$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: Ecm5FoWTEdcYNspWiUIxQqkDyIw+/cwhUIx6VnchzQY= Subject key identifier: FE:FD:AC:69:FD:39:A6:35:90:14:D5:D2:F0:8A:8C:D6:DC:06:16:3B Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0E63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0E5E Signing time: Wed 02 Jul 2025 17:56:52 +0000 Manifest this update: Wed 02 Jul 2025 17:56:51 +0000 Manifest next update: Wed 09 Jul 2025 17:56:51 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: 2BxOll8YGUTTDPYZaI0CaW/4GN3adDguewqN78fM+KY=) 2: 350711FA881211EE9710F928C4F9AE02.roa (hash: /AJd6poS8Ng5rehLy7t+jOBIXVOshJArXBaFYmXY69Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3683 (0xe63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Jul 2 17:56:51 2025 GMT Not After : Jul 9 17:56:51 2025 GMT Subject: CN=686572e4-4a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:77:b9:5b:4c:5f:39:5d:95:f8:64:72:9a: 83:40:33:6b:63:54:4c:33:3c:d9:0f:d4:7c:37:e9: d2:ac:38:d5:63:17:d6:73:cd:7b:97:94:12:66:87: 3b:25:4b:0e:5c:21:29:aa:eb:be:cf:96:c3:1a:1a: f9:8d:70:5a:0d:b9:7b:eb:23:26:38:82:4d:4a:04: 84:2e:c3:b2:e8:80:1a:b3:b2:6e:9f:ae:19:65:cf: 36:1e:47:95:ad:10:4f:35:f1:7c:97:af:27:9e:2a: 8e:8c:2c:f2:45:7a:26:fc:d2:cf:c1:c9:07:4c:54: 33:f1:f3:3f:ae:bf:3f:aa:66:1a:84:41:11:9d:8f: 2a:9d:48:22:85:69:e8:81:fd:c0:3a:38:dd:81:ab: a5:5c:05:03:77:b0:d3:88:c8:c4:7f:d9:2e:66:51: 5d:c6:71:c8:b4:20:d4:94:bd:5c:f8:f9:ef:50:67: 08:e2:f7:9e:ea:08:63:59:95:2e:89:78:27:21:90: cb:7c:66:cf:ba:39:73:08:4a:13:4d:64:f3:c9:6b: 04:f3:3d:88:a1:9a:b6:90:a4:3e:fb:b5:a6:dd:5a: 3b:df:ca:89:04:11:55:93:92:b8:6f:66:0a:d5:a3: 9a:66:29:21:14:6e:f1:b0:74:57:3f:30:59:41:a0: 78:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FD:AC:69:FD:39:A6:35:90:14:D5:D2:F0:8A:8C:D6:DC:06:16:3B X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:6e:b8:17:dc:2e:71:e4:ee:72:c8:6c:70:0d:0b:ed:fe:6d: ea:b5:a7:ea:4a:86:10:52:57:ad:c4:3a:56:7b:48:cf:5b:c6: 58:bd:17:88:a0:f4:5b:4b:ba:dc:ba:d0:bd:a5:0c:f8:9d:2f: 33:68:48:b2:d2:1e:dd:05:df:e4:c7:fa:05:8f:0b:70:48:a4: bc:4b:9f:ca:ba:fd:42:db:60:dc:0c:7c:20:97:d5:f8:59:3f: ed:7c:99:9a:96:42:a3:55:33:1d:44:f5:b5:b5:a3:00:7e:8a: e7:1a:d9:91:7c:28:02:52:01:e3:c1:6f:dd:18:15:cd:18:78: b2:8d:eb:f8:2a:fb:5b:fc:92:70:98:b5:a7:71:38:52:5f:d7: 96:3d:08:37:e2:f8:07:b6:68:fe:96:38:03:dd:01:15:e3:98: 91:b2:82:3b:01:7f:37:a3:33:2b:4e:1b:8f:0d:a3:b4:14:9d: 5e:0c:3a:db:0b:88:42:69:83:d9:c1:1b:32:63:df:35:76:86: 1d:d3:2f:cc:f4:d6:d0:a5:99:d7:87:06:fd:f1:79:1a:f3:b9: ce:9c:b6:31:36:be:d6:42:ab:87:10:32:de:7b:5e:01:09:b8: 0b:fd:0e:dc:65:d8:da:2c:14:ba:8c:dd:dc:7d:2b:c0:36:cf: 33:20:e3:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjUwNzAyMTc1NjUxWhcNMjUwNzA5MTc1NjUxWjAYMRYwFAYD VQQDEw02ODY1NzJlNC00YTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4d3uVtMXzldlfhkcpqDQDNrY1RMMzzZD9R8N+nSrDjVYxfWc817l5QSZoc7 JUsOXCEpquu+z5bDGhr5jXBaDbl76yMmOIJNSgSELsOy6IAas7Jun64ZZc82HkeV rRBPNfF8l68nniqOjCzyRXom/NLPwckHTFQz8fM/rr8/qmYahEERnY8qnUgihWno gf3AOjjdgaulXAUDd7DTiMjEf9kuZlFdxnHItCDUlL1c+PnvUGcI4vee6ghjWZUu iXgnIZDLfGbPujlzCEoTTWTzyWsE8z2IoZq2kKQ++7Wm3Vo738qJBBFVk5K4b2YK 1aOaZikhFG7xsHRXPzBZQaB4ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP79rGn9 OaY1kBTV0vCKjNbcBhY7MB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChbrgX3C5x5O5yyGxwDQvt/m3qtafqSoYQUletxDpWe0jPW8ZYvReI oPRbS7rcutC9pQz4nS8zaEiy0h7dBd/kx/oFjwtwSKS8S5/Kuv1C22DcDHwgl9X4 WT/tfJmalkKjVTMdRPW1taMAfornGtmRfCgCUgHjwW/dGBXNGHiyjev4Kvtb/JJw mLWncThSX9eWPQg34vgHtmj+ljgD3QEV45iRsoI7AX83ozMrThuPDaO0FJ1eDDrb C4hCaYPZwRsyY981doYd0y/M9NbQpZnXhwb98Xka87nOnLYxNr7WQquHEDLee14B CbgL/Q7cZdjaLBS6jN3cfSvANs8zIONt -----END CERTIFICATE-----Generated at Thu Jul 3 11:53:12 2025 by rpki-client