$ rpki-client -vvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft File: PTTx6lntsIbxczTVmekxDXH-B0Q.mft (raw, json) Hash identifier: SftPrXdD6ZkRVMbgc0Fj0y66D1G3Udib9k6IpLjorTY= Subject key identifier: 62:7C:C6:FD:55:37:88:69:62:ED:33:8D:E9:12:FC:22:95:61:3D:AD Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 Certificate issuer: /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Certificate serial: 0E7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft Manifest number: 0E67 Signing time: Sat 14 Jun 2025 17:38:21 +0000 Manifest this update: Sat 14 Jun 2025 17:38:20 +0000 Manifest next update: Sat 21 Jun 2025 17:38:20 +0000 Files and hashes: 1: PTTx6lntsIbxczTVmekxDXH-B0Q.crl (hash: SCJsoZ7jDrFyh2ZE4qWBTWnqxaR/Lo6iIm+9MnyFks4=) 2: 3D69458C9E2111E9BCDFAE69C4F9AE02.roa (hash: alUP6VMzD0tmc3pTboCQa5BjgFfvzIB460TqVIvJ3eU=) 3: A152FA389E2211E99CA85B6CC4F9AE02.roa (hash: tVnO8ZV7Glm7r1+kxCAZBT0FT0Hia7Gl07cM925RQ3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3710 (0xe7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EAE6, serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Validity Not Before: Jun 14 17:38:20 2025 GMT Not After : Jun 21 17:38:20 2025 GMT Subject: CN=684db38d-f837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:20:ed:d6:e0:34:b7:df:c6:f5:31:66:7c: 68:28:6d:3d:f5:17:bb:53:8a:a4:4a:89:bf:86:c5: 03:90:b2:61:5d:68:62:f8:14:56:e7:3d:0a:79:15: 40:62:f8:3d:a8:3c:29:af:cd:b2:ca:25:7f:c3:40: d1:fa:ba:86:a0:b2:79:52:0c:b1:d4:e2:50:ed:9b: fd:25:6b:ac:e4:4f:1c:2f:b7:b7:dd:f2:c2:a4:1f: 98:4b:75:26:66:ce:cf:cc:18:1d:06:69:a9:da:69: d1:3c:f9:a4:0a:5c:81:da:9f:43:17:24:64:ff:d5: 52:82:46:63:db:8c:34:15:a1:81:67:9f:75:4d:35: b0:3d:fa:39:d6:84:0b:05:10:a1:c3:5b:52:93:24: cf:fb:5c:56:ed:d4:b3:df:27:dd:db:dd:17:f9:f7: 0d:a9:60:85:22:88:a1:02:90:76:f7:1a:15:13:11: 87:49:08:0a:92:9d:c9:72:ea:8e:1c:2e:1c:6d:56: 8a:e3:c5:27:f2:1d:e4:57:42:9f:f8:a8:fb:c8:4d: bb:b2:61:60:e4:ec:00:53:f4:ed:fa:5f:8e:88:8f: 85:dd:e3:af:b3:f5:3f:7c:ad:d4:9d:0d:f5:a3:a8: 29:60:74:a8:d7:2a:72:60:06:0f:86:bd:12:01:96: 54:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7C:C6:FD:55:37:88:69:62:ED:33:8D:E9:12:FC:22:95:61:3D:AD X509v3 Authority Key Identifier: keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:34:ef:e1:8a:a5:7a:d5:8f:c5:ba:4a:20:c5:07:76:74:3c: 3a:e2:7b:f1:cb:cb:12:53:b6:9d:6f:78:7b:f7:94:24:4a:45: 1f:25:b5:ea:23:a3:d7:4e:83:ba:fc:5a:5a:5a:d3:5a:cf:fb: 4a:63:c2:79:a5:17:bf:a0:61:7a:13:98:4a:a1:dc:03:59:dc: 4d:74:42:16:15:64:1a:8d:b2:10:20:03:91:ba:ed:cb:fe:fe: d9:a6:d2:e7:fc:43:7a:a5:0a:f4:be:78:7a:33:2c:f0:7a:54: 59:47:74:23:52:e4:8e:17:fd:f7:9c:fd:80:0a:09:c7:b7:fa: 04:b8:34:96:51:73:8e:a9:e0:c9:d9:b5:e4:4f:86:0c:e5:24: b8:ca:bd:1d:bb:43:e8:4e:49:80:a2:dd:d4:7b:e2:9c:47:a6: 75:65:77:1a:3a:6a:cf:11:c5:a1:b1:b6:ef:e3:2d:1d:52:8f: 28:09:50:aa:a2:75:a2:28:ef:75:9d:b8:51:de:71:9c:9c:a9: a4:95:d4:fd:5d:23:92:5a:92:c7:4a:5e:8c:5b:7f:2d:84:17: 40:1e:eb:2c:f3:69:64:05:a5:9f:d7:92:74:e2:35:88:af:14: e0:df:37:5d:db:94:6f:60:e4:9f:37:a0:3f:3b:70:65:e2:cc: 9e:a6:c3:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBRTYxMTAvBgNVBAUTKDNEMzRGMUVBNTlFREIwODZGMTczMzRENTk5RTkzMTBE NzFGRTA3NDQwHhcNMjUwNjE0MTczODIwWhcNMjUwNjIxMTczODIwWjAYMRYwFAYD VQQDEw02ODRkYjM4ZC1mODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrwg7dbgNLffxvUxZnxoKG099Re7U4qkSom/hsUDkLJhXWhi+BRW5z0KeRVA Yvg9qDwpr82yyiV/w0DR+rqGoLJ5Ugyx1OJQ7Zv9JWus5E8cL7e33fLCpB+YS3Um Zs7PzBgdBmmp2mnRPPmkClyB2p9DFyRk/9VSgkZj24w0FaGBZ591TTWwPfo51oQL BRChw1tSkyTP+1xW7dSz3yfd290X+fcNqWCFIoihApB29xoVExGHSQgKkp3JcuqO HC4cbVaK48Un8h3kV0Kf+Kj7yE27smFg5OwAU/Tt+l+OiI+F3eOvs/U/fK3UnQ31 o6gpYHSo1ypyYAYPhr0SAZZUZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJ8xv1V N4hpYu0zjekS/CKVYT2tMB8GA1UdIwQYMBaAFD008epZ7bCG8XM01ZnpMQ1x/gdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUFFNi83QkMyOTMyNjlC RjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJYnhjelRWbWVreERYSC1C MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUVHg2bG50c0lieGN6VFZtZWt4RFhILUIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUFFNi83QkMyOTMyNjlCRjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJ YnhjelRWbWVreERYSC1CMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFNO/hiqV61Y/FukogxQd2dDw64nvxy8sSU7adb3h795QkSkUfJbXq I6PXToO6/FpaWtNaz/tKY8J5pRe/oGF6E5hKodwDWdxNdEIWFWQajbIQIAORuu3L /v7ZptLn/EN6pQr0vnh6MyzwelRZR3QjUuSOF/33nP2ACgnHt/oEuDSWUXOOqeDJ 2bXkT4YM5SS4yr0du0PoTkmAot3Ue+KcR6Z1ZXcaOmrPEcWhsbbv4y0dUo8oCVCq onWiKO91nbhR3nGcnKmkldT9XSOSWpLHSl6MW38thBdAHuss82lkBaWf15J04jWI rxTg3zdd25RvYOSfN6A/O3Bl4syepsPw -----END CERTIFICATE-----Generated at Sat Jun 14 19:42:27 2025 by rpki-client