$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json) Hash identifier: rxXfJk9No+Byy7Zp/60PENHO/jDSMXjdyanM2IrU68E= Subject key identifier: BB:D0:7A:4B:7B:6D:5E:E6:1B:36:A8:7F:8E:9F:A6:7A:7F:B5:2C:10 Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft Manifest number: 33 Signing time: Thu 03 Jul 2025 07:54:12 +0000 Manifest this update: Thu 03 Jul 2025 07:54:12 +0000 Manifest next update: Thu 10 Jul 2025 07:54:12 +0000 Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: /7GgG7C2iFtAkwwgEzQMnq+WIaimwZMZbJE6LVM926U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Validity Not Before: Jul 3 07:54:12 2025 GMT Not After : Jul 10 07:54:12 2025 GMT Subject: CN=68663724-87e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:b9:4c:25:18:83:0c:28:3c:a2:df:f5:0a: 3b:c4:ae:20:89:e5:b5:26:14:3a:b1:68:e7:bb:52: b4:a2:51:65:02:c9:b4:72:e7:a8:05:de:6f:2c:52: 06:98:e8:69:ec:03:09:78:b8:79:8d:d7:3e:96:45: 96:42:24:04:81:aa:6e:55:49:0c:c6:62:5b:40:63: 87:57:ae:bc:f9:aa:61:e4:5a:05:58:b1:4a:57:4f: af:46:e2:1f:cd:4f:4d:f1:ab:24:bb:1a:d6:05:bd: 6c:92:56:c4:eb:99:b4:57:f5:c0:ea:52:7b:99:bc: cb:9c:ac:65:61:ce:cd:5d:8a:2d:08:ee:61:f1:f9: 01:aa:ac:11:d1:85:0a:44:b4:48:d7:98:04:dd:81: 00:01:df:05:7d:b5:7b:20:e5:86:0d:48:81:a0:0f: 18:c9:fb:05:0b:4a:e6:14:a8:94:b6:93:b2:95:a6: e9:0d:c4:7d:ea:98:49:50:a0:f8:ec:5b:3a:b9:9c: 09:6d:46:17:0b:26:03:70:8d:62:33:34:79:66:7c: b4:be:43:2b:de:69:87:22:fa:73:d6:a2:89:c6:05: cb:89:5b:00:ea:52:17:f3:70:2c:31:a7:84:a7:b0: 53:5c:26:c9:61:fb:93:64:2a:d6:df:82:4e:0e:e4: b7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D0:7A:4B:7B:6D:5E:E6:1B:36:A8:7F:8E:9F:A6:7A:7F:B5:2C:10 X509v3 Authority Key Identifier: keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f4:06:fc:e7:45:dc:a3:e3:02:99:63:42:fb:f5:33:74:bf:51: 4a:70:78:12:5c:39:39:8c:c9:0e:73:a1:cb:25:19:80:9f:a5: 2a:2a:d6:7f:45:6a:5a:f7:6b:9e:31:f8:ce:1a:be:ff:ca:2d: dc:1a:0c:e4:cf:bc:48:9a:76:c0:b5:58:fc:0b:de:14:0c:11: 92:7b:0f:4b:a7:8c:d7:aa:e6:82:d1:ab:00:26:e2:52:a1:71: a1:32:30:bc:b1:ee:b1:84:1a:35:15:fc:f2:cc:5d:78:5a:79: e1:a6:c0:1f:22:b4:24:f4:e0:82:fe:5d:c1:19:d7:cc:31:aa: c6:ad:bf:07:5d:18:7d:35:ec:3d:51:9e:af:fc:b9:b8:2b:ed: a4:9c:36:12:3c:34:b6:c1:14:b2:1f:ea:9c:91:e1:61:59:a0: a9:6d:36:cf:60:ab:41:7f:11:3e:13:91:79:c8:cc:29:96:67: 1e:43:5f:3c:4b:b7:65:af:36:39:c2:6a:66:ce:a0:c1:5f:d7: 13:a2:9b:57:39:9f:b2:8e:a8:df:f5:65:c5:f9:28:a1:f1:26: 51:ac:4e:8f:d4:c5:d9:ce:84:fe:a3:c6:61:e5:59:e5:08:29: af:11:5a:b6:0d:4a:44:81:f3:41:75:7a:22:25:a6:dc:45:94: f0:9b:42:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoQzdDREI0RUExODE2NUU1OTgyRDBBOTE5RkY0N0Y3MjY3 NkUwNTA3MzAeFw0yNTA3MDMwNzU0MTJaFw0yNTA3MTAwNzU0MTJaMBgxFjAUBgNV BAMTDTY4NjYzNzI0LTg3ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCiblMJRiDDCg8ot/1CjvEriCJ5bUmFDqxaOe7UrSiUWUCybRy56gF3m8sUgaY 6GnsAwl4uHmN1z6WRZZCJASBqm5VSQzGYltAY4dXrrz5qmHkWgVYsUpXT69G4h/N T03xqyS7GtYFvWySVsTrmbRX9cDqUnuZvMucrGVhzs1dii0I7mHx+QGqrBHRhQpE tEjXmATdgQAB3wV9tXsg5YYNSIGgDxjJ+wULSuYUqJS2k7KVpukNxH3qmElQoPjs Wzq5nAltRhcLJgNwjWIzNHlmfLS+QyveaYci+nPWoonGBcuJWwDqUhfzcCwxp4Sn sFNcJslh+5NkKtbfgk4O5LdBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu9B6S3tt XuYbNqh/jp+men+1LBAwHwYDVR0jBBgwFoAUx8206hgWXlmC0KkZ/0f3JnbgUHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzE3MjU0NkJDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDgyMDZoZ1dYbG1DMEtrWl8wZjNKbmJnVUhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzE3MjU0NkJDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxt QzBLa1pfMGYzSm5iZ1VITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAPQG/OdF3KPjApljQvv1M3S/UUpweBJcOTmMyQ5zocslGYCfpSoq1n9F alr3a54x+M4avv/KLdwaDOTPvEiadsC1WPwL3hQMEZJ7D0unjNeq5oLRqwAm4lKh caEyMLyx7rGEGjUV/PLMXXhaeeGmwB8itCT04IL+XcEZ18wxqsatvwddGH017D1R nq/8ubgr7aScNhI8NLbBFLIf6pyR4WFZoKltNs9gq0F/ET4TkXnIzCmWZx5DXzxL t2WvNjnCambOoMFf1xOim1c5n7KOqN/1ZcX5KKHxJlGsTo/UxdnOhP6jxmHlWeUI Ka8RWrYNSkSB80F1eiIlptxFlPCbQnQ= -----END CERTIFICATE-----Generated at Sat Jul 5 01:42:54 2025 by rpki-client