5d:41:56:65:d7:75:d2:c2:3c:2b:5c: 5c:09:34:72:f9:72:6e:d7:03:68:da:df:74:9e:70:ae:1e:ab: 52:4f:57:6b:57:b6:bf:d9:a6:d2:d0:7e:36:21:17:2b:af:cc: 88:fe:27:6d:17:b4:b3:bb:4d:f2:bb:c0:4b:01:73:6b:15:9d: 32:87:c9:43:ba:75:85:c0:bf:94:7f:7e:be:a0:a6:1d:63:28: 20:f7:0d:cd:bd:af:90:96:be:b2:65:4c:a0:a4:48:8c:ab:db: 7f:9e:ba:ab:3f:e6:74:dc:f6:83:da:0d:3e:96:9e:14:a2:56: f0:05:03:f8:8e:e4:a1:7a:76:99:3f:81:0b:4e:fc:02:85:ac: 46:c6:d3:6f:1e:82:15:ee:ad:67:4a:24:b3:33:df:41:af:88: 64:2a:db:96:c6:fb:67:4e:bb:1b:7a:a9:90:cc:38:d0:07:38: 9b:75:79:4d:28:50:48:31:d5:40:84:a3:5c:1b:d9:47:df:56: 7d:3a:30:b0:1f:40:d0:a4:9b:62:39:cf:8c:9b:ca:31:07:74: 62:9e:44:dd:cb:18:87:ae:a6:af:a0:dd:85:40:2e:fe:c5:13: 7d:33:e6:67:e9:71:09:74:06:d0:79:c4:b9:0e:94:4e:44:ce: 40:38:7b:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDQzAxMTAvBgNVBAUTKEZFMkUzNTJCNDJGNzRGMTBENTc2ODM1MzAzQTJFOTc4 RTFDNDM3QjYwHhcNMjUwNzAxMDI0ODQ1WhcNMjUwNzA4MDI0ODQ1WjAYMRYwFAYD VQQDEw02ODYzNGM4ZC1lMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunNI4uEvWMicJSDeAsvsiysWifBtUry69r5vuVQ+v1/lmb98islN0OJC3XyE 2FJTzXiNp5Rje4gg7hAKQsd2ckG4PGlyBWi3MvoRSai3MCooQMm5BKz+voOwcl1t oKETLlhjICCycFbTx4IW/osTbP2Fb82LuZJ58uan89mQn8/nNsq2OgyMcSeaJPvz +TK87csRYBeeYbeJkpjqEQl9jpp3w6J5qFuys2Yvg7WN3hgxPlPSyKu+SLxs1agz lKqhgoO0//cy6iOxdSOK2AIhqPHacrySLznjcL2gA9wW/UIR50W+5z1sZuioAhNz 7SPeTomEnn441paw6CRcDfN94wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKGKB6B Qbtn8Io3JiuUFWIfC+/OMB8GA1UdIwQYMBaAFP4uNStC908Q1XaDUwOi6XjhxDe2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNDMC9DRkE3OUYxQTUw M0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4RFZkb05UQTZMcGVPSEVO N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pNDFLMEwzVHhEVmRvTlRBNkxwZU9IRU43WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNDMC9DRkE3OUYxQTUwM0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4 RFZkb05UQTZMcGVPSEVON1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCugkzW1J5SXUFWZdd10sI8K1xcCTRy+XJu1wNo2t90nnCuHqtST1dr V7a/2abS0H42IRcrr8yI/idtF7Szu03yu8BLAXNrFZ0yh8lDunWFwL+Uf36+oKYd Yygg9w3Nva+Qlr6yZUygpEiMq9t/nrqrP+Z03PaD2g0+lp4UolbwBQP4juShenaZ P4ELTvwChaxGxtNvHoIV7q1nSiSzM99Br4hkKtuWxvtnTrsbeqmQzDjQBzibdXlN KFBIMdVAhKNcG9lH31Z9OjCwH0DQpJtiOc+Mm8oxB3RinkTdyxiHrqavoN2FQC7+ xRN9M+Zn6XEJdAbQecS5DpRORM5AOHsx -----END CERTIFICATE-----Generated at Thu Jul 3 03:45:10 2025 by rpki-client