$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft File: P80_M6jgglw55KhM1pOVpvKwYUg.mft (raw, json) Hash identifier: CA6RgnKb6oA7WcE1klSE2MnpjU+4xIzhLjYUqqEhgi0= Subject key identifier: AD:D6:0A:01:65:12:46:33:5C:E3:BA:D2:70:85:C2:D7:8C:FA:A7:1C Authority key identifier: 3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48 Certificate issuer: /CN=A91D4120/serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft Manifest number: 01CF Signing time: Thu 03 Jul 2025 02:56:23 +0000 Manifest this update: Thu 03 Jul 2025 02:56:22 +0000 Manifest next update: Thu 10 Jul 2025 02:56:22 +0000 Files and hashes: 1: P80_M6jgglw55KhM1pOVpvKwYUg.crl (hash: s3VHiQKb0fT3fSQx7gUxJqsHLDrwhf9pyIciSYgXXGw=) 2: F67C04568FE011EDA9919C57C4F9AE02.roa (hash: LmlR9YlBwg7cT9J6J0IKLnKoAUaVj8qqBXEJpjhDI58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4120, serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148 Validity Not Before: Jul 3 02:56:22 2025 GMT Not After : Jul 10 02:56:22 2025 GMT Subject: CN=6865f156-d9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:c4:05:7a:51:59:b3:52:1d:d6:c5:ea:d2: 17:72:13:e5:9f:e7:f8:5f:4c:a7:df:f1:80:d0:83: b4:a7:50:b7:70:6c:97:2e:70:34:1d:d0:cf:af:db: 76:27:d8:68:65:03:8b:87:3b:09:6f:e6:56:81:13: d9:09:e1:76:4e:f5:06:e9:ab:ce:69:52:c6:ed:5c: fd:5a:54:0c:d7:54:4b:65:45:81:4c:2c:95:fe:6e: b3:d9:44:83:46:64:51:c2:40:87:09:62:bc:3d:23: 9d:d3:5f:5d:49:95:b7:59:e9:44:4d:c8:e4:03:bb: 96:10:cd:fb:c5:22:21:85:0e:ca:18:cc:08:2a:2e: 69:b0:6b:b4:c1:27:7a:5e:15:69:6f:fd:9d:96:69: 0e:4c:b8:ec:d5:3b:7b:2b:3e:22:98:76:a8:de:6a: 22:e5:e9:69:09:d0:25:95:08:54:51:c6:5d:d2:f6: 44:8b:8c:7f:28:ee:af:e6:d1:46:35:88:d0:71:3e: 5c:60:1c:86:4c:e0:fa:14:7b:41:8c:98:5e:33:50: cb:e3:74:4d:28:fc:99:42:b8:eb:b2:c8:06:57:d2: 1f:57:23:b5:d1:b8:c1:58:9e:60:e0:0a:61:0e:59: 4a:c4:8c:4a:cf:16:df:23:47:74:8b:1a:7d:80:36: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D6:0A:01:65:12:46:33:5C:E3:BA:D2:70:85:C2:D7:8C:FA:A7:1C X509v3 Authority Key Identifier: keyid:3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3d:35:ac:75:a8:2f:25:ef:88:6e:55:33:f9:30:ec:e1:24: 15:4f:96:af:b6:64:51:33:6c:9a:a9:cb:30:90:fa:66:05:3a: 3c:8c:50:26:6a:59:0e:92:d2:7e:21:1e:24:d0:c3:71:db:58: 70:36:f9:85:6e:69:37:48:35:4a:6c:4d:f4:4c:6d:29:b8:5e: c3:c5:53:b1:ee:99:c0:59:4b:dd:02:95:cd:92:bc:40:17:3c: cc:6e:77:32:57:83:2b:15:10:84:d5:6d:c6:51:bd:25:93:cb: e0:61:0f:a0:e8:31:d9:81:8b:c1:97:48:9b:40:5b:bd:1f:7a: 14:2b:17:aa:a8:3e:08:ae:da:fd:1b:5c:14:2a:c6:66:46:fe: 83:db:b2:77:f7:9e:aa:72:08:a5:5f:6e:c6:64:7c:95:4c:df: 42:7c:6c:7c:e7:ec:eb:3c:c5:02:31:31:c6:72:8d:36:5d:5e: 77:e5:34:cc:2e:de:f2:9d:d2:42:84:85:3b:f4:78:14:21:65: 20:61:9f:b2:4f:a6:93:5d:4a:53:f1:c8:d5:40:61:e9:40:58: 11:1c:7c:63:e9:1b:0c:42:82:1b:38:d1:f9:95:e6:40:3e:45: af:0a:fa:dd:58:d9:84:36:f4:6e:bd:26:20:7e:4d:bc:d8:6a: 86:74:b9:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxMjAxMTAvBgNVBAUTKDNGQ0QzRjMzQThFMDgyNUMzOUU0QTg0Q0Q2OTM5NUE2 RjJCMDYxNDgwHhcNMjUwNzAzMDI1NjIyWhcNMjUwNzEwMDI1NjIyWjAYMRYwFAYD VQQDEw02ODY1ZjE1Ni1kOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2bEBXpRWbNSHdbF6tIXchPln+f4X0yn3/GA0IO0p1C3cGyXLnA0HdDPr9t2 J9hoZQOLhzsJb+ZWgRPZCeF2TvUG6avOaVLG7Vz9WlQM11RLZUWBTCyV/m6z2USD RmRRwkCHCWK8PSOd019dSZW3WelETcjkA7uWEM37xSIhhQ7KGMwIKi5psGu0wSd6 XhVpb/2dlmkOTLjs1Tt7Kz4imHao3moi5elpCdAllQhUUcZd0vZEi4x/KO6v5tFG NYjQcT5cYByGTOD6FHtBjJheM1DL43RNKPyZQrjrssgGV9IfVyO10bjBWJ5g4Aph DllKxIxKzxbfI0d0ixp9gDaDPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3WCgFl EkYzXOO60nCFwteM+qccMB8GA1UdIwQYMBaAFD/NPzOo4IJcOeSoTNaTlabysGFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDEyMC83NkE1ODg0RThG REUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2dsdzU1S2hNMXBPVnB2S3dZ VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4MF9NNmpnZ2x3NTVLaE0xcE9WcHZLd1lVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDEyMC83NkE1ODg0RThGREUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2ds dzU1S2hNMXBPVnB2S3dZVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCePTWsdagvJe+IblUz+TDs4SQVT5avtmRRM2yaqcswkPpmBTo8jFAm alkOktJ+IR4k0MNx21hwNvmFbmk3SDVKbE30TG0puF7DxVOx7pnAWUvdApXNkrxA FzzMbncyV4MrFRCE1W3GUb0lk8vgYQ+g6DHZgYvBl0ibQFu9H3oUKxeqqD4Irtr9 G1wUKsZmRv6D27J3956qcgilX27GZHyVTN9CfGx85+zrPMUCMTHGco02XV535TTM Lt7yndJChIU79HgUIWUgYZ+yT6aTXUpT8cjVQGHpQFgRHHxj6RsMQoIbONH5leZA PkWvCvrdWNmENvRuvSYgfk282GqGdLmw -----END CERTIFICATE-----Generated at Thu Jul 3 09:38:17 2025 by rpki-client