$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: BtkycK5c39z253PQwAobIar1oeMSIv0IoZOXuxyXP3U= Subject key identifier: 57:35:A4:FD:6A:A1:DA:B1:5B:8E:C8:F8:E1:6A:30:38:FC:BB:A6:DB Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 047F Signing time: Tue 01 Jul 2025 00:39:59 +0000 Manifest this update: Tue 01 Jul 2025 00:39:58 +0000 Manifest next update: Tue 08 Jul 2025 00:39:58 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: b/Fzx9+KoXg7XRgpqnD7XzDPOnn01iNEb2k3AS6XOfw=) 2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: 4GFmq+y/6BnQNNwGjl1gbuy3YynLJ9fv1uZb3cM+3cw=) 3: 4BA245C01F3711F0BFC63D0BC4F9AE02.roa (hash: S6UWCaduxR+lbz98yPRDyqlqJNdrgD9va4Ql8ns2n7I=) 4: 8120226CBEE111ECBFC4F882C4F9AE02.roa (hash: X8UbCCq9WNbgn+zBad8J0ZOiCGTAAafiKf0ffwPz0jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Jul 1 00:39:58 2025 GMT Not After : Jul 8 00:39:58 2025 GMT Subject: CN=68632e5e-550b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:33:af:83:b1:4f:4f:f1:81:0a:97:87:12:c2: e8:fe:89:ba:b6:07:c2:1b:97:ae:84:fa:f9:a7:d8: 41:aa:30:11:70:de:70:0c:c7:48:ef:05:26:75:f3: cd:a9:16:ec:8d:f8:0d:d9:af:32:8e:4e:99:ed:c5: b9:96:c9:61:0f:2a:c4:18:25:b7:6a:ae:83:ed:f0: de:62:c4:34:69:0e:6b:86:76:57:ee:a3:88:d3:ee: 53:9c:58:a0:df:3e:68:7b:75:ae:31:e8:8b:7d:8d: f8:18:10:81:39:4e:7d:9d:61:8a:d8:32:5c:40:3f: 58:6a:b4:81:e4:3b:c2:d2:50:5b:10:01:38:58:34: a2:b1:8f:e5:43:3e:d4:d3:88:ca:68:66:68:b0:ad: fb:d4:61:08:82:7e:20:d9:25:f3:c9:32:d5:71:84: db:80:53:0c:63:ca:5f:51:48:d3:b4:16:57:fa:42: 3f:63:ef:16:1d:b6:6d:82:e0:41:d7:ad:78:0b:7a: a1:8b:f4:53:60:4f:cb:69:70:de:8a:f2:9c:95:55: 72:c9:95:e6:78:2f:02:b5:57:22:05:95:89:d7:23: 92:53:33:7e:c1:ea:f6:52:19:20:92:9b:a6:72:3d: 31:fc:1b:c1:57:bf:e8:b1:cf:fb:ad:1b:86:d2:5f: 08:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:35:A4:FD:6A:A1:DA:B1:5B:8E:C8:F8:E1:6A:30:38:FC:BB:A6:DB X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:62:44:91:0c:20:0f:31:78:51:ab:69:d9:b9:47:93:12:22: 5d:6b:f3:20:ef:59:54:9d:23:92:24:d9:cf:17:26:68:88:2c: 99:ed:4d:b2:9f:4f:72:7f:52:cd:5f:ba:31:b4:67:f9:01:ec: ac:60:91:4e:1b:ac:72:14:bc:66:84:81:11:17:06:b1:dd:24: dc:bb:1d:80:16:5e:c3:d7:5e:e8:ce:b9:4f:2e:60:8a:1d:e2: dd:30:c4:c8:ed:d9:2f:a6:e8:38:74:f8:76:54:52:40:db:10: f0:30:4b:c3:90:79:15:31:dc:18:35:1c:64:d0:d8:2d:c4:f8: 55:bd:ec:7b:32:35:20:ca:7b:93:b1:8d:d8:32:da:8a:8d:4b: cf:c6:de:30:07:de:c9:99:ee:5c:76:9a:e3:40:b8:85:bc:cb: cf:4a:4b:48:e6:5e:8e:ae:17:fb:b9:16:08:69:86:67:b5:c8: 01:62:2e:e4:d1:eb:db:70:c3:57:d1:e4:15:b7:3a:22:23:bf: d7:94:c0:7d:25:aa:d2:2a:9b:2d:2f:53:56:16:4f:f6:80:54: 14:fa:e0:a9:6b:ca:ea:96:14:6a:a0:fc:74:80:97:6a:86:21: 73:4d:ae:e2:e9:8c:0c:94:2d:ec:d0:65:4f:1d:a0:1a:52:8a: e9:8b:1e:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjUwNzAxMDAzOTU4WhcNMjUwNzA4MDAzOTU4WjAYMRYwFAYD VQQDEw02ODYzMmU1ZS01NTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zOvg7FPT/GBCpeHEsLo/om6tgfCG5euhPr5p9hBqjARcN5wDMdI7wUmdfPN qRbsjfgN2a8yjk6Z7cW5lslhDyrEGCW3aq6D7fDeYsQ0aQ5rhnZX7qOI0+5TnFig 3z5oe3WuMeiLfY34GBCBOU59nWGK2DJcQD9YarSB5DvC0lBbEAE4WDSisY/lQz7U 04jKaGZosK371GEIgn4g2SXzyTLVcYTbgFMMY8pfUUjTtBZX+kI/Y+8WHbZtguBB 1614C3qhi/RTYE/LaXDeivKclVVyyZXmeC8CtVciBZWJ1yOSUzN+wer2Uhkgkpum cj0x/BvBV7/osc/7rRuG0l8IswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFc1pP1q odqxW47I+OFqMDj8u6bbMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTYkSRDCAPMXhRq2nZuUeTEiJda/Mg71lUnSOSJNnPFyZoiCyZ7U2y n09yf1LNX7oxtGf5AeysYJFOG6xyFLxmhIERFwax3STcux2AFl7D117ozrlPLmCK HeLdMMTI7dkvpug4dPh2VFJA2xDwMEvDkHkVMdwYNRxk0NgtxPhVvex7MjUgynuT sY3YMtqKjUvPxt4wB97Jme5cdprjQLiFvMvPSktI5l6Orhf7uRYIaYZntcgBYi7k 0evbcMNX0eQVtzoiI7/XlMB9JarSKpstL1NWFk/2gFQU+uCpa8rqlhRqoPx0gJdq hiFzTa7i6YwMlC3s0GVPHaAaUorpix61 -----END CERTIFICATE-----Generated at Thu Jul 3 00:34:47 2025 by rpki-client