$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft File: _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json) Hash identifier: 36APrX0DusibUgHZoAm/HcPEwZbICjRGyFaR7zMz8Zs= Subject key identifier: 42:CF:1B:7C:A0:E9:4C:FE:D8:D3:8F:E0:9D:A4:BF:D7:2E:81:92:27 Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA Certificate issuer: /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft Manifest number: 052B Signing time: Mon 30 Jun 2025 23:58:59 +0000 Manifest this update: Mon 30 Jun 2025 23:58:58 +0000 Manifest next update: Mon 07 Jul 2025 23:58:58 +0000 Files and hashes: 1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: N5qUCD3BQFXs3OaZc2gdiFjoHNkK8jD3UTJsLh99ekc=) 2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: gNJTzz5gTRCi7TWu8OqobzQyrN+9OUDBMZ0c3PoKanY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Validity Not Before: Jun 30 23:58:58 2025 GMT Not After : Jul 7 23:58:58 2025 GMT Subject: CN=686324c2-cbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ce:21:75:21:6b:d2:e5:dc:c6:34:54:7d:8b: 4d:41:34:d9:d0:3a:40:6c:bc:f5:d9:1a:79:7f:18: de:46:ca:81:ac:58:2d:f9:19:50:09:d9:7f:35:6d: 6f:f3:0d:fc:e3:12:d5:4a:ca:78:75:f3:12:9d:11: 5a:fc:a6:ca:b5:e7:50:0d:3e:8c:49:45:b8:cc:53: ef:27:76:e2:67:24:af:aa:8b:59:aa:3c:57:21:19: bb:27:60:21:2d:59:77:88:52:1c:76:f9:ad:12:ec: 9c:02:78:fa:c2:4e:9f:09:e1:3c:e2:7d:65:c6:ef: 23:18:6a:4a:f3:97:c9:68:b3:53:66:1e:5e:3d:bc: 52:fc:4a:68:8a:12:4e:c3:64:47:85:3f:1d:6f:b8: 02:08:ed:52:f6:00:6b:be:fa:b9:04:aa:26:5f:0f: 8c:5a:21:20:ef:14:4f:94:99:d3:90:e8:d1:38:a7: 9f:70:77:bb:10:e8:d8:8b:90:6a:6d:34:4d:4f:df: 25:8f:46:5d:75:b4:a6:e4:58:9e:00:64:84:79:03: 4f:2e:21:c7:e4:21:40:a1:79:82:d5:88:fe:2c:61: a6:97:c5:04:06:1c:21:42:a5:38:10:b3:e5:b5:1c: 98:68:5d:d9:a6:37:97:52:e3:a2:01:ac:0f:be:cb: 1b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CF:1B:7C:A0:E9:4C:FE:D8:D3:8F:E0:9D:A4:BF:D7:2E:81:92:27 X509v3 Authority Key Identifier: keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0f:28:ac:44:c0:a9:96:2b:92:dd:6e:4d:75:33:c7:cf:5a: 47:57:9a:f3:70:0d:7d:f5:70:b5:42:74:33:59:14:9e:c8:4d: 10:53:f0:75:30:94:07:e3:38:75:79:aa:76:2a:4e:90:62:b1: f4:56:3a:32:76:bf:a6:3d:d0:55:98:05:9b:e0:48:a4:34:26: e9:53:c0:0a:a8:92:0d:bf:65:1c:82:6a:d9:e5:a0:28:d6:c9: 75:5a:44:d6:39:3e:30:54:3e:97:87:89:2e:8e:72:bc:52:69: 8c:e2:08:cb:6f:29:99:8d:d4:d6:57:bd:04:4f:e9:b2:6b:02: 7c:7a:6b:6f:d3:5b:e5:ce:27:94:22:0a:cf:36:9f:d1:65:8c: 02:52:fa:ea:54:2b:d7:ae:a3:80:1c:3d:38:53:fe:92:c1:c8: 5f:f9:0a:6a:96:b0:98:91:5f:39:d1:8a:8d:65:38:1a:dc:14: d5:6a:b2:88:0b:f6:a9:27:62:8b:41:9d:bc:4f:f5:9d:64:f4: 78:37:03:81:30:6b:03:ac:91:3e:c3:e8:23:ec:95:cd:ca:5a: b2:8f:bd:dd:cb:12:45:1b:13:e7:99:db:2b:d8:f9:94:2d:16: fc:c8:1f:df:53:00:a4:9e:3e:b1:00:27:fb:f7:1b:27:6a:ca: 20:69:67:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEzRDAxMTAvBgNVBAUTKEZDODBCNDlCNTA3MzMyRkQ0QzlDOTJERDVFMjdBMkRG Q0E4MDY0REEwHhcNMjUwNjMwMjM1ODU4WhcNMjUwNzA3MjM1ODU4WjAYMRYwFAYD VQQDEw02ODYzMjRjMi1jYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5s4hdSFr0uXcxjRUfYtNQTTZ0DpAbLz12Rp5fxjeRsqBrFgt+RlQCdl/NW1v 8w384xLVSsp4dfMSnRFa/KbKtedQDT6MSUW4zFPvJ3biZySvqotZqjxXIRm7J2Ah LVl3iFIcdvmtEuycAnj6wk6fCeE84n1lxu8jGGpK85fJaLNTZh5ePbxS/EpoihJO w2RHhT8db7gCCO1S9gBrvvq5BKomXw+MWiEg7xRPlJnTkOjROKefcHe7EOjYi5Bq bTRNT98lj0ZddbSm5FieAGSEeQNPLiHH5CFAoXmC1Yj+LGGml8UEBhwhQqU4ELPl tRyYaF3ZpjeXUuOiAawPvssboQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELPG3yg 6Uz+2NOP4J2kv9cugZInMB8GA1UdIwQYMBaAFPyAtJtQczL9TJyS3V4not/KgGTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTNEMC9EN0E0QkI1NjA0 QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12MU1uSkxkWGllaTM4cUFa Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JQzBtMUJ6TXYxTW5KTGRYaWVpMzhxQVpOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTNEMC9EN0E0QkI1NjA0QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12 MU1uSkxkWGllaTM4cUFaTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3DyisRMCpliuS3W5NdTPHz1pHV5rzcA199XC1QnQzWRSeyE0QU/B1 MJQH4zh1eap2Kk6QYrH0Vjoydr+mPdBVmAWb4EikNCbpU8AKqJINv2UcgmrZ5aAo 1sl1WkTWOT4wVD6Xh4kujnK8UmmM4gjLbymZjdTWV70ET+myawJ8emtv01vlzieU IgrPNp/RZYwCUvrqVCvXrqOAHD04U/6Swchf+QpqlrCYkV850YqNZTga3BTVarKI C/apJ2KLQZ28T/WdZPR4NwOBMGsDrJE+w+gj7JXNylqyj73dyxJFGxPnmdsr2PmU LRb8yB/fUwCknj6xACf79xsnasogaWdo -----END CERTIFICATE-----Generated at Wed Jul 2 13:02:31 2025 by rpki-client