$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json) Hash identifier: xufGIUXNiNUuDFA6vmvzHsPnq5Y8Xi+299hopExx1hQ= Subject key identifier: FD:50:76:52:5E:C0:EF:1A:5A:2B:F6:D3:AD:BF:59:88:02:40:4E:B4 Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Certificate serial: 03A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft Manifest number: 03A1 Signing time: Tue 01 Jul 2025 01:23:34 +0000 Manifest this update: Tue 01 Jul 2025 01:23:34 +0000 Manifest next update: Tue 08 Jul 2025 01:23:34 +0000 Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: pUf4tbBstpTdKEf4ZDnG8EIfWgFKXp+kv4lWWItCskU=) 2: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: wCf4g6o5WScb6RGG49PPoBi+hb01eShp6RghG0g0MJ8=) 3: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: gNV6yCoYOHvCUxwy2Tl0FTscxDv6xhq7lZUCCqRtA/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Validity Not Before: Jul 1 01:23:34 2025 GMT Not After : Jul 8 01:23:34 2025 GMT Subject: CN=68633896-a062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:28:3e:2e:ba:f1:c2:6c:ac:dc:9f:0b:15: f5:22:c4:da:15:56:55:e8:f0:01:f7:4a:0c:e1:db: 35:16:29:8a:04:0d:ff:5a:0c:1c:58:ed:35:91:84: 2c:46:a0:72:98:cf:3c:5a:f9:c7:68:bd:9f:d8:12: dd:3d:4e:73:84:3b:0f:cc:9a:31:e6:a5:bb:21:ba: be:89:6a:68:b6:85:30:8f:41:2d:fa:14:e6:5a:13: 06:e5:be:4c:cc:04:4d:06:62:d9:5c:70:c6:09:c3: c9:3e:1a:77:6a:60:d3:a4:04:ce:bb:2a:ed:33:4c: f7:81:e4:c5:ce:bc:c8:67:45:fa:88:44:d6:7c:78: a7:04:09:27:ef:34:28:d3:8d:e4:7d:bc:6e:13:47: 47:d2:ab:3e:42:da:e9:af:3a:51:8e:76:c7:db:04: 50:b7:87:11:9f:84:62:f6:d6:7c:a4:19:72:3b:49: 2d:f7:63:f8:de:c1:ce:17:cb:9d:7d:54:17:d3:9a: bc:80:9f:96:af:57:a3:08:bb:19:95:29:d2:ed:1a: f4:72:35:01:ab:a7:ea:1a:f0:a7:91:87:a7:68:a3: 37:96:6d:e7:96:3a:87:7c:ab:b4:64:5b:22:76:1c: 16:a3:51:fe:a2:90:6e:fa:94:0a:31:4c:ef:52:60: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:50:76:52:5E:C0:EF:1A:5A:2B:F6:D3:AD:BF:59:88:02:40:4E:B4 X509v3 Authority Key Identifier: keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fb:27:bc:0c:49:3e:c3:80:ca:a3:69:a6:1d:da:42:18:90: ed:36:b9:2e:b6:e3:f2:1a:1e:64:4a:2d:84:59:88:2e:cc:81: ed:84:08:c8:5f:55:37:b6:5f:49:ee:11:2a:a3:fb:22:81:9e: 3f:06:25:27:6b:0b:6c:b7:aa:ba:c7:54:b3:99:e6:be:d7:e8: 62:4e:1b:a7:81:68:48:24:3f:80:08:34:08:aa:9c:31:d0:3b: 8d:94:a6:c3:4b:5e:c9:0a:41:de:de:c5:df:36:53:74:87:7d: d6:ce:96:76:51:85:52:be:ac:7e:40:58:8b:43:f8:8b:32:e2: d5:3e:70:06:27:74:04:3e:e6:d1:47:b6:e1:c2:57:b8:03:b3: 1a:44:91:aa:4c:bc:ab:0d:55:f5:88:2b:6b:ae:fc:9f:ef:60: 01:86:48:a3:35:9f:17:e2:5b:bf:ee:9a:ec:b7:c7:87:1e:cf: e2:25:a0:fd:ee:d8:1e:3f:dc:4a:d2:48:a3:20:1b:11:9b:23: 60:f0:d5:a3:83:d9:9a:26:1f:69:b5:23:ab:79:ae:34:bd:78: 1c:a2:84:41:f0:8b:57:44:ec:20:f1:d9:ad:1d:2e:16:56:1e: 91:7d:09:32:5d:84:fd:c4:97:73:02:5d:24:30:23:df:11:d1: e4:66:52:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD MDQ1RjBDMjcwHhcNMjUwNzAxMDEyMzM0WhcNMjUwNzA4MDEyMzM0WjAYMRYwFAYD VQQDEw02ODYzMzg5Ni1hMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMIoPi668cJsrNyfCxX1IsTaFVZV6PAB90oM4ds1FimKBA3/WgwcWO01kYQs RqBymM88WvnHaL2f2BLdPU5zhDsPzJox5qW7Ibq+iWpotoUwj0Et+hTmWhMG5b5M zARNBmLZXHDGCcPJPhp3amDTpATOuyrtM0z3geTFzrzIZ0X6iETWfHinBAkn7zQo 043kfbxuE0dH0qs+QtrprzpRjnbH2wRQt4cRn4Ri9tZ8pBlyO0kt92P43sHOF8ud fVQX05q8gJ+Wr1ejCLsZlSnS7Rr0cjUBq6fqGvCnkYenaKM3lm3nljqHfKu0ZFsi dhwWo1H+opBu+pQKMUzvUmCIMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1QdlJe wO8aWiv2062/WYgCQE60MB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRGQi85RkNBQURGRUEwNTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0 RzNTNm5XWmlKT2JBUmZEQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB+ye8DEk+w4DKo2mmHdpCGJDtNrkutuPyGh5kSi2EWYguzIHthAjI X1U3tl9J7hEqo/sigZ4/BiUnawtst6q6x1Szmea+1+hiThungWhIJD+ACDQIqpwx 0DuNlKbDS17JCkHe3sXfNlN0h33WzpZ2UYVSvqx+QFiLQ/iLMuLVPnAGJ3QEPubR R7bhwle4A7MaRJGqTLyrDVX1iCtrrvyf72ABhkijNZ8X4lu/7prst8eHHs/iJaD9 7tgeP9xK0kijIBsRmyNg8NWjg9maJh9ptSOrea40vXgcooRB8ItXROwg8dmtHS4W Vh6RfQkyXYT9xJdzAl0kMCPfEdHkZlLu -----END CERTIFICATE-----Generated at Tue Jul 1 20:00:24 2025 by rpki-client