$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json) Hash identifier: trVMf1U5X5OMohOKfyy7bziy7faYsGsBuJ4u4rhBJGU= Subject key identifier: C4:68:A0:6A:7D:F0:89:51:68:92:84:4E:D6:8F:31:4B:3B:8F:DE:15 Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft Manifest number: 0130 Signing time: Tue 01 Jul 2025 04:59:22 +0000 Manifest this update: Tue 01 Jul 2025 04:59:22 +0000 Manifest next update: Tue 08 Jul 2025 04:59:22 +0000 Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: rgnYGZUAdltbbSXlNXZiOdt0hG5SFfoCDbMYMlLUOXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Validity Not Before: Jul 1 04:59:22 2025 GMT Not After : Jul 8 04:59:22 2025 GMT Subject: CN=68636b2a-006e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:53:03:73:25:2c:7d:d3:15:de:9a:f3:ab:1a: fb:f4:03:41:c5:29:70:8a:3a:ee:f9:1a:f8:9e:55: d9:7e:1f:11:c3:d0:df:bf:41:e5:a2:6b:76:4f:8e: d6:f8:d1:d9:ac:c9:25:33:2b:62:78:7c:45:38:9d: b8:68:53:ac:a0:5b:63:bc:28:e1:f5:c4:9b:5e:0b: c9:3f:68:f8:70:da:86:aa:a5:5e:89:b1:9d:a5:75: e7:f9:97:f7:4e:a1:92:8f:8a:29:b1:46:8b:44:1c: eb:06:13:01:f6:68:0f:c1:cd:cb:3a:50:d7:ac:69: b5:c0:c2:d7:73:f9:39:a7:39:d7:01:a8:c2:11:83: 42:ac:3f:6d:b4:d5:d5:07:fd:b1:46:ee:69:c3:96: 30:1c:53:af:13:b6:e1:ad:72:98:23:f4:0e:f8:35: 4b:c0:56:8e:50:87:96:d0:11:3f:7e:27:30:0b:7d: 5a:15:13:cf:08:47:90:de:05:13:ac:34:8b:a2:9f: cb:52:ff:bc:78:14:7b:67:de:7d:b8:ce:87:b3:16: 08:5e:db:f1:48:9b:6a:7f:7f:52:a0:aa:5f:a8:50: a2:e0:3a:cd:7f:d7:dc:50:06:69:da:0a:47:32:c2: 2f:a4:fa:f0:9c:95:e9:c7:3a:4b:5b:46:db:8e:f1: 69:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:68:A0:6A:7D:F0:89:51:68:92:84:4E:D6:8F:31:4B:3B:8F:DE:15 X509v3 Authority Key Identifier: keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:28:75:fe:d0:37:2c:81:73:b7:2e:e2:e4:14:d4:85:53:3a: c8:00:3d:fe:db:4e:37:02:58:b4:e7:e4:95:64:8e:00:e6:3e: fc:ca:bd:bc:43:fc:c1:e2:7c:c2:d7:29:d2:fd:59:5c:18:3a: 14:70:59:c1:b8:d9:0e:b7:c1:25:2b:f6:82:7c:2e:d9:7c:bf: b6:99:88:a1:96:54:0f:67:2d:6b:1b:e1:de:b3:6d:3b:a5:ec: a6:53:ce:70:c4:ad:a5:7b:0a:67:51:c4:7e:10:01:bb:ae:a4: ba:1a:4c:33:65:44:95:f2:a5:4d:e1:06:ee:92:da:d5:3e:eb: 04:8f:1a:ba:29:9f:02:96:15:a6:79:59:bd:b2:ea:cb:92:5d: 33:17:d0:08:d2:fc:9a:a9:a8:75:d2:c7:58:b1:d8:0d:95:b7: 9c:25:bb:44:61:58:04:08:88:dc:f6:0e:37:e9:e3:60:36:d0: 5c:c1:28:a2:7c:04:bb:29:ce:64:2c:f3:88:6b:33:13:15:cb: 20:88:79:11:80:b0:a5:13:07:3e:a7:59:4a:2c:1a:a9:64:aa: 29:ad:89:8c:ba:4d:4e:82:32:2e:9c:ed:1f:a3:6a:14:a2:38: 85:6a:1a:95:3c:6c:b3:d4:c2:fd:55:e2:aa:6b:a5:73:7d:e7: 5d:84:11:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyRjAxMTAvBgNVBAUTKEVFRTlFMTBDMjkxRTU2QzgyRDc3MDcyMDEwQjBFNTgw MDgzRkU3MjkwHhcNMjUwNzAxMDQ1OTIyWhcNMjUwNzA4MDQ1OTIyWjAYMRYwFAYD VQQDEw02ODYzNmIyYS0wMDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01MDcyUsfdMV3przqxr79ANBxSlwijru+Rr4nlXZfh8Rw9Dfv0Hlomt2T47W +NHZrMklMytieHxFOJ24aFOsoFtjvCjh9cSbXgvJP2j4cNqGqqVeibGdpXXn+Zf3 TqGSj4opsUaLRBzrBhMB9mgPwc3LOlDXrGm1wMLXc/k5pznXAajCEYNCrD9ttNXV B/2xRu5pw5YwHFOvE7bhrXKYI/QO+DVLwFaOUIeW0BE/ficwC31aFRPPCEeQ3gUT rDSLop/LUv+8eBR7Z959uM6HsxYIXtvxSJtqf39SoKpfqFCi4DrNf9fcUAZp2gpH MsIvpPrwnJXpxzpLW0bbjvFp0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRooGp9 8IlRaJKETtaPMUs7j94VMB8GA1UdIwQYMBaAFO7p4QwpHlbILXcHIBCw5YAIP+cp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJGMC81QzU3RTVDMDgy ODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZzZ3Rkd2NnRUxEbGdBZ181 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bmhEQ2tlVnNndGR3Y2dFTERsZ0FnXzV5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJGMC81QzU3RTVDMDgyODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZz Z3Rkd2NnRUxEbGdBZ181eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnKHX+0DcsgXO3LuLkFNSFUzrIAD3+2043Ali05+SVZI4A5j78yr28 Q/zB4nzC1ynS/VlcGDoUcFnBuNkOt8ElK/aCfC7ZfL+2mYihllQPZy1rG+Hes207 peymU85wxK2lewpnUcR+EAG7rqS6GkwzZUSV8qVN4QbuktrVPusEjxq6KZ8ClhWm eVm9surLkl0zF9AI0vyaqah10sdYsdgNlbecJbtEYVgECIjc9g436eNgNtBcwSii fAS7Kc5kLPOIazMTFcsgiHkRgLClEwc+p1lKLBqpZKoprYmMuk1OgjIunO0fo2oU ojiFahqVPGyz1ML9VeKqa6VzfeddhBGm -----END CERTIFICATE-----Generated at Thu Jul 3 05:14:15 2025 by rpki-client