$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: JBgoQ7qiMvP9/J/uLNPFcGZKEwKCT8hMGuzPdGe9xsc= Subject key identifier: 94:F6:7A:7D:A8:74:C5:E1:57:CA:33:74:E2:93:8E:7A:04:B1:9C:6B Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 0544 Signing time: Sat 28 Jun 2025 23:01:54 +0000 Manifest this update: Sat 28 Jun 2025 23:01:53 +0000 Manifest next update: Sat 05 Jul 2025 23:01:53 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: z9R3C5hZEeeKRTvwSdtAQagTWbsrbyXDBtEchozReUU=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: xQl2oR7pAbge5iF8YPhv/hbmMFqMQxGSZC11zhknFak=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: Jun 28 23:01:53 2025 GMT Not After : Jul 5 23:01:53 2025 GMT Subject: CN=68607462-eb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b3:f9:d4:79:82:0a:e2:8c:05:83:3f:de:2b: a8:42:e6:5b:61:b3:21:37:a7:20:e4:c3:ea:13:e5: 39:dc:82:76:e3:7d:81:6b:79:19:8c:dc:c3:7b:01: 7a:3c:0d:a7:47:43:e5:f5:a5:0b:a2:56:59:1e:a4: f2:16:6d:17:b7:06:61:e3:d7:de:a2:8c:8e:be:26: 08:ec:25:47:86:87:e3:35:36:57:9c:7b:e1:5c:92: 81:b1:7f:13:d9:ad:3c:3d:b8:64:59:b8:10:7b:a5: 16:c2:e6:ea:ed:d4:9c:da:13:4c:78:1f:0c:17:4a: 26:b3:5d:d6:e0:fa:54:05:8e:03:2f:ea:6b:d7:c7: 53:00:62:09:f8:3d:73:54:6c:56:a3:d1:36:c2:af: 3f:de:9d:ae:a8:dd:6d:a8:96:c7:6c:75:5f:c0:06: b8:f7:e7:99:59:5e:46:75:9b:17:55:d2:fd:b3:d1: 42:48:de:1d:5d:87:dc:c1:a6:05:d1:a5:18:ea:c4: 4d:b6:15:ec:1f:65:8c:92:bc:61:bf:de:d3:f8:fd: fd:64:ff:65:8c:94:2e:9d:c4:d6:78:9f:a7:e4:67: 15:bf:9c:5b:e5:11:97:bd:0d:d2:43:51:f4:41:ba: 77:a9:69:37:38:22:1e:36:04:79:48:c1:1e:13:21: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F6:7A:7D:A8:74:C5:E1:57:CA:33:74:E2:93:8E:7A:04:B1:9C:6B X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1c:88:3c:5a:60:37:de:d7:a3:10:ce:32:ff:14:92:d4:d1: fc:f4:61:5e:9d:f8:85:0f:e0:8d:b4:ee:fd:c1:98:99:99:ee: e9:f7:e1:9f:51:c6:51:fb:a2:6a:ed:84:8c:c0:f8:e9:a0:43: 29:82:83:9c:ea:c8:ca:5f:ca:d2:df:1e:1b:14:7e:6b:3a:4d: 94:71:92:9f:fe:12:39:61:e3:21:f3:6d:81:e7:fc:c4:ad:a0: b3:07:08:6b:46:a5:b5:66:a3:cc:3b:e2:ef:d1:46:41:85:5b: 2b:76:2a:6e:b8:4d:7e:1c:b3:15:3b:af:aa:63:b6:0b:e6:69: 6b:31:c5:c4:d5:1f:3b:73:8d:d5:92:e2:03:8a:37:60:03:fd: f3:4c:ef:eb:12:15:de:b3:f4:06:9c:42:d9:9e:fb:38:25:af: d4:b8:9a:2d:93:1f:82:79:20:62:84:c6:96:44:6f:0f:c7:10: 16:87:6b:8a:f0:56:91:8d:f1:48:c9:ab:5b:5e:fb:06:6e:da: e1:46:28:43:ae:dd:8d:fd:74:b6:32:4a:eb:42:b9:d9:9c:2a: 5d:0d:ff:86:f3:dd:eb:19:86:28:88:e3:27:85:fe:ac:fb:7b: 6d:ad:61:04:0c:a7:9f:a0:45:b2:ea:40:bb:55:c2:84:39:29: d6:1e:c4:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUwNjI4MjMwMTUzWhcNMjUwNzA1MjMwMTUzWjAYMRYwFAYD VQQDEw02ODYwNzQ2Mi1lYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LP51HmCCuKMBYM/3iuoQuZbYbMhN6cg5MPqE+U53IJ2432Ba3kZjNzDewF6 PA2nR0Pl9aULolZZHqTyFm0XtwZh49feooyOviYI7CVHhofjNTZXnHvhXJKBsX8T 2a08PbhkWbgQe6UWwubq7dSc2hNMeB8MF0oms13W4PpUBY4DL+pr18dTAGIJ+D1z VGxWo9E2wq8/3p2uqN1tqJbHbHVfwAa49+eZWV5GdZsXVdL9s9FCSN4dXYfcwaYF 0aUY6sRNthXsH2WMkrxhv97T+P39ZP9ljJQuncTWeJ+n5GcVv5xb5RGXvQ3SQ1H0 Qbp3qWk3OCIeNgR5SMEeEyFFpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJT2en2o dMXhV8ozdOKTjnoEsZxrMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfHIg8WmA33tejEM4y/xSS1NH89GFenfiFD+CNtO79wZiZme7p9+Gf UcZR+6Jq7YSMwPjpoEMpgoOc6sjKX8rS3x4bFH5rOk2UcZKf/hI5YeMh822B5/zE raCzBwhrRqW1ZqPMO+Lv0UZBhVsrdipuuE1+HLMVO6+qY7YL5mlrMcXE1R87c43V kuIDijdgA/3zTO/rEhXes/QGnELZnvs4Ja/UuJotkx+CeSBihMaWRG8PxxAWh2uK 8FaRjfFIyatbXvsGbtrhRihDrt2N/XS2MkrrQrnZnCpdDf+G893rGYYoiOMnhf6s +3ttrWEEDKefoEWy6kC7VcKEOSnWHsTF -----END CERTIFICATE-----Generated at Sun Jun 29 15:56:34 2025 by rpki-client