$ rpki-client -vvf rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft File: 67oUOyhmNxjNjH2j9jEAmpgE7l8.mft (raw, json) Hash identifier: 5cdzbI1sQsT6lAI025CvG+5rT5XrNZBVcECoZqIZQ6o= Subject key identifier: E0:81:D3:3C:97:1F:19:C9:7E:22:CA:CC:C0:EA:8C:A2:02:55:2C:16 Authority key identifier: EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F Certificate issuer: /CN=A919676F/serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft Manifest number: 019D Signing time: Sun 15 Jun 2025 02:38:15 +0000 Manifest this update: Sun 15 Jun 2025 02:38:14 +0000 Manifest next update: Sun 22 Jun 2025 02:38:14 +0000 Files and hashes: 1: 67oUOyhmNxjNjH2j9jEAmpgE7l8.crl (hash: Hpb/WHwjjPE8zgjT2hAxwN/urkDis1+ujVoEbkZ9pFI=) 2: D277F83CD3A411ED8C51160FC4F9AE02.roa (hash: xeDK9WlWOxddaeQUzhh0jJMfgRYN6KWkgPqKssZPync=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919676F, serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Validity Not Before: Jun 15 02:38:14 2025 GMT Not After : Jun 22 02:38:14 2025 GMT Subject: CN=684e3216-049d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:b6:1b:a6:f0:13:8c:85:e7:9f:ab:cd:45: 18:81:e1:c5:1e:06:dd:f7:93:6a:90:9e:ea:4c:8c: 1b:2d:9b:db:8f:3b:4c:f7:d9:9e:16:50:5a:4b:26: 84:73:76:5b:2a:00:1b:e7:cc:51:2a:43:be:47:4d: 78:d8:f2:b3:57:5c:4c:02:5c:1e:dd:ac:19:0c:0f: a6:29:ad:7d:9b:44:dc:a1:4d:27:52:c7:b1:b4:84: 52:dc:a5:7c:49:b2:36:2d:0d:c3:c9:94:fc:cb:8f: e1:f3:34:75:b7:3f:9d:e2:e5:2a:b3:4a:9a:63:6b: 0c:d1:b3:6b:79:a9:5c:84:83:c6:7e:fb:36:f3:21: 5c:b1:96:42:cf:51:a0:66:b3:ab:a3:c6:9f:88:11: 48:e2:36:58:da:03:4d:58:34:b0:24:84:c7:0f:7a: 8b:1d:bb:29:76:bb:83:91:09:b7:83:74:b1:d4:40: 26:1a:1d:06:23:e0:1a:ab:20:34:3d:61:1b:e5:30: 58:b7:1a:84:d0:7a:ab:9b:42:eb:39:da:4b:1b:a4: 4e:19:ca:d6:7c:37:cf:b1:03:33:c5:f6:92:ac:b4: 51:5a:88:7c:2b:6b:0c:43:27:72:8e:b3:b8:fd:33: 7f:8a:87:d9:84:ed:66:27:d7:4a:4d:12:12:5a:72: f0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:81:D3:3C:97:1F:19:C9:7E:22:CA:CC:C0:EA:8C:A2:02:55:2C:16 X509v3 Authority Key Identifier: keyid:EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:07:14:df:7d:09:30:94:6f:1b:b0:ac:86:e6:38:00:6f:08: da:e3:fa:2e:e8:51:fa:d8:4e:c3:78:82:63:14:f2:7f:1d:01: 2e:e7:55:a5:79:8f:20:56:a2:44:e7:d3:7b:06:4e:ce:79:9f: 62:56:79:80:f8:f4:a0:c8:40:c4:d6:69:7a:79:38:3a:63:94: b4:8c:6e:da:12:34:55:97:f6:86:69:9b:a4:ef:a5:4d:a5:78: 0a:3e:fc:e3:37:76:c8:25:0d:9b:78:4b:22:b5:11:30:d3:40: c5:76:ed:1a:23:ca:ec:69:66:a5:f1:b8:80:90:c0:4f:d0:08: 2e:96:13:af:e8:fb:cf:d9:33:6e:20:9e:82:b9:f6:05:15:f6: ca:c4:3d:fb:92:50:cb:d3:31:21:b7:bc:d5:c0:cc:84:76:ad: 0e:fd:26:b7:10:97:a6:60:4c:09:60:a0:92:bc:9b:14:d8:df: b1:95:e8:62:b2:d2:ba:ac:0a:38:19:47:1f:b2:7e:53:14:6c: f8:47:60:bf:99:9e:d7:cd:88:ea:f7:13:5d:73:e6:09:65:bb: 34:88:c2:24:fd:24:30:e0:50:a1:36:59:b2:90:55:00:b6:a6: 25:4d:f0:7c:6e:c6:28:6e:dc:7b:a9:e0:e5:f0:42:56:4e:81: 1b:44:e2:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY3NkYxMTAvBgNVBAUTKEVCQkExNDNCMjg2NjM3MThDRDhDN0RBM0Y2MzEwMDlB OTgwNEVFNUYwHhcNMjUwNjE1MDIzODE0WhcNMjUwNjIyMDIzODE0WjAYMRYwFAYD VQQDEw02ODRlMzIxNi0wNDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycK2G6bwE4yF55+rzUUYgeHFHgbd95NqkJ7qTIwbLZvbjztM99meFlBaSyaE c3ZbKgAb58xRKkO+R0142PKzV1xMAlwe3awZDA+mKa19m0TcoU0nUsextIRS3KV8 SbI2LQ3DyZT8y4/h8zR1tz+d4uUqs0qaY2sM0bNrealchIPGfvs28yFcsZZCz1Gg ZrOro8afiBFI4jZY2gNNWDSwJITHD3qLHbspdruDkQm3g3Sx1EAmGh0GI+AaqyA0 PWEb5TBYtxqE0Hqrm0LrOdpLG6ROGcrWfDfPsQMzxfaSrLRRWoh8K2sMQydyjrO4 /TN/iofZhO1mJ9dKTRISWnLwpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCB0zyX HxnJfiLKzMDqjKICVSwWMB8GA1UdIwQYMBaAFOu6FDsoZjcYzYx9o/YxAJqYBO5f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njc2Ri9GRTQ5RkFDMkQz QTAxMUVEODE0QzRDMThDNEY5QUUwMi82N29VT3lobU54ak5qSDJqOWpFQW1wZ0U3 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3b1VPeWhtTnhqTmpIMmo5akVBbXBnRTdsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njc2Ri9GRTQ5RkFDMkQzQTAxMUVEODE0QzRDMThDNEY5QUUwMi82N29VT3lobU54 ak5qSDJqOWpFQW1wZ0U3bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8BxTffQkwlG8bsKyG5jgAbwja4/ou6FH62E7DeIJjFPJ/HQEu51Wl eY8gVqJE59N7Bk7OeZ9iVnmA+PSgyEDE1ml6eTg6Y5S0jG7aEjRVl/aGaZuk76VN pXgKPvzjN3bIJQ2beEsitREw00DFdu0aI8rsaWal8biAkMBP0AgulhOv6PvP2TNu IJ6CufYFFfbKxD37klDL0zEht7zVwMyEdq0O/Sa3EJemYEwJYKCSvJsU2N+xlehi stK6rAo4GUcfsn5TFGz4R2C/mZ7XzYjq9xNdc+YJZbs0iMIk/SQw4FChNlmykFUA tqYlTfB8bsYobtx7qeDl8EJWToEbROLJ -----END CERTIFICATE-----Generated at Sun Jun 15 09:32:57 2025 by rpki-client