$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json) Hash identifier: dk5isveT596LUkErkQA9XNe3nKRIARgl4SLDyrF46SM= Subject key identifier: 7E:B9:80:BC:42:67:83:E5:BC:2A:C0:DE:DB:0B:A9:C8:09:C5:05:EE Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft Manifest number: 05 Signing time: Sun 15 Jun 2025 07:17:31 +0000 Manifest this update: Sun 15 Jun 2025 07:17:30 +0000 Manifest next update: Sun 22 Jun 2025 07:17:30 +0000 Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: rPm7vm1ajNHngZ8JI0DvIioqF0gFZcOH2IBb82dINfY=) 2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: yyRnOy3I+YsGzwaRvaOYjHZbPADEQBV8Fr6YK9Scj94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: Jun 15 07:17:30 2025 GMT Not After : Jun 22 07:17:30 2025 GMT Subject: CN=684e738a-a03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:a8:4a:b9:c0:6d:bd:1e:9b:2c:c4:09:79: a4:fe:77:70:72:19:66:ce:ca:e5:b4:38:c3:84:25: 4c:ed:eb:c4:0d:d2:11:e9:a8:63:a0:6f:93:90:41: ab:2b:1b:58:c4:e9:3d:27:11:7c:fe:78:97:16:b9: 01:a5:1d:00:54:9e:4f:1d:89:03:6f:a0:6d:d5:5f: 37:62:0b:e5:6f:7a:53:72:97:87:3c:c6:ba:91:57: 50:15:13:db:a5:05:7d:2e:81:6c:42:27:40:7e:c3: e7:06:e8:22:75:85:bf:08:34:c1:d3:56:11:c9:c3: 8a:ff:b5:1e:07:91:39:00:59:83:54:48:5a:aa:b0: 00:db:99:eb:6e:7e:d2:fe:19:05:49:74:d0:90:2a: f6:b3:33:70:58:16:79:39:d3:5e:70:ad:53:c8:12: ac:f2:9f:25:84:8f:83:10:49:27:24:61:41:1a:f3: 05:4d:c0:c6:7f:6f:74:56:c5:03:f6:a3:fa:b7:ee: 7a:91:1a:e1:86:06:76:3b:b4:b7:d4:14:4b:f8:ec: 67:59:01:7c:96:6d:da:b0:70:11:e4:0e:f4:39:a0: e3:5f:bc:17:08:2e:1f:58:56:de:36:45:2e:9b:ba: 71:41:ae:a9:53:21:fa:58:3d:9a:9c:ab:d7:41:31: 40:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B9:80:BC:42:67:83:E5:BC:2A:C0:DE:DB:0B:A9:C8:09:C5:05:EE X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f9:eb:25:63:c0:20:92:82:a1:65:bd:36:ae:e0:0a:e5:d7: 75:e4:e7:7d:b6:4c:90:13:85:d2:ff:ae:10:03:83:13:42:70: 51:f2:82:66:93:31:c5:b9:5f:22:cb:cb:ba:55:21:cb:eb:f7: 7e:07:32:e7:29:20:03:c1:72:44:8a:8d:4e:6f:2f:b6:3c:8b: 0c:aa:c1:30:65:7a:03:9a:a5:2f:0e:b6:3d:d7:19:87:5e:16: 1c:c6:f7:15:2d:fd:2b:93:9f:1f:f9:ed:01:75:f1:9b:a3:4f: 9c:9a:44:db:50:fc:ae:1c:eb:f8:5d:31:59:87:dc:c4:49:4d: 60:58:b4:bb:fc:82:1d:a9:a0:28:b8:30:ee:b5:b8:ed:70:2d: 55:60:87:db:c3:80:8d:c5:69:61:a6:02:ed:2c:d9:4c:ef:df: ab:2d:80:1c:42:f3:5c:06:93:11:0b:32:34:a9:d3:ad:0d:93: be:1c:c4:44:57:14:24:3c:6c:c8:f8:d7:c0:c6:63:e2:f3:3d: 03:68:96:50:5f:ea:0c:01:ff:4e:79:dc:02:f5:21:e4:b2:d8: 77:fd:5a:34:be:26:4b:09:06:ba:f4:94:89:4a:76:21:b4:79: c3:86:2d:a1:3e:e3:5a:62:b7:cd:24:a0:65:7e:08:e0:31:2a: 80:e1:53:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDlDMjExMC8GA1UEBRMoNzREQ0VBQTg1MDZBMkIzMjdGODdBNDJEMDc0MUFDMzZF RURFRUI0OTAeFw0yNTA2MTUwNzE3MzBaFw0yNTA2MjIwNzE3MzBaMBgxFjAUBgNV BAMTDTY4NGU3MzhhLWEwM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDJahKucBtvR6bLMQJeaT+d3ByGWbOyuW0OMOEJUzt68QN0hHpqGOgb5OQQasr G1jE6T0nEXz+eJcWuQGlHQBUnk8diQNvoG3VXzdiC+VvelNyl4c8xrqRV1AVE9ul BX0ugWxCJ0B+w+cG6CJ1hb8INMHTVhHJw4r/tR4HkTkAWYNUSFqqsADbmetuftL+ GQVJdNCQKvazM3BYFnk5015wrVPIEqzynyWEj4MQSSckYUEa8wVNwMZ/b3RWxQP2 o/q37nqRGuGGBnY7tLfUFEv47GdZAXyWbdqwcBHkDvQ5oONfvBcILh9YVt42RS6b unFBrqlTIfpYPZqcq9dBMUA7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfrmAvEJn g+W8KsDe2wupyAnFBe4wHwYDVR0jBBgwFoAUdNzqqFBqKzJ/h6QtB0GsNu7e60kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0OUMyL0UzQTNERUU2NDhD ODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZE56cXFGQnFLekpfaDZRdEIwR3NOdTdlNjBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 OUMyL0UzQTNERUU2NDhDODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pK X2g2UXRCMEdzTnU3ZTYway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJP56yVjwCCSgqFlvTau4Arl13Xk5322TJAThdL/rhADgxNCcFHygmaT McW5XyLLy7pVIcvr934HMucpIAPBckSKjU5vL7Y8iwyqwTBlegOapS8Otj3XGYde FhzG9xUt/SuTnx/57QF18ZujT5yaRNtQ/K4c6/hdMVmH3MRJTWBYtLv8gh2poCi4 MO61uO1wLVVgh9vDgI3FaWGmAu0s2Uzv36stgBxC81wGkxELMjSp060Nk74cxERX FCQ8bMj418DGY+LzPQNollBf6gwB/0553AL1IeSy2Hf9WjS+JksJBrr0lIlKdiG0 ecOGLaE+41pit80koGV+COAxKoDhU/E= -----END CERTIFICATE-----Generated at Mon Jun 16 20:04:43 2025 by rpki-client