$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft File: 1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json) Hash identifier: neE1mlpKLNY+uXcoB/N17Gh4BEzwtkNAyoFPCbW9oxU= Subject key identifier: EA:55:BE:A4:95:1E:2C:61:6D:E4:40:64:78:1C:F5:E4:B6:18:E6:98 Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12 Certificate issuer: /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft Manifest number: 0163 Signing time: Thu 03 Jul 2025 04:02:22 +0000 Manifest this update: Thu 03 Jul 2025 04:02:21 +0000 Manifest next update: Thu 10 Jul 2025 04:02:21 +0000 Files and hashes: 1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: +elVfIaQU4OksiZdxK3wVDzmwLrzOZZ4t9N7KfuQFj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0A98, serialNumber=D61D782482E2548D225D1BC888836393DEE39812 Validity Not Before: Jul 3 04:02:21 2025 GMT Not After : Jul 10 04:02:21 2025 GMT Subject: CN=686600ce-070a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:9d:c3:ac:e4:20:1e:4d:98:fe:fd:ca:d6: 31:fc:6b:d2:81:8b:cd:e0:f8:1d:9c:d5:92:e2:d4: 41:a3:39:fe:82:08:66:d1:84:c6:da:06:05:4d:c9: 96:c1:6e:70:a7:97:41:0a:c2:22:35:77:f4:f0:61: fd:72:e3:b0:58:63:0a:63:ed:3c:33:6c:d2:17:35: 6d:4e:cc:63:59:5f:8f:34:f2:32:f2:b2:ff:dc:a6: 41:ae:45:b6:aa:88:34:97:11:42:e9:e0:c9:0b:22: ba:b7:62:b6:7b:4a:09:bd:37:e2:cb:d9:c4:48:f4: 9b:72:f7:aa:5c:c5:7d:1d:71:3b:5b:19:27:80:c5: 55:3c:e6:6b:91:35:82:a3:7b:cf:3c:24:74:b9:f3: 0f:e4:98:b0:01:c2:29:55:11:2e:fa:54:e5:c3:e8: 09:5f:d8:3b:b4:8d:04:bd:e9:6d:cb:92:4f:94:ab: b7:c6:77:c7:28:ea:4f:1c:f6:6b:7c:cc:61:a0:2d: a5:e0:07:e9:da:6c:63:a2:ed:4a:df:88:1e:bd:d4: e1:3a:8d:97:bb:25:06:86:fd:55:10:a9:5e:74:fb: e2:d4:99:22:de:5d:e9:05:da:63:59:e5:3f:84:f1: f5:1c:bc:8f:34:ea:6a:aa:21:b6:b3:13:37:3b:d5: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:55:BE:A4:95:1E:2C:61:6D:E4:40:64:78:1C:F5:E4:B6:18:E6:98 X509v3 Authority Key Identifier: keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:13:50:33:94:12:0c:a3:cf:46:ae:8f:94:7e:f3:ee:78:5f: 21:ed:bc:8c:7f:9d:75:2b:9a:51:af:fb:ca:f1:f4:1a:74:01: 1b:74:92:da:fb:1b:2a:8c:83:48:65:e7:b5:ad:9e:25:2d:08: 41:6f:1c:11:27:2f:70:71:ba:05:6a:f7:9b:be:5e:44:f1:83: 06:cc:76:6e:91:6c:45:2e:ae:d8:6e:cf:b6:ca:a9:03:54:71: fc:fc:1e:8d:f4:d7:0a:78:fe:bc:b6:21:28:ba:ca:a6:79:e5: a8:41:c7:7b:9f:a7:d1:3e:70:7a:3e:b6:8b:ee:2a:ca:45:dd: 94:36:47:70:8e:f0:d5:66:94:61:38:b0:24:2b:06:f6:45:33: cd:c5:8a:4d:58:0e:8b:b7:5e:eb:32:1c:52:cc:2a:a2:4e:5f: b6:c4:aa:41:1b:d8:21:33:2b:52:cb:1c:e7:6c:00:fe:7f:f4: 32:6d:03:64:c5:a3:b1:61:d1:ba:b8:83:bd:6b:f4:68:f7:eb: 6e:46:8c:3c:7c:67:91:91:50:55:8e:71:7a:3e:bb:74:4a:5c: b5:ef:a3:2d:36:bc:b5:63:d9:07:26:93:fc:8e:57:5c:d4:d1: bb:6c:5a:cd:5e:98:6b:76:71:9d:f3:e7:76:16:c8:c3:7e:c3: 7a:83:61:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBBOTgxMTAvBgNVBAUTKEQ2MUQ3ODI0ODJFMjU0OEQyMjVEMUJDODg4ODM2Mzkz REVFMzk4MTIwHhcNMjUwNzAzMDQwMjIxWhcNMjUwNzEwMDQwMjIxWjAYMRYwFAYD VQQDEw02ODY2MDBjZS0wNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArW+dw6zkIB5NmP79ytYx/GvSgYvN4PgdnNWS4tRBozn+gghm0YTG2gYFTcmW wW5wp5dBCsIiNXf08GH9cuOwWGMKY+08M2zSFzVtTsxjWV+PNPIy8rL/3KZBrkW2 qog0lxFC6eDJCyK6t2K2e0oJvTfiy9nESPSbcveqXMV9HXE7WxkngMVVPOZrkTWC o3vPPCR0ufMP5JiwAcIpVREu+lTlw+gJX9g7tI0Evelty5JPlKu3xnfHKOpPHPZr fMxhoC2l4Afp2mxjou1K34gevdThOo2XuyUGhv1VEKledPvi1Jki3l3pBdpjWeU/ hPH1HLyPNOpqqiG2sxM3O9Vl9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpVvqSV HixhbeRAZHgc9eS2GOaYMB8GA1UdIwQYMBaAFNYdeCSC4lSNIl0byIiDY5Pe45gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEE5OC84RjQ4NjRFQTM1 RTAxMUVFODdDMkE2NzBDNEY5QUUwMi8xaDE0SklMaVZJMGlYUnZJaUlOams5N2pt QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoMTRKSUxpVkkwaVhSdklpSU5qazk3am1CSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEE5OC84RjQ4NjRFQTM1RTAxMUVFODdDMkE2NzBDNEY5QUUwMi8xaDE0SklMaVZJ MGlYUnZJaUlOams5N2ptQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2E1AzlBIMo89Gro+UfvPueF8h7byMf511K5pRr/vK8fQadAEbdJLa +xsqjINIZee1rZ4lLQhBbxwRJy9wcboFavebvl5E8YMGzHZukWxFLq7Ybs+2yqkD VHH8/B6N9NcKeP68tiEousqmeeWoQcd7n6fRPnB6PraL7irKRd2UNkdwjvDVZpRh OLAkKwb2RTPNxYpNWA6Lt17rMhxSzCqiTl+2xKpBG9ghMytSyxznbAD+f/QybQNk xaOxYdG6uIO9a/Ro9+tuRow8fGeRkVBVjnF6Prt0Sly176MtNry1Y9kHJpP8jldc 1NG7bFrNXphrdnGd8+d2FsjDfsN6g2EQ -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:02 2025 by rpki-client