$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft File: grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json) Hash identifier: T5BpD0emhy6SFRa2Y+QNVT0D43h0AmCxE4mygwoRf30= Subject key identifier: 6D:45:04:32:CF:C7:BE:C8:8A:E9:7A:37:D6:4C:AD:8B:9D:1F:6B:DA Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE Certificate issuer: /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft Manifest number: 052B Signing time: Thu 12 Jun 2025 23:08:01 +0000 Manifest this update: Thu 12 Jun 2025 23:08:00 +0000 Manifest next update: Thu 19 Jun 2025 23:08:00 +0000 Files and hashes: 1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: jdC3Wn2+9PccsCHJhZONydB6pxhIkXIyXnXsb3rzbKI=) 2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: 68/9CqYRkzm0ius//S97EiCu+9Aa9Wpy/boYkEQX4yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Validity Not Before: Jun 12 23:08:00 2025 GMT Not After : Jun 19 23:08:00 2025 GMT Subject: CN=684b5dd1-5f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:de:b6:97:3a:38:1b:6e:f2:9b:ae:c0:ac: 73:28:75:d1:23:af:a7:f2:83:0d:48:05:15:63:26: 59:1a:05:ac:b9:51:28:9a:51:c3:b9:28:e4:ec:bc: 71:13:9b:9a:e6:71:f4:23:76:e9:21:9e:15:26:a6: 86:31:a5:1c:24:dc:70:a0:3a:eb:2a:fe:82:18:07: bb:9c:6f:c0:a0:eb:7d:b9:4c:ad:5a:ca:62:2f:d9: 12:0d:da:e0:49:db:50:a9:8e:df:3e:fe:cd:5a:b8: 9c:0c:25:f5:88:49:bd:25:18:90:a2:e6:24:92:76: 3f:25:d0:bd:16:f8:c3:26:d5:17:8f:ec:6b:01:87: 9d:36:5f:8a:62:9b:e3:54:23:9b:15:7d:7c:7b:3c: df:00:32:1e:d4:7b:fd:3b:25:c9:9e:2c:06:4c:11: 8d:92:18:a0:4c:c5:54:96:5b:6e:94:b5:b0:b2:40: 34:1a:38:72:94:e0:c2:13:60:61:ba:03:ac:b1:4b: 53:c0:ff:da:b8:74:bd:64:38:f9:d5:ee:13:7c:83: c4:31:20:c9:41:71:cb:98:3f:8a:ea:5e:e8:88:4f: 7f:5e:29:53:99:31:aa:1d:2a:2f:3f:97:3f:eb:a4: af:d5:21:99:f5:8d:07:29:91:40:17:78:f4:99:b5: 75:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:45:04:32:CF:C7:BE:C8:8A:E9:7A:37:D6:4C:AD:8B:9D:1F:6B:DA X509v3 Authority Key Identifier: keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a6:0d:9c:80:21:27:e3:e0:1b:15:08:4d:5a:56:40:41:ff: 47:bb:db:de:40:97:77:e5:5c:93:1d:fc:42:e2:7d:ca:ac:28: 42:ca:5e:61:3d:66:9f:a7:ee:87:e2:8d:2e:a9:ba:25:6c:ec: e8:ca:71:22:2f:a0:7e:f6:f9:9c:da:d0:77:be:5d:43:fb:54: 3c:02:5b:09:b4:97:6a:d8:27:60:19:fb:3c:08:db:fb:90:7a: 15:52:08:63:40:cc:f1:7b:12:bd:1f:ff:85:ec:3a:e4:04:4b: 59:a5:89:5a:84:dc:bd:70:b8:13:28:0b:d1:39:3e:e8:72:0c: 8a:b3:b7:69:0d:5c:93:d0:f7:c0:62:a5:bb:0b:e6:6b:30:d9: cf:4b:c2:35:e9:45:64:f2:97:04:dd:81:af:f9:9b:c9:cf:d6: 2d:8e:03:9c:16:8c:41:e5:cc:9a:a7:b1:72:b5:e1:d7:67:ab: 20:6c:73:7d:43:27:79:3b:c6:cc:60:c3:9c:8d:80:80:b9:c2: fe:c3:bf:da:ba:a3:2c:b7:d2:44:95:d5:d7:9e:8c:17:6a:33: 20:ae:c9:4a:b8:eb:fc:53:ae:0d:50:4a:9a:91:a2:a7:74:78: 50:d5:08:e4:56:a6:6c:97:bb:62:54:a8:c2:c2:79:aa:8b:ae: 81:98:de:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk0RjcxMTAvBgNVBAUTKDgyQjMxRkExRENFMEM0QkYyRjY2Mzk3Nzg2QTZDMDhF NDdDNkI4RkUwHhcNMjUwNjEyMjMwODAwWhcNMjUwNjE5MjMwODAwWjAYMRYwFAYD VQQDEw02ODRiNWRkMS01Zjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv//etpc6OBtu8puuwKxzKHXRI6+n8oMNSAUVYyZZGgWsuVEomlHDuSjk7Lxx E5ua5nH0I3bpIZ4VJqaGMaUcJNxwoDrrKv6CGAe7nG/AoOt9uUytWspiL9kSDdrg SdtQqY7fPv7NWricDCX1iEm9JRiQouYkknY/JdC9FvjDJtUXj+xrAYedNl+KYpvj VCObFX18ezzfADIe1Hv9OyXJniwGTBGNkhigTMVUlltulLWwskA0GjhylODCE2Bh ugOssUtTwP/auHS9ZDj51e4TfIPEMSDJQXHLmD+K6l7oiE9/XilTmTGqHSovP5c/ 66Sv1SGZ9Y0HKZFAF3j0mbV1OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1FBDLP x77Iiul6N9ZMrYudH2vaMB8GA1UdIwQYMBaAFIKzH6Hc4MS/L2Y5d4amwI5Hxrj+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTRGNy81OUZGMDVBQUZG QzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hMOHZaamwzaHFiQWprZkd1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyTWZvZHpneEw4dlpqbDNocWJBamtmR3VQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTRGNy81OUZGMDVBQUZGQzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hM OHZaamwzaHFiQWprZkd1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBopg2cgCEn4+AbFQhNWlZAQf9Hu9veQJd35VyTHfxC4n3KrChCyl5h PWafp+6H4o0uqbolbOzoynEiL6B+9vmc2tB3vl1D+1Q8AlsJtJdq2CdgGfs8CNv7 kHoVUghjQMzxexK9H/+F7DrkBEtZpYlahNy9cLgTKAvROT7ocgyKs7dpDVyT0PfA YqW7C+ZrMNnPS8I16UVk8pcE3YGv+ZvJz9YtjgOcFoxB5cyap7FyteHXZ6sgbHN9 Qyd5O8bMYMOcjYCAucL+w7/auqMst9JEldXXnowXajMgrslKuOv8U64NUEqakaKn dHhQ1QjkVqZsl7tiVKjCwnmqi66BmN44 -----END CERTIFICATE-----Generated at Sat Jun 14 18:45:06 2025 by rpki-client