$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft File: aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json) Hash identifier: h9lD+mzrnr2WNfQZo0UcvqNlt9bnrO2rFf9SvZUOrQI= Subject key identifier: 22:B3:DA:3A:77:00:D3:4C:3A:C1:BF:C8:C5:5A:8B:64:F3:4C:DA:D2 Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B Certificate issuer: /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft Manifest number: 073B Signing time: Wed 18 Jun 2025 21:35:32 +0000 Manifest this update: Wed 18 Jun 2025 21:35:31 +0000 Manifest next update: Wed 25 Jun 2025 21:35:31 +0000 Files and hashes: 1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: L8RnJkfXiVltqPVxhpOhc1XaGvnbENI4pMejXQxvsUQ=) 2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: Tkzl81mL9jCkezlpTqealMA+SaYDCxv0/vXNUScGesg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Validity Not Before: Jun 18 21:35:31 2025 GMT Not After : Jun 25 21:35:31 2025 GMT Subject: CN=68533123-f3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a0:e7:82:4b:e5:af:38:70:a7:84:0b:5b:cb: 05:66:92:9e:3b:cf:b2:8e:10:ec:b9:90:5e:90:2d: ec:21:64:e0:ee:99:65:69:43:2c:de:e0:a5:38:bd: 9e:1c:ec:be:70:07:9e:94:4b:d8:01:34:13:46:a9: ef:71:b0:a2:3c:98:c3:72:74:51:d0:c8:36:d6:1c: 8b:b2:3c:60:fe:40:76:65:5f:e7:e2:a5:60:20:9a: 67:b3:75:fe:f0:ff:bc:af:fe:97:ac:16:09:86:c5: 52:e9:41:2f:3f:f1:0e:e0:87:b0:cf:09:f9:ed:01: d0:0a:2d:ea:54:00:86:e6:bc:a7:7b:30:25:72:ae: ad:20:24:3b:c7:0b:37:a1:54:d3:fc:cd:af:26:37: 5d:c6:99:2c:ec:c9:34:3d:0c:5b:6f:c4:fd:bb:58: a5:cb:1d:97:46:7a:2a:cc:37:2e:68:35:10:3f:4b: 26:07:44:71:c3:01:ba:c6:20:b9:89:d4:6d:56:93: 89:ff:38:65:c1:2c:37:27:2e:b7:8f:8c:f4:c3:f9: 36:6d:8e:1c:9f:84:c1:55:47:1c:6a:e9:6e:ef:b0: c2:3c:cd:b4:04:2b:3a:31:b4:77:36:4b:08:5a:b7: 29:cc:1c:a5:c2:da:b6:7c:52:3f:0e:bc:40:42:17: ae:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B3:DA:3A:77:00:D3:4C:3A:C1:BF:C8:C5:5A:8B:64:F3:4C:DA:D2 X509v3 Authority Key Identifier: keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d7:90:8e:a0:52:b3:a6:f1:fc:9b:0a:f8:6e:9d:8a:61:91: 7c:b5:c7:ae:bc:7d:42:bc:9a:57:9b:24:1e:4b:fe:70:3a:92: 50:8d:44:78:70:a0:c9:72:93:07:36:1a:13:61:78:11:01:ee: 69:62:b5:17:93:93:bd:6f:6e:b4:10:5a:ff:61:32:89:6a:5a: 98:b4:92:2b:3d:92:12:99:ac:e0:07:a6:65:f9:aa:b0:8f:1d: d7:bf:78:89:3d:95:75:33:ca:c1:9b:59:02:f2:d1:a7:76:4c: d0:e2:7f:77:13:93:d3:48:7a:ad:ee:71:22:c5:83:00:15:23: bd:0c:ac:96:6f:59:9c:e0:2e:a6:c8:43:3b:96:b9:4e:a3:3f: 18:fc:f8:0c:df:0a:7e:64:19:90:77:b9:a3:a3:06:ee:4a:d4: 6e:83:e0:5e:28:91:74:7c:32:ae:8c:e0:d1:51:31:4f:75:7a: 5f:aa:9b:2d:6d:a0:34:cb:c9:31:e7:93:71:a9:4f:e2:c8:20: 46:56:de:2c:36:4b:6b:d9:08:d2:d6:7a:16:32:9d:df:52:69: ab:e8:1c:c7:9e:9b:c7:d5:d5:07:ff:6d:d2:22:2b:47:c5:14: ce:0e:09:0b:bf:1e:13:fa:95:3c:48:49:95:6d:fe:76:09:f3: e5:7f:96:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlDQ0EyMTFDQ0I0 MjY1QTI2N0IwHhcNMjUwNjE4MjEzNTMxWhcNMjUwNjI1MjEzNTMxWjAYMRYwFAYD VQQDEw02ODUzMzEyMy1mM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6KDngkvlrzhwp4QLW8sFZpKeO8+yjhDsuZBekC3sIWTg7pllaUMs3uClOL2e HOy+cAeelEvYATQTRqnvcbCiPJjDcnRR0Mg21hyLsjxg/kB2ZV/n4qVgIJpns3X+ 8P+8r/6XrBYJhsVS6UEvP/EO4Iewzwn57QHQCi3qVACG5rynezAlcq6tICQ7xws3 oVTT/M2vJjddxpks7Mk0PQxbb8T9u1ilyx2XRnoqzDcuaDUQP0smB0RxwwG6xiC5 idRtVpOJ/zhlwSw3Jy63j4z0w/k2bY4cn4TBVUccaulu77DCPM20BCs6MbR3NksI WrcpzBylwtq2fFI/DrxAQheu2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKz2jp3 ANNMOsG/yMVai2TzTNrSMB8GA1UdIwQYMBaAFGibQ7SOER5p8d95zKIRzLQmWiZ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhDNC9EODk0N0VCODMw RDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0UkhtbngzM25Nb2hITXRDWmFK bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FKdER0STRSSG1ueDMzbk1vaEhNdENaYUpucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhDNC9EODk0N0VCODMwRDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0Ukht bngzM25Nb2hITXRDWmFKbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr15COoFKzpvH8mwr4bp2KYZF8tceuvH1CvJpXmyQeS/5wOpJQjUR4 cKDJcpMHNhoTYXgRAe5pYrUXk5O9b260EFr/YTKJalqYtJIrPZISmazgB6Zl+aqw jx3Xv3iJPZV1M8rBm1kC8tGndkzQ4n93E5PTSHqt7nEixYMAFSO9DKyWb1mc4C6m yEM7lrlOoz8Y/PgM3wp+ZBmQd7mjowbuStRug+BeKJF0fDKujODRUTFPdXpfqpst baA0y8kx55NxqU/iyCBGVt4sNktr2QjS1noWMp3fUmmr6BzHnpvH1dUH/23SIitH xRTODgkLvx4T+pU8SEmVbf52CfPlf5a6 -----END CERTIFICATE-----Generated at Thu Jun 19 21:46:53 2025 by rpki-client