$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json) Hash identifier: TaRDNW+ElLhBMYsxRPiUgtFd77RWoZBvut5PyLR1Ttc= Subject key identifier: 22:23:46:72:25:77:38:F5:B3:AF:B5:A3:8D:5D:63:F9:AB:FE:C6:14 Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft Manifest number: 0324 Signing time: Tue 01 Jul 2025 01:44:36 +0000 Manifest this update: Tue 01 Jul 2025 01:44:36 +0000 Manifest next update: Tue 08 Jul 2025 01:44:36 +0000 Files and hashes: 1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: UI6lDfcUKNB8+Hdj9BYCJZ8wkuTqZlF7lMlFcc8QLE0=) 2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: 2T9vsc4C1WKjq9QaM+1XQHhjEU7ftzmE6rg4euSNxbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Validity Not Before: Jul 1 01:44:36 2025 GMT Not After : Jul 8 01:44:36 2025 GMT Subject: CN=68633d84-1d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:83:9f:92:ad:1a:42:aa:2e:a5:9d:ae:3d: ce:41:84:78:e7:cb:88:05:48:77:cb:16:0f:e6:3a: 35:74:b8:cd:6b:26:5d:28:c8:19:8c:1a:d1:67:8b: 9a:10:03:2c:9b:ba:9b:30:96:93:2d:a4:41:75:b6: 08:f5:7c:7e:59:d3:52:47:2c:ca:d9:c4:d9:ce:db: 73:dc:85:f7:ec:40:11:41:f5:29:96:dc:7d:66:d8: 95:f8:ef:b8:81:05:7f:68:6e:aa:8b:30:9d:d9:bf: 0e:a7:51:ee:ae:e9:ca:3e:0b:41:66:e1:9c:65:d3: 6d:74:22:de:6b:ca:e5:bc:45:98:e8:73:6c:46:24: 4d:b9:ad:57:33:ec:10:92:ed:78:11:62:ce:76:47: f4:dc:88:b8:c6:1d:80:33:e3:ec:46:a2:60:d7:bc: fb:46:e5:1f:cb:36:4b:4f:34:92:3e:65:8d:5e:ad: 8e:4e:ac:c0:d8:34:3a:2c:81:35:79:f1:c0:cb:f8: c2:73:7e:d1:ab:fc:12:33:fe:e2:e0:f0:52:c4:2e: c8:f0:15:42:c0:11:c2:3b:8b:c8:30:30:0e:f5:60: 10:63:de:ed:16:d4:e4:c8:fb:e7:e8:a3:25:9e:c4: 70:f2:ec:6e:d3:9f:3c:f4:e4:2e:27:4e:b3:71:76: 9b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:23:46:72:25:77:38:F5:B3:AF:B5:A3:8D:5D:63:F9:AB:FE:C6:14 X509v3 Authority Key Identifier: keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:3e:62:f0:8d:1b:8f:93:00:88:fb:d9:7b:5e:ac:d2:d0:15: a3:4d:f1:94:db:9a:e9:ee:dd:94:3b:6e:39:09:00:89:15:2d: 66:a1:7e:63:fe:9c:93:ee:c1:64:86:c9:1a:1e:2e:13:6a:c1: 1c:13:00:79:fd:e9:94:cd:91:41:48:d7:17:0f:c4:5b:36:51: 1e:bd:b8:d0:d1:19:f1:48:06:55:bb:8a:6c:62:14:0b:8e:a8: 41:0f:2d:1a:e5:77:e7:62:4c:10:a8:c4:e0:14:e6:e4:a9:4d: 27:0e:07:20:94:43:6a:76:99:0e:aa:a1:98:55:73:92:cc:2e: f4:e0:ed:5c:c2:3c:5e:8a:b5:8b:f1:43:9f:2d:9d:27:18:9f: ab:99:dc:ca:6b:ad:5f:17:c6:4e:59:a1:70:b0:da:fe:57:19: 1d:cf:e1:8f:a1:e7:78:df:09:b4:62:c5:56:93:73:84:3b:6e: 3a:32:a8:8b:b5:a8:e0:04:d6:aa:ca:b7:c4:71:36:50:1a:a8: 7c:51:1f:87:bb:bb:89:f1:4f:06:2b:45:5d:e1:3e:d1:7e:b2: 85:70:1b:82:e8:e3:59:24:90:a5:5e:28:49:b4:a7:3b:61:a8: 34:aa:3c:cd:e2:c6:c4:19:b5:db:6b:f3:1a:0c:b0:a7:74:38: 64:93:4e:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMzQxMTAvBgNVBAUTKEQzQzYyMkU3OTBGMURFRjE2OTI4QkJFNTU0MTgxNzI3 Q0Y4Qzg4RjgwHhcNMjUwNzAxMDE0NDM2WhcNMjUwNzA4MDE0NDM2WjAYMRYwFAYD VQQDEw02ODYzM2Q4NC0xZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuB6Dn5KtGkKqLqWdrj3OQYR458uIBUh3yxYP5jo1dLjNayZdKMgZjBrRZ4ua EAMsm7qbMJaTLaRBdbYI9Xx+WdNSRyzK2cTZzttz3IX37EARQfUpltx9ZtiV+O+4 gQV/aG6qizCd2b8Op1HurunKPgtBZuGcZdNtdCLea8rlvEWY6HNsRiRNua1XM+wQ ku14EWLOdkf03Ii4xh2AM+PsRqJg17z7RuUfyzZLTzSSPmWNXq2OTqzA2DQ6LIE1 efHAy/jCc37Rq/wSM/7i4PBSxC7I8BVCwBHCO4vIMDAO9WAQY97tFtTkyPvn6KMl nsRw8uxu05889OQuJ06zcXab6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIjRnIl dzj1s6+1o41dY/mr/sYUMB8GA1UdIwQYMBaAFNPGIueQ8d7xaSi75VQYFyfPjIj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIzNC9CMEZGMzBGRUQw MjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2RnBLTHZsVkJnWEo4LU1p UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WWk1NUR4M3ZGcEtMdmxWQmdYSjgtTWlQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIzNC9CMEZGMzBGRUQwMjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2 RnBLTHZsVkJnWEo4LU1pUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlPmLwjRuPkwCI+9l7XqzS0BWjTfGU25rp7t2UO245CQCJFS1moX5j /pyT7sFkhskaHi4TasEcEwB5/emUzZFBSNcXD8RbNlEevbjQ0RnxSAZVu4psYhQL jqhBDy0a5XfnYkwQqMTgFObkqU0nDgcglENqdpkOqqGYVXOSzC704O1cwjxeirWL 8UOfLZ0nGJ+rmdzKa61fF8ZOWaFwsNr+Vxkdz+GPoed43wm0YsVWk3OEO246MqiL tajgBNaqyrfEcTZQGqh8UR+Hu7uJ8U8GK0Vd4T7RfrKFcBuC6ONZJJClXihJtKc7 Yag0qjzN4sbEGbXba/MaDLCndDhkk04w -----END CERTIFICATE-----Generated at Tue Jul 1 08:55:04 2025 by rpki-client