$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: KlytAUv49jN5aWnl7UibE8US712RBUOh7wnPn8CPM9U= Subject key identifier: 57:DE:1F:8B:87:9B:CC:3B:F3:F8:A2:AD:02:86:27:55:9D:E6:69:D6 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0E06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0DF1 Signing time: Sat 14 Jun 2025 17:47:36 +0000 Manifest this update: Sat 14 Jun 2025 17:47:35 +0000 Manifest next update: Sat 21 Jun 2025 17:47:35 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: xG3udvTEKjPvjFGL2BV0/BMLUt/iShD2eaS1Ukkgokg=) 2: FAAC7098424911EFABBC7D78C4F9AE02.roa (hash: 4v+rsnRLFBgrun/uIoRgYYIQkVKTxUpRVf++DCzZXn4=) 3: B2A2CFCEF56C11EE90E38718C4F9AE02.roa (hash: kkPAtmDoelVoYFE7Hbje8wUj2mrPDtwi5yj75S4iHxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3590 (0xe06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Jun 14 17:47:35 2025 GMT Not After : Jun 21 17:47:35 2025 GMT Subject: CN=684db5b8-11dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f9:cc:bc:97:c9:1c:53:7b:2b:27:61:95:32: 3c:6b:4b:7f:83:6f:1c:2d:cb:00:9c:90:9a:3c:bc: f3:67:e2:b9:93:0d:94:5f:9d:74:33:65:4e:bc:e5: ee:c5:a6:6a:ed:0a:19:ff:ad:7c:62:f7:5a:5c:31: 84:17:4f:fb:e3:80:51:28:c6:bb:f5:0e:4b:01:54: 71:1a:43:c3:aa:06:75:96:c7:10:13:8e:1b:91:97: de:f5:d4:f2:61:16:8f:07:4f:79:56:85:10:3c:49: 75:41:62:eb:eb:7e:2d:46:ee:4a:fb:65:d2:47:c2: ba:d5:23:a9:e2:03:26:7c:2d:e6:52:fc:03:df:37: 6d:ad:09:e0:a2:26:e6:cb:a2:5e:87:1b:5c:03:7a: 51:73:f3:b4:55:c7:d5:85:99:9b:27:da:80:ec:0d: 29:62:a7:01:ab:cc:df:31:de:fe:bc:03:6e:14:dd: 6a:a7:18:63:95:ed:55:ce:27:21:41:b1:d8:78:e8: f5:16:75:46:99:fb:ac:4a:22:6f:aa:b4:b7:be:3d: 56:66:73:7b:3c:48:40:e0:0e:5d:1b:9f:f3:ea:67: bd:b9:48:66:91:37:50:4f:2c:de:1a:70:1a:37:d8: 9d:76:b9:7e:13:d7:1c:23:4d:6c:61:3e:b4:b8:c0: 83:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DE:1F:8B:87:9B:CC:3B:F3:F8:A2:AD:02:86:27:55:9D:E6:69:D6 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:5a:75:3f:1c:fd:f3:86:6b:8c:ec:58:fb:89:12:ed:92:51: f7:fd:1d:7b:49:ce:85:6d:20:26:d2:48:0b:96:ed:5d:02:7b: b6:e4:9f:64:f6:40:87:ad:95:af:de:0c:17:23:50:43:03:93: 25:43:e3:46:b7:3d:3b:1c:92:48:7f:d1:f9:97:61:c7:23:5e: c0:d3:ec:a3:ff:03:20:8e:a9:34:ec:12:20:13:bc:bb:cb:59: 84:a4:77:2e:59:b8:ad:35:ef:14:8f:0e:8c:e0:9e:be:d0:b5: 27:e5:6d:27:da:d2:0a:34:b6:f6:38:1f:0d:09:38:5f:a4:d7: 67:87:9d:83:8d:8d:00:3d:cb:ec:aa:cf:70:60:c2:23:96:7d: 24:8f:d7:f6:3a:43:7b:2a:95:2c:55:d4:df:ee:db:ac:df:b9: 06:bb:ee:a4:a8:e9:38:92:16:ac:b3:c4:0e:8d:0f:9c:15:f3: 72:9e:98:9f:e5:f8:15:aa:2a:10:f7:25:9d:2e:73:0b:7a:7d: 42:12:a4:68:c7:47:f4:27:b5:fd:20:05:fb:0d:2a:87:1d:55: c0:22:ef:31:a3:b6:10:d7:92:cd:99:20:dc:2e:e0:b3:cd:b4: fc:34:cc:c1:bd:af:9d:a1:23:5e:35:87:01:ad:f7:27:22:78: 41:e7:35:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUwNjE0MTc0NzM1WhcNMjUwNjIxMTc0NzM1WjAYMRYwFAYD VQQDEw02ODRkYjViOC0xMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/nMvJfJHFN7KydhlTI8a0t/g28cLcsAnJCaPLzzZ+K5kw2UX510M2VOvOXu xaZq7QoZ/618YvdaXDGEF0/744BRKMa79Q5LAVRxGkPDqgZ1lscQE44bkZfe9dTy YRaPB095VoUQPEl1QWLr634tRu5K+2XSR8K61SOp4gMmfC3mUvwD3zdtrQngoibm y6JehxtcA3pRc/O0VcfVhZmbJ9qA7A0pYqcBq8zfMd7+vANuFN1qpxhjle1Vzich QbHYeOj1FnVGmfusSiJvqrS3vj1WZnN7PEhA4A5dG5/z6me9uUhmkTdQTyzeGnAa N9iddrl+E9ccI01sYT60uMCDiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfeH4uH m8w78/iirQKGJ1Wd5mnWMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpWnU/HP3zhmuM7Fj7iRLtklH3/R17Sc6FbSAm0kgLlu1dAnu25J9k 9kCHrZWv3gwXI1BDA5MlQ+NGtz07HJJIf9H5l2HHI17A0+yj/wMgjqk07BIgE7y7 y1mEpHcuWbitNe8Ujw6M4J6+0LUn5W0n2tIKNLb2OB8NCThfpNdnh52DjY0APcvs qs9wYMIjln0kj9f2OkN7KpUsVdTf7tus37kGu+6kqOk4khass8QOjQ+cFfNynpif 5fgVqioQ9yWdLnMLen1CEqRox0f0J7X9IAX7DSqHHVXAIu8xo7YQ15LNmSDcLuCz zbT8NMzBva+doSNeNYcBrfcnInhB5zW2 -----END CERTIFICATE-----Generated at Sun Jun 15 10:14:55 2025 by rpki-client