$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: SVd3LloEa1IJpvUvW37H62A8fxMR0NVZ4nFP/zrnMmU= Subject key identifier: 7C:92:76:9B:43:C1:B1:2E:30:29:25:B4:4C:9B:B8:9F:1E:75:DB:18 Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0EF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0EDE Signing time: Sat 28 Jun 2025 17:28:13 +0000 Manifest this update: Sat 28 Jun 2025 17:28:12 +0000 Manifest next update: Sat 05 Jul 2025 17:28:12 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: kxcwqIJ9Xy3KrLXgLyB7LywrVdVp0i8y8EKTccB/rno=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: w9f85Y+KRBnRa0YJSmsDyyhylh1UfaYw453pU7HjF1A=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: OKUbU8IYBtUlB8hYEhyLNWGvkxYq3YMYoLZU29fzMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 17:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3830 (0xef6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Jun 28 17:28:12 2025 GMT Not After : Jul 5 17:28:12 2025 GMT Subject: CN=6860262c-b99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:75:b2:01:69:f5:ff:5c:25:ca:5c:18:34: 71:1a:11:10:28:8a:0e:71:e4:ed:1f:44:7b:c3:f3: fe:a6:93:37:e4:1c:36:c2:bb:17:35:b3:33:fb:c1: 96:34:af:3b:69:ce:ce:bd:ca:a5:22:08:b5:da:58: 2c:0f:3b:75:cb:18:d2:77:96:5a:0b:3c:56:71:6c: c1:37:cc:f4:f8:8f:08:2c:97:a4:5d:0f:1a:af:9d: 31:9a:a5:5b:c6:36:c1:28:00:4b:57:17:e0:74:d2: f2:df:90:e9:fa:e9:99:38:52:cc:1b:8a:f2:7d:73: b2:84:8b:0f:e6:62:13:09:5a:5b:04:40:08:79:d1: 7f:b5:07:ec:09:04:c6:78:a0:0a:ed:4a:9a:22:3b: ce:56:8f:1e:7a:f4:46:17:12:85:5b:0e:66:38:1a: 1f:51:06:0e:ff:41:9f:e7:be:05:f9:37:5f:34:d7: 42:19:1a:75:5b:f5:f0:cc:dd:58:a8:0e:4f:c9:d5: f4:83:d3:8a:46:15:15:72:e7:d3:57:9f:00:89:37: d9:08:fa:8e:eb:9d:cf:de:7f:1c:f9:16:f8:63:6d: 2e:1f:0a:ed:e8:05:16:0a:35:23:ae:5a:58:18:2d: 32:d6:2c:44:6a:3d:30:2f:3e:3f:35:2b:f2:2e:2c: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:92:76:9B:43:C1:B1:2E:30:29:25:B4:4C:9B:B8:9F:1E:75:DB:18 X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a4:bd:d9:e8:c0:95:ad:f1:5c:f4:28:ee:b0:05:ae:de:9c: 50:e8:4f:19:36:52:4c:17:8f:19:d5:8b:a0:9f:5d:12:37:ea: 9e:d7:be:16:28:98:88:b7:50:67:a9:9f:69:97:31:2d:af:37: dc:7c:be:1d:24:bd:a0:f8:99:bb:6c:a6:a5:57:6e:de:91:b9: 28:f0:bc:18:33:33:a1:fb:7a:0e:9a:a7:c3:9c:8a:cd:a4:8a: 77:75:3d:08:3c:af:5c:82:2f:17:4c:5b:5e:d4:60:17:50:cc: 7a:9d:b5:27:f1:1b:04:8d:bd:99:14:1f:43:02:55:82:39:bc: cd:39:7f:bf:28:95:c4:5e:99:cb:06:4f:12:26:d1:e2:e3:0f: 09:40:00:66:4d:3f:8e:de:d3:f0:66:ac:26:fa:64:96:fb:0b: c0:33:c3:41:48:d3:81:94:01:b9:54:a0:83:bf:53:31:9b:9b: d7:b8:0e:46:b1:33:63:1c:2d:2c:d9:74:e9:48:72:2a:ee:0d: 64:22:92:d3:2c:52:c7:30:df:a4:46:2c:6b:29:12:f7:f0:90: c4:1b:9e:e1:02:dd:f0:57:91:ef:12:55:ee:aa:f3:1d:f0:d4: f6:cd:e7:f8:51:4f:a1:86:87:2a:f9:0e:b0:fb:3d:0f:a8:b8: 6c:22:ef:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjUwNjI4MTcyODEyWhcNMjUwNzA1MTcyODEyWjAYMRYwFAYD VQQDEw02ODYwMjYyYy1iOTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6N11sgFp9f9cJcpcGDRxGhEQKIoOceTtH0R7w/P+ppM35Bw2wrsXNbMz+8GW NK87ac7OvcqlIgi12lgsDzt1yxjSd5ZaCzxWcWzBN8z0+I8ILJekXQ8ar50xmqVb xjbBKABLVxfgdNLy35Dp+umZOFLMG4ryfXOyhIsP5mITCVpbBEAIedF/tQfsCQTG eKAK7UqaIjvOVo8eevRGFxKFWw5mOBofUQYO/0Gf574F+TdfNNdCGRp1W/XwzN1Y qA5PydX0g9OKRhUVcufTV58AiTfZCPqO653P3n8c+Rb4Y20uHwrt6AUWCjUjrlpY GC0y1ixEaj0wLz4/NSvyLiwecwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHySdptD wbEuMCkltEybuJ8eddsYMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCpL3Z6MCVrfFc9CjusAWu3pxQ6E8ZNlJMF48Z1Yugn10SN+qe174W KJiIt1BnqZ9plzEtrzfcfL4dJL2g+Jm7bKalV27ekbko8LwYMzOh+3oOmqfDnIrN pIp3dT0IPK9cgi8XTFte1GAXUMx6nbUn8RsEjb2ZFB9DAlWCObzNOX+/KJXEXpnL Bk8SJtHi4w8JQABmTT+O3tPwZqwm+mSW+wvAM8NBSNOBlAG5VKCDv1Mxm5vXuA5G sTNjHC0s2XTpSHIq7g1kIpLTLFLHMN+kRixrKRL38JDEG57hAt3wV5HvElXuqvMd 8NT2zef4UU+hhocq+Q6w+z0PqLhsIu/S -----END CERTIFICATE-----Generated at Mon Jun 30 00:14:30 2025 by rpki-client