$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json) Hash identifier: FeKWjN1sCQwP+XjsrhHqBdlLMI4VXN6AXhh0JNsKoe8= Subject key identifier: A9:59:A7:BC:7E:62:10:83:9D:7A:EE:BE:6D:10:26:55:72:25:85:EC Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft Manifest number: 012D Signing time: Tue 17 Jun 2025 03:44:34 +0000 Manifest this update: Tue 17 Jun 2025 03:44:33 +0000 Manifest next update: Tue 24 Jun 2025 03:44:33 +0000 Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: imcc1WqbWIxohvBJ/ILSrwDNwxG9nw27IgOal7iJloE=) 2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: H7JonSUtz6tgIVuXpEGUpFZ7fUQBIkEHbO/Cd9DHtNo=) 3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: j/6dClTGKIF6Y0W3OQ8vmv5qC35aQkMZjQK9N8GGPFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: Jun 17 03:44:33 2025 GMT Not After : Jun 24 03:44:33 2025 GMT Subject: CN=6850e4a2-63cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:22:fc:14:db:4a:b9:4a:a7:49:07:f1:c5: da:e9:ef:30:76:b6:3c:b3:d2:04:54:d7:bb:fd:59: 55:28:73:8b:b8:63:7f:32:ae:52:60:34:05:5d:c7: 86:ed:cb:6b:f3:fd:a7:ab:4a:cc:d3:16:44:40:67: ff:f9:19:ab:b1:38:d1:07:0f:25:36:98:c5:65:10: 51:c7:7a:5e:32:ad:52:d6:ee:75:4e:2b:85:9d:9a: 14:02:94:ae:c5:19:6b:88:85:bf:1f:95:8a:61:5b: c1:4b:80:b0:62:1e:fc:32:42:99:07:e2:b9:a4:05: fd:6a:6d:49:d7:fd:f7:65:6a:15:8f:85:35:37:96: 82:e1:08:1b:da:49:57:20:58:9f:26:24:80:75:5f: c8:7b:a3:03:fd:76:f5:41:0f:14:c0:1e:84:29:ca: b4:ad:0a:28:aa:97:63:6f:10:49:ae:6f:12:5a:fd: 29:58:36:47:4f:1a:bf:6c:40:0c:bc:0b:b0:15:8b: b6:3c:2c:5f:6e:14:22:59:1d:b3:db:4d:0e:e1:97: 29:68:e7:93:65:ba:1d:97:f8:98:52:11:a7:fb:62: 17:81:a9:53:fc:72:a9:b3:98:0a:b0:c1:6f:51:bc: 22:8e:9b:44:8a:ec:40:79:8c:cb:fb:29:28:59:c5: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:59:A7:BC:7E:62:10:83:9D:7A:EE:BE:6D:10:26:55:72:25:85:EC X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:33:01:f0:1e:8f:55:9e:9f:2c:15:ec:f8:2b:b9:1e:28:ee: 60:78:15:b3:2a:cb:b5:0c:9c:bc:2c:2f:d0:ea:8a:93:a6:26: bf:f1:09:a1:5c:73:b5:ca:e9:19:d6:6b:eb:72:8e:b8:c2:04: 44:c0:c5:cd:7c:6f:a5:12:4c:a6:fa:16:3d:7f:7d:07:05:a0: ee:d1:ab:81:04:da:99:74:a7:f1:2f:f1:cf:df:63:b3:41:89: 7a:db:05:6e:4b:67:2c:f0:5a:99:f3:ca:e4:6c:06:49:32:b1: f3:0e:e1:59:93:4c:3c:e6:83:6a:13:c8:ef:30:cd:00:e6:62: 1b:0e:dd:1d:90:23:e9:56:03:89:26:65:4d:b6:2a:ab:c0:79: ba:2e:52:62:89:b4:f2:37:ee:a0:9a:d0:0f:05:88:37:fc:de: 1f:c4:b4:c8:ab:e1:b6:ce:2e:3d:93:76:07:75:3d:57:de:e7: 16:49:72:3f:f8:8f:cc:d4:c4:0f:e5:02:32:7d:8c:a1:ff:f4: c3:a4:c5:de:1c:1e:62:8a:8a:2d:e8:d3:d7:a8:30:43:92:a4: 19:0c:82:a4:0f:11:03:9f:7f:ff:d0:24:e1:2f:ec:08:86:7e: 0f:3d:f5:a9:b3:b4:36:ac:ba:00:63:46:20:7e:11:1a:2f:b9: 5a:27:21:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD QzI4MjM2NEUwHhcNMjUwNjE3MDM0NDMzWhcNMjUwNjI0MDM0NDMzWjAYMRYwFAYD VQQDEw02ODUwZTRhMi02M2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3ci/BTbSrlKp0kH8cXa6e8wdrY8s9IEVNe7/VlVKHOLuGN/Mq5SYDQFXceG 7ctr8/2nq0rM0xZEQGf/+RmrsTjRBw8lNpjFZRBRx3peMq1S1u51TiuFnZoUApSu xRlriIW/H5WKYVvBS4CwYh78MkKZB+K5pAX9am1J1/33ZWoVj4U1N5aC4Qgb2klX IFifJiSAdV/Ie6MD/Xb1QQ8UwB6EKcq0rQooqpdjbxBJrm8SWv0pWDZHTxq/bEAM vAuwFYu2PCxfbhQiWR2z200O4ZcpaOeTZbodl/iYUhGn+2IXgalT/HKps5gKsMFv UbwijptEiuxAeYzL+ykoWcVX4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlZp7x+ YhCDnXruvm0QJlVyJYXsMB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjVEQi8xMTkzOUQxMDkwNjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tB RmtMYnliSlBoZERNS0NOazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVMwHwHo9Vnp8sFez4K7keKO5geBWzKsu1DJy8LC/Q6oqTpia/8Qmh XHO1yukZ1mvrco64wgREwMXNfG+lEkym+hY9f30HBaDu0auBBNqZdKfxL/HP32Oz QYl62wVuS2cs8FqZ88rkbAZJMrHzDuFZk0w85oNqE8jvMM0A5mIbDt0dkCPpVgOJ JmVNtiqrwHm6LlJiibTyN+6gmtAPBYg3/N4fxLTIq+G2zi49k3YHdT1X3ucWSXI/ +I/M1MQP5QIyfYyh//TDpMXeHB5iioot6NPXqDBDkqQZDIKkDxEDn3//0CThL+wI hn4PPfWps7Q2rLoAY0YgfhEaL7laJyFC -----END CERTIFICATE-----Generated at Wed Jun 18 11:36:37 2025 by rpki-client