$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: EstD+3i8XCxptNyby7dcAUThMSA2jfVtoYQ6t8hBL4I= Subject key identifier: FA:33:A1:52:C7:21:D4:73:BD:A3:D2:40:EF:2F:FA:B8:89:6B:BC:28 Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 040C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 03FF Signing time: Thu 03 Jul 2025 00:47:43 +0000 Manifest this update: Thu 03 Jul 2025 00:47:43 +0000 Manifest next update: Thu 10 Jul 2025 00:47:43 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: 0tFqmdBnhM+Vxlr9MCNbXbdVww/qru4U1MJlHyVso6g=) 2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: OnZeTeaYB5z7AJuz8oi6jGvWEckKykDi+qBUmv+U0QM=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1036 (0x40c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Jul 3 00:47:43 2025 GMT Not After : Jul 10 00:47:43 2025 GMT Subject: CN=6865d32f-e5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:60:4b:5f:47:30:c9:9a:f1:b9:5c:68:24: 7c:c7:06:c2:0f:ee:6b:68:e1:69:83:df:0e:18:8f: 55:ea:f0:cd:44:79:d9:c9:be:58:58:7d:ae:da:f5: d6:52:a5:6b:e6:35:c8:09:23:36:9e:ad:ae:16:de: 87:a6:fa:08:f4:ce:15:0d:fc:02:5e:28:f9:5b:5e: 2a:3f:36:73:7f:98:1b:ee:9e:45:85:34:c2:32:3e: 39:cc:db:4e:89:5a:c0:f6:f4:65:21:57:9f:77:d6: 34:9a:97:12:1a:42:b9:d0:2b:09:7b:8c:e0:ef:c5: c0:ef:68:0b:f0:f3:b0:3f:18:9c:b0:fd:81:66:af: 66:08:b2:57:d5:aa:3c:5a:6e:36:4d:d3:58:37:bf: ca:ae:20:d5:03:e7:cf:66:66:b4:ae:fa:94:7c:00: 75:2a:18:ba:f8:9c:66:74:27:c4:b4:eb:8e:c4:ae: 76:ed:2c:59:2e:ba:b4:93:43:b4:6f:3b:14:32:a5: 7c:3f:05:61:35:c7:62:1c:14:34:b7:e2:5f:7d:97: 4b:41:b6:04:41:29:fb:c6:6a:90:d7:a8:1a:45:2c: 41:a5:4e:ca:e7:33:92:1a:38:51:11:3f:cf:c1:b0: 43:a9:12:19:46:fc:03:61:b6:e9:03:d8:54:a7:f8: 30:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:33:A1:52:C7:21:D4:73:BD:A3:D2:40:EF:2F:FA:B8:89:6B:BC:28 X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a8:6c:77:6d:c1:0e:02:a9:71:96:9f:e0:2e:56:bf:c9:9c: 02:34:e0:09:af:31:7a:30:98:41:10:15:66:dd:06:aa:ef:bd: 22:2f:0a:cf:01:3f:95:11:3f:e0:00:2b:c5:6d:68:25:be:a9: 73:ac:b8:ab:78:a5:81:b1:0c:35:f1:7d:ce:03:a1:43:14:03: 66:37:4f:9e:4c:5f:cc:42:39:45:20:af:4c:ee:54:c3:43:76: 22:8d:c5:af:1d:97:4c:3d:8f:e2:32:86:b6:47:27:fe:c2:f9: a6:65:f5:a0:17:1b:d8:27:90:0b:46:99:58:59:7c:73:20:85: c1:3b:cc:50:63:69:f9:42:c9:01:bb:6a:6e:0d:c3:8a:c6:81: d3:cf:3f:d8:97:f6:da:5a:45:b6:ec:5b:2a:21:ee:53:5d:8b: 02:e2:5c:36:16:72:35:2f:69:5a:80:e2:0f:58:1f:74:6b:c2: 9a:4c:83:11:f7:62:88:56:e4:52:c8:69:5b:e8:f1:cb:18:e6: a6:0f:cd:23:64:84:34:9f:c9:ba:a8:f7:a2:ed:9a:f2:20:27: 78:1b:f6:37:55:98:d7:8a:1f:ad:02:72:aa:49:0b:ac:90:5a: 79:da:05:6f:12:27:f2:aa:14:fb:92:3d:a1:78:62:7c:82:ff: c1:90:fd:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjUwNzAzMDA0NzQzWhcNMjUwNzEwMDA0NzQzWjAYMRYwFAYD VQQDEw02ODY1ZDMyZi1lNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlZgS19HMMma8blcaCR8xwbCD+5raOFpg98OGI9V6vDNRHnZyb5YWH2u2vXW UqVr5jXICSM2nq2uFt6HpvoI9M4VDfwCXij5W14qPzZzf5gb7p5FhTTCMj45zNtO iVrA9vRlIVefd9Y0mpcSGkK50CsJe4zg78XA72gL8POwPxicsP2BZq9mCLJX1ao8 Wm42TdNYN7/KriDVA+fPZma0rvqUfAB1Khi6+JxmdCfEtOuOxK527SxZLrq0k0O0 bzsUMqV8PwVhNcdiHBQ0t+JffZdLQbYEQSn7xmqQ16gaRSxBpU7K5zOSGjhRET/P wbBDqRIZRvwDYbbpA9hUp/gwJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPozoVLH IdRzvaPSQO8v+riJa7woMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTqGx3bcEOAqlxlp/gLla/yZwCNOAJrzF6MJhBEBVm3Qaq770iLwrP AT+VET/gACvFbWglvqlzrLireKWBsQw18X3OA6FDFANmN0+eTF/MQjlFIK9M7lTD Q3YijcWvHZdMPY/iMoa2Ryf+wvmmZfWgFxvYJ5ALRplYWXxzIIXBO8xQY2n5QskB u2puDcOKxoHTzz/Yl/baWkW27FsqIe5TXYsC4lw2FnI1L2lagOIPWB90a8KaTIMR 92KIVuRSyGlb6PHLGOamD80jZIQ0n8m6qPei7ZryICd4G/Y3VZjXih+tAnKqSQus kFp52gVvEifyqhT7kj2heGJ8gv/BkP3u -----END CERTIFICATE-----Generated at Thu Jul 3 08:02:35 2025 by rpki-client