$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json) Hash identifier: 0s+xCMv363O/+Os1N0OJv4bk5OL4x+VBd1ZAGmXI/OU= Subject key identifier: D2:CA:12:19:E6:16:A8:4D:C7:FE:C4:84:06:57:62:A8:58:7B:1B:D7 Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft Manifest number: 0694 Signing time: Mon 30 Jun 2025 22:39:33 +0000 Manifest this update: Mon 30 Jun 2025 22:39:32 +0000 Manifest next update: Mon 07 Jul 2025 22:39:32 +0000 Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: Jw5I3vr6+pe6kpGiOhjwOMOQ0gtXkqxDGi/08ZtAtco=) 2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /1MqSHd9nBk2qp9htlm8FxJMAo4wrus2nnyIHoN3C0s=) 3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: LDQwB/Aaa/EPGkedxIat/R/y9ZuThpBdxq2PBP79Mgo=) 4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hPYxf/s2MeHBMdE9aQ/4MQvo1zAB47EkXGZaUhlKPWs=) 5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: XPZflDMOHrz8WA93u6KTrDyNAlgfVwGC6hkcyOuXo4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Validity Not Before: Jun 30 22:39:32 2025 GMT Not After : Jul 7 22:39:32 2025 GMT Subject: CN=68631225-c0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f0:0c:bd:34:d6:8c:88:a5:92:95:20:8d:a5: 8e:cc:49:6a:21:ca:72:51:d6:47:b1:28:66:31:2e: cb:5a:72:b2:b5:57:0e:47:6d:72:14:7a:ac:35:34: 05:3c:09:ce:3d:af:60:08:b7:54:33:de:69:b4:4b: b2:15:77:b2:25:89:ca:0c:5d:4c:18:7b:0e:21:82: 03:9a:fa:ad:16:46:58:49:8a:e7:33:5c:47:dd:9e: e3:c8:fa:36:ce:49:28:d6:93:95:6f:3c:25:61:f0: 95:a2:30:4e:3c:ee:c1:76:1f:9d:57:33:fe:fa:06: d3:4c:e6:27:66:a6:7e:c1:eb:9e:da:82:28:68:43: fa:95:a2:7b:d2:d0:bc:08:5d:81:b7:1e:1e:93:7b: a4:45:26:bc:e9:b1:6e:75:71:b5:f0:14:a8:15:46: 97:a3:43:d5:96:ff:24:31:67:16:48:d3:9c:b5:de: 8b:16:48:35:c6:74:ab:0f:3c:a4:f1:46:a1:99:19: 7a:74:fa:11:ee:c8:3c:94:b7:19:68:37:f1:67:33: 49:d5:f9:a3:be:e6:28:5e:48:bc:c7:c5:c5:b3:f7: 7a:5e:06:8c:db:2a:62:c7:58:08:ab:e9:94:56:e6: 67:f5:5a:2d:18:c0:93:02:6e:e3:b6:75:a4:1e:6e: 4b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CA:12:19:E6:16:A8:4D:C7:FE:C4:84:06:57:62:A8:58:7B:1B:D7 X509v3 Authority Key Identifier: keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:b0:97:f8:7b:e5:fc:cc:a4:35:d8:93:36:d9:2f:4c:eb:3b: fb:dd:eb:6c:d6:08:4d:90:80:af:91:bd:aa:ba:a4:1a:31:6c: 83:d3:54:5c:76:4a:09:fe:95:55:76:23:e6:5a:01:1c:cc:08: 83:4d:d6:e3:b3:a6:ed:39:6d:86:bf:97:d7:b3:66:c5:c4:cb: fe:40:58:3d:fd:a8:92:f8:34:6c:d5:b1:78:32:42:98:fb:af: 7f:66:37:2f:fe:19:a1:36:8e:03:0a:63:88:6f:14:b6:35:e0: 71:0b:bd:54:fb:9d:66:6c:80:4c:6a:75:83:3f:34:9d:28:77: 47:80:f9:19:05:2a:39:34:97:d6:8a:96:0e:1b:74:f9:d1:c4: 04:7a:92:fb:24:03:24:20:6d:1b:d1:f0:77:96:21:a5:1e:5e: c6:23:be:1b:d7:d8:ae:e0:be:a6:61:01:54:da:54:72:e2:ed: 4b:f5:78:c0:d4:b4:63:50:ac:aa:69:66:eb:20:f8:94:7f:2d: f1:f0:40:be:37:50:17:9e:ff:3f:13:6c:97:6e:e3:b8:a6:1f: d6:11:c1:bc:0b:df:ae:f2:20:d7:61:36:46:a0:4d:87:c4:a8: ee:40:f4:fb:be:f4:fb:e7:ee:55:0f:5e:1b:7b:e5:a8:09:db: 2a:00:4f:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE RkI2RDUyNEIwHhcNMjUwNjMwMjIzOTMyWhcNMjUwNzA3MjIzOTMyWjAYMRYwFAYD VQQDEw02ODYzMTIyNS1jMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vAMvTTWjIilkpUgjaWOzElqIcpyUdZHsShmMS7LWnKytVcOR21yFHqsNTQF PAnOPa9gCLdUM95ptEuyFXeyJYnKDF1MGHsOIYIDmvqtFkZYSYrnM1xH3Z7jyPo2 zkko1pOVbzwlYfCVojBOPO7Bdh+dVzP++gbTTOYnZqZ+weue2oIoaEP6laJ70tC8 CF2Btx4ek3ukRSa86bFudXG18BSoFUaXo0PVlv8kMWcWSNOctd6LFkg1xnSrDzyk 8UahmRl6dPoR7sg8lLcZaDfxZzNJ1fmjvuYoXki8x8XFs/d6XgaM2ypix1gIq+mU VuZn9VotGMCTAm7jtnWkHm5L1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLKEhnm FqhNx/7EhAZXYqhYexvXMB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzsJf4e+X8zKQ12JM22S9M6zv73ets1ghNkICvkb2quqQaMWyD01Rc dkoJ/pVVdiPmWgEczAiDTdbjs6btOW2Gv5fXs2bFxMv+QFg9/aiS+DRs1bF4MkKY +69/Zjcv/hmhNo4DCmOIbxS2NeBxC71U+51mbIBManWDPzSdKHdHgPkZBSo5NJfW ipYOG3T50cQEepL7JAMkIG0b0fB3liGlHl7GI74b19iu4L6mYQFU2lRy4u1L9XjA 1LRjUKyqaWbrIPiUfy3x8EC+N1AXnv8/E2yXbuO4ph/WEcG8C9+u8iDXYTZGoE2H xKjuQPT7vvT75+5VD14be+WoCdsqAE+v -----END CERTIFICATE-----Generated at Wed Jul 2 11:42:45 2025 by rpki-client