$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft File: bG1HsRFPLVgaghKAXxLDdH80r4M.mft (raw, json) Hash identifier: cc7h8IQ9WiXdJJfdmNwwC49YmCAXvZ3JdZZuWxqArQY= Subject key identifier: D1:13:65:EA:E9:69:9F:29:05:C3:10:91:E8:54:7A:2F:B4:DA:67:3C Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft Manifest number: 1C23 Signing time: Mon 30 Jun 2025 16:24:03 +0000 Manifest this update: Mon 30 Jun 2025 16:24:03 +0000 Manifest next update: Mon 07 Jul 2025 16:24:03 +0000 Files and hashes: 1: bG1HsRFPLVgaghKAXxLDdH80r4M.crl (hash: nSJH53Tn64LoNaTHO6+85o8ZzxJcYK9FpHhAVdAweaY=) 2: 08F61730538311F0860B155FC4F9AE02.roa (hash: 5tUhujimGcuYk2iCXVJH6UfqyUCQhG2eSFGvMuoYcGw=) 3: 18BDABD2537F11F0A9531C09C4F9AE02.roa (hash: jBvkqb6jI6ollOqdN8B9OtpQXSI083YHITbt77mXBK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Validity Not Before: Jun 30 16:24:03 2025 GMT Not After : Jul 7 16:24:03 2025 GMT Subject: CN=6862ba23-f813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d3:11:77:23:da:8c:da:5c:67:d5:2f:39:c2: 61:bd:55:09:bc:2b:40:63:de:d1:0c:d4:45:3c:93: 2d:2d:50:49:9d:32:3e:7f:c3:39:9d:0c:d0:da:20: 8c:7b:31:88:be:88:0f:db:0f:5e:08:dd:2e:ce:45: 8e:56:15:39:dc:af:4c:bd:07:76:ac:eb:4b:4b:bd: 67:ba:e8:f9:a8:04:1b:30:fa:2b:12:b8:0a:86:aa: 4c:1d:d0:e1:ec:3b:59:d9:fd:e5:e4:7c:68:1d:d2: 64:2c:88:7d:63:a8:cd:c3:37:50:54:f0:49:a4:59: 15:27:03:dc:78:bc:06:43:ec:3c:2a:25:23:28:da: 4d:f4:d1:c5:d2:0d:8b:6d:8f:23:a4:50:e4:ad:73: 51:87:43:26:9f:3e:9a:40:bd:d5:de:f4:b3:5d:33: 51:d4:af:1f:ef:08:4d:e1:05:99:85:d2:86:43:42: c2:ea:5b:af:81:c5:c1:9e:b5:a4:63:4e:7a:92:eb: 3a:33:27:3d:03:69:67:79:26:69:72:4d:15:b3:e5: 38:b9:1e:77:25:3c:51:70:b6:3d:ce:0c:67:b0:7c: e4:f0:34:53:ad:89:c0:81:1d:11:e0:f6:4e:f3:74: 1f:bc:31:51:78:43:ea:30:3e:92:39:7f:a3:66:c0: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:13:65:EA:E9:69:9F:29:05:C3:10:91:E8:54:7A:2F:B4:DA:67:3C X509v3 Authority Key Identifier: keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b4:50:0a:96:1b:47:c9:b8:a6:b0:06:66:27:a4:27:85:59: 75:ed:85:69:90:b7:67:3d:f8:ea:96:0b:fb:56:b0:6d:7d:04: 39:16:b2:02:da:2e:28:9e:97:ea:32:62:5a:a6:1a:b5:d9:ef: 09:91:51:ad:9c:87:fb:16:20:f2:0c:32:ea:74:d2:3c:04:23: 6a:d6:f0:07:d0:09:1d:59:7f:f0:05:2f:fa:03:16:0a:c1:5a: b8:e4:aa:50:c3:ca:48:96:85:e9:8f:40:89:90:65:8d:d2:80: d1:6f:18:40:74:53:32:d9:55:d8:39:29:77:ad:ec:d0:ae:3e: b5:ca:ac:42:92:bb:d9:39:5b:fd:87:f6:78:7c:9f:67:2d:5a: 0b:70:60:91:13:ae:38:ef:dc:5a:82:a8:69:67:f9:41:99:d6: 65:36:23:bc:67:09:8a:9e:7e:5a:0d:ec:75:f7:81:bb:00:76: dd:2c:ce:6c:f8:9b:cf:ef:5f:d7:f5:d1:d3:c2:28:df:4e:fa: 5f:ce:22:3e:44:cd:cc:be:c0:f3:1e:28:e8:09:97:54:04:57: b6:3e:0d:1e:01:76:ba:94:03:5c:28:f4:dc:a6:d5:05:6c:2a: a1:5b:86:38:59:30:14:a6:46:74:36:33:4d:f0:39:0f:53:a0: cb:6a:7b:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzY3MjExMC8GA1UEBRMoNkM2RDQ3QjExMTRGMkQ1ODFBODIxMjgwNUYxMkMzNzQ3 RjM0QUY4MzAeFw0yNTA2MzAxNjI0MDNaFw0yNTA3MDcxNjI0MDNaMBgxFjAUBgNV BAMTDTY4NjJiYTIzLWY4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb0xF3I9qM2lxn1S85wmG9VQm8K0Bj3tEM1EU8ky0tUEmdMj5/wzmdDNDaIIx7 MYi+iA/bD14I3S7ORY5WFTncr0y9B3as60tLvWe66PmoBBsw+isSuAqGqkwd0OHs O1nZ/eXkfGgd0mQsiH1jqM3DN1BU8EmkWRUnA9x4vAZD7DwqJSMo2k300cXSDYtt jyOkUOStc1GHQyafPppAvdXe9LNdM1HUrx/vCE3hBZmF0oZDQsLqW6+BxcGetaRj TnqS6zozJz0DaWd5JmlyTRWz5Ti5HnclPFFwtj3ODGewfOTwNFOticCBHRHg9k7z dB+8MVF4Q+owPpI5f6NmwOuBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0RNl6ulp nykFwxCR6FR6L7TaZzwwHwYDVR0jBBgwFoAUbG1HsRFPLVgaghKAXxLDdH80r4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NjcyLzQzNzY0QkVDRjcy NDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkcxSHNSRlBMVmdhZ2hLQVh4TERkSDgwcjRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NjcyLzQzNzY0QkVDRjcyNDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZn YWdoS0FYeExEZEg4MHI0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFu0UAqWG0fJuKawBmYnpCeFWXXthWmQt2c9+OqWC/tWsG19BDkWsgLa Liiel+oyYlqmGrXZ7wmRUa2ch/sWIPIMMup00jwEI2rW8AfQCR1Zf/AFL/oDFgrB WrjkqlDDykiWhemPQImQZY3SgNFvGEB0UzLZVdg5KXet7NCuPrXKrEKSu9k5W/2H 9nh8n2ctWgtwYJETrjjv3FqCqGln+UGZ1mU2I7xnCYqefloN7HX3gbsAdt0szmz4 m8/vX9f10dPCKN9O+l/OIj5Ezcy+wPMeKOgJl1QEV7Y+DR4BdrqUA1wo9Nym1QVs KqFbhjhZMBSmRnQ2M03wOQ9ToMtqe3k= -----END CERTIFICATE-----Generated at Tue Jul 1 20:57:09 2025 by rpki-client