$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: XbhzK3TsqRKNsxXMjlsQcKdEVsC0pfCRE+F8GA8GrO0= Subject key identifier: B0:6B:29:15:13:04:89:8F:AF:0E:0F:0B:E1:EE:6D:0A:0D:03:2F:B6 Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 025B Signing time: Thu 19 Jun 2025 01:38:33 +0000 Manifest this update: Thu 19 Jun 2025 01:38:33 +0000 Manifest next update: Thu 26 Jun 2025 01:38:33 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: a5bKxrT+JKk+BVeqZUJMwuftXTaE9fHx7EtoV0bvNck=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: nUMhsxhIRqeHeQEDGBtbEEh0D5JOlIzRcfpKkf1PF5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Jun 19 01:38:33 2025 GMT Not After : Jun 26 01:38:33 2025 GMT Subject: CN=68536a19-2439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1c:74:37:60:ed:14:12:7a:2a:b7:cd:4a:0b: 57:a6:04:1c:49:49:40:c7:c6:d3:c1:bd:98:df:0b: 1b:b3:c6:5c:75:c1:0c:c1:0c:7f:13:b7:90:73:b5: 4f:bb:ad:9e:60:68:89:e9:92:30:8a:aa:b2:ab:a9: c9:9d:20:17:c3:a3:02:d2:7c:0c:aa:1c:25:c6:7a: 8d:9f:7c:76:f1:4f:b0:bb:af:ee:7f:ca:42:6b:1c: ea:cc:4b:e2:be:fd:69:b6:a2:54:09:34:f8:ce:8f: a7:45:5f:26:5c:af:1b:b0:2c:bf:b6:23:83:d7:3a: 14:4d:d2:aa:31:81:6b:6f:7a:1b:2f:1e:19:58:c3: e9:e4:38:2e:2e:e9:98:0a:e6:6a:16:2d:67:f8:92: 76:12:d7:8e:5e:f3:ed:ff:7f:9f:b1:8f:6a:55:08: 89:b2:18:ed:02:2e:9f:4a:9b:c0:8e:6a:81:d4:e6: 10:b5:2d:6d:82:62:a2:42:de:31:5a:56:a7:6e:d8: 83:11:a0:55:c4:19:3c:70:04:7d:3b:35:49:5a:79: e8:3e:33:da:62:2d:19:e4:e8:85:fd:c3:65:1c:4c: d0:4c:ef:02:c1:26:9c:68:3d:45:f4:48:fc:2c:a5: aa:fd:ff:bb:7a:19:75:44:e0:10:4a:16:b7:29:af: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6B:29:15:13:04:89:8F:AF:0E:0F:0B:E1:EE:6D:0A:0D:03:2F:B6 X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:f7:d6:e7:da:69:8f:15:3f:34:7d:b7:44:54:9b:cd:9b:2d: 4d:e6:ba:83:81:8d:91:f8:09:88:08:67:93:df:44:b3:18:80: 35:94:d2:2a:2e:81:21:44:c0:23:95:3b:2c:1d:fb:aa:86:e7: 0c:a2:38:c9:60:18:61:95:05:6b:4e:19:be:6f:a3:bb:ff:6c: b2:44:2c:1d:c4:a2:c5:7a:98:a5:7d:a2:89:e5:47:42:ee:46: 90:44:0a:d5:16:bd:e4:2e:cf:24:bd:80:58:a3:3d:cb:9b:34: 88:9f:8b:0e:ec:d8:1f:ae:3b:bc:b2:c1:af:60:29:c8:b5:35: 34:47:e4:fa:92:7f:81:45:ca:ac:b6:3d:b2:fe:83:97:41:77: b2:97:a0:ab:07:5a:5c:db:38:ec:62:df:1b:aa:f1:21:8f:31: 63:61:69:a2:92:56:d4:49:18:c1:86:a2:5b:0a:4c:d6:7e:18: 53:2d:4f:49:3d:60:36:86:18:d9:db:77:cd:a0:94:69:c4:fd: 8d:b7:16:d8:4d:79:1b:6d:9d:69:8c:a2:7d:47:6c:9d:bc:88: 3a:af:de:1d:18:27:fc:d1:a1:6e:5f:d5:6b:c4:d4:da:e6:a3: a9:5b:01:02:65:6a:8b:b8:7a:0c:6a:22:26:7d:c1:7a:26:4e: 5e:db:a7:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUwNjE5MDEzODMzWhcNMjUwNjI2MDEzODMzWjAYMRYwFAYD VQQDEw02ODUzNmExOS0yNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmRx0N2DtFBJ6KrfNSgtXpgQcSUlAx8bTwb2Y3wsbs8ZcdcEMwQx/E7eQc7VP u62eYGiJ6ZIwiqqyq6nJnSAXw6MC0nwMqhwlxnqNn3x28U+wu6/uf8pCaxzqzEvi vv1ptqJUCTT4zo+nRV8mXK8bsCy/tiOD1zoUTdKqMYFrb3obLx4ZWMPp5DguLumY CuZqFi1n+JJ2EteOXvPt/3+fsY9qVQiJshjtAi6fSpvAjmqB1OYQtS1tgmKiQt4x WlanbtiDEaBVxBk8cAR9OzVJWnnoPjPaYi0Z5OiF/cNlHEzQTO8CwSacaD1F9Ej8 LKWq/f+7ehl1ROAQSha3Ka/jeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBrKRUT BImPrw4PC+HubQoNAy+2MB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp99bn2mmPFT80fbdEVJvNmy1N5rqDgY2R+AmICGeT30SzGIA1lNIq LoEhRMAjlTssHfuqhucMojjJYBhhlQVrThm+b6O7/2yyRCwdxKLFepilfaKJ5UdC 7kaQRArVFr3kLs8kvYBYoz3LmzSIn4sO7Ngfrju8ssGvYCnItTU0R+T6kn+BRcqs tj2y/oOXQXeyl6CrB1pc2zjsYt8bqvEhjzFjYWmiklbUSRjBhqJbCkzWfhhTLU9J PWA2hhjZ23fNoJRpxP2NtxbYTXkbbZ1pjKJ9R2ydvIg6r94dGCf80aFuX9VrxNTa 5qOpWwECZWqLuHoMaiImfcF6Jk5e26dN -----END CERTIFICATE-----Generated at Fri Jun 20 00:05:18 2025 by rpki-client