$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json) Hash identifier: oqGvzpHA6hDO/c1Vh3COpmStFQEpXfJoZgQGKKVKnKo= Subject key identifier: 9D:37:60:78:C0:15:BC:43:BD:C4:BD:1B:A4:CE:C4:75:58:17:F4:F7 Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft Manifest number: 32 Signing time: Tue 01 Jul 2025 08:26:45 +0000 Manifest this update: Tue 01 Jul 2025 08:26:45 +0000 Manifest next update: Tue 08 Jul 2025 08:26:45 +0000 Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: SKnOmQjOX6nq7IwaS13zXd6uYyBNZzXfV9siav3jTtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Validity Not Before: Jul 1 08:26:45 2025 GMT Not After : Jul 8 08:26:45 2025 GMT Subject: CN=68639bc5-d4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7f:ec:fd:8a:76:a2:07:2e:e0:ea:df:6a:4f: 9c:16:7d:93:59:00:c3:68:39:c8:5b:ad:a2:17:1c: eb:ca:92:ab:f5:95:70:cb:f1:0c:83:cb:df:ca:e7: 81:3a:39:52:83:81:ca:da:49:c3:d1:b9:41:c1:d8: 64:ee:ef:54:9b:ba:e5:00:7e:ba:0f:e2:b9:04:71: 19:04:e4:69:df:eb:8d:7b:e1:76:47:93:91:da:00: 9d:33:7d:02:4b:d9:8f:4a:8b:c6:bf:a3:ea:4d:55: d6:f6:9e:ff:7d:b2:30:7b:a3:81:0a:78:40:7f:1f: 13:7d:65:1e:32:e7:01:97:28:96:61:6e:20:fc:54: a7:ec:48:ad:a2:48:5a:f4:e6:6b:45:a1:28:6e:88: 0c:f2:56:1e:1e:d7:2a:11:9f:9d:40:f7:b6:c6:d6: d7:a9:56:75:50:7b:4b:d0:2e:b3:11:f5:af:0a:7e: bf:62:a4:45:39:c4:63:06:ec:ca:73:c0:64:04:5f: 5d:71:b3:4f:b4:d4:24:01:05:02:7c:7d:6e:b0:46: 66:a1:a8:03:03:95:f4:1f:47:f6:1c:c6:0f:e9:36: 72:e5:5f:09:ef:11:b5:55:e1:e5:89:0e:28:9c:fd: cd:11:2e:8a:25:e6:32:32:c2:a5:27:33:47:78:f0: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:37:60:78:C0:15:BC:43:BD:C4:BD:1B:A4:CE:C4:75:58:17:F4:F7 X509v3 Authority Key Identifier: keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:17:7e:cd:a8:b9:d7:99:e7:32:e4:7c:bb:8b:b7:b4:4d:81: 47:71:2f:07:94:7c:fe:10:5f:85:b6:cd:9b:ec:0b:55:08:97: 66:ca:78:12:52:06:07:7f:e3:ea:bc:ca:b5:38:04:da:98:d2: db:75:56:32:e0:a4:5e:3b:7c:d1:1f:00:58:56:43:ad:f2:82: 87:7b:e2:2e:57:49:0a:39:6a:e0:e3:8f:0a:11:82:a1:ab:c7: 2e:5e:c5:17:fc:63:b1:9e:4d:94:0a:fb:7d:4f:00:18:5c:b8: 30:c6:ee:12:18:80:d7:a9:61:d7:f2:0a:77:48:c0:fa:6d:9f: c4:ab:51:91:d1:93:13:9e:79:72:2f:e5:0e:09:54:85:a6:51: 26:d4:35:09:e2:6f:0e:9f:6d:9f:2b:ff:61:d2:54:50:3e:13: 90:d1:ee:0e:35:3d:49:b8:38:63:1d:43:2c:6e:5a:dd:0d:e1: 42:af:37:13:41:7c:4c:a9:01:4a:78:e6:14:f7:95:ba:64:98: 17:b1:e0:34:c6:9a:a9:40:97:71:93:8c:be:e6:b2:a2:be:89: 3e:c3:0b:fa:65:35:32:f3:25:15:38:aa:83:47:56:4b:03:b8: 0b:b5:6c:8d:b7:8d:5b:a8:18:a8:d0:27:58:b1:a7:d6:dc:9f: 8f:61:9c:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoQzdDREI0RUExODE2NUU1OTgyRDBBOTE5RkY0N0Y3MjY3 NkUwNTA3MzAeFw0yNTA3MDEwODI2NDVaFw0yNTA3MDgwODI2NDVaMBgxFjAUBgNV BAMTDTY4NjM5YmM1LWQ0ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsf+z9inaiBy7g6t9qT5wWfZNZAMNoOchbraIXHOvKkqv1lXDL8QyDy9/K54E6 OVKDgcraScPRuUHB2GTu71SbuuUAfroP4rkEcRkE5Gnf64174XZHk5HaAJ0zfQJL 2Y9Ki8a/o+pNVdb2nv99sjB7o4EKeEB/HxN9ZR4y5wGXKJZhbiD8VKfsSK2iSFr0 5mtFoShuiAzyVh4e1yoRn51A97bG1tepVnVQe0vQLrMR9a8Kfr9ipEU5xGMG7Mpz wGQEX11xs0+01CQBBQJ8fW6wRmahqAMDlfQfR/Ycxg/pNnLlXwnvEbVV4eWJDiic /c0RLool5jIywqUnM0d48BatAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnTdgeMAV vEO9xL0bpM7EdVgX9PcwHwYDVR0jBBgwFoAUx8206hgWXlmC0KkZ/0f3JnbgUHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzE3MjU0NkJDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDgyMDZoZ1dYbG1DMEtrWl8wZjNKbmJnVUhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzE3MjU0NkJDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxt QzBLa1pfMGYzSm5iZ1VITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJoXfs2oudeZ5zLkfLuLt7RNgUdxLweUfP4QX4W2zZvsC1UIl2bKeBJS Bgd/4+q8yrU4BNqY0tt1VjLgpF47fNEfAFhWQ63ygod74i5XSQo5auDjjwoRgqGr xy5exRf8Y7GeTZQK+31PABhcuDDG7hIYgNepYdfyCndIwPptn8SrUZHRkxOeeXIv 5Q4JVIWmUSbUNQnibw6fbZ8r/2HSVFA+E5DR7g41PUm4OGMdQyxuWt0N4UKvNxNB fEypAUp45hT3lbpkmBex4DTGmqlAl3GTjL7msqK+iT7DC/plNTLzJRU4qoNHVksD uAu1bI23jVuoGKjQJ1ixp9bcn49hnF0= -----END CERTIFICATE-----Generated at Thu Jul 3 01:02:50 2025 by rpki-client