$ rpki-client -vvf rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft File: keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft (raw, json) Hash identifier: OJP3pKWJQxWwfl6O6qKBetav8JDSNLLPegWqmSQXTzA= Subject key identifier: 7A:75:F3:8D:62:95:D1:CE:C3:6E:A1:A6:BB:EF:88:57:E2:DC:3B:B3 Authority key identifier: 91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF Certificate issuer: /CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF Certificate serial: 0523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft Manifest number: 051D Signing time: Thu 12 Jun 2025 23:11:55 +0000 Manifest this update: Thu 12 Jun 2025 23:11:54 +0000 Manifest next update: Thu 19 Jun 2025 23:11:54 +0000 Files and hashes: 1: keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl (hash: dhLQNU1NgMg4wLG/nr2yOhEqfKbiuM/kjI0Vs/JY3H8=) 2: CDFDBE10061C11ECA4633B32C4F9AE02.roa (hash: phE+adBWK7PYAI4KAosAkS6IfQBeyVMqazuKmnqaEwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1315 (0x523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91876D9, serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF Validity Not Before: Jun 12 23:11:54 2025 GMT Not After : Jun 19 23:11:54 2025 GMT Subject: CN=684b5ebb-989e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:0f:d2:8b:18:d3:e8:49:2a:db:0a:3e:86: dc:8b:d9:90:90:3f:3f:03:34:27:83:c0:df:96:01: bd:b6:33:ca:fb:d5:56:74:e3:d9:5f:17:e2:71:ee: 41:2e:cc:4a:45:ca:00:ae:46:a6:9b:25:de:28:d6: 1c:0f:e3:64:d7:cd:ef:09:16:59:2f:27:78:b6:1c: 59:40:0b:9d:c5:c6:8e:71:f6:35:1f:c1:6f:67:c4: 5a:71:03:f2:62:d4:d3:e1:a9:06:91:fd:b0:11:29: fa:3c:c0:90:78:22:5e:73:16:22:1d:7f:fb:8a:f0: bf:04:7d:a7:71:78:5d:fd:e8:b0:20:24:be:19:3e: 05:94:e5:69:f1:59:12:ca:fc:20:3b:e8:f1:e3:fb: 55:7d:ef:52:af:b6:96:6a:e7:fb:58:cf:59:1d:a1: 00:b1:d3:cd:d8:70:23:f2:b4:96:7f:c7:ad:54:ac: 75:0f:5e:4e:dd:8d:6d:3c:3a:66:03:a2:15:55:8b: 2d:2e:8b:9d:46:1e:11:6a:6d:f0:41:47:8f:a2:81: 5c:91:45:a1:38:1a:ad:2a:30:07:30:b8:63:68:87: 90:86:f5:a9:3a:6d:28:3f:01:f1:3b:a5:d2:75:95: dd:7c:c1:8c:81:95:82:9e:6c:bb:2d:78:3c:67:9e: 28:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:75:F3:8D:62:95:D1:CE:C3:6E:A1:A6:BB:EF:88:57:E2:DC:3B:B3 X509v3 Authority Key Identifier: keyid:91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:82:aa:71:59:81:dc:83:a5:b4:95:42:ab:03:75:f2:c7:91: 23:70:e3:1e:70:5d:cc:ef:e2:f5:ec:ca:a6:77:24:0d:7f:de: 80:86:2e:29:d6:59:2a:60:08:3e:a1:5b:da:bd:de:11:6c:5d: ee:c3:85:b1:66:2c:e0:88:81:38:22:99:94:0c:2a:18:0f:c9: 5e:24:00:ca:12:34:c9:f8:ed:e2:c2:be:9f:2c:e4:30:46:0b: 05:11:02:68:9f:7a:01:e3:54:62:05:e7:6d:f3:ad:06:56:2c: 1c:96:b2:35:50:ba:a7:20:34:28:cf:59:52:79:6a:18:e0:fa: e9:a0:38:94:b4:39:26:a7:e9:d2:c1:0d:39:55:29:2e:12:e0: 76:99:97:da:16:54:2d:fb:75:4d:f1:34:40:75:c3:34:64:cd: 7d:dc:b5:e5:bb:99:34:7e:a7:25:58:58:a5:e2:46:52:04:66: af:5d:c1:e0:95:67:76:99:fe:8a:a9:e6:0e:e0:e0:c6:4a:ab: 5c:21:88:b1:a9:ba:cc:c2:69:17:2e:95:45:32:1b:17:81:78: 35:99:a0:93:d5:d4:e4:42:03:98:35:a4:93:1b:cb:af:fd:4b: d0:d0:e9:1b:88:39:9d:9f:c6:7b:36:41:84:67:b1:cd:49:97: 4f:f8:12:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2RDkxMTAvBgNVBAUTKDkxRTY2OUNFMDIxNTA5N0JENEQ0NzdBMUE3NDQ2QjBE OUQwMjQ4RkYwHhcNMjUwNjEyMjMxMTU0WhcNMjUwNjE5MjMxMTU0WjAYMRYwFAYD VQQDEw02ODRiNWViYi05ODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4AP0osY0+hJKtsKPobci9mQkD8/AzQng8DflgG9tjPK+9VWdOPZXxfice5B LsxKRcoArkammyXeKNYcD+Nk183vCRZZLyd4thxZQAudxcaOcfY1H8FvZ8RacQPy YtTT4akGkf2wESn6PMCQeCJecxYiHX/7ivC/BH2ncXhd/eiwICS+GT4FlOVp8VkS yvwgO+jx4/tVfe9Sr7aWauf7WM9ZHaEAsdPN2HAj8rSWf8etVKx1D15O3Y1tPDpm A6IVVYstLoudRh4Ram3wQUePooFckUWhOBqtKjAHMLhjaIeQhvWpOm0oPwHxO6XS dZXdfMGMgZWCnmy7LXg8Z54o7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHp1841i ldHOw26hprvviFfi3DuzMB8GA1UdIwQYMBaAFJHmac4CFQl71NR3oadEaw2dAkj/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzZEOS85MjYwQzY1ODA2 MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNYdlUxSGVocDBSckRaMENT UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWnB6Z0lWQ1h2VTFIZWhwMFJyRFowQ1NQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzZEOS85MjYwQzY1ODA2MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNY dlUxSGVocDBSckRaMENTUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOgqpxWYHcg6W0lUKrA3Xyx5EjcOMecF3M7+L17MqmdyQNf96Ahi4p 1lkqYAg+oVvavd4RbF3uw4WxZizgiIE4IpmUDCoYD8leJADKEjTJ+O3iwr6fLOQw RgsFEQJon3oB41RiBedt860GViwclrI1ULqnIDQoz1lSeWoY4PrpoDiUtDkmp+nS wQ05VSkuEuB2mZfaFlQt+3VN8TRAdcM0ZM193LXlu5k0fqclWFil4kZSBGavXcHg lWd2mf6KqeYO4ODGSqtcIYixqbrMwmkXLpVFMhsXgXg1maCT1dTkQgOYNaSTG8uv /UvQ0OkbiDmdn8Z7NkGEZ7HNSZdP+BIu -----END CERTIFICATE-----Generated at Sat Jun 14 19:16:52 2025 by rpki-client