$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft File: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json) Hash identifier: evMaMA0SAeAcSvmFuJpI1XxxjFmg3PV6zui78COPPcw= Subject key identifier: 30:49:CC:7D:1F:36:0B:50:BC:1B:B4:B9:71:E7:B3:88:4C:BE:77:BA Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Certificate serial: 0DA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft Manifest number: 0DA0 Signing time: Sat 14 Jun 2025 17:49:45 +0000 Manifest this update: Sat 14 Jun 2025 17:49:44 +0000 Manifest next update: Sat 21 Jun 2025 17:49:44 +0000 Files and hashes: 1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: kBcNmG7Hb8DjnlBsCgmPXQ7yammVbP98vMR5C5mpbIU=) 2: FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa (hash: 88rHQVPR1JUl3cf/OTRoNqatod6IR47YQyVPqlvmZBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3495 (0xda7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D010, serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Validity Not Before: Jun 14 17:49:44 2025 GMT Not After : Jun 21 17:49:44 2025 GMT Subject: CN=684db638-c2b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:7c:4b:d6:83:07:76:b1:d4:0f:a3:6e:54: da:0c:41:79:f1:e9:d9:00:52:1c:1a:49:b2:21:82: 8b:2e:b6:43:a3:98:4f:bc:93:88:32:fe:34:b7:b8: b2:b7:ed:e8:5e:5e:e9:4d:82:ab:b0:6f:27:d5:46: ca:ac:9c:ce:5f:d7:1b:6c:c7:c8:5b:cf:b8:9d:83: 0e:44:b4:93:70:c3:d4:76:d8:36:28:09:4d:b2:d2: e3:3b:38:6b:bc:4e:0e:b4:fb:c6:ec:0e:0b:79:65: 2a:5a:9c:6a:d3:1f:b6:28:41:5b:cd:23:00:e1:2f: 85:69:04:80:e8:a6:d4:a1:bb:5d:4f:51:a6:d3:a6: db:78:e3:33:21:41:2c:70:1c:89:cc:97:95:3e:6d: 9a:69:a8:5d:b4:50:d6:cb:8a:32:93:4c:3d:a7:97: 81:94:48:80:48:21:3a:c5:1e:15:d9:5c:0a:4d:16: 21:09:cb:16:fc:01:f6:be:f1:ee:5f:2c:98:35:fd: 4b:12:54:ad:30:0b:72:ca:1d:ac:fb:5e:a1:e9:b2: db:44:5d:89:a4:d0:49:7c:9a:70:e6:fd:9f:e5:db: f7:fe:fd:9c:60:a3:f0:fe:5d:6e:27:7e:e6:17:e9: 7f:12:b1:4f:52:a1:a1:3b:83:1a:41:fb:cd:71:a5: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:49:CC:7D:1F:36:0B:50:BC:1B:B4:B9:71:E7:B3:88:4C:BE:77:BA X509v3 Authority Key Identifier: keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:13:8d:fd:e3:e3:a8:29:4b:31:55:24:28:db:e9:9b:4c:24: 57:c8:aa:fc:a7:68:3f:c9:11:67:1d:db:55:64:40:c2:48:42: 0a:a5:2e:c1:66:ee:d4:2c:1e:82:77:71:a3:22:7c:e1:b7:0b: db:e9:0b:36:32:02:62:09:f2:b6:b0:79:ee:be:e8:9b:3c:ea: 94:e3:d4:07:25:cb:77:bc:5e:23:c6:06:e4:6a:18:55:d5:ed: 36:0c:a0:5c:d3:fc:03:b9:7a:67:cf:6a:2a:62:41:1d:a5:d4: 46:9e:a9:d1:33:86:74:0d:47:65:02:12:c5:32:f1:83:20:4a: 82:fa:10:a8:4c:e4:e5:b4:66:aa:1d:7f:fe:07:b5:e2:45:23: b7:c5:7a:5c:bf:f8:97:b7:33:5d:b3:a8:db:4c:c7:ef:53:40: 36:6a:77:9c:97:49:b0:d5:77:43:37:7e:e4:78:fa:4a:ac:ac: b5:7e:f4:dd:d6:19:df:02:84:9d:44:76:bc:fb:4e:d8:4b:7b: 13:55:86:9e:2f:07:ac:54:8d:9b:52:70:bf:3a:a9:03:e2:22: 1b:66:b7:6b:aa:af:bd:77:ad:4f:0b:82:57:e5:ec:db:95:29: 21:32:63:63:59:04:e5:a6:23:5a:d7:0f:71:0d:75:24:cb:13: c9:e1:40:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwMTAxMTAvBgNVBAUTKDcyMjE3OEQ1OTFEOTg1OTY4OUU0QjkyRjJEMEM4N0ZB NDdFMzVFMEEwHhcNMjUwNjE0MTc0OTQ0WhcNMjUwNjIxMTc0OTQ0WjAYMRYwFAYD VQQDEw02ODRkYjYzOC1jMmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1md8S9aDB3ax1A+jblTaDEF58enZAFIcGkmyIYKLLrZDo5hPvJOIMv40t7iy t+3oXl7pTYKrsG8n1UbKrJzOX9cbbMfIW8+4nYMORLSTcMPUdtg2KAlNstLjOzhr vE4OtPvG7A4LeWUqWpxq0x+2KEFbzSMA4S+FaQSA6KbUobtdT1Gm06bbeOMzIUEs cByJzJeVPm2aaahdtFDWy4oyk0w9p5eBlEiASCE6xR4V2VwKTRYhCcsW/AH2vvHu XyyYNf1LElStMAtyyh2s+16h6bLbRF2JpNBJfJpw5v2f5dv3/v2cYKPw/l1uJ37m F+l/ErFPUqGhO4MaQfvNcaVHOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBJzH0f NgtQvBu0uXHns4hMvne6MB8GA1UdIwQYMBaAFHIheNWR2YWWieS5Ly0Mh/pH414K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAxMC81N0I3NjcxQUMy MUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmhaYUo1TGt2TFF5SC1rZmpY Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpRjQxWkhaaFphSjVMa3ZMUXlILWtmalhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDAxMC81N0I3NjcxQUMyMUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmha YUo1TGt2TFF5SC1rZmpYZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmE4394+OoKUsxVSQo2+mbTCRXyKr8p2g/yRFnHdtVZEDCSEIKpS7B Zu7ULB6Cd3GjInzhtwvb6Qs2MgJiCfK2sHnuvuibPOqU49QHJct3vF4jxgbkahhV 1e02DKBc0/wDuXpnz2oqYkEdpdRGnqnRM4Z0DUdlAhLFMvGDIEqC+hCoTOTltGaq HX/+B7XiRSO3xXpcv/iXtzNds6jbTMfvU0A2anecl0mw1XdDN37kePpKrKy1fvTd 1hnfAoSdRHa8+07YS3sTVYaeLwesVI2bUnC/OqkD4iIbZrdrqq+9d61PC4JX5ezb lSkhMmNjWQTlpiNa1w9xDXUkyxPJ4UBS -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:55 2025 by rpki-client