$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft File: kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json) Hash identifier: x5ybUMl/nnPmCRbsyXbazRLnd5AX0ceeRXUmzset2CE= Subject key identifier: 62:52:58:14:20:86:1E:05:2D:F1:8C:06:87:48:B8:5A:39:AA:09:25 Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft Manifest number: 01DA Signing time: Sun 15 Jun 2025 02:03:00 +0000 Manifest this update: Sun 15 Jun 2025 02:02:59 +0000 Manifest next update: Sun 22 Jun 2025 02:02:59 +0000 Files and hashes: 1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: cg1OoLdYKiAB7vemAw+e4oz5FHU9LlnzG3AQolodbTM=) 2: 203FA37E750611ED95126872C4F9AE02.roa (hash: dipdNfnJaJs6s5CVnvO1Wlubse6AOUfgpacGaixKSoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Validity Not Before: Jun 15 02:02:59 2025 GMT Not After : Jun 22 02:02:59 2025 GMT Subject: CN=684e29d4-6d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:47:9c:09:88:48:25:c9:20:6e:49:29:49: c1:e4:84:3a:cd:e7:8c:d2:43:56:55:94:ec:ab:90: 23:e0:af:76:b6:11:8b:00:b5:45:e8:7a:f3:62:67: 21:c3:5f:34:35:2c:f9:cf:50:e5:8f:e2:99:7e:66: 4a:bb:a8:50:12:3d:3b:40:07:5f:61:cf:29:8a:1b: 97:75:83:3f:40:c3:f1:be:19:05:53:f5:60:ea:46: cf:64:eb:d7:0f:38:d1:91:d1:89:96:01:28:b2:61: ad:6d:98:3c:e2:3b:ff:bd:46:9d:6f:a0:09:52:c0: 11:ac:c7:17:7b:e7:f6:60:5d:e2:d5:2f:54:27:ac: 92:74:5d:4c:57:7a:41:36:04:38:f1:1e:12:81:3b: e1:9b:1c:f1:f6:e3:de:71:21:45:81:9f:10:83:89: ee:1f:04:97:66:c7:58:f7:a4:5e:0b:24:a2:7b:d6: 70:ba:84:49:ab:60:e3:ec:00:cb:fe:5d:d2:a3:d6: 28:99:2e:1f:4b:0a:db:af:db:dc:98:fa:1c:73:b1: 14:84:f1:3a:f2:9b:fc:b7:61:99:fe:36:12:0b:ed: 94:86:dc:65:66:6f:a8:6d:af:2e:58:6d:9b:43:ce: 98:2d:e0:92:51:48:17:0a:7b:0a:4f:bf:22:40:24: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:52:58:14:20:86:1E:05:2D:F1:8C:06:87:48:B8:5A:39:AA:09:25 X509v3 Authority Key Identifier: keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:1f:2e:d5:48:5e:3d:99:46:cf:7b:90:88:c6:f7:07:50:76: 7c:90:fc:9a:a9:a1:55:0f:53:82:83:6f:ef:91:bd:c6:d4:8e: fe:79:76:99:64:5e:f6:be:ee:3b:ad:18:93:f2:41:38:24:5b: d9:ee:e0:2f:cd:49:b1:5f:83:8c:c2:72:48:01:33:f9:4c:b5: 64:44:d2:62:da:43:45:f7:3b:0a:00:db:22:d1:c6:1b:48:07: f4:31:0e:bb:d1:ec:32:fe:3f:29:70:89:01:ef:5e:18:b6:c3: d4:ef:d1:f6:01:12:d5:a8:c2:af:62:0e:f4:75:e2:f6:cf:c8: 95:58:b7:e9:28:70:9c:75:de:35:cd:a3:06:c9:ef:40:9c:cd: 67:38:07:fe:b0:04:b5:f7:bc:d2:c2:26:58:55:75:da:4c:67: 48:00:ac:8a:00:1d:1f:64:dd:48:94:47:6c:81:72:9a:90:75: 87:83:3d:95:e5:de:73:1c:82:4e:67:0c:3a:ea:f2:f1:c7:87: bb:96:c7:00:c8:86:a5:54:c3:5b:94:7c:e0:86:1e:33:37:60: c3:cd:7a:68:e3:b6:ea:31:df:0c:f3:73:3a:96:69:1d:b1:af: 6a:f0:9d:71:f7:d4:e1:1d:c0:1f:64:03:f6:90:c7:ec:89:db: 20:f7:1d:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAxNEExMTAvBgNVBAUTKDkwQkQxREYxM0E5OTFDMzFGMTE4NEQ1MTFBRjMwMzE2 RkMwMDIxMDIwHhcNMjUwNjE1MDIwMjU5WhcNMjUwNjIyMDIwMjU5WjAYMRYwFAYD VQQDEw02ODRlMjlkNC02ZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A9HnAmISCXJIG5JKUnB5IQ6zeeM0kNWVZTsq5Aj4K92thGLALVF6HrzYmch w180NSz5z1Dlj+KZfmZKu6hQEj07QAdfYc8pihuXdYM/QMPxvhkFU/Vg6kbPZOvX DzjRkdGJlgEosmGtbZg84jv/vUadb6AJUsARrMcXe+f2YF3i1S9UJ6ySdF1MV3pB NgQ48R4SgTvhmxzx9uPecSFFgZ8Qg4nuHwSXZsdY96ReCySie9ZwuoRJq2Dj7ADL /l3So9YomS4fSwrbr9vcmPocc7EUhPE68pv8t2GZ/jYSC+2UhtxlZm+oba8uWG2b Q86YLeCSUUgXCnsKT78iQCTBUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJSWBQg hh4FLfGMBodIuFo5qgklMB8GA1UdIwQYMBaAFJC9HfE6mRwx8RhNURrzAxb8ACEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDE0QS9DQzA3REFCNjc0 RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhESHhHRTFSR3ZNREZ2d0FJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMMGQ4VHFaSERIeEdFMVJHdk1ERnZ3QUlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDE0QS9DQzA3REFCNjc0RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhE SHhHRTFSR3ZNREZ2d0FJUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVHy7VSF49mUbPe5CIxvcHUHZ8kPyaqaFVD1OCg2/vkb3G1I7+eXaZ ZF72vu47rRiT8kE4JFvZ7uAvzUmxX4OMwnJIATP5TLVkRNJi2kNF9zsKANsi0cYb SAf0MQ670ewy/j8pcIkB714YtsPU79H2ARLVqMKvYg70deL2z8iVWLfpKHCcdd41 zaMGye9AnM1nOAf+sAS197zSwiZYVXXaTGdIAKyKAB0fZN1IlEdsgXKakHWHgz2V 5d5zHIJOZww66vLxx4e7lscAyIalVMNblHzghh4zN2DDzXpo47bqMd8M83M6lmkd sa9q8J1x99ThHcAfZAP2kMfsidsg9x2x -----END CERTIFICATE-----Generated at Sun Jun 15 05:14:33 2025 by rpki-client