$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: Y1XFAdh64s+z/dUhi+dPxucNyXYYwhSeFy8htm0FzTY= Subject key identifier: DE:42:8B:72:74:81:29:1F:6C:96:A7:CB:97:64:0F:C9:8A:19:55:D0 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 018B Signing time: Thu 03 Jul 2025 03:36:06 +0000 Manifest this update: Thu 03 Jul 2025 03:36:06 +0000 Manifest next update: Thu 10 Jul 2025 03:36:06 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: +jMzzIMnEdRO139DKT4G56BDfjYrF6PeC3eWC5PGjMU=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: 5LwG+YuvnWBKIRnuTBcbel0b3f9GalJtz9Pj2RCQeu4=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XEujoILkyQGDOgd5du+8WCWbh++D58fSsRkYOzlukgc=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: NGaaDsp7E7XVzTL3vht2Lwlvp5OwCewd6D52RccQHyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Jul 3 03:36:06 2025 GMT Not After : Jul 10 03:36:06 2025 GMT Subject: CN=6865faa6-9055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:09:67:bc:b6:42:4f:05:a0:de:19:5d:b4: a8:3c:47:4a:16:79:cd:4f:0e:64:d0:06:5e:c4:3b: e5:35:b0:53:af:88:4d:d5:19:87:a1:b4:02:a9:b7: e3:10:6c:1e:a0:10:c0:5b:d1:73:93:d3:5f:4b:05: 65:ef:9c:64:af:92:7d:8c:f4:00:da:0f:8d:8e:97: 5d:59:02:43:4a:d2:2b:d9:fc:46:13:11:7f:62:61: 2f:00:7b:97:46:d3:bc:2e:69:4c:70:e6:20:3b:0d: df:b1:f6:82:69:a9:3a:90:18:78:88:1f:81:fa:46: a8:74:1d:6a:c7:7f:b1:9f:81:4e:bf:be:22:02:54: af:8a:1c:c1:39:10:28:3a:f5:aa:1a:5b:9e:4d:ec: ca:7a:f3:aa:96:e9:0b:88:a0:4e:5d:b6:ab:97:03: 08:86:df:d4:a1:11:03:3e:17:c0:58:fd:a1:40:00: 34:33:7d:9c:d0:47:de:e3:ff:c3:d6:5d:b9:0d:11: 10:45:06:7b:aa:54:f5:7e:11:1d:b5:0b:df:af:00: c8:eb:07:b9:f3:9d:df:58:80:85:b6:58:82:60:d5: 6a:64:06:57:50:a6:48:ea:13:80:b2:45:05:1f:b8: d6:64:86:aa:8d:93:98:53:01:9d:2b:48:59:76:92: 31:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:42:8B:72:74:81:29:1F:6C:96:A7:CB:97:64:0F:C9:8A:19:55:D0 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b2:da:56:a8:c3:e2:9b:b8:59:6e:cd:d8:9f:d1:97:15:5b: 83:90:0f:f5:ec:f2:c2:81:60:40:3a:7c:b7:b7:72:6e:50:73: 9b:13:eb:bf:93:4b:c1:c2:3d:09:0b:d2:8f:4f:8e:75:b0:0b: 66:2e:f0:c9:0d:d3:da:03:aa:8b:f0:db:c7:8b:e9:8e:fa:1c: 92:30:c6:92:70:5b:6c:d3:c1:0a:9f:12:05:eb:2d:b6:50:29: 79:62:62:24:ac:02:2f:79:d0:8d:0e:83:29:83:f7:f4:2f:c1: 76:d1:3d:0e:7e:43:1e:a8:e0:77:0a:da:17:cb:d7:c7:c2:26: 3d:59:6e:4c:4b:98:3a:d4:8b:d4:b8:d3:a8:d8:02:61:45:f5: 5a:c7:eb:bf:ae:7a:97:f8:88:b6:ad:e3:99:30:4c:81:b9:3f: e6:09:61:c4:25:74:70:ba:9c:17:9a:7d:e4:bd:ee:56:a6:6c: d3:07:de:b9:5c:b2:53:9b:ba:ed:d9:01:70:07:87:ed:f0:53: c6:fa:57:62:4b:67:0a:1b:f0:d2:08:49:cf:e3:09:31:1e:ff: e8:6f:4e:de:38:73:42:3f:e1:b5:b1:76:65:b1:cb:11:d0:d7: 9c:7e:45:72:c7:62:19:da:62:25:59:2a:47:35:09:c3:ee:f5: 45:32:cd:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUwNzAzMDMzNjA2WhcNMjUwNzEwMDMzNjA2WjAYMRYwFAYD VQQDEw02ODY1ZmFhNi05MDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11gJZ7y2Qk8FoN4ZXbSoPEdKFnnNTw5k0AZexDvlNbBTr4hN1RmHobQCqbfj EGweoBDAW9Fzk9NfSwVl75xkr5J9jPQA2g+NjpddWQJDStIr2fxGExF/YmEvAHuX RtO8LmlMcOYgOw3fsfaCaak6kBh4iB+B+kaodB1qx3+xn4FOv74iAlSvihzBORAo OvWqGlueTezKevOqlukLiKBOXbarlwMIht/UoREDPhfAWP2hQAA0M32c0Efe4//D 1l25DREQRQZ7qlT1fhEdtQvfrwDI6we5853fWICFtliCYNVqZAZXUKZI6hOAskUF H7jWZIaqjZOYUwGdK0hZdpIxTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5Ci3J0 gSkfbJany5dkD8mKGVXQMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbstpWqMPim7hZbs3Yn9GXFVuDkA/17PLCgWBAOny3t3JuUHObE+u/ k0vBwj0JC9KPT451sAtmLvDJDdPaA6qL8NvHi+mO+hySMMaScFts08EKnxIF6y22 UCl5YmIkrAIvedCNDoMpg/f0L8F20T0OfkMeqOB3CtoXy9fHwiY9WW5MS5g61IvU uNOo2AJhRfVax+u/rnqX+Ii2reOZMEyBuT/mCWHEJXRwupwXmn3kve5WpmzTB965 XLJTm7rt2QFwB4ft8FPG+ldiS2cKG/DSCEnP4wkxHv/ob07eOHNCP+G1sXZlscsR 0NecfkVyx2IZ2mIlWSpHNQnD7vVFMs2k -----END CERTIFICATE-----Generated at Thu Jul 3 15:00:27 2025 by rpki-client