$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json) Hash identifier: F6O7P5T5TksZ4YB3uwgebFxQowRHtKpaJcwIgWdWuAc= Subject key identifier: F0:7C:5A:C3:D3:74:83:A5:F6:62:D8:40:BD:E5:14:07:FC:30:EA:4C Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft Manifest number: 01D8 Signing time: Sun 29 Jun 2025 02:13:39 +0000 Manifest this update: Sun 29 Jun 2025 02:13:38 +0000 Manifest next update: Sun 06 Jul 2025 02:13:38 +0000 Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: oP0+hoCDFE+ZpBzcDSwHCX2c/LX9giqJjjuAYjXlHHQ=) 2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hw7fn2Uz56pW/An8KSiF7/ybzu4erny13VSakUkooRo=) 3: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: TCN1AZgzVPw/0NzN3SuEMukcZY6yAiASu/ppodIE8PQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: Jun 29 02:13:38 2025 GMT Not After : Jul 6 02:13:38 2025 GMT Subject: CN=6860a152-f3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:c6:bb:b2:65:75:75:82:29:9b:05:fc:45: a2:8b:bc:79:79:59:e0:c2:4f:6f:e1:ab:0a:5d:25: e7:04:8b:34:49:b2:88:9a:24:eb:4c:1e:25:89:c5: d7:e8:ad:df:ee:1f:cf:ee:56:47:3c:6c:98:31:a7: f7:f4:91:e6:d6:e8:49:d8:49:68:48:ba:30:81:8e: d2:42:3a:99:44:e3:a0:a9:2f:3e:b8:30:b1:b6:d6: 4d:f5:18:6d:4c:7c:43:f5:cf:c3:64:70:96:27:ea: cf:2f:c8:89:61:c8:20:a1:00:7c:6d:31:fc:ba:c3: 7a:ce:69:f5:20:25:3c:ce:bb:a2:c1:68:7d:8b:64: b7:0c:59:0a:8b:0a:ae:53:0a:ee:6d:b5:21:72:b3: 6e:59:c0:88:fc:8f:f2:ec:9f:c7:97:38:23:2b:c7: 77:4c:5e:e5:2c:f2:0d:05:3e:a8:6f:37:d2:fc:de: 02:55:e0:07:dc:43:7a:15:d8:10:c2:3e:e8:18:25: 22:4d:a1:e8:c9:c7:3b:16:4e:9c:bb:12:6e:02:58: 45:2e:3f:b1:d6:9b:e5:96:73:c5:f1:30:24:ce:27: 35:dd:00:f3:14:b8:96:5d:51:e3:a4:1f:d9:a2:c1: e9:8c:dd:a6:70:96:69:93:80:4e:5c:31:49:87:d2: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7C:5A:C3:D3:74:83:A5:F6:62:D8:40:BD:E5:14:07:FC:30:EA:4C X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:3f:ce:15:af:a3:75:d7:86:48:9c:5e:29:be:ac:c3:cd:99: d3:2f:ca:1d:32:4f:33:d4:c7:79:64:4b:0d:91:1f:1f:34:ce: 49:26:77:93:35:c5:d3:d3:67:0c:10:e1:5f:77:e9:10:66:e4: 8d:6b:54:49:e0:d2:81:50:d1:20:9a:7e:49:75:2f:1e:d8:f0: f7:64:3c:ed:b3:46:d0:30:9a:f3:c5:89:5f:a6:14:14:bf:30: 15:34:f7:64:13:9a:a1:7c:a2:5f:ad:62:91:66:9b:5f:f9:8f: d4:65:28:3a:a0:5e:d2:a6:29:57:88:62:36:1e:ea:5f:6c:99: 45:d2:a3:0d:10:ad:59:fe:74:38:d1:cf:22:a0:27:1a:9b:fe: 12:63:43:51:b3:26:d5:e6:bb:c7:43:fd:e7:03:96:1a:ad:4b: 4d:19:f2:74:cc:08:24:ad:16:13:c9:11:12:d0:c3:55:8c:0f: 2b:d9:e6:04:5b:6b:b3:30:91:34:d0:bc:38:23:e0:d0:0c:9f: e0:c2:cf:94:1f:d2:a4:66:3d:b7:6d:37:b9:38:cf:9b:7d:65: 49:23:43:eb:96:5d:c2:42:3b:b8:58:d7:7e:0a:81:3e:0b:3e: b0:1b:3d:bc:2e:64:6e:3a:ae:b5:21:44:14:70:bc:e9:b6:ca: bd:20:f7:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjUwNjI5MDIxMzM4WhcNMjUwNzA2MDIxMzM4WjAYMRYwFAYD VQQDEw02ODYwYTE1Mi1mM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1TGu7JldXWCKZsF/EWii7x5eVngwk9v4asKXSXnBIs0SbKImiTrTB4licXX 6K3f7h/P7lZHPGyYMaf39JHm1uhJ2EloSLowgY7SQjqZROOgqS8+uDCxttZN9Rht THxD9c/DZHCWJ+rPL8iJYcggoQB8bTH8usN6zmn1ICU8zruiwWh9i2S3DFkKiwqu UwrubbUhcrNuWcCI/I/y7J/HlzgjK8d3TF7lLPINBT6obzfS/N4CVeAH3EN6FdgQ wj7oGCUiTaHoycc7Fk6cuxJuAlhFLj+x1pvllnPF8TAkzic13QDzFLiWXVHjpB/Z osHpjN2mcJZpk4BOXDFJh9IstwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPB8WsPT dIOl9mLYQL3lFAf8MOpMMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3 U3N0cUJLRlBDamJNNkZZUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgP84Vr6N114ZInF4pvqzDzZnTL8odMk8z1Md5ZEsNkR8fNM5JJneT NcXT02cMEOFfd+kQZuSNa1RJ4NKBUNEgmn5JdS8e2PD3ZDzts0bQMJrzxYlfphQU vzAVNPdkE5qhfKJfrWKRZptf+Y/UZSg6oF7SpilXiGI2HupfbJlF0qMNEK1Z/nQ4 0c8ioCcam/4SY0NRsybV5rvHQ/3nA5YarUtNGfJ0zAgkrRYTyRES0MNVjA8r2eYE W2uzMJE00Lw4I+DQDJ/gws+UH9KkZj23bTe5OM+bfWVJI0Prll3CQju4WNd+CoE+ Cz6wGz28LmRuOq61IUQUcLzptsq9IPe+ -----END CERTIFICATE-----Generated at Tue Jul 1 00:27:28 2025 by rpki-client