$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft File: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json) Hash identifier: uRWfxq+eQsF7JKoKOHOi4pryiN2pN7pcQzsSYIfXSEQ= Subject key identifier: D9:A2:58:EB:8F:19:AE:80:D4:E4:19:33:EF:DF:D7:61:5A:95:C2:F2 Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Certificate serial: 3522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft Manifest number: 34D0 Signing time: Sat 14 Jun 2025 14:17:24 +0000 Manifest this update: Sat 14 Jun 2025 14:17:24 +0000 Manifest next update: Sat 21 Jun 2025 14:17:24 +0000 Files and hashes: 1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: enbaP45qwqBiiCw69R5kZvWBq1cNo0QE6boKVkGxDDY=) 2: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: jqW67pSJSIsRiaBgE6s/DK3BAL3JeM6fk0sbod9Ihss=) 3: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: m0T5p+j/9s+rm9D6YdSh//2Alx2Eae+Du8lbaB1hR7Y=) 4: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: IkqW+PwyXlQ+AUTKEJ4fHo5q5mHtKj5Ve8Q8p0ADu48=) 5: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: tqonfMb2T4kEzGLFTTW3PK/xQqepl87jr8dA78s4VGI=) 6: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: D48/pxU7MzDuerY2hyHqIJz8Ni5AYoPlrPyxeWvQn8M=) 7: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: H76rrDZxK8h/g51b1krAIQ2ulCKuPO82m4joCbnFfEs=) 8: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: rb6m6NgtqMNqMVoEYBcUFewdPh6xLzsagwAw8cSDCbE=) 9: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: kN3zyoollwJXDugnYM0yHLk48cRpRCSo426eiI4jnbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13602 (0x3522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Validity Not Before: Jun 14 14:17:24 2025 GMT Not After : Jun 21 14:17:24 2025 GMT Subject: CN=684d8474-32f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:26:29:5c:38:d8:31:00:79:e3:78:16:5f: 2c:bc:b2:b0:82:ab:24:dd:59:dc:4f:22:6a:49:13: fb:b2:0e:c0:20:c0:50:5b:26:6f:25:dd:af:4b:ad: f1:00:10:c2:4f:e0:91:e2:50:3d:04:11:e9:d0:ea: 6b:2a:67:b4:3b:7f:3e:c9:c5:be:0f:ac:fd:42:b3: 86:a8:db:d5:04:dd:9e:65:9c:f5:5b:f1:4f:c9:f3: f3:fc:a9:4c:c9:00:8f:94:c5:1d:5a:3c:60:5a:a9: 94:f3:87:26:b4:28:2b:8a:eb:c9:fb:8a:47:e2:9a: d7:a8:c6:e8:e5:c8:8a:57:05:ea:fd:2f:2d:50:d1: 4b:f8:95:90:25:b3:c4:29:55:5e:d8:34:d1:43:de: a5:ca:ae:92:0b:45:f5:e8:03:78:d2:18:9e:e4:65: 5e:8c:bb:83:67:86:2c:ac:85:a5:41:2b:15:f6:77: 06:17:d9:e3:19:66:24:cd:f6:03:0f:18:b7:cd:bd: 85:26:da:ee:5a:25:e1:a4:da:03:58:5c:0d:12:02: de:00:48:d8:1a:b5:de:f4:bb:d6:90:08:98:ce:ec: da:d4:b9:65:71:83:a6:11:03:cf:31:62:9d:4b:6a: e3:82:77:2f:03:93:f4:c3:0e:67:4d:d8:13:b8:34: 24:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A2:58:EB:8F:19:AE:80:D4:E4:19:33:EF:DF:D7:61:5A:95:C2:F2 X509v3 Authority Key Identifier: keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:56:31:62:6c:76:c8:4e:10:7e:f6:e6:a0:d8:a3:64:16:4b: 3f:59:3c:0f:98:8f:89:30:34:91:7d:e7:18:d1:8f:40:5b:2e: a9:20:4d:9d:31:b7:e0:ef:8c:89:a2:5b:b5:1f:d0:04:01:a0: c4:cd:80:88:f1:44:c5:8b:8f:81:12:01:fd:9a:3c:a5:0a:3f: 82:9b:49:5b:82:ad:ce:6b:fa:a1:73:f7:a5:3c:80:ef:75:1a: 3c:0f:3b:ce:25:87:cb:cf:f2:87:d1:fa:10:3f:dd:61:46:7f: db:1b:d1:ef:26:3c:8f:da:95:ac:e4:fb:2c:72:b4:c5:0d:8e: 9d:fc:2c:68:98:46:34:8b:38:77:8e:05:b3:35:f3:cc:3e:6b: 6a:96:3d:c7:9a:b3:05:a6:54:d9:81:f0:e7:87:8f:26:13:ce: bd:67:c2:42:15:2d:3c:fa:d9:8b:f7:de:1d:b1:87:8f:27:50: 34:14:fb:c4:0a:e8:9f:37:f5:a4:aa:e5:bb:67:6d:7d:b7:c7: 87:21:da:26:a3:d9:e9:79:7d:f6:cb:5a:a1:a4:21:ab:fb:75: 41:10:32:99:80:a2:3c:cd:d8:10:dd:12:10:38:6b:1f:97:e3: ee:f9:4d:b8:b5:d3:2c:4f:57:54:87:41:20:15:22:6c:e6:47: 4c:bf:78:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyRUQxMTAvBgNVBAUTKDY4RkFGOURBQ0UxOTc2OENBQzNENEVEN0JCMjQzNzJC RkZBNkQwMTgwHhcNMjUwNjE0MTQxNzI0WhcNMjUwNjIxMTQxNzI0WjAYMRYwFAYD VQQDEw02ODRkODQ3NC0zMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspkmKVw42DEAeeN4Fl8svLKwgqsk3VncTyJqSRP7sg7AIMBQWyZvJd2vS63x ABDCT+CR4lA9BBHp0OprKme0O38+ycW+D6z9QrOGqNvVBN2eZZz1W/FPyfPz/KlM yQCPlMUdWjxgWqmU84cmtCgriuvJ+4pH4prXqMbo5ciKVwXq/S8tUNFL+JWQJbPE KVVe2DTRQ96lyq6SC0X16AN40hie5GVejLuDZ4YsrIWlQSsV9ncGF9njGWYkzfYD Dxi3zb2FJtruWiXhpNoDWFwNEgLeAEjYGrXe9LvWkAiYzuza1LllcYOmEQPPMWKd S2rjgncvA5P0ww5nTdgTuDQk9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmiWOuP Ga6A1OQZM+/f12FalcLyMB8GA1UdIwQYMBaAFGj6+drOGXaMrD1O17skNyv/ptAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzJFRC9FRDhDOTY5MDFE NkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRveXNQVTdYdXlRM0tfLW0w QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQcjUyczRaZG95c1BVN1h1eVEzS18tbTBCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzJFRC9FRDhDOTY5MDFENkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRv eXNQVTdYdXlRM0tfLW0wQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxVjFibHbIThB+9uag2KNkFks/WTwPmI+JMDSRfecY0Y9AWy6pIE2d Mbfg74yJolu1H9AEAaDEzYCI8UTFi4+BEgH9mjylCj+Cm0lbgq3Oa/qhc/elPIDv dRo8DzvOJYfLz/KH0foQP91hRn/bG9HvJjyP2pWs5PsscrTFDY6d/CxomEY0izh3 jgWzNfPMPmtqlj3HmrMFplTZgfDnh48mE869Z8JCFS08+tmL994dsYePJ1A0FPvE CuifN/WkquW7Z219t8eHIdomo9npeX32y1qhpCGr+3VBEDKZgKI8zdgQ3RIQOGsf l+Pu+U24tdMsT1dUh0EgFSJs5kdMv3h3 -----END CERTIFICATE-----Generated at Sun Jun 15 07:13:03 2025 by rpki-client