$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: Duj9k5EulZPg0W/zcNGC9lFhZRCYM4JdnTy3/bcDCVc= Subject key identifier: 31:4D:86:10:D6:40:57:82:99:6A:D5:4C:E5:92:15:E6:E7:AE:0B:99 Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0B0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0B01 Signing time: Sat 28 Jun 2025 19:04:19 +0000 Manifest this update: Sat 28 Jun 2025 19:04:18 +0000 Manifest next update: Sat 05 Jul 2025 19:04:18 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: E6igA3r9UlS4QlkKcVVhA9djENVxsVQkz0J5Tze7usI=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: H58uLnLgtQRXxjwDdpgj46LQrUNsRnsgJgSttmaA0KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2826 (0xb0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: Jun 28 19:04:18 2025 GMT Not After : Jul 5 19:04:18 2025 GMT Subject: CN=68603cb3-d3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:61:2f:be:09:9f:79:92:74:58:c6:a5:08:df: d3:4b:50:48:81:58:54:74:f5:81:b5:45:8e:5a:9b: 31:cf:71:1c:d1:02:d9:96:fa:c7:56:16:75:d7:c8: 32:42:98:5c:36:b3:57:36:56:d2:68:19:39:a7:5b: d0:bf:c2:0c:9c:80:97:e1:12:b4:1f:99:db:ad:68: 64:75:a3:ad:cf:ab:90:73:42:c2:84:5c:aa:9a:07: 8d:86:58:54:cf:8a:6d:06:4d:22:d7:dd:b5:d0:11: 99:02:d8:91:d8:0d:62:37:a2:02:e7:6d:5e:c2:05: b3:e6:ff:df:9d:f6:a5:34:98:94:ff:d8:b1:9e:dc: 95:1f:1d:a1:6d:44:90:04:03:ac:b7:80:10:d8:3c: 62:a8:db:ec:7d:b6:e1:f2:21:9f:b8:f5:9f:43:ce: 80:62:58:08:99:6f:77:0f:8e:1c:cf:d5:3d:03:7d: 2c:73:d0:a4:ef:55:28:38:d2:62:1a:a7:26:70:2b: c1:7e:32:e6:ab:43:9a:c3:ce:72:5c:31:6a:7a:77: 78:25:b7:20:18:d6:14:69:2e:30:cf:5f:ff:9b:3e: ac:d8:f5:cd:45:25:47:72:62:48:66:c2:dd:09:08: 3a:16:82:f5:3a:c6:cd:1d:da:c1:2e:8f:1b:96:72: 24:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4D:86:10:D6:40:57:82:99:6A:D5:4C:E5:92:15:E6:E7:AE:0B:99 X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:11:5d:12:e9:0c:90:35:51:08:3e:28:89:cd:b8:d7:ab:2b: f1:72:4d:f0:18:3d:b5:63:f8:db:df:b1:f1:7c:35:92:3f:5b: 0d:3b:8f:94:4e:53:fa:af:5c:42:a9:7e:db:8a:52:96:67:ee: 87:b0:da:0b:4c:48:3c:f6:68:2e:b1:f4:ee:c1:62:01:d6:d8: c1:58:e1:6e:e2:f1:06:ff:c3:12:5a:95:50:a6:5b:8b:4b:80: 06:31:28:06:30:53:ce:79:ff:ff:2f:01:86:3a:c0:4f:c5:0d: 43:80:5b:12:e0:50:87:aa:a5:a8:56:48:1b:70:9f:4f:70:e3: 27:a5:99:18:be:ef:d5:ce:91:87:39:20:58:9d:4b:42:f2:b9: bf:fe:02:8b:0b:32:76:ba:16:b7:94:e7:ec:ed:65:63:65:87: e7:7c:7c:1a:cc:6e:e0:a0:ac:ed:2a:6f:ae:0f:ae:b4:ee:e5: 1f:96:f2:21:d6:55:cb:48:1d:59:8d:b9:19:f0:c6:37:1c:03: 12:6c:a6:81:31:a2:9f:9c:cf:d4:e8:73:f9:a1:78:e0:45:c2: 9b:6a:04:0d:1a:78:0f:ab:f6:89:36:49:5d:f8:0d:84:f4:db: d2:c6:04:cb:17:dd:b5:48:9d:0e:0a:31:35:51:30:c4:da:89: cf:e2:e8:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjUwNjI4MTkwNDE4WhcNMjUwNzA1MTkwNDE4WjAYMRYwFAYD VQQDEw02ODYwM2NiMy1kM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2EvvgmfeZJ0WMalCN/TS1BIgVhUdPWBtUWOWpsxz3Ec0QLZlvrHVhZ118gy QphcNrNXNlbSaBk5p1vQv8IMnICX4RK0H5nbrWhkdaOtz6uQc0LChFyqmgeNhlhU z4ptBk0i19210BGZAtiR2A1iN6IC521ewgWz5v/fnfalNJiU/9ixntyVHx2hbUSQ BAOst4AQ2DxiqNvsfbbh8iGfuPWfQ86AYlgImW93D44cz9U9A30sc9Ck71UoONJi GqcmcCvBfjLmq0Oaw85yXDFqend4JbcgGNYUaS4wz1//mz6s2PXNRSVHcmJIZsLd CQg6FoL1OsbNHdrBLo8blnIkRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFNhhDW QFeCmWrVTOWSFebnrguZMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjEV0S6QyQNVEIPiiJzbjXqyvxck3wGD21Y/jb37HxfDWSP1sNO4+U TlP6r1xCqX7bilKWZ+6HsNoLTEg89mgusfTuwWIB1tjBWOFu4vEG/8MSWpVQpluL S4AGMSgGMFPOef//LwGGOsBPxQ1DgFsS4FCHqqWoVkgbcJ9PcOMnpZkYvu/VzpGH OSBYnUtC8rm//gKLCzJ2uha3lOfs7WVjZYfnfHwazG7goKztKm+uD6607uUflvIh 1lXLSB1ZjbkZ8MY3HAMSbKaBMaKfnM/U6HP5oXjgRcKbagQNGngPq/aJNkld+A2E 9NvSxgTLF921SJ0OCjE1UTDE2onP4ugu -----END CERTIFICATE-----Generated at Sun Jun 29 13:37:23 2025 by rpki-client