$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json) Hash identifier: 6bcVCW4TJoVdtVn8bh70sQ9sA5dcnRPgl7dphhIv1U0= Subject key identifier: 4D:D2:08:A7:0D:3C:D9:54:B6:52:C1:02:D3:A7:8A:B2:FD:5E:92:FC Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 04FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft Manifest number: 04EE Signing time: Tue 01 Jul 2025 00:13:59 +0000 Manifest this update: Tue 01 Jul 2025 00:13:59 +0000 Manifest next update: Tue 08 Jul 2025 00:13:59 +0000 Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: aMVRr4yp603l2MB3FwqczR2rsWZpx/6ErO0JWxwqUDE=) 2: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: VeKl0MHR8TI54m6waTajw/toZ1ifpbQZ1lUNcn/xegU=) 3: E66070EE36F911F0B0111510C4F9AE02.roa (hash: s0fTkj19sRTx/+BDg72CnNonlKPiE7C9YigY/ZfS3pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1277 (0x4fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: Jul 1 00:13:59 2025 GMT Not After : Jul 8 00:13:59 2025 GMT Subject: CN=68632847-1243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ef:80:bc:c5:ab:a2:06:97:fb:35:fe:06:35: 1d:b8:d2:bf:18:42:9c:6e:2b:25:4a:af:3b:b5:6e: 15:3c:72:88:3a:f4:3f:a7:70:b1:7a:fb:98:bf:3f: 06:58:0e:ed:b5:9f:6d:a1:53:f6:3d:5c:dd:d1:ed: cf:45:31:be:be:d6:90:d6:2e:68:0f:c3:6d:0e:46: 32:0e:fe:a7:23:1a:8f:7c:15:73:fe:0b:f7:ad:78: 82:b4:3d:ac:78:3b:9b:4f:1b:bb:1f:11:ad:71:b0: 2a:92:03:b7:d8:2d:84:ff:9f:5c:d1:57:b2:d9:6d: ee:dd:72:d5:bb:13:18:96:8b:56:dd:32:be:be:8d: 6e:e1:e2:5e:79:a4:63:62:54:d9:28:f3:2a:3d:6c: 02:d4:25:e6:15:23:d3:fc:bc:6b:c8:57:55:f2:da: 04:a9:bc:65:ef:5f:4c:55:cf:69:4e:ec:18:b8:b7: 6a:44:5e:3e:ac:e1:64:e6:9e:ca:13:7b:cf:09:ec: 80:3e:47:da:29:89:2e:25:b6:9e:37:e4:56:4c:1e: 6c:a2:9c:98:cd:5d:ce:b5:cf:ec:e6:3d:b4:e1:49: c6:27:4b:b6:4b:e3:53:f6:2f:57:30:38:92:2c:1e: 9d:c9:97:20:c4:a8:0c:85:a0:36:5d:ac:5a:db:64: d3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D2:08:A7:0D:3C:D9:54:B6:52:C1:02:D3:A7:8A:B2:FD:5E:92:FC X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:06:aa:58:35:67:8a:d3:0c:0f:bd:31:2f:c4:cc:35:3a:d4: fe:ee:5b:3b:25:f5:86:5a:a8:5a:32:ed:57:9c:94:c8:98:dc: 2a:ab:06:ed:9a:4d:8b:7b:80:89:bc:1e:6c:19:c3:43:f7:15: 4a:95:36:7a:7b:a7:09:7b:d2:0b:52:00:57:1d:a2:53:72:19: 7e:5b:7b:9e:d0:57:13:ff:bb:95:ea:97:14:0e:b7:5c:9d:99: 36:75:b3:57:ec:3c:a2:40:74:72:45:ff:8e:ce:62:09:58:d6: 38:b0:4b:be:3b:01:99:d3:5c:fa:88:77:bd:b0:52:24:69:3f: 84:94:c2:84:3e:4c:48:ef:41:88:4f:39:cd:78:42:d5:ed:48: 27:ba:63:75:ba:cc:15:24:82:ac:69:c5:63:95:02:f8:b0:3d: 0d:69:d3:39:83:50:18:3e:00:7b:e8:bf:d0:76:7b:86:d3:03: 06:58:e2:1d:0b:33:90:16:65:d5:c7:21:7d:41:e7:ef:64:d6: 80:3f:40:16:bb:27:c5:6d:91:3f:f2:f5:bd:ee:4e:d5:3e:98: 66:ff:25:ff:4a:e3:7c:ee:36:bc:78:4b:0e:18:dc:f3:0e:d5: 46:22:7f:71:34:8b:04:55:99:43:df:4f:81:06:ba:cc:d0:e1: a3:76:05:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjUwNzAxMDAxMzU5WhcNMjUwNzA4MDAxMzU5WjAYMRYwFAYD VQQDEw02ODYzMjg0Ny0xMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0++AvMWrogaX+zX+BjUduNK/GEKcbislSq87tW4VPHKIOvQ/p3CxevuYvz8G WA7ttZ9toVP2PVzd0e3PRTG+vtaQ1i5oD8NtDkYyDv6nIxqPfBVz/gv3rXiCtD2s eDubTxu7HxGtcbAqkgO32C2E/59c0Vey2W3u3XLVuxMYlotW3TK+vo1u4eJeeaRj YlTZKPMqPWwC1CXmFSPT/LxryFdV8toEqbxl719MVc9pTuwYuLdqRF4+rOFk5p7K E3vPCeyAPkfaKYkuJbaeN+RWTB5sopyYzV3Otc/s5j204UnGJ0u2S+NT9i9XMDiS LB6dyZcgxKgMhaA2Xaxa22TTxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3SCKcN PNlUtlLBAtOnirL9XpL8MB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG Mm1FQkNBLVlNaS05WlpHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzBqpYNWeK0wwPvTEvxMw1OtT+7ls7JfWGWqhaMu1XnJTImNwqqwbt mk2Le4CJvB5sGcND9xVKlTZ6e6cJe9ILUgBXHaJTchl+W3ue0FcT/7uV6pcUDrdc nZk2dbNX7DyiQHRyRf+OzmIJWNY4sEu+OwGZ01z6iHe9sFIkaT+ElMKEPkxI70GI TznNeELV7UgnumN1uswVJIKsacVjlQL4sD0NadM5g1AYPgB76L/QdnuG0wMGWOId CzOQFmXVxyF9QefvZNaAP0AWuyfFbZE/8vW97k7VPphm/yX/SuN87ja8eEsOGNzz DtVGIn9xNIsEVZlD30+BBrrM0OGjdgXc -----END CERTIFICATE-----Generated at Wed Jul 2 20:05:05 2025 by rpki-client