$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: zTTJ+iCSbuz99BWyzxbEeZL7/qfbSzvH39MIZyw9p5A= Subject key identifier: 4D:35:23:6C:F8:A5:28:30:F4:8F:E7:9E:F9:87:89:83:C3:99:A5:0B Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 0D Signing time: Tue 17 Jun 2025 06:57:54 +0000 Manifest this update: Tue 17 Jun 2025 06:57:54 +0000 Manifest next update: Tue 24 Jun 2025 06:57:54 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: Bp42MzH0PYx2qHvjQ3COf56tJQvQX/06lhGoJCx6jqw=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: WjrCPyYv6DM2gew7P6NYlYVGnvxscnLkNnUQla2eJOg=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GaxzV7+DkMGpd57xnNkPMderTpqjXPXFd/uGzJlcq9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Jun 17 06:57:54 2025 GMT Not After : Jun 24 06:57:54 2025 GMT Subject: CN=685111f2-e520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:bb:1f:17:90:48:00:58:b1:14:fb:6f:3d: 8f:82:be:05:05:2e:7f:26:0f:72:b4:07:38:62:d7: d9:58:cc:b5:6d:f8:a7:30:a7:29:6f:c1:f5:a8:20: b0:af:ba:d0:bb:cc:d0:4a:74:f9:df:e5:45:8f:41: b7:9d:44:37:15:65:15:cd:96:20:bd:32:9c:af:7b: cb:72:67:8c:44:89:e9:f1:c4:b8:6c:b4:f3:50:c3: 44:1b:b5:74:c2:34:d1:35:0a:73:db:f7:47:8a:90: 52:f6:cd:2e:35:aa:86:28:27:ce:90:b4:a1:b2:dd: 37:d3:4c:b5:25:f0:ed:2c:b0:fa:2a:a6:5d:d4:4f: 3d:5b:e9:e5:7a:d4:c8:ab:4c:cd:bc:34:04:ed:d4: 2a:0c:52:68:7a:c2:a1:31:5c:33:05:95:a5:7d:fc: 4e:d0:99:88:c1:d2:5d:47:31:7b:fd:32:db:f8:25: 99:81:0e:10:26:61:87:4b:b5:a7:e4:d1:3e:14:53: bc:10:47:01:95:f6:ed:8d:af:1f:38:e4:44:98:cf: 38:fa:92:1f:d1:37:bf:d2:c1:4e:d0:b7:f0:d4:e7: a3:d5:a8:a6:d0:16:81:8c:2e:a6:21:db:b0:26:72: 4b:2f:74:40:a7:03:d6:4e:28:b6:d3:eb:1a:bb:fe: 75:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:35:23:6C:F8:A5:28:30:F4:8F:E7:9E:F9:87:89:83:C3:99:A5:0B X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:f9:22:29:71:9d:cc:a6:7d:9a:61:8e:b3:9b:c8:64:ff:06: 09:74:c9:b4:91:65:a7:19:b1:fa:9b:05:d3:b2:0d:6d:72:b2: c1:a8:d2:7d:10:34:af:a0:2d:bb:71:85:2e:41:bc:fe:5c:a8: e2:9f:25:b4:11:a7:5a:de:68:88:80:ad:e3:e3:89:1e:b6:1f: 52:e3:b0:8a:ca:de:d3:01:45:9b:25:c1:03:38:a4:61:bb:4a: 26:f6:4f:86:d6:32:16:59:ec:42:85:bf:d9:d4:a5:14:4b:ac: 02:ea:0a:ea:ea:53:a9:91:fe:9d:0c:ca:41:a3:fa:33:ba:d1: 6c:8d:32:e4:18:84:76:24:ab:63:a6:3d:6a:98:54:66:f9:c8: 5d:1f:c3:79:57:5f:70:84:b2:bd:89:2c:d9:a6:a1:11:5c:27: 61:15:f0:b4:7f:0b:b0:a9:75:d9:f2:36:b0:3a:82:a1:e4:32: 9d:27:2e:8b:1d:2b:0e:35:27:01:91:85:ab:d5:48:85:93:09: 29:98:d5:19:01:73:11:83:bd:df:a0:bf:0d:a5:49:3e:ca:ad: 90:69:43:f6:47:56:4c:98:44:eb:87:c1:9a:89:48:b1:f4:73: aa:2a:9e:25:2b:5b:08:77:cd:4d:79:c6:72:c3:f8:28:e2:cf: 95:2b:fe:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTA2MTcwNjU3NTRaFw0yNTA2MjQwNjU3NTRaMBgxFjAUBgNV BAMTDTY4NTExMWYyLWU1MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXUbsfF5BIAFixFPtvPY+CvgUFLn8mD3K0Bzhi19lYzLVt+KcwpylvwfWoILCv utC7zNBKdPnf5UWPQbedRDcVZRXNliC9Mpyve8tyZ4xEienxxLhstPNQw0QbtXTC NNE1CnPb90eKkFL2zS41qoYoJ86QtKGy3TfTTLUl8O0ssPoqpl3UTz1b6eV61Mir TM28NATt1CoMUmh6wqExXDMFlaV9/E7QmYjB0l1HMXv9Mtv4JZmBDhAmYYdLtafk 0T4UU7wQRwGV9u2Nrx845ESYzzj6kh/RN7/SwU7Qt/DU56PVqKbQFoGMLqYh27Am cksvdECnA9ZOKLbT6xq7/nVVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTTUjbPil KDD0j+ee+YeJg8OZpQswHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKP5IilxncymfZphjrObyGT/Bgl0ybSRZacZsfqbBdOyDW1yssGo0n0Q NK+gLbtxhS5BvP5cqOKfJbQRp1reaIiArePjiR62H1LjsIrK3tMBRZslwQM4pGG7 Sib2T4bWMhZZ7EKFv9nUpRRLrALqCurqU6mR/p0MykGj+jO60WyNMuQYhHYkq2Om PWqYVGb5yF0fw3lXX3CEsr2JLNmmoRFcJ2EV8LR/C7CpddnyNrA6gqHkMp0nLosd Kw41JwGRhavVSIWTCSmY1RkBcxGDvd+gvw2lST7KrZBpQ/ZHVkyYROuHwZqJSLH0 c6oqniUrWwh3zU15xnLD+Cjiz5Ur/v8= -----END CERTIFICATE-----Generated at Wed Jun 18 15:26:26 2025 by rpki-client