$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json) Hash identifier: Q4UV5VMTxNIcebBSrhc+TJpvXN2o7tgZiK5ToCs/Mqo= Subject key identifier: 8F:93:B9:F6:BF:EB:84:6F:E1:2B:D7:94:DA:8C:69:08:F8:A5:17:74 Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft Manifest number: 0C9C Signing time: Wed 18 Jun 2025 18:08:46 +0000 Manifest this update: Wed 18 Jun 2025 18:08:46 +0000 Manifest next update: Wed 25 Jun 2025 18:08:46 +0000 Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: FnHM55QOtvDIEk0C/dPQ/bhYDY/8+QEOxAL/SrmDAL0=) 2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: Ff3/FqCNA4mkoqAaYSIejnjODMfSiqhpG3rVl/PX+Bw=) 3: F1862B06642911EAA019224CC4F9AE02.roa (hash: NE07gybEMHoZccQKI9zxg9qWBAyxcpdRr8nAQDm4wfQ=) 4: F058F664642911EAA019224CC4F9AE02.roa (hash: QGCSSYG7s0JgJiTbtP2n7qUQajs/nLPSMS9t/fCsv+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 18:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Validity Not Before: Jun 18 18:08:46 2025 GMT Not After : Jun 25 18:08:46 2025 GMT Subject: CN=685300ae-a60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:ff:53:50:29:ce:56:f4:4f:a5:32:b0:55: 14:ba:8a:81:e8:82:8a:a6:aa:7b:58:93:81:de:5f: 51:ef:b5:ba:7f:2b:f6:b6:2b:a4:54:71:ec:ca:d5: 94:d3:1b:44:7c:43:5e:ee:25:25:2e:17:bb:8c:82: 9c:72:ba:c4:08:c7:32:7e:49:ef:74:af:bc:89:8d: a3:35:93:82:68:75:0d:dd:08:20:24:0f:14:c3:54: fc:17:8b:0f:60:2b:8e:c6:c2:48:dd:69:a1:b3:b4: 61:5b:2f:df:c0:98:fd:b0:df:ce:28:8e:f1:d5:0a: ac:7f:a6:9f:01:51:9c:d9:cb:f5:22:31:ab:60:10: 2f:6d:45:a5:da:42:5d:f0:a5:df:68:be:c9:3e:28: a7:e1:e7:69:dd:22:67:db:7a:de:d3:f6:11:9e:30: 06:b4:1f:3a:e9:5f:33:63:fd:ef:71:2d:92:e9:95: 3c:90:2f:dc:ee:90:0f:00:0b:a4:36:58:10:cf:16: bb:50:66:3f:ed:71:69:cf:34:fa:5d:34:02:99:e1: 3e:37:eb:de:65:38:a7:5b:45:f9:a5:fc:fd:a2:ad: 47:0a:36:52:14:de:1b:6b:22:2a:11:7d:17:26:1a: d6:89:d2:ed:9e:35:91:83:d0:f5:9d:33:70:2e:c2: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:93:B9:F6:BF:EB:84:6F:E1:2B:D7:94:DA:8C:69:08:F8:A5:17:74 X509v3 Authority Key Identifier: keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:a5:d9:7f:11:90:17:55:18:f5:bf:35:da:2e:e2:4c:50:bf: 9f:a3:3c:37:4d:57:1d:da:b6:dd:13:ac:3d:41:05:f9:d5:62: 79:1a:fc:de:3a:14:9a:ca:04:72:da:a4:26:ea:c2:a6:57:c9: 46:f9:9c:d9:3f:c2:28:34:04:f7:4b:f1:0d:55:0c:d7:96:70: 10:cc:32:6c:d0:a3:d3:6e:73:a4:a3:3a:ed:1e:81:d8:bc:db: 96:6e:64:77:70:75:f4:8a:12:39:8c:79:9d:1e:54:01:34:19: f8:e2:74:04:2f:48:95:a7:e4:2b:51:e4:66:be:7a:3c:51:db: da:9f:66:d1:34:ec:92:47:6e:1f:43:49:ff:05:cf:9d:05:a5: c5:e5:12:48:c6:e0:7b:b7:26:eb:e9:e6:e6:20:62:f0:23:01: df:a0:41:7b:13:84:a8:90:58:f1:45:cc:f4:cc:b2:d0:61:1d: 0c:29:99:be:7a:db:96:a0:1b:ad:15:d1:5b:67:35:11:2b:37: bb:91:9d:78:13:90:0b:a9:14:0e:98:f7:d2:d8:22:6a:a1:6f: bb:c8:9a:0d:58:01:b5:d4:d7:a0:d6:8d:06:3d:f4:e7:e8:b1: 54:cb:e7:a6:18:e2:de:ec:2a:dd:68:8f:c3:cf:58:49:4b:9e: ae:f0:c9:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBMkIxMTAvBgNVBAUTKDNGNDdCQjlERTJCMTBGMEIyMENENjhDNTEyMDcyRTY5 OTM2NTdGQkMwHhcNMjUwNjE4MTgwODQ2WhcNMjUwNjI1MTgwODQ2WjAYMRYwFAYD VQQDEw02ODUzMDBhZS1hNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9H/U1Apzlb0T6UysFUUuoqB6IKKpqp7WJOB3l9R77W6fyv2tiukVHHsytWU 0xtEfENe7iUlLhe7jIKccrrECMcyfknvdK+8iY2jNZOCaHUN3QggJA8Uw1T8F4sP YCuOxsJI3Wmhs7RhWy/fwJj9sN/OKI7x1Qqsf6afAVGc2cv1IjGrYBAvbUWl2kJd 8KXfaL7JPiin4edp3SJn23re0/YRnjAGtB866V8zY/3vcS2S6ZU8kC/c7pAPAAuk NlgQzxa7UGY/7XFpzzT6XTQCmeE+N+veZTinW0X5pfz9oq1HCjZSFN4bayIqEX0X JhrWidLtnjWRg9D1nTNwLsLXHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+Tufa/ 64Rv4SvXlNqMaQj4pRd0MB8GA1UdIwQYMBaAFD9Hu53isQ8LIM1oxRIHLmmTZX+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkEyQi9DODA4MjQ4OEY2 ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3c2d6V2pGRWdjdWFaTmxm N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwZTduZUt4RHdzZ3pXakZFZ2N1YVpObGY3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkEyQi9DODA4MjQ4OEY2ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3 c2d6V2pGRWdjdWFaTmxmN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqpdl/EZAXVRj1vzXaLuJMUL+fozw3TVcd2rbdE6w9QQX51WJ5Gvze OhSaygRy2qQm6sKmV8lG+ZzZP8IoNAT3S/ENVQzXlnAQzDJs0KPTbnOkozrtHoHY vNuWbmR3cHX0ihI5jHmdHlQBNBn44nQEL0iVp+QrUeRmvno8Udvan2bRNOySR24f Q0n/Bc+dBaXF5RJIxuB7tybr6ebmIGLwIwHfoEF7E4SokFjxRcz0zLLQYR0MKZm+ etuWoButFdFbZzURKze7kZ14E5ALqRQOmPfS2CJqoW+7yJoNWAG11Neg1o0GPfTn 6LFUy+emGOLe7CrdaI/Dz1hJS56u8MlG -----END CERTIFICATE-----Generated at Thu Jun 19 10:34:16 2025 by rpki-client