$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: xRvrvDYywigoVQWe9ACQT1HPyoGyNo08Y+WWhLos5v8= Subject key identifier: 6B:C2:5C:22:43:23:07:9D:59:89:06:1F:0B:5A:24:FE:97:6A:64:84 Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 0621 Signing time: Thu 12 Jun 2025 22:26:29 +0000 Manifest this update: Thu 12 Jun 2025 22:26:28 +0000 Manifest next update: Thu 19 Jun 2025 22:26:28 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: Ck8lG1y/gm4eTYLdxiOoWIiheQf2HVH3wwsEpI8Jkt8=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: qCXzkeKuPVL2AFCLekUycL2ac1PSk1oLXnC7v+nyDIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Jun 12 22:26:28 2025 GMT Not After : Jun 19 22:26:28 2025 GMT Subject: CN=684b5415-8bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:02:97:51:d5:01:f5:50:af:43:2d:1f:6e: c0:a7:9b:5d:33:46:a1:d5:aa:d4:8d:eb:bb:ef:68: c7:41:b5:a2:0a:ba:b8:06:e9:60:ee:73:bf:05:94: 47:8e:9a:35:5a:c2:c8:f3:0d:42:17:b4:0e:06:26: ce:88:97:64:ad:d1:8e:c7:b0:b5:96:a0:f6:63:96: b5:e7:1f:42:fc:50:c7:c7:bc:b3:f8:bd:c4:3f:e2: 2f:af:1c:be:bb:16:d4:1e:7f:b5:a9:f2:73:3f:de: bd:38:ee:8d:8c:76:9c:9a:d4:6d:e4:39:d1:ed:3b: 8a:1e:1a:0b:dc:7a:89:9e:97:c8:f9:7d:05:9f:fe: e2:42:ea:54:ea:8f:66:97:cf:07:21:59:4f:43:9b: 1b:ed:8f:32:a6:05:50:ac:3c:ab:df:bc:c4:d8:9f: 3e:a7:ca:d9:a7:5c:8a:f5:65:d7:6b:50:37:36:2b: 95:a3:44:28:33:34:a6:aa:62:9f:05:64:02:ed:31: 01:38:00:77:4b:89:c8:e3:5b:08:9f:73:a1:cb:de: a1:d1:e9:05:db:69:d7:4f:d6:b2:46:c6:b0:32:42: c7:f9:47:c4:9d:42:88:1e:9d:01:45:c5:b6:ea:54: 87:18:e5:6d:9f:92:68:32:a4:b8:01:f4:85:4b:50: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C2:5C:22:43:23:07:9D:59:89:06:1F:0B:5A:24:FE:97:6A:64:84 X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:20:8e:2c:eb:ff:32:a0:4a:49:8e:5b:f2:4f:98:13:2e:c3: 8d:fd:d0:7b:cc:12:2b:2a:b7:31:99:76:1f:51:d5:7e:29:fd: da:1c:11:e4:f4:4d:7f:d1:6e:47:f2:1d:3e:5e:cc:66:64:8a: 6a:67:68:ac:b9:7e:7c:31:62:49:50:11:ac:ef:7a:be:fc:7b: db:f5:ff:b1:1b:f5:91:2b:29:ff:8e:2a:eb:9c:0a:2d:fc:e6: 66:bd:d6:39:7b:b4:08:09:c5:4b:af:13:fa:7a:34:61:45:34: d2:98:5a:1b:79:35:58:5c:0e:5a:62:4c:8c:10:d1:cd:66:c4: 5a:96:8f:39:36:4f:99:bb:34:65:d4:e6:49:c8:75:83:c6:6a: c7:5c:9e:37:98:e2:21:ac:81:3b:08:ba:91:80:87:ac:7a:a1: 36:30:dd:49:af:1c:9c:db:e0:00:a0:a8:c2:1b:2d:02:db:7f: 2f:8b:70:ab:7c:65:2f:97:4a:38:c0:ac:52:86:e3:62:89:1b: ff:c6:bb:a3:d8:1c:88:b0:ab:8e:f2:95:c4:6f:d3:c1:93:e5: 92:6d:c5:22:9c:80:21:cf:2b:70:f7:b0:b7:c8:3e:ab:5c:7b: 0c:03:79:8c:57:02:fd:61:59:80:1e:5c:16:90:a7:ce:6a:d8: 43:ae:37:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUwNjEyMjIyNjI4WhcNMjUwNjE5MjIyNjI4WjAYMRYwFAYD VQQDEw02ODRiNTQxNS04YmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsawCl1HVAfVQr0MtH27Ap5tdM0ah1arUjeu772jHQbWiCrq4Bulg7nO/BZRH jpo1WsLI8w1CF7QOBibOiJdkrdGOx7C1lqD2Y5a15x9C/FDHx7yz+L3EP+Ivrxy+ uxbUHn+1qfJzP969OO6NjHacmtRt5DnR7TuKHhoL3HqJnpfI+X0Fn/7iQupU6o9m l88HIVlPQ5sb7Y8ypgVQrDyr37zE2J8+p8rZp1yK9WXXa1A3NiuVo0QoMzSmqmKf BWQC7TEBOAB3S4nI41sIn3Ohy96h0ekF22nXT9ayRsawMkLH+UfEnUKIHp0BRcW2 6lSHGOVtn5JoMqS4AfSFS1CvBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvCXCJD IwedWYkGHwtaJP6XamSEMB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoII4s6/8yoEpJjlvyT5gTLsON/dB7zBIrKrcxmXYfUdV+Kf3aHBHk 9E1/0W5H8h0+XsxmZIpqZ2isuX58MWJJUBGs73q+/Hvb9f+xG/WRKyn/jirrnAot /OZmvdY5e7QICcVLrxP6ejRhRTTSmFobeTVYXA5aYkyMENHNZsRalo85Nk+ZuzRl 1OZJyHWDxmrHXJ43mOIhrIE7CLqRgIeseqE2MN1Jrxyc2+AAoKjCGy0C238vi3Cr fGUvl0o4wKxShuNiiRv/xruj2ByIsKuO8pXEb9PBk+WSbcUinIAhzytw97C3yD6r XHsMA3mMVwL9YVmAHlwWkKfOathDrjfG -----END CERTIFICATE-----Generated at Sat Jun 14 18:59:45 2025 by rpki-client