$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft File: J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json) Hash identifier: dqbhGheL+DQp/8JWISV3tsgEwW7Iqc99WlacYpHLU3Q= Subject key identifier: 91:69:AD:2B:E7:50:D6:69:FB:5C:57:3F:9D:B8:91:43:69:FE:97:4F Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Certificate serial: 0B7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft Manifest number: 0B6E Signing time: Fri 20 Jun 2025 18:59:37 +0000 Manifest this update: Fri 20 Jun 2025 18:59:36 +0000 Manifest next update: Fri 27 Jun 2025 18:59:36 +0000 Files and hashes: 1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: G2yCUQQfahKC26uoDak4KCHPR6GYOQfkUGgP4+9IFxo=) 2: E1647F18303311EA8796D584C4F9AE02.roa (hash: A+siabWCuB3xIRMkeynsCCrAfo8cD2JRUNWKm9UeiPs=) 3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: DlWNPzEgwL6rY9jLVqQ4BkKSA+pMzEb7rL1OQsFzSd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 18:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2938 (0xb7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Validity Not Before: Jun 20 18:59:36 2025 GMT Not After : Jun 27 18:59:36 2025 GMT Subject: CN=6855af98-c854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:93:d7:e3:f4:90:92:c6:de:45:84:36:95:1b: 3f:c6:fa:b3:c0:5f:5e:94:6e:89:43:ff:d7:86:fd: 33:1e:48:ca:25:d9:34:e7:4d:e2:b9:aa:ce:de:58: 74:8c:79:a8:6f:91:cf:ff:ec:60:03:44:ff:99:04: bd:b8:d8:9f:e6:53:af:3e:22:02:fb:b9:09:2f:d8: 48:3d:41:de:79:fd:74:d6:fa:89:ba:d3:be:b8:4d: 47:ad:4a:d2:05:d6:26:56:27:55:7f:a5:38:f0:d6: 31:f7:f7:b5:f0:42:a1:c3:57:88:52:4f:66:4e:d8: ec:f2:a3:64:07:bd:ff:0b:79:78:6f:a9:02:c7:dc: 8f:92:dc:79:92:71:46:6d:81:64:08:8b:14:c4:ae: ba:b9:70:e6:9e:c1:9d:bc:73:58:4f:3b:15:3b:1c: 5f:29:d1:54:b0:d0:bd:f2:f8:09:98:16:71:91:6a: 0d:a8:e7:77:52:3d:30:c2:0a:21:95:3a:36:f5:62: 5f:24:a8:4a:8f:24:b7:dd:f2:8d:27:d4:9e:11:60: 1c:87:00:cd:cc:52:8b:27:f0:19:e9:9b:be:83:61: 82:e3:f5:3a:e5:f0:ad:ac:0e:23:86:b8:9a:d3:72: 37:69:fa:5c:a6:8f:1b:e7:64:f5:8e:cf:85:d0:d0: 27:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:69:AD:2B:E7:50:D6:69:FB:5C:57:3F:9D:B8:91:43:69:FE:97:4F X509v3 Authority Key Identifier: keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:0d:6b:78:d1:90:80:53:47:73:5b:16:e5:c5:3c:35:86:ca: f1:65:9e:10:18:3e:a3:fe:15:2c:4b:f6:16:e1:72:f4:df:27: 39:83:e8:11:e5:bc:a1:55:25:9c:50:91:a0:31:55:11:7c:d5: 26:23:e1:0a:88:6a:ea:2c:7c:57:23:4e:f6:c5:1a:ec:42:25: 48:34:9b:31:a5:b3:80:4a:d1:ea:bd:fe:38:e9:2e:27:28:d2: 94:f9:44:34:fd:bc:6f:5b:46:98:be:4c:5f:58:29:c3:ec:c2: 42:a6:de:94:f6:58:00:ef:25:40:e8:f2:74:92:c8:80:c9:4a: 89:39:61:91:35:cd:3f:61:d7:b9:d6:83:2a:f8:83:37:df:ad: 8b:d7:e1:f9:d4:d6:6b:8f:b8:05:2c:17:6a:66:67:41:75:33: 4a:73:59:f0:43:2a:4c:ca:a5:0d:cc:7d:31:57:85:cd:b4:e4: 7d:c4:e2:ae:ce:2a:ac:6d:f9:c2:02:84:52:c3:38:f9:81:95: 01:11:93:41:d5:dc:3a:36:15:6f:b7:03:58:af:58:e3:24:44: be:8b:6c:55:b8:5c:52:1f:f0:96:d8:2b:ca:82:55:f5:9c:a5: b4:3e:b4:df:a1:60:19:c3:fd:7a:a7:c1:20:9d:de:83:f3:49: 7c:14:2c:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0RkIxMTAvBgNVBAUTKDI3NEUwM0I2N0IzMTEzM0RFN0MwQUFFOTlFMjlDMTk5 NTk1MkI1QUQwHhcNMjUwNjIwMTg1OTM2WhcNMjUwNjI3MTg1OTM2WjAYMRYwFAYD VQQDEw02ODU1YWY5OC1jODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ZPX4/SQksbeRYQ2lRs/xvqzwF9elG6JQ//Xhv0zHkjKJdk0503iuarO3lh0 jHmob5HP/+xgA0T/mQS9uNif5lOvPiIC+7kJL9hIPUHeef101vqJutO+uE1HrUrS BdYmVidVf6U48NYx9/e18EKhw1eIUk9mTtjs8qNkB73/C3l4b6kCx9yPktx5knFG bYFkCIsUxK66uXDmnsGdvHNYTzsVOxxfKdFUsNC98vgJmBZxkWoNqOd3Uj0wwgoh lTo29WJfJKhKjyS33fKNJ9SeEWAchwDNzFKLJ/AZ6Zu+g2GC4/U65fCtrA4jhria 03I3afpcpo8b52T1js+F0NAn0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFprSvn UNZp+1xXP524kUNp/pdPMB8GA1UdIwQYMBaAFCdOA7Z7MRM958Cq6Z4pwZlZUrWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGQi8yREQ5MEYyQzMw MzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6M253S3JwbmluQm1WbFN0 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0owNER0bnN4RXozbndLcnBuaW5CbVZsU3RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRGQi8yREQ5MEYyQzMwMzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6 M253S3JwbmluQm1WbFN0YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWDWt40ZCAU0dzWxblxTw1hsrxZZ4QGD6j/hUsS/YW4XL03yc5g+gR 5byhVSWcUJGgMVURfNUmI+EKiGrqLHxXI072xRrsQiVINJsxpbOAStHqvf446S4n KNKU+UQ0/bxvW0aYvkxfWCnD7MJCpt6U9lgA7yVA6PJ0ksiAyUqJOWGRNc0/Yde5 1oMq+IM3362L1+H51NZrj7gFLBdqZmdBdTNKc1nwQypMyqUNzH0xV4XNtOR9xOKu ziqsbfnCAoRSwzj5gZUBEZNB1dw6NhVvtwNYr1jjJES+i2xVuFxSH/CW2CvKglX1 nKW0PrTfoWAZw/16p8Egnd6D80l8FCy5 -----END CERTIFICATE-----Generated at Sat Jun 21 05:01:51 2025 by rpki-client