$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: z8gVay7tZu8jY22WHSouhiG/DRTo09tXZ+IlzegQ0/w= Subject key identifier: 37:08:41:DB:2D:9A:29:98:CA:1C:D2:EC:7F:F3:87:EE:70:0A:CE:AD Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: F1 Signing time: Thu 03 Jul 2025 05:43:23 +0000 Manifest this update: Thu 03 Jul 2025 05:43:22 +0000 Manifest next update: Thu 10 Jul 2025 05:43:22 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: 1H6lq+3bLsagmauQA1s0vhCOTkkbFLLWWwJiAH+mmOg=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G/0ezw6yoaaHjsn46sx4sKQROwS7T0PMQPxdtMKah+o=) 3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: E9ObZNoyKAzjoiJfjRSwt1+kDOZ+xsFeoybdq6vQ22E=) 4: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: pdzJ5okYmWLfXDpKnMd4R/Lx/tQtmRyHcTZA/k863ZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Jul 3 05:43:22 2025 GMT Not After : Jul 10 05:43:22 2025 GMT Subject: CN=6866187b-680c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:ba:03:d5:14:79:4c:83:15:21:74:47:52: 69:da:ff:e8:bc:37:54:08:df:1f:20:c4:ca:c0:45: ab:fd:70:08:b1:a6:ce:8e:b3:dd:b3:51:4f:91:72: a5:b8:ca:45:bf:62:87:9f:fe:d0:4e:cf:7f:fc:38: ca:a4:20:5b:6d:dd:b1:85:a8:77:9e:79:69:0a:8b: 13:32:42:99:71:83:77:e4:4d:e5:2f:6b:d9:55:0f: e3:fd:68:cc:97:88:7d:8d:ec:ee:4e:ed:86:79:14: 63:5c:38:ac:a1:f1:26:cf:76:dd:0f:8f:b3:a3:62: 04:14:a6:0e:f8:0c:9a:5a:26:24:7a:42:a3:bd:ba: 5a:7e:6c:46:14:f2:2d:e3:a4:27:7a:ae:32:d5:83: d8:56:ef:a9:5e:a4:20:af:39:82:1a:6e:4e:85:bb: ba:b8:72:43:44:50:d6:6b:b3:dd:b8:3d:22:9b:23: 2b:60:9b:ec:de:67:7f:b9:57:e7:80:ad:74:b1:d3: f5:fb:44:c0:b7:9a:d6:6e:3c:c9:72:6b:69:27:ec: 80:70:25:87:27:0f:cb:2c:9c:10:db:ad:d3:00:67: 60:d3:a8:d2:61:61:3c:1a:2a:89:2c:14:78:23:dd: cd:b5:84:4a:fd:34:d5:67:4a:fb:78:51:65:d9:b6: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:08:41:DB:2D:9A:29:98:CA:1C:D2:EC:7F:F3:87:EE:70:0A:CE:AD X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b4:31:d5:47:a1:a8:89:d6:96:ab:49:57:b6:12:44:09:ba: d1:f3:6a:b2:5f:36:a6:03:af:be:5d:d0:89:04:0a:c1:ca:6c: 64:11:65:b0:37:0f:ad:d4:be:c4:6d:2b:3b:98:12:fb:bc:8a: d8:ed:c1:e4:89:a8:04:e4:16:55:ba:66:c6:fe:40:7d:2d:49: 35:52:13:a5:ab:12:18:60:81:0d:4b:e6:4f:09:f9:e2:38:ee: 52:5c:ca:eb:5c:d5:3e:54:87:7f:67:9b:ea:81:99:02:4b:7a: 70:a5:ea:78:cf:a5:06:fd:e7:31:fe:9e:bc:a5:f6:dc:13:fb: 74:48:3d:b2:d1:84:85:65:0d:50:59:3f:30:87:9c:24:26:46: 2b:b9:97:a1:23:0e:5a:2e:d9:86:f3:21:95:9f:7a:7a:58:ca: e5:41:b9:1f:a1:34:9f:59:a3:16:70:53:d3:48:12:47:fe:d1: f6:f7:b9:e2:32:cd:57:6a:20:5f:ba:a9:ef:21:16:b3:0f:5b: b1:07:75:8c:36:2c:8b:28:3f:e9:1b:52:a8:40:b1:e6:95:ad: fe:1a:bc:4b:99:54:2f:42:a6:82:0c:6f:27:bc:7a:44:b1:4f: 07:01:98:25:1c:a0:ff:ea:68:b3:b1:e1:05:f3:03:b3:32:68: f5:70:bb:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjUwNzAzMDU0MzIyWhcNMjUwNzEwMDU0MzIyWjAYMRYwFAYD VQQDEw02ODY2MTg3Yi02ODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjW6A9UUeUyDFSF0R1Jp2v/ovDdUCN8fIMTKwEWr/XAIsabOjrPds1FPkXKl uMpFv2KHn/7QTs9//DjKpCBbbd2xhah3nnlpCosTMkKZcYN35E3lL2vZVQ/j/WjM l4h9jezuTu2GeRRjXDisofEmz3bdD4+zo2IEFKYO+AyaWiYkekKjvbpafmxGFPIt 46Qneq4y1YPYVu+pXqQgrzmCGm5Ohbu6uHJDRFDWa7PduD0imyMrYJvs3md/uVfn gK10sdP1+0TAt5rWbjzJcmtpJ+yAcCWHJw/LLJwQ263TAGdg06jSYWE8GiqJLBR4 I93NtYRK/TTVZ0r7eFFl2bbbxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcIQdst mimYyhzS7H/zh+5wCs6tMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXtDHVR6GoidaWq0lXthJECbrR82qyXzamA6++XdCJBArBymxkEWWw Nw+t1L7EbSs7mBL7vIrY7cHkiagE5BZVumbG/kB9LUk1UhOlqxIYYIENS+ZPCfni OO5SXMrrXNU+VId/Z5vqgZkCS3pwpep4z6UG/ecx/p68pfbcE/t0SD2y0YSFZQ1Q WT8wh5wkJkYruZehIw5aLtmG8yGVn3p6WMrlQbkfoTSfWaMWcFPTSBJH/tH297ni Ms1XaiBfuqnvIRazD1uxB3WMNiyLKD/pG1KoQLHmla3+GrxLmVQvQqaCDG8nvHpE sU8HAZglHKD/6mizseEF8wOzMmj1cLtr -----END CERTIFICATE-----Generated at Thu Jul 3 14:41:21 2025 by rpki-client