$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: NJtLZ0jOqr4LSkVPfQatM2OaB89QHY5zBXmcIPGTkY8= Subject key identifier: 79:52:39:C0:0A:29:A9:D2:2C:26:21:69:13:50:6E:47:77:BB:3F:99 Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 01A7 Signing time: Sun 15 Jun 2025 02:30:01 +0000 Manifest this update: Sun 15 Jun 2025 02:30:00 +0000 Manifest next update: Sun 22 Jun 2025 02:30:00 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: nO7ZKzH4bw7hwKmxr6SiHSdQ5ta6cyougi4mTKYsBeU=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: iJgF3xLl/F7BTTiuttHhI1X4PDcUoYj6A2s1rvrmJk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: Jun 15 02:30:00 2025 GMT Not After : Jun 22 02:30:00 2025 GMT Subject: CN=684e3028-0d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:80:a8:7e:aa:07:d3:b9:b7:9b:cd:af:d6:fb: e8:0c:6f:ee:b7:90:71:53:1d:0d:20:c8:7b:b1:ff: 2d:17:82:26:bb:83:ba:e3:3e:a0:30:c9:84:78:3d: e8:dc:90:a3:2e:2a:bf:da:c2:f7:c8:2c:6c:e8:ed: cb:f9:da:73:b1:94:75:7d:4a:c3:ec:06:2f:d1:91: a1:1d:94:6b:ec:2f:d8:16:4e:f0:4f:0c:f7:e5:56: 54:44:a6:eb:67:f8:36:a1:05:3a:89:50:4b:a8:b5: 72:95:d7:34:48:bf:5d:c0:b0:75:02:4c:d4:d7:6c: 82:6c:13:82:66:2b:de:37:20:1d:e9:1f:13:39:aa: 7b:40:c3:5d:a4:54:2d:3a:3a:73:1b:f5:2d:33:7e: 1b:92:34:c4:27:0e:60:61:6f:d4:1c:fb:07:23:ce: 14:15:7b:5b:5f:54:60:87:94:6b:54:fd:b9:70:ef: 61:18:6f:31:05:18:b1:37:ab:87:20:09:cd:f0:98: ee:2f:6d:2c:1f:8b:2f:65:c9:c8:c5:d2:46:80:88: b4:69:51:76:3f:44:a4:3d:0a:45:89:2d:23:9c:b5: c1:23:97:12:f0:51:dd:4d:52:0c:99:6e:68:74:65: e9:26:fa:8f:a7:ed:4b:14:bc:3b:41:eb:ea:49:79: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:52:39:C0:0A:29:A9:D2:2C:26:21:69:13:50:6E:47:77:BB:3F:99 X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:da:fd:d6:63:ec:ea:d5:6e:1b:42:30:96:0e:3e:d0:63:e9: 08:25:9d:e2:b1:7c:c9:c9:cb:e5:ba:60:8f:34:9d:55:52:0e: e1:13:2b:a2:19:1f:ef:63:41:a4:a3:9d:7d:de:2c:b2:ef:a9: 0f:f7:ec:06:c6:69:0f:cc:8a:ae:44:74:67:93:c7:a7:f2:ef: 34:d7:44:29:ad:6c:68:23:23:5e:c7:f1:5b:24:ec:51:d9:f7: ab:a8:d2:60:de:de:49:64:1d:10:85:e8:01:d9:88:1c:06:7a: 9c:24:34:fe:71:40:f8:c7:9f:91:09:6b:fb:63:5a:d2:03:06: d2:75:ff:fa:3b:aa:d2:35:de:32:a0:89:82:3e:a7:b0:b0:2f: 03:a8:57:0a:01:83:41:bc:05:4b:7e:f0:94:d0:9a:32:ad:d2: ba:f7:85:42:03:fd:de:0d:e7:3b:c6:aa:02:a9:9f:09:6b:ba: 20:67:48:3f:88:20:87:1f:7b:4b:d1:69:bc:cc:79:80:53:4e: c7:e0:30:0a:d9:57:a1:b1:0e:4d:70:6d:a8:d0:7c:27:93:6f: 12:7f:3d:ed:fe:61:99:14:dd:08:36:9c:ab:52:00:bd:42:e3: 98:f9:d9:79:5b:03:97:5c:1d:c1:51:3c:b2:43:58:87:ed:68: 71:4f:92:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjUwNjE1MDIzMDAwWhcNMjUwNjIyMDIzMDAwWjAYMRYwFAYD VQQDEw02ODRlMzAyOC0wZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoICofqoH07m3m82v1vvoDG/ut5BxUx0NIMh7sf8tF4Imu4O64z6gMMmEeD3o 3JCjLiq/2sL3yCxs6O3L+dpzsZR1fUrD7AYv0ZGhHZRr7C/YFk7wTwz35VZURKbr Z/g2oQU6iVBLqLVyldc0SL9dwLB1AkzU12yCbBOCZiveNyAd6R8TOap7QMNdpFQt OjpzG/UtM34bkjTEJw5gYW/UHPsHI84UFXtbX1Rgh5RrVP25cO9hGG8xBRixN6uH IAnN8JjuL20sH4svZcnIxdJGgIi0aVF2P0SkPQpFiS0jnLXBI5cS8FHdTVIMmW5o dGXpJvqPp+1LFLw7QevqSXlrZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlSOcAK KanSLCYhaRNQbkd3uz+ZMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB42v3WY+zq1W4bQjCWDj7QY+kIJZ3isXzJycvlumCPNJ1VUg7hEyui GR/vY0Gko5193iyy76kP9+wGxmkPzIquRHRnk8en8u8010QprWxoIyNex/FbJOxR 2ferqNJg3t5JZB0QhegB2YgcBnqcJDT+cUD4x5+RCWv7Y1rSAwbSdf/6O6rSNd4y oImCPqewsC8DqFcKAYNBvAVLfvCU0JoyrdK694VCA/3eDec7xqoCqZ8Ja7ogZ0g/ iCCHH3tL0Wm8zHmAU07H4DAK2VehsQ5NcG2o0Hwnk28Sfz3t/mGZFN0INpyrUgC9 QuOY+dl5WwOXXB3BUTyyQ1iH7WhxT5Kj -----END CERTIFICATE-----Generated at Sun Jun 15 05:58:54 2025 by rpki-client