$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft File: m1wSv5mrKIql16PWPDWI906bJtE.mft (raw, json) Hash identifier: vhxkmKINFY0Jc8Cxkqns7r0Tsjq00M6Ni3+RgbKNdEs= Subject key identifier: D3:6B:A0:F7:BE:DD:92:9C:72:AB:66:E8:41:0F:D2:91:72:F9:68:6C Authority key identifier: 9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1 Certificate issuer: /CN=A91BB246/serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft Manifest number: 12 Signing time: Sun 29 Jun 2025 07:03:29 +0000 Manifest this update: Sun 29 Jun 2025 07:03:28 +0000 Manifest next update: Sun 06 Jul 2025 07:03:28 +0000 Files and hashes: 1: m1wSv5mrKIql16PWPDWI906bJtE.crl (hash: tVcuxIN83lxw4R/Un7+0L46Gvk/XKC1a0WdKerV9Whs=) 2: 898E9EA83C0E11F093CFD060C4F9AE02.roa (hash: pCu6+WJeqtvS7Tcl3+9JWLKb1zyqA9V6h4uJDrGt8GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 07:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB246, serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1 Validity Not Before: Jun 29 07:03:28 2025 GMT Not After : Jul 6 07:03:28 2025 GMT Subject: CN=6860e541-2a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:05:21:19:fb:05:37:d7:b9:c5:6b:3c:0d: e3:5b:5a:33:df:07:8c:72:28:e9:78:0f:f6:bc:47: 17:65:50:89:aa:16:3c:51:32:6d:d3:ba:d7:8f:c3: 05:5e:a4:ed:1c:e2:cb:f2:be:db:ed:d7:44:a0:ed: 49:ce:7c:80:bd:be:37:f9:ae:4f:bf:72:88:39:24: 6d:04:47:32:ef:8a:8c:09:02:72:08:32:6a:eb:b8: 80:e6:c6:e3:e0:8a:8e:fa:63:27:d5:95:ef:14:58: c1:e2:b2:71:ff:a3:dd:a9:44:68:d2:82:fe:46:78: 26:de:fb:9d:67:aa:15:f3:5d:95:a3:90:77:55:d0: 93:86:92:ec:08:50:dd:83:14:88:8a:d0:2d:4f:27: b9:69:4a:46:29:0d:cb:c2:ad:8a:16:cc:a9:2f:de: 67:b4:5c:1f:d0:fa:c7:7c:af:4e:40:38:8a:c9:0e: 01:32:73:d7:e1:b8:77:6b:27:70:4d:1d:fc:35:91: f9:c9:89:0a:7b:ed:9a:eb:bc:61:ec:1f:3a:5a:45: 11:63:7d:5f:12:cb:f8:41:1d:53:1e:99:c7:0c:5e: 53:5a:aa:5f:50:08:58:04:d3:39:aa:32:45:52:47: 7a:0f:a2:3d:b5:1f:0a:b2:7d:78:0a:9c:93:85:89: ef:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6B:A0:F7:BE:DD:92:9C:72:AB:66:E8:41:0F:D2:91:72:F9:68:6C X509v3 Authority Key Identifier: keyid:9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:55:b5:3e:71:64:ca:9b:9d:59:07:ed:40:26:48:a9:b3:d7: 0f:f4:eb:d0:1d:43:b2:50:3c:d6:dc:1c:ca:9d:e0:39:c0:9c: e4:41:c9:d8:c2:34:eb:60:f4:e7:8e:4f:43:3d:06:65:5e:a7: 2e:58:b9:0d:1b:63:97:31:23:51:f3:70:09:19:fa:0c:71:e0: a3:dd:bf:1e:38:5a:f9:b8:51:90:56:6c:cf:1a:b2:52:46:fd: ae:6c:a6:25:c5:57:a8:a8:8d:0e:2b:a6:73:c8:09:41:0f:46: 9f:f6:ea:0e:66:14:a5:4b:ff:2f:fd:86:ff:42:58:f4:de:9c: 47:74:9f:ba:11:2b:23:d6:15:29:6f:9b:2d:66:fc:a3:c5:16: 24:86:62:e7:5b:e2:77:b3:c5:76:11:14:a3:68:d5:5b:ce:25: 5d:32:75:48:a8:32:c2:c9:22:10:30:b4:bf:26:e9:82:e8:f9: e1:e1:af:a8:09:ab:2f:09:2e:8e:35:db:69:b7:d1:c3:7d:23: 11:3c:b7:16:16:4d:06:6f:fe:f8:32:81:68:b5:fb:22:d1:51: 44:4e:d7:48:7b:92:c8:2e:52:6c:8c:aa:4c:00:4f:2f:55:1b: 99:a6:19:e7:02:8b:08:ba:0e:07:a3:92:73:3b:4e:81:35:b2: f7:54:12:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjI0NjExMC8GA1UEBRMoOUI1QzEyQkY5OUFCMjg4QUE1RDdBM0Q2M0MzNTg4Rjc0 RTlCMjZEMTAeFw0yNTA2MjkwNzAzMjhaFw0yNTA3MDYwNzAzMjhaMBgxFjAUBgNV BAMTDTY4NjBlNTQxLTJhODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF2QUhGfsFN9e5xWs8DeNbWjPfB4xyKOl4D/a8RxdlUImqFjxRMm3TutePwwVe pO0c4svyvtvt10Sg7UnOfIC9vjf5rk+/cog5JG0ERzLviowJAnIIMmrruIDmxuPg io76YyfVle8UWMHisnH/o92pRGjSgv5GeCbe+51nqhXzXZWjkHdV0JOGkuwIUN2D FIiK0C1PJ7lpSkYpDcvCrYoWzKkv3me0XB/Q+sd8r05AOIrJDgEyc9fhuHdrJ3BN Hfw1kfnJiQp77ZrrvGHsHzpaRRFjfV8Sy/hBHVMemccMXlNaql9QCFgE0zmqMkVS R3oPoj21HwqyfXgKnJOFie9tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU02ug977d kpxyq2boQQ/SkXL5aGwwHwYDVR0jBBgwFoAUm1wSv5mrKIql16PWPDWI906bJtEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjQ2L0ZBMDAwMzgwM0Mw RDExRjA5NkNDREI1RkM0RjlBRTAyL20xd1N2NW1yS0lxbDE2UFdQRFdJOTA2Ykp0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTF3U3Y1bXJLSXFsMTZQV1BEV0k5MDZiSnRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjQ2L0ZBMDAwMzgwM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyL20xd1N2NW1yS0lx bDE2UFdQRFdJOTA2Ykp0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFpVtT5xZMqbnVkH7UAmSKmz1w/069AdQ7JQPNbcHMqd4DnAnORBydjC NOtg9OeOT0M9BmVepy5YuQ0bY5cxI1HzcAkZ+gxx4KPdvx44Wvm4UZBWbM8aslJG /a5spiXFV6iojQ4rpnPICUEPRp/26g5mFKVL/y/9hv9CWPTenEd0n7oRKyPWFSlv my1m/KPFFiSGYudb4nezxXYRFKNo1VvOJV0ydUioMsLJIhAwtL8m6YLo+eHhr6gJ qy8JLo4122m30cN9IxE8txYWTQZv/vgygWi1+yLRUURO10h7ksguUmyMqkwATy9V G5mmGecCiwi6DgejknM7ToE1svdUEkA= -----END CERTIFICATE-----Generated at Tue Jul 1 01:19:23 2025 by rpki-client