$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: sR8uNJO+8trKhymK0AyJGBACJ7aj5Gi4JOTg8ZawJQY= Subject key identifier: F0:E1:33:0E:0B:0F:96:56:71:EC:E8:C2:55:DA:20:AD:9D:9F:F5:A1 Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 019C Signing time: Thu 03 Jul 2025 01:29:27 +0000 Manifest this update: Thu 03 Jul 2025 01:29:27 +0000 Manifest next update: Thu 10 Jul 2025 01:29:27 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: DEAYEf6TmTiZlWMjwyK4C77T1xxMANq0EqmWcE73odY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Jul 3 01:29:27 2025 GMT Not After : Jul 10 01:29:27 2025 GMT Subject: CN=6865dcf7-3d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:ab:5c:3b:4b:c2:3a:64:ea:bc:0d:7c:53: f7:38:d2:6c:5e:1b:d8:ed:f9:2d:c3:45:7f:1d:b0: 5f:89:0f:54:24:46:ee:4b:3e:7b:03:e4:d4:50:6d: e5:12:36:3f:db:7a:ac:43:5b:86:0d:94:ce:4f:d4: 65:76:95:62:7b:a4:f0:da:d0:eb:30:1f:3c:bc:32: 49:d3:39:59:1b:8f:25:84:e9:93:56:0c:42:3b:49: ce:1a:d5:c2:09:95:fa:e2:2b:7d:37:81:9f:5f:16: 43:e5:e5:17:84:34:ef:66:83:83:e7:3c:90:37:45: c6:38:56:55:54:84:a6:b4:cf:12:93:2d:9a:fc:1e: 6b:47:53:5e:54:2c:2b:15:7a:4e:d0:ad:30:12:e6: 3c:0a:4f:0a:03:4e:14:0b:0f:67:66:57:f4:f1:c1: ed:6b:81:a8:6b:c4:96:73:7d:ce:d2:73:a7:e0:2e: f2:5c:0c:e7:8e:c5:00:f7:31:3e:ef:98:57:98:2f: 0c:e0:cc:7a:26:63:4f:d2:00:c0:9a:39:7c:d7:46: ec:86:04:0e:69:4f:be:18:d4:fb:21:f2:b5:12:d4: ab:3d:d6:86:04:d0:8b:da:0a:0c:1f:8d:13:7a:13: d7:fa:ff:45:55:13:9c:7a:43:e2:10:7f:67:94:f3: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E1:33:0E:0B:0F:96:56:71:EC:E8:C2:55:DA:20:AD:9D:9F:F5:A1 X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:87:44:02:ee:c6:b6:77:b2:99:6b:dc:f2:84:6a:87:d4:ec: 5e:4c:ec:5b:82:30:05:49:8a:93:c4:67:27:b7:11:9f:5c:b4: a0:c0:43:31:31:08:ab:2f:73:2d:01:73:b3:5e:c2:be:f2:7a: f9:3c:81:82:fc:10:5e:25:63:38:ec:6f:46:1c:9f:37:e9:ee: 72:70:c8:4e:a7:6e:cd:f8:98:55:18:1c:c0:5b:c9:35:d3:7a: cf:a7:86:cb:fc:25:86:b0:89:ae:aa:38:32:87:29:ab:eb:74: 96:8c:e0:bd:31:62:fa:9c:be:28:ae:48:e0:21:1f:25:db:b7: 91:ac:f4:3b:d0:16:76:f1:c4:b1:5f:be:6a:e1:8a:3b:f8:3f: b1:37:4c:14:8c:10:13:ba:81:92:2a:28:2c:cf:d6:6f:48:5c: 89:8c:e6:03:96:fe:7c:58:ac:f7:83:a6:65:7a:dc:82:4c:05: 24:d0:08:77:ef:b7:3a:6b:a0:17:50:97:e5:8d:19:e3:e0:7f: 11:a0:09:28:dd:c2:12:56:7c:38:84:c4:cc:14:3e:58:09:1f: 13:27:75:94:9a:1c:da:3e:23:3e:4e:7b:cb:7c:a7:cf:00:b2: 71:62:79:18:3f:3f:4c:71:77:96:91:c3:a8:f0:12:e3:8e:2c: 0d:58:06:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjUwNzAzMDEyOTI3WhcNMjUwNzEwMDEyOTI3WjAYMRYwFAYD VQQDEw02ODY1ZGNmNy0zZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFarXDtLwjpk6rwNfFP3ONJsXhvY7fktw0V/HbBfiQ9UJEbuSz57A+TUUG3l EjY/23qsQ1uGDZTOT9RldpVie6Tw2tDrMB88vDJJ0zlZG48lhOmTVgxCO0nOGtXC CZX64it9N4GfXxZD5eUXhDTvZoOD5zyQN0XGOFZVVISmtM8Sky2a/B5rR1NeVCwr FXpO0K0wEuY8Ck8KA04UCw9nZlf08cHta4Goa8SWc33O0nOn4C7yXAznjsUA9zE+ 75hXmC8M4Mx6JmNP0gDAmjl810bshgQOaU++GNT7IfK1EtSrPdaGBNCL2goMH40T ehPX+v9FVROcekPiEH9nlPNNHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDhMw4L D5ZWcezowlXaIK2dn/WhMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAth0QC7sa2d7KZa9zyhGqH1OxeTOxbgjAFSYqTxGcntxGfXLSgwEMx MQirL3MtAXOzXsK+8nr5PIGC/BBeJWM47G9GHJ836e5ycMhOp27N+JhVGBzAW8k1 03rPp4bL/CWGsImuqjgyhymr63SWjOC9MWL6nL4orkjgIR8l27eRrPQ70BZ28cSx X75q4Yo7+D+xN0wUjBATuoGSKigsz9ZvSFyJjOYDlv58WKz3g6ZletyCTAUk0Ah3 77c6a6AXUJfljRnj4H8RoAko3cISVnw4hMTMFD5YCR8TJ3WUmhzaPiM+TnvLfKfP ALJxYnkYPz9McXeWkcOo8BLjjiwNWAZk -----END CERTIFICATE-----Generated at Thu Jul 3 20:03:58 2025 by rpki-client