$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: Qb9wQIdafYdBfzSieBF/Lvs134bJVJeqF80RWvEbWPM= Subject key identifier: A2:03:BE:2F:A5:BA:B8:45:B9:B5:01:02:C3:F3:A6:C9:55:BC:58:01 Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 0334 Signing time: Tue 01 Jul 2025 01:43:29 +0000 Manifest this update: Tue 01 Jul 2025 01:43:28 +0000 Manifest next update: Tue 08 Jul 2025 01:43:28 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: rUgN9KoXk2E0OIuSFL7ZuKv4XMp5uUIKh++BkHglhV0=) 2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: 2IeO54Cp6b06u4xrChfhugqf5OR3NU+qoLsUiOOPr8M=) 3: EA2C5116450411F09738105FC4F9AE02.roa (hash: 0H8uTaAET7rYfmwW59sMExSp1d2DpP8EDTDlEPR8DwE=) 4: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: f/9vGnn2JXmJ21/jrMMvJ7DpIN0BPneJ38/5WfHmbrI=) 5: EB1C709C450411F09738105FC4F9AE02.roa (hash: 5Akf+XvDFAFRcgqDmZfvL05MyX7m6MLBdyxxtSO7LLs=) 6: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: i3ADmyA4WgLpGdAmHRBQc8Kk5ppJaulRCigFr15Uv0k=) 7: EAAF7884450411F09738105FC4F9AE02.roa (hash: uXBgt0+68c6MR0Uj3/R5shZKZVN6Oztge9QmtwR6l0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: Jul 1 01:43:28 2025 GMT Not After : Jul 8 01:43:28 2025 GMT Subject: CN=68633d41-2054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:1e:d1:c6:eb:94:ec:73:06:8c:fe:52:6f: 54:ed:b3:60:8b:2c:a1:56:19:7e:c6:db:75:a3:8c: 81:af:da:04:ba:27:1a:8d:14:56:83:39:24:d2:e2: 3c:a6:8f:6a:9c:c1:37:67:fe:e1:58:62:65:c1:58: cb:37:db:13:a9:8b:41:76:54:c4:b3:7d:1d:9c:3d: 1d:4d:d3:37:0b:82:df:f4:1b:fa:75:0a:81:75:9d: 41:eb:e0:80:23:86:d3:6c:66:0b:57:a0:ed:47:30: 36:ae:a9:28:99:a4:e1:e4:af:29:5f:e3:f4:27:87: 1e:6f:d5:88:b1:35:51:86:56:3a:7b:48:4e:db:cf: 40:02:e0:4d:e8:12:cc:41:1e:7a:55:0b:7e:10:8b: b0:e6:04:df:88:de:ed:6b:cd:7f:21:45:b7:5b:80: d2:d1:0a:11:f9:da:f7:dc:43:59:04:df:cf:c9:85: d1:90:72:fe:20:c3:b6:93:0a:50:81:e5:ff:b5:31: 3f:9a:ca:81:f1:c4:ce:34:5d:db:60:46:98:38:24: 25:de:09:ca:11:c3:9e:23:18:28:87:d1:cf:34:e0: 13:f2:4b:a5:11:79:a7:03:04:3e:d5:99:2d:a5:1b: f6:9d:4c:82:96:89:ed:bc:ed:c0:72:4f:73:6f:ad: 58:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:03:BE:2F:A5:BA:B8:45:B9:B5:01:02:C3:F3:A6:C9:55:BC:58:01 X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f0:3c:ea:a8:2a:be:13:a3:12:07:5a:37:ab:39:70:f6:3a:49: eb:ef:ef:2a:07:30:09:cf:fa:a2:43:5f:c0:47:f3:56:23:8e: f0:0d:22:78:4a:3a:b0:36:ea:48:21:e6:52:a8:6f:c6:b7:9a: 0c:63:f6:06:f1:51:c3:00:db:e8:83:fc:22:1f:70:95:79:c1: 93:3a:ab:3f:76:f1:46:0d:63:b2:bc:a1:23:a2:6c:df:84:39: 45:32:8d:d6:4a:69:9b:48:22:a3:36:c7:ae:23:38:7b:cf:da: 0f:03:3a:1d:1e:4b:a1:13:5c:f8:43:3e:7a:0f:49:d4:76:aa: aa:b1:e6:ae:c5:84:44:8b:2e:a9:ac:bb:e3:99:0a:69:06:07: e3:a0:d9:a7:6d:03:b1:69:2c:c2:1d:72:ec:2b:22:06:d5:6d: 84:dc:6f:de:10:36:4e:a0:18:26:9e:bf:f5:9d:7c:3b:cc:df: 57:6b:96:ff:32:90:26:f2:d5:10:06:c2:53:70:9d:0c:96:27: 88:ed:42:a1:e4:1f:d8:7f:45:37:a3:aa:44:77:f8:57:b0:f9: a0:6c:ef:47:87:98:8f:f0:2e:23:6b:e6:9d:d9:d2:3a:56:bd: 77:63:56:a4:ed:bd:06:60:72:e3:ae:db:99:a5:60:84:49:74: c9:6b:5b:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjUwNzAxMDE0MzI4WhcNMjUwNzA4MDE0MzI4WjAYMRYwFAYD VQQDEw02ODYzM2Q0MS0yMDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweoe0cbrlOxzBoz+Um9U7bNgiyyhVhl+xtt1o4yBr9oEuicajRRWgzkk0uI8 po9qnME3Z/7hWGJlwVjLN9sTqYtBdlTEs30dnD0dTdM3C4Lf9Bv6dQqBdZ1B6+CA I4bTbGYLV6DtRzA2rqkomaTh5K8pX+P0J4ceb9WIsTVRhlY6e0hO289AAuBN6BLM QR56VQt+EIuw5gTfiN7ta81/IUW3W4DS0QoR+dr33ENZBN/PyYXRkHL+IMO2kwpQ geX/tTE/msqB8cTONF3bYEaYOCQl3gnKEcOeIxgoh9HPNOAT8kulEXmnAwQ+1Zkt pRv2nUyClontvO3Ack9zb61YnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIDvi+l urhFubUBAsPzpslVvFgBMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDwPOqoKr4ToxIHWjerOXD2Oknr7+8qBzAJz/qiQ1/AR/NWI47wDSJ4 SjqwNupIIeZSqG/Gt5oMY/YG8VHDANvog/wiH3CVecGTOqs/dvFGDWOyvKEjomzf hDlFMo3WSmmbSCKjNseuIzh7z9oPAzodHkuhE1z4Qz56D0nUdqqqseauxYREiy6p rLvjmQppBgfjoNmnbQOxaSzCHXLsKyIG1W2E3G/eEDZOoBgmnr/1nXw7zN9Xa5b/ MpAm8tUQBsJTcJ0MlieI7UKh5B/Yf0U3o6pEd/hXsPmgbO9Hh5iP8C4ja+ad2dI6 Vr13Y1ak7b0GYHLjrtuZpWCESXTJa1tu -----END CERTIFICATE-----Generated at Wed Jul 2 19:36:40 2025 by rpki-client