$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json) Hash identifier: X5gU7NUYbrlhGkqxAP1jPxhV0VYxHeGTU0uuad3E7Y0= Subject key identifier: 00:0E:8C:1D:48:64:F2:47:AA:51:BD:5B:A7:27:97:EB:47:E0:C3:D4 Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Certificate serial: 05FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft Manifest number: 05F1 Signing time: Wed 02 Jul 2025 23:13:35 +0000 Manifest this update: Wed 02 Jul 2025 23:13:34 +0000 Manifest next update: Wed 09 Jul 2025 23:13:34 +0000 Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: YyUSaQWcn+JG2v+foJFUYo2dfPrR0UAmibg+b6BMgdY=) 2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: ClA7TsoBf9is9kiaEyUF4SSCiNxpgXXELAtT3dKemLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1530 (0x5fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Validity Not Before: Jul 2 23:13:34 2025 GMT Not After : Jul 9 23:13:34 2025 GMT Subject: CN=6865bd1f-694c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:69:3b:5c:81:66:6d:4b:70:e5:d2:70:52: 4a:5e:06:26:53:6c:c6:6f:ea:7f:ed:23:b3:4a:5f: 17:37:51:1f:5f:7c:04:d9:7c:0f:4e:08:9e:3e:98: a0:ea:d5:e4:ef:74:a2:33:86:9f:2f:ac:7e:cc:f4: b8:be:10:c4:cb:ee:3f:02:fb:6b:57:6f:c6:a1:d8: 00:b7:5b:24:1b:2e:21:61:80:e2:95:50:c7:a1:14: 9a:f2:b3:a5:cd:6b:ce:ec:03:d5:8e:68:ec:da:3a: f3:f2:4e:e5:39:60:f2:0f:bb:42:5a:88:f5:cc:ae: 8f:95:b9:dd:c9:ca:61:2b:5b:04:ca:19:12:8f:b3: ed:cd:eb:6c:89:df:e3:0e:0d:d6:7d:fa:ed:31:86: 56:95:a4:35:87:24:6e:71:a3:b5:a4:f4:54:a9:34: d0:b3:1c:4e:f8:67:2d:25:08:46:32:56:28:10:be: 92:10:24:4c:60:60:9f:c4:04:f8:96:90:72:22:5e: ca:a9:5a:a9:ac:90:99:10:75:21:82:1a:1c:9c:ab: ee:7b:42:1d:ba:e1:c1:af:05:c8:ff:d7:9e:6d:d6: 46:17:9d:b6:10:d0:7d:ac:09:fe:6f:a4:fa:f1:22: 06:f8:15:87:07:09:af:1b:c2:2c:07:07:46:76:ff: c3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0E:8C:1D:48:64:F2:47:AA:51:BD:5B:A7:27:97:EB:47:E0:C3:D4 X509v3 Authority Key Identifier: keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:29:36:d1:c3:a5:90:2c:d2:f9:51:d3:ba:95:df:35:65:62: 93:8e:a5:e6:25:bd:23:4c:49:39:cf:3d:42:99:f2:e2:09:f5: b7:8d:ee:d5:15:a2:81:0f:ae:01:19:3d:d4:ee:e1:4c:a5:7b: 45:94:51:f8:49:cf:25:c1:b2:4c:ce:f7:f6:cb:a9:5b:55:6c: ac:cf:6e:2b:2d:fc:40:bf:e3:66:34:a3:27:70:7a:5e:9e:58: 06:06:c1:59:af:97:0c:ac:14:5d:18:fd:90:cc:c2:dc:5e:0a: dc:52:0d:75:60:1f:96:49:f6:2b:71:6d:9d:7c:ee:5e:7b:ef: 38:6f:ec:31:a3:05:79:49:94:5a:07:ef:d7:32:e9:53:a5:f0: 62:86:36:6a:30:b1:0d:2e:21:3f:98:dd:30:0b:ee:a8:ba:54: 45:bb:e6:19:32:12:75:a2:d2:b3:64:ab:5d:1d:6a:6b:47:84: cc:24:b6:55:14:1a:ff:5e:22:9f:b3:2d:0a:e1:0c:6f:84:be: 3d:76:01:17:d5:6f:f4:85:b4:d6:cd:41:6d:d3:bc:fa:ee:11: ec:e3:e8:19:99:e4:8d:a1:1f:d4:65:ec:eb:2f:e5:62:58:74: f9:42:35:a0:c6:b3:59:80:fa:8e:0a:f1:65:93:e1:70:9b:0d: 33:05:e0:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC OEFDNzQwQzkwHhcNMjUwNzAyMjMxMzM0WhcNMjUwNzA5MjMxMzM0WjAYMRYwFAYD VQQDEw02ODY1YmQxZi02OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/FpO1yBZm1LcOXScFJKXgYmU2zGb+p/7SOzSl8XN1EfX3wE2XwPTgiePpig 6tXk73SiM4afL6x+zPS4vhDEy+4/AvtrV2/GodgAt1skGy4hYYDilVDHoRSa8rOl zWvO7APVjmjs2jrz8k7lOWDyD7tCWoj1zK6PlbndycphK1sEyhkSj7Ptzetsid/j Dg3WffrtMYZWlaQ1hyRucaO1pPRUqTTQsxxO+GctJQhGMlYoEL6SECRMYGCfxAT4 lpByIl7KqVqprJCZEHUhghocnKvue0IduuHBrwXI/9eebdZGF522ENB9rAn+b6T6 8SIG+BWHBwmvG8IsBwdGdv/DcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAOjB1I ZPJHqlG9W6cnl+tH4MPUMB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2 Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh MFN6WWkzWk5PWXk0ckhRTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrKTbRw6WQLNL5UdO6ld81ZWKTjqXmJb0jTEk5zz1CmfLiCfW3je7V FaKBD64BGT3U7uFMpXtFlFH4Sc8lwbJMzvf2y6lbVWysz24rLfxAv+NmNKMncHpe nlgGBsFZr5cMrBRdGP2QzMLcXgrcUg11YB+WSfYrcW2dfO5ee+84b+wxowV5SZRa B+/XMulTpfBihjZqMLENLiE/mN0wC+6oulRFu+YZMhJ1otKzZKtdHWprR4TMJLZV FBr/XiKfsy0K4QxvhL49dgEX1W/0hbTWzUFt07z67hHs4+gZmeSNoR/UZezrL+Vi WHT5QjWgxrNZgPqOCvFlk+Fwmw0zBeAx -----END CERTIFICATE-----Generated at Fri Jul 4 18:04:08 2025 by rpki-client