$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft File: k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json) Hash identifier: JSI31gMUxmLQn3HENmw5O6ELsbblpmHsjnqyb5105J0= Subject key identifier: DA:88:1E:66:AF:CE:70:A2:86:36:9D:CC:48:EC:D2:9C:91:CC:A9:B6 Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft Manifest number: 089E Signing time: Sat 14 Jun 2025 20:22:16 +0000 Manifest this update: Sat 14 Jun 2025 20:22:15 +0000 Manifest next update: Sat 21 Jun 2025 20:22:15 +0000 Files and hashes: 1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: XzuyRODa4wVEDcQBpx8yIYq4k7URMkPw9hqKU8+RrQ4=) 2: 6A3C327ABD1711EA8A3C8E20C4F9AE02.roa (hash: chUNg5uPEOUI/4y/JkNyLjCI88SKibEBtbB6b3Giy1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Validity Not Before: Jun 14 20:22:15 2025 GMT Not After : Jun 21 20:22:15 2025 GMT Subject: CN=684dd9f7-de24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:16:39:e1:56:bd:97:52:1f:fd:d8:69:50:be: 88:77:44:69:01:44:72:f8:ad:1a:9b:f2:27:55:0d: 7f:2f:81:3e:9a:80:a1:b2:51:82:42:42:83:6f:bb: f3:bd:1e:ca:7f:88:a8:13:f5:64:c2:66:0f:0b:5d: 47:7e:ab:35:5f:ea:b3:c9:32:93:be:d4:21:8a:fc: 75:bf:ee:ff:31:85:5f:ab:0e:40:0e:8f:0d:4d:59: 7f:29:8d:6f:0a:4a:8c:c5:a3:50:b2:cf:4c:d0:ff: 6c:3a:d3:4b:5b:78:de:97:88:fa:85:79:93:0c:aa: 23:08:82:e1:6b:83:f4:30:12:6c:4a:2a:87:a9:4a: cf:d6:9a:35:77:e5:de:8c:37:7e:44:dc:c9:6e:1e: 6d:2d:5b:32:22:4b:d8:f6:ae:47:95:82:62:c7:da: e4:57:b1:4f:d0:b7:c2:3b:f5:08:1e:29:b8:64:0b: 41:fd:85:5b:1f:08:dd:f0:d0:22:ec:f8:4d:ca:6d: e1:33:11:5f:c8:51:4d:f0:ba:5d:1e:90:29:85:a4: 28:5e:44:f0:a2:05:89:07:db:f4:88:c5:59:6d:82: 32:3d:32:0d:db:d0:94:75:11:24:92:e3:de:5d:dd: 75:23:ac:ae:8c:bf:ae:26:38:99:76:22:ba:4d:ac: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:88:1E:66:AF:CE:70:A2:86:36:9D:CC:48:EC:D2:9C:91:CC:A9:B6 X509v3 Authority Key Identifier: keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:56:60:2b:18:d1:81:41:4f:9c:ce:8d:c1:16:b6:80:46:68: e2:88:8a:68:c4:27:5c:e5:db:2d:b9:82:33:dd:bb:45:4a:ca: aa:8c:d5:51:ce:b4:c4:6f:20:ed:4a:c0:d5:ee:96:f1:a1:27: 98:3f:c9:40:77:58:dc:5e:e8:27:44:41:94:31:1c:3d:9a:60: 57:c9:14:b2:1a:d3:e9:3d:f5:b5:98:ab:56:8e:a0:33:19:a4: 80:80:c8:99:30:38:d3:6d:8b:43:e2:7b:10:68:94:b6:e0:38: 73:7b:1f:99:f8:26:6b:fd:2f:8c:59:0e:ee:63:4d:cf:49:d1: 36:f3:44:3c:29:cc:3a:b4:67:a3:22:97:d8:28:a5:1f:f8:7e: d2:74:39:57:40:56:2c:23:b1:d9:38:86:ac:43:df:ad:6f:b6: 14:97:22:16:16:2a:ab:ec:60:77:49:6b:59:67:39:83:9a:bf: 8b:7f:2f:67:3c:22:98:0d:61:0c:33:3f:c0:fe:a9:75:20:ab: 9d:f2:c2:3e:a7:49:76:78:e8:8e:e8:fa:47:c8:c7:b9:df:b5: 62:ee:f1:72:dc:98:a2:3c:2c:49:8e:b2:44:be:6b:7b:27:eb: 11:b5:31:b4:56:2e:3b:95:fd:11:3e:7e:5d:65:03:71:c3:cf: 94:5f:90:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4QzQxMTAvBgNVBAUTKDkzN0Q5OTUxRUUxRjkzRkNBQzI0MzMzQjA4M0Y5RDdG MkUzOUYwRjkwHhcNMjUwNjE0MjAyMjE1WhcNMjUwNjIxMjAyMjE1WjAYMRYwFAYD VQQDEw02ODRkZDlmNy1kZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxY54Va9l1If/dhpUL6Id0RpAURy+K0am/InVQ1/L4E+moChslGCQkKDb7vz vR7Kf4ioE/VkwmYPC11Hfqs1X+qzyTKTvtQhivx1v+7/MYVfqw5ADo8NTVl/KY1v CkqMxaNQss9M0P9sOtNLW3jel4j6hXmTDKojCILha4P0MBJsSiqHqUrP1po1d+Xe jDd+RNzJbh5tLVsyIkvY9q5HlYJix9rkV7FP0LfCO/UIHim4ZAtB/YVbHwjd8NAi 7PhNym3hMxFfyFFN8LpdHpAphaQoXkTwogWJB9v0iMVZbYIyPTIN29CUdREkkuPe Xd11I6yujL+uJjiZdiK6TazXsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqIHmav znCihjadzEjs0pyRzKm2MB8GA1UdIwQYMBaAFJN9mVHuH5P8rCQzOwg/nX8uOfD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzhDNC9DMjQ0QzgzQUJE MTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0ZmtfeXNKRE03Q0QtZGZ5NDU4 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szMlpVZTRma195c0pETTdDRC1kZnk0NThQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzhDNC9DMjQ0QzgzQUJEMTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0Zmtf eXNKRE03Q0QtZGZ5NDU4UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApVmArGNGBQU+czo3BFraARmjiiIpoxCdc5dstuYIz3btFSsqqjNVR zrTEbyDtSsDV7pbxoSeYP8lAd1jcXugnREGUMRw9mmBXyRSyGtPpPfW1mKtWjqAz GaSAgMiZMDjTbYtD4nsQaJS24Dhzex+Z+CZr/S+MWQ7uY03PSdE280Q8Kcw6tGej IpfYKKUf+H7SdDlXQFYsI7HZOIasQ9+tb7YUlyIWFiqr7GB3SWtZZzmDmr+Lfy9n PCKYDWEMMz/A/ql1IKud8sI+p0l2eOiO6PpHyMe537Vi7vFy3JiiPCxJjrJEvmt7 J+sRtTG0Vi47lf0RPn5dZQNxw8+UX5Cj -----END CERTIFICATE-----Generated at Sun Jun 15 17:52:57 2025 by rpki-client