$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft File: cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json) Hash identifier: MTsuEdtxXqct1OZA5m8AB9LCnPUHQ2F/Po0lGKIP6Q4= Subject key identifier: 4F:60:C3:9E:4F:DA:91:0A:13:94:1D:5A:63:0D:F7:84:ED:63:25:82 Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft Manifest number: 01A0 Signing time: Sun 29 Jun 2025 02:30:24 +0000 Manifest this update: Sun 29 Jun 2025 02:30:23 +0000 Manifest next update: Sun 06 Jul 2025 02:30:23 +0000 Files and hashes: 1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: yuwNk3viDLYlMuWQgAZUrqCUiY3A1TiZuw0P6gaAfZk=) 2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: ViKM5e5iyaoZ2fwSNhoyHsddKA5yuwX0C7qKIyKJX7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: Jun 29 02:30:23 2025 GMT Not After : Jul 6 02:30:23 2025 GMT Subject: CN=6860a540-10f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:72:23:f8:ba:f3:25:8c:ac:2a:01:c7:fd: e0:c3:61:fe:b2:bd:52:da:54:d3:09:9d:52:e3:c0: cb:8c:57:0e:6c:10:1e:0a:b8:af:39:05:75:8d:e0: 83:20:61:30:53:a0:6f:b2:cf:69:e0:5a:d5:53:0c: 66:f3:8b:11:df:49:30:dd:9b:0b:8d:d9:7c:35:cd: 31:13:1b:ad:ca:cc:a6:bc:f3:8a:0f:bb:b4:be:32: 2a:66:70:12:dc:14:d8:7b:6b:93:01:27:0a:d9:e6: 5b:b1:f0:14:70:03:ef:68:7f:1f:e9:00:f7:59:9d: 15:23:61:5f:04:58:1d:e7:3e:fa:70:ce:d5:47:71: 40:02:03:eb:8a:7d:fd:3a:b0:51:cf:7f:f3:8d:5e: bc:6c:62:4b:cf:28:9d:10:fb:63:3f:c8:78:02:e6: 5b:97:f4:cd:61:8c:82:93:5a:da:4a:76:b1:7d:b4: 0a:59:70:3b:85:ff:55:ba:7c:95:f5:1d:bc:4b:da: 13:09:e4:1f:8f:7d:36:98:16:34:d3:cc:d9:40:e2: 49:cb:a2:e9:ff:33:06:48:07:48:29:58:4a:02:20: 88:9b:ee:a8:59:f0:e1:df:a8:81:da:1f:eb:f1:4f: 79:b0:25:73:91:45:4c:dd:ea:dd:89:39:71:d8:62: 1a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:60:C3:9E:4F:DA:91:0A:13:94:1D:5A:63:0D:F7:84:ED:63:25:82 X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:45:bc:fa:ad:2b:8c:ea:ff:33:a8:e3:fe:cb:64:9d:ce:0b: 57:97:e8:b0:55:8f:e3:62:53:b1:29:34:be:5e:01:b4:f3:5b: 35:ab:5a:7d:09:79:7e:e0:9d:32:1d:47:0a:82:1f:73:2d:56: ea:9d:52:5d:2b:99:42:43:af:12:7b:ac:8e:0d:0b:c9:77:37: e8:71:8b:9c:97:c9:4c:1d:05:67:5f:4d:d9:ae:c6:d3:39:bc: 35:75:87:e2:5d:6e:d2:95:77:07:e5:ca:3e:c8:31:ff:c9:07: b3:06:c5:63:fc:80:29:af:3e:16:b7:be:87:af:d2:53:f8:88: 13:29:10:df:f6:8b:ef:84:e4:fc:3c:71:e5:cc:76:9d:bc:47: 02:ec:e5:e5:cb:14:3f:53:66:c5:27:22:79:eb:74:08:ec:ff: 1f:79:a7:fc:38:d2:7a:36:e1:98:c9:d6:52:97:c1:dc:0c:9e: ac:dc:20:e4:07:2b:b6:f2:9c:7d:ca:af:0c:91:66:75:68:1e: 41:fa:38:d7:d1:ab:db:3d:f9:cb:13:50:66:59:03:45:ba:2c: 92:6b:0a:48:09:0d:e6:2d:d8:5a:04:94:9c:6f:87:8a:24:49: 22:da:f5:81:cd:00:14:42:1f:c0:ff:cd:cb:e4:c2:34:81:a9: 8c:7e:c3:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjUwNjI5MDIzMDIzWhcNMjUwNzA2MDIzMDIzWjAYMRYwFAYD VQQDEw02ODYwYTU0MC0xMGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGFyI/i68yWMrCoBx/3gw2H+sr1S2lTTCZ1S48DLjFcObBAeCrivOQV1jeCD IGEwU6Bvss9p4FrVUwxm84sR30kw3ZsLjdl8Nc0xExutysymvPOKD7u0vjIqZnAS 3BTYe2uTAScK2eZbsfAUcAPvaH8f6QD3WZ0VI2FfBFgd5z76cM7VR3FAAgPrin39 OrBRz3/zjV68bGJLzyidEPtjP8h4AuZbl/TNYYyCk1raSnaxfbQKWXA7hf9VunyV 9R28S9oTCeQfj302mBY008zZQOJJy6Lp/zMGSAdIKVhKAiCIm+6oWfDh36iB2h/r 8U95sCVzkUVM3erdiTlx2GIaUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9gw55P 2pEKE5QdWmMN94TtYyWCMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjEyOC83QkYyM0FDNERERTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZO ZERzVklENG13aUJHLWlRSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASRbz6rSuM6v8zqOP+y2SdzgtXl+iwVY/jYlOxKTS+XgG081s1q1p9 CXl+4J0yHUcKgh9zLVbqnVJdK5lCQ68Se6yODQvJdzfocYucl8lMHQVnX03ZrsbT Obw1dYfiXW7SlXcH5co+yDH/yQezBsVj/IAprz4Wt76Hr9JT+IgTKRDf9ovvhOT8 PHHlzHadvEcC7OXlyxQ/U2bFJyJ563QI7P8feaf8ONJ6NuGYydZSl8HcDJ6s3CDk Byu28px9yq8MkWZ1aB5B+jjX0avbPfnLE1BmWQNFuiySawpICQ3mLdhaBJScb4eK JEki2vWBzQAUQh/A/83L5MI0gamMfsO7 -----END CERTIFICATE-----Generated at Sun Jun 29 15:35:20 2025 by rpki-client