$ rpki-client -vvf rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft File: rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft (raw, json) Hash identifier: +NUnzcoG8NcucyLUgdpX+5juCSalkiaD4jQlQTFDn3I= Subject key identifier: F5:4E:83:16:55:31:0E:65:C9:E1:4F:AC:DB:1F:D0:BE:DD:24:0B:56 Authority key identifier: AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 Certificate issuer: /CN=A91384DF/serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft Manifest number: D6 Signing time: Tue 17 Jun 2025 04:33:58 +0000 Manifest this update: Tue 17 Jun 2025 04:33:58 +0000 Manifest next update: Tue 24 Jun 2025 04:33:58 +0000 Files and hashes: 1: rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl (hash: cwkbaKuO7xDNdv5JYHKrUM919hNAn8QYyaytMs5X+Z8=) 2: 69BCFB40037711EFBE813223C4F9AE02.roa (hash: PMFbGoDR6epjiOKU9mJpCjoNmw0cJb5L7rzhHF+eaLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384DF, serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3 Validity Not Before: Jun 17 04:33:58 2025 GMT Not After : Jun 24 04:33:58 2025 GMT Subject: CN=6850f036-d5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:bf:f9:5d:26:aa:84:13:1b:aa:96:52:a5: 68:8e:d9:6d:13:e0:f0:2c:12:a3:3d:76:90:9c:01: d5:49:7b:1a:b5:16:0d:60:35:40:ec:7f:21:b3:34: c4:56:47:4e:0c:38:89:9d:77:8d:14:81:34:85:b8: e1:eb:55:3f:fd:cf:d9:9f:37:98:37:7e:1a:70:d8: 23:73:2c:2a:b7:b1:af:a1:e7:2e:2d:0c:67:4a:02: e6:63:6b:4f:19:47:4c:0c:35:4b:e9:62:65:84:cf: 60:55:fd:02:d2:17:bd:e0:01:ae:29:e1:71:39:89: 5a:bd:87:73:89:b6:16:f5:c7:ee:5c:a7:c0:f4:de: 95:7b:96:ac:4e:18:18:c1:69:57:a2:7e:d0:6d:6a: 73:5e:4f:be:9b:0c:89:9e:0e:39:c2:12:1c:33:4b: a9:0a:59:00:b3:fc:69:d3:b8:da:89:65:d2:1f:f5: 14:7f:ba:9e:88:3e:23:4e:5a:bf:e5:4a:c1:e9:ef: fc:75:5f:31:8e:ad:85:02:39:51:37:0a:a4:92:1f: df:98:15:91:41:ed:bc:0d:81:cc:71:c2:0c:d9:c5: 94:2e:b1:1e:91:34:31:a4:8b:8f:7d:16:d8:d5:0b: 6b:24:64:53:1a:e2:73:e5:0e:40:00:ca:57:48:43: 32:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4E:83:16:55:31:0E:65:C9:E1:4F:AC:DB:1F:D0:BE:DD:24:0B:56 X509v3 Authority Key Identifier: keyid:AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:1a:d2:89:68:ef:a0:24:42:0b:1e:f6:35:c9:9a:1c:5e:35: 28:df:94:e9:88:fc:14:c5:2e:55:50:5b:11:c1:88:97:95:7b: 98:9e:fb:fc:51:4c:94:70:98:80:a3:8a:8c:49:d8:ae:f2:a1: f9:ff:db:be:cf:5e:c6:63:f6:f4:c6:43:e0:58:76:04:22:87: 7e:5f:ab:3c:a4:f9:c9:fb:cb:83:c5:8f:a1:bf:43:bd:27:a8: 52:48:cd:e0:6f:ee:33:98:a5:6b:f1:0c:89:f1:b1:08:66:e1: 79:35:11:0b:33:4f:44:ec:ba:73:fa:56:86:d0:f5:0d:ca:08: 96:84:63:f1:ad:2d:93:e7:ab:a7:6b:42:95:dd:69:5b:98:5b: 5c:f4:0a:e1:b1:a0:89:8d:88:b1:e7:3d:f4:1c:a0:0d:57:4e: ee:e3:34:c4:5a:7b:cd:0b:ea:64:4d:5f:1f:ce:b0:31:06:bf: 47:16:1a:71:2b:c8:0f:ed:03:5c:b1:83:d2:f4:4f:d8:b9:25: 8d:71:69:76:a6:46:9c:4c:cd:4e:cf:4e:6b:e0:94:d1:c0:f7: bf:8c:dc:89:4c:8e:c2:91:f6:05:51:eb:ad:5a:a6:82:85:6d: 23:5f:bc:21:56:2e:bb:d1:87:31:63:ff:84:81:40:fb:23:bc: 2d:e7:dc:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0REYxMTAvBgNVBAUTKEFDOTc4OUYyOEFGMTY4QjI2QzUwOTY0NjE1REYwNkQ3 RUM3MjAyRTMwHhcNMjUwNjE3MDQzMzU4WhcNMjUwNjI0MDQzMzU4WjAYMRYwFAYD VQQDEw02ODUwZjAzNi1kNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEa/+V0mqoQTG6qWUqVojtltE+DwLBKjPXaQnAHVSXsatRYNYDVA7H8hszTE VkdODDiJnXeNFIE0hbjh61U//c/ZnzeYN34acNgjcywqt7GvoecuLQxnSgLmY2tP GUdMDDVL6WJlhM9gVf0C0he94AGuKeFxOYlavYdzibYW9cfuXKfA9N6Ve5asThgY wWlXon7QbWpzXk++mwyJng45whIcM0upClkAs/xp07jaiWXSH/UUf7qeiD4jTlq/ 5UrB6e/8dV8xjq2FAjlRNwqkkh/fmBWRQe28DYHMccIM2cWULrEekTQxpIuPfRbY 1QtrJGRTGuJz5Q5AAMpXSEMyjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVOgxZV MQ5lyeFPrNsf0L7dJAtWMB8GA1UdIwQYMBaAFKyXifKK8WiybFCWRhXfBtfscgLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRERi9BRTE2NEI2MjAz NzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFMSnNVSlpHRmQ4RzEteHlB dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKZUo4b3J4YUxKc1VKWkdGZDhHMS14eUF1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRERi9BRTE2NEI2MjAzNzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFM SnNVSlpHRmQ4RzEteHlBdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjGtKJaO+gJEILHvY1yZocXjUo35TpiPwUxS5VUFsRwYiXlXuYnvv8 UUyUcJiAo4qMSdiu8qH5/9u+z17GY/b0xkPgWHYEIod+X6s8pPnJ+8uDxY+hv0O9 J6hSSM3gb+4zmKVr8QyJ8bEIZuF5NRELM09E7Lpz+laG0PUNygiWhGPxrS2T56un a0KV3WlbmFtc9ArhsaCJjYix5z30HKANV07u4zTEWnvNC+pkTV8fzrAxBr9HFhpx K8gP7QNcsYPS9E/YuSWNcWl2pkacTM1Oz05r4JTRwPe/jNyJTI7CkfYFUeutWqaC hW0jX7whVi670YcxY/+EgUD7I7wt59zl -----END CERTIFICATE-----Generated at Tue Jun 17 19:50:42 2025 by rpki-client