$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json) Hash identifier: wDO7YdWtqvo7KFTzmvRGHSGV4UIYY1O4WI0eFn6jfNQ= Subject key identifier: AD:FB:45:6B:C1:5D:70:EA:F4:A1:DF:11:D4:DD:B9:D9:C9:FC:7D:CD Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Certificate serial: 058C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft Manifest number: 0580 Signing time: Mon 30 Jun 2025 23:41:43 +0000 Manifest this update: Mon 30 Jun 2025 23:41:43 +0000 Manifest next update: Mon 07 Jul 2025 23:41:43 +0000 Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: AYpaMqdAGoXH82zcgsmxpExlntF43cnG99SCX70Q4B4=) 2: 09182D38084E11EF89D29620C4F9AE02.roa (hash: bcXSyaSt5GFuvXt37iS12rNWnp//huiE39lT66O1G3Q=) 3: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: olIQCCewOfkMwGkHHOS/5ivD24pRNNt8XVcMGE/8pfs=) 4: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: y9I4QX5XGSB6iUvcZDPrGaic3ZUxSX19Mm6eM5SYEI8=) 5: 08990BC0084E11EF89D29620C4F9AE02.roa (hash: 8EivjdWyyPlLeLaqCsiwmtFtESuhOy3I6leM27cuB5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1420 (0x58c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Validity Not Before: Jun 30 23:41:43 2025 GMT Not After : Jul 7 23:41:43 2025 GMT Subject: CN=686320b7-dd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:5b:a0:bc:fe:a4:33:53:22:68:31:96:d7: c8:72:9b:a3:42:89:bb:ab:66:0e:8a:0e:dd:c0:36: d2:b7:2b:60:33:9b:9f:17:98:ff:96:58:1e:0d:e7: 50:d5:aa:05:ae:37:a1:fb:23:ee:d1:a6:95:6b:0b: c3:cd:8a:93:e5:b0:36:94:45:82:81:d6:25:72:35: 9e:a3:da:bc:8d:53:91:41:f1:b2:fb:34:f4:99:5f: 32:b8:09:d7:19:c3:d7:6c:d7:f9:95:8f:c5:ba:40: d5:35:19:6f:d9:5d:d3:d0:84:c5:3e:cd:b0:7b:86: ac:a5:e0:cd:6d:ed:41:ed:c2:61:60:2d:e9:8e:d9: b6:8e:20:d7:d8:52:07:ad:88:90:97:03:5c:78:27: d0:3f:b5:06:d4:e6:c9:64:47:de:22:8b:a8:8b:77: 69:64:26:5a:dd:c7:65:51:b5:ea:2d:b8:56:bb:8c: d4:3f:22:ef:c8:ec:78:f5:6e:1e:0b:f6:76:31:cc: e2:6c:e2:11:1c:6a:95:e6:36:6c:78:f9:d4:fc:39: e2:a6:11:2c:7e:5a:bd:16:17:b5:94:d8:53:6b:7e: 89:7e:86:3b:90:a6:96:bd:b1:6d:b8:6e:8b:dc:21: 6d:75:70:64:de:39:63:81:2b:38:95:09:da:4c:0e: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FB:45:6B:C1:5D:70:EA:F4:A1:DF:11:D4:DD:B9:D9:C9:FC:7D:CD X509v3 Authority Key Identifier: keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:06:78:93:c8:a3:47:76:b6:c7:1a:f3:52:9e:77:56:65:da: 3b:45:87:da:c3:24:a7:28:c8:b6:76:4e:64:d5:c1:0b:02:33: e4:68:ac:31:c7:66:0b:31:86:5d:6c:70:d9:89:f4:fb:a7:f0: cf:ff:af:b5:ca:17:f4:d0:e3:88:34:e9:45:87:57:08:31:77: 5b:b1:cb:a6:b5:d8:e8:e7:d0:ef:5d:31:ac:53:f4:db:7e:f7: 2c:da:38:e5:c8:59:6e:0e:a5:6d:2c:4f:0d:20:0c:b6:17:72: 9d:6b:ee:1f:9a:44:24:a7:3b:fc:ce:ab:91:6a:28:62:ae:cc: 8e:97:8d:12:9a:f7:fd:7d:88:3d:90:49:a7:87:b0:49:28:c3: ff:e1:39:69:be:23:e6:4e:80:5b:e9:66:f7:4d:c1:ec:1b:82: 01:13:d2:b0:50:c3:f7:d9:e1:4b:c8:c7:2a:e6:29:6f:07:a0: 9a:56:c3:2b:17:b2:52:b8:b6:e6:c6:36:30:ba:73:ca:a4:15: e0:03:fa:59:1a:c2:4e:ee:3a:9d:eb:39:b8:69:6c:c5:53:a4: b4:0a:6c:90:38:4b:9a:ca:9c:25:48:d5:0e:0e:be:c9:eb:fa: 8e:47:29:8d:2d:c0:b8:3d:60:8a:44:b9:60:5b:1a:b5:c0:48: 06:0c:35:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0REOUVEMzNGMkFB RTM3MkU3OEMwHhcNMjUwNjMwMjM0MTQzWhcNMjUwNzA3MjM0MTQzWjAYMRYwFAYD VQQDEw02ODYzMjBiNy1kZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg9boLz+pDNTImgxltfIcpujQom7q2YOig7dwDbStytgM5ufF5j/llgeDedQ 1aoFrjeh+yPu0aaVawvDzYqT5bA2lEWCgdYlcjWeo9q8jVORQfGy+zT0mV8yuAnX GcPXbNf5lY/FukDVNRlv2V3T0ITFPs2we4aspeDNbe1B7cJhYC3pjtm2jiDX2FIH rYiQlwNceCfQP7UG1ObJZEfeIouoi3dpZCZa3cdlUbXqLbhWu4zUPyLvyOx49W4e C/Z2MczibOIRHGqV5jZsePnU/DniphEsflq9Fhe1lNhTa36JfoY7kKaWvbFtuG6L 3CFtdXBk3jljgSs4lQnaTA61mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK37RWvB XXDq9KHfEdTdudnJ/H3NMB8GA1UdIwQYMBaAFIXukDj/w1Qavft92e0z8qrjcueM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVFNC9FRDA3OURGRUUz ODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZCcTktMzNaN1RQeXF1Tnk1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNlFPUF9EVkJxOS0zM1o3VFB5cXVOeTU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVFNC9FRDA3OURGRUUzODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZC cTktMzNaN1RQeXF1Tnk1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnBniTyKNHdrbHGvNSnndWZdo7RYfawySnKMi2dk5k1cELAjPkaKwx x2YLMYZdbHDZifT7p/DP/6+1yhf00OOINOlFh1cIMXdbscumtdjo59DvXTGsU/Tb fvcs2jjlyFluDqVtLE8NIAy2F3Kda+4fmkQkpzv8zquRaihirsyOl40Smvf9fYg9 kEmnh7BJKMP/4TlpviPmToBb6Wb3TcHsG4IBE9KwUMP32eFLyMcq5ilvB6CaVsMr F7JSuLbmxjYwunPKpBXgA/pZGsJO7jqd6zm4aWzFU6S0CmyQOEuaypwlSNUODr7J 6/qORymNLcC4PWCKRLlgWxq1wEgGDDXi -----END CERTIFICATE-----Generated at Wed Jul 2 10:26:31 2025 by rpki-client