$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: FUrdtvY2/tuPqL1aRQgofXILVpRHwfBzI+RMrxOHQ9Q= Subject key identifier: B0:78:7C:61:6B:FE:34:27:9A:A8:CF:F7:D8:21:CE:F0:B8:B8:A0:10 Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0D66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D2A Signing time: Sat 14 Jun 2025 17:59:32 +0000 Manifest this update: Sat 14 Jun 2025 17:59:32 +0000 Manifest next update: Sat 21 Jun 2025 17:59:32 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: vyy67hKGhledyMk2ULgnX1NlnDIE8VsI3ZpJCC6+1co=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) 4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) 6: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=) 7: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3430 (0xd66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Jun 14 17:59:32 2025 GMT Not After : Jun 21 17:59:32 2025 GMT Subject: CN=684db884-2d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c4:12:f2:54:69:f6:e6:a6:13:ae:2d:50:fd: 19:e1:90:a2:77:e5:2e:ec:5e:55:f2:20:22:77:96: 95:67:bb:48:4a:26:73:0f:93:36:c0:6e:f7:8a:e8: 62:23:56:81:2f:0b:bb:21:e4:4d:9b:a2:4f:ba:6a: 9e:80:bd:78:32:58:de:2b:25:23:0a:f6:91:ef:d8: 7d:09:1c:8e:66:1f:c9:8f:ae:7e:2a:ce:ad:0d:e3: 65:03:e4:cd:5b:27:28:30:b7:17:b8:76:56:0b:da: cb:cc:00:d7:c9:cd:00:20:4b:10:8a:de:78:d0:28: d1:ec:33:ac:63:0a:88:53:fd:98:16:83:4e:db:71: f3:db:77:cb:08:00:6e:ac:c6:13:4f:4f:b3:f0:c2: 2f:24:d2:cb:8e:ea:03:f7:1f:d9:66:1b:10:a5:8d: 1e:8f:4a:a0:75:13:5a:24:e9:8e:ac:db:80:e9:6e: 98:73:ff:f7:8d:cb:a5:42:c4:32:b7:4a:58:97:31: 73:cd:9f:3d:11:40:0e:12:f7:89:6c:17:5c:fe:88: 75:3f:05:cf:94:1c:4d:20:7e:6e:cb:ed:09:2c:38: 01:1f:75:c4:f3:66:d7:55:45:19:5f:2b:3e:37:23: cd:ea:5d:76:cb:40:1c:93:6b:f2:d0:f1:e4:87:cc: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:78:7C:61:6B:FE:34:27:9A:A8:CF:F7:D8:21:CE:F0:B8:B8:A0:10 X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:39:eb:b5:bd:42:32:c0:3e:64:d5:36:7c:00:b7:63:cd:06: 73:a8:ac:1d:9b:75:13:b7:24:c3:37:96:d2:ac:19:d0:90:fe: 36:e6:50:17:31:aa:a8:f1:b6:87:4a:aa:f2:63:27:0f:38:22: 22:15:f8:39:6c:62:f8:00:89:8a:8a:f5:56:76:2e:b6:74:16: 9c:8e:f7:45:95:67:c3:27:58:f2:92:cf:e2:b9:1e:ed:e3:65: 32:f8:5a:f7:63:7e:c6:40:61:34:95:bc:6e:32:bd:79:1e:0e: d0:02:55:8b:e6:53:88:0d:8b:61:03:cf:56:12:7c:f9:12:49: a5:2b:2e:f3:77:ee:cd:53:71:1f:55:4e:e9:6d:1c:44:d8:4b: 59:db:7d:2f:c2:0d:7a:a4:f9:e5:7c:80:48:78:ec:58:a6:e5: 90:1e:71:ad:f6:0d:7e:45:e1:b7:95:3d:97:25:0d:bd:2e:ba: 1b:25:45:bc:77:81:de:43:f8:fe:d9:81:95:63:64:58:d7:10: 23:70:31:fe:4a:73:cf:ed:59:3b:b4:1a:80:1d:63:b2:76:0f: 44:ae:7f:fd:af:b9:21:1b:54:23:19:f3:e8:b6:a5:85:91:c0: f8:89:85:96:63:c0:31:40:7f:65:64:2b:01:d1:73:8b:46:de: 05:3b:11:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUwNjE0MTc1OTMyWhcNMjUwNjIxMTc1OTMyWjAYMRYwFAYD VQQDEw02ODRkYjg4NC0yZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcQS8lRp9uamE64tUP0Z4ZCid+Uu7F5V8iAid5aVZ7tISiZzD5M2wG73iuhi I1aBLwu7IeRNm6JPumqegL14MljeKyUjCvaR79h9CRyOZh/Jj65+Ks6tDeNlA+TN WycoMLcXuHZWC9rLzADXyc0AIEsQit540CjR7DOsYwqIU/2YFoNO23Hz23fLCABu rMYTT0+z8MIvJNLLjuoD9x/ZZhsQpY0ej0qgdRNaJOmOrNuA6W6Yc//3jculQsQy t0pYlzFzzZ89EUAOEveJbBdc/oh1PwXPlBxNIH5uy+0JLDgBH3XE82bXVUUZXys+ NyPN6l12y0Ack2vy0PHkh8wgZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLB4fGFr /jQnmqjP99ghzvC4uKAQMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUOeu1vUIywD5k1TZ8ALdjzQZzqKwdm3UTtyTDN5bSrBnQkP425lAX Maqo8baHSqryYycPOCIiFfg5bGL4AImKivVWdi62dBacjvdFlWfDJ1jyks/iuR7t 42Uy+Fr3Y37GQGE0lbxuMr15Hg7QAlWL5lOIDYthA89WEnz5EkmlKy7zd+7NU3Ef VU7pbRxE2EtZ230vwg16pPnlfIBIeOxYpuWQHnGt9g1+ReG3lT2XJQ29LrobJUW8 d4HeQ/j+2YGVY2RY1xAjcDH+SnPP7Vk7tBqAHWOydg9Ern/9r7khG1QjGfPotqWF kcD4iYWWY8AxQH9lZCsB0XOLRt4FOxHV -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:24 2025 by rpki-client