$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: Mm9A57u28RymYlWannAsBFQkJRui9BDn5nxJSGNrMI8= Subject key identifier: E8:EE:DA:AC:80:37:6F:28:1B:69:8E:9E:1B:CD:2C:65:D2:0C:9A:DC Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 2635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 260F Signing time: Thu 12 Jun 2025 15:41:53 +0000 Manifest this update: Thu 12 Jun 2025 15:41:53 +0000 Manifest next update: Thu 19 Jun 2025 15:41:53 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: EC8Lo1nLdOtkaN5WwO/244K1unS0HXHr9EeXcxOPPqU=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: Bub+bmfe4PnreQ1ZPIst7Ck9C3Kep4qMMCvN4ZXfJXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 15:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9781 (0x2635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: Jun 12 15:41:53 2025 GMT Not After : Jun 19 15:41:53 2025 GMT Subject: CN=684af541-caa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:89:42:79:38:10:e9:cf:8c:e7:75:9a:eb:ee: 45:2c:62:13:93:c5:ba:50:fe:b5:36:b0:eb:cd:da: ea:a9:97:22:9e:c8:75:44:a8:ba:5e:78:4a:e4:a0: 4a:a3:81:ce:84:34:b1:ef:d8:62:5c:02:fe:73:67: a4:34:1a:1c:b3:b7:ab:3c:57:41:6a:2b:fb:91:82: 34:7a:d7:15:dd:e1:56:29:ae:e8:3c:4a:ce:c3:8b: 27:c3:ab:30:8c:80:bc:60:7c:71:c7:c7:9b:bd:cc: 04:9d:f9:ca:f4:e9:5d:23:75:10:e6:30:25:95:02: 09:ca:51:8d:4a:1f:98:64:7a:f1:00:a6:10:3a:83: 96:de:a5:cf:02:ea:63:d0:c3:6b:c5:dd:e8:75:f2: 49:c2:b0:3a:00:1e:f1:5a:26:eb:48:11:41:0f:4b: 4c:12:c6:d3:d4:20:2c:42:e0:c0:cf:7e:27:d3:26: 45:ba:98:76:25:d3:05:b4:89:6c:16:34:92:94:dc: 7f:a8:9b:a6:db:a6:90:32:ea:37:0f:3d:b0:ea:38: 69:e0:8c:7e:0b:a7:14:bf:5d:f7:6e:e8:fc:4b:10: 52:fc:dd:a1:ea:8c:c8:5d:66:3f:24:55:98:52:26: c6:14:31:82:81:b4:50:e6:ee:b2:2e:90:e3:72:d5: b8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EE:DA:AC:80:37:6F:28:1B:69:8E:9E:1B:CD:2C:65:D2:0C:9A:DC X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:01:21:9c:b1:58:98:18:00:d3:44:f0:b2:30:20:07:9a:6d: 59:ce:2b:c3:6a:73:89:0d:85:9d:fe:05:40:bf:5e:e7:2a:18: 96:da:b9:b3:ca:84:1a:62:2b:66:82:13:03:fc:61:28:a7:80: 16:07:ef:85:b8:50:51:a3:95:e4:2e:42:d0:79:fb:eb:8f:2e: 16:17:9c:7c:ae:5a:37:41:0c:d7:66:c2:0f:16:82:e1:60:03: df:a1:b5:4e:f0:01:93:00:b1:86:cc:d9:16:67:e5:5a:d7:ab: ba:cd:3d:8f:da:c1:2f:44:a0:58:55:64:55:58:8e:f4:87:de: 94:50:3c:fd:f6:c9:08:dc:ff:8a:5f:07:04:e1:a7:ab:b3:bd: f3:7b:82:1f:44:af:36:a5:52:2b:a6:35:cd:e3:92:ea:81:d8: 61:71:fc:66:ec:15:05:b4:c8:a0:7a:02:d0:64:43:4f:95:2f: 54:8d:57:4c:bd:5c:a4:41:2d:a9:1b:4c:2e:68:46:55:94:61: 60:f6:a3:17:f2:1f:73:78:87:ea:a1:19:8c:8e:fd:cd:c6:4b: 51:20:1c:f5:97:e9:0c:4a:00:f3:d1:3b:79:31:eb:a1:ff:5b: 20:3f:26:63:26:8f:2e:cb:1a:43:97:11:7b:74:9d:ec:c5:38: 86:e1:3e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjUwNjEyMTU0MTUzWhcNMjUwNjE5MTU0MTUzWjAYMRYwFAYD VQQDEw02ODRhZjU0MS1jYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IlCeTgQ6c+M53Wa6+5FLGITk8W6UP61NrDrzdrqqZcinsh1RKi6XnhK5KBK o4HOhDSx79hiXAL+c2ekNBocs7erPFdBaiv7kYI0etcV3eFWKa7oPErOw4snw6sw jIC8YHxxx8ebvcwEnfnK9OldI3UQ5jAllQIJylGNSh+YZHrxAKYQOoOW3qXPAupj 0MNrxd3odfJJwrA6AB7xWibrSBFBD0tMEsbT1CAsQuDAz34n0yZFuph2JdMFtIls FjSSlNx/qJum26aQMuo3Dz2w6jhp4Ix+C6cUv133buj8SxBS/N2h6ozIXWY/JFWY UibGFDGCgbRQ5u6yLpDjctW4OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOju2qyA N28oG2mOnhvNLGXSDJrcMB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOASGcsViYGADTRPCyMCAHmm1ZzivDanOJDYWd/gVAv17nKhiW2rmz yoQaYitmghMD/GEop4AWB++FuFBRo5XkLkLQefvrjy4WF5x8rlo3QQzXZsIPFoLh YAPfobVO8AGTALGGzNkWZ+Va16u6zT2P2sEvRKBYVWRVWI70h96UUDz99skI3P+K XwcE4aers73ze4IfRK82pVIrpjXN45Lqgdhhcfxm7BUFtMigegLQZENPlS9UjVdM vVykQS2pG0wuaEZVlGFg9qMX8h9zeIfqoRmMjv3NxktRIBz1l+kMSgDz0Tt5Meuh /1sgPyZjJo8uyxpDlxF7dJ3sxTiG4T54 -----END CERTIFICATE-----Generated at Sat Jun 14 17:35:25 2025 by rpki-client