$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft File: kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json) Hash identifier: L+4jxNBxDsnn0G/Qix7LGwfVOGlKWDtO29IdVAz2uUU= Subject key identifier: CD:5F:68:41:C8:70:8A:10:C5:EF:4E:40:9C:4D:ED:42:AE:71:4E:F4 Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD Certificate issuer: /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft Manifest number: 03A6 Signing time: Fri 13 Jun 2025 00:18:16 +0000 Manifest this update: Fri 13 Jun 2025 00:18:16 +0000 Manifest next update: Fri 20 Jun 2025 00:18:16 +0000 Files and hashes: 1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: 6rsowEu0n2Yv1uNXS/za8bWfPpIeX6gwdZpVmPkUiR8=) 2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: ys9QvzSFj3FhbpKZdlZ1B6mYP128OL/SXk3uErxC5zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Validity Not Before: Jun 13 00:18:16 2025 GMT Not After : Jun 20 00:18:16 2025 GMT Subject: CN=684b6e48-45cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:4f:29:9c:48:2f:08:dd:a8:23:ae:fd:9b: 9c:f4:66:91:ac:dc:6f:f2:a5:8c:e3:a3:d6:7d:64: 7c:31:62:f5:e7:e2:1a:04:fb:3e:4e:53:8d:2b:23: 98:38:40:c5:ed:15:f1:ed:2e:b1:01:64:92:d4:9c: d6:99:00:b8:dd:43:1b:d1:d6:93:0c:04:11:73:37: e2:e4:f9:45:cf:6d:f3:64:73:5a:4d:07:36:58:63: 86:c3:21:ce:a6:da:d2:b7:aa:5e:80:59:fc:e7:d0: 02:6f:f4:71:5a:40:95:34:f8:de:90:41:e7:08:27: 08:b2:17:19:ca:ee:b4:bd:1b:66:70:fa:55:dd:dd: 65:e5:af:a0:ad:0d:20:03:b7:8e:74:95:6a:f1:2e: ec:11:c7:af:a9:cd:ff:0d:f7:db:ad:16:54:73:63: 5e:ac:90:18:4a:7f:be:b8:4b:e1:0d:7b:d8:f9:2a: 12:ab:70:90:67:24:c8:9f:a6:76:38:65:b3:a0:42: 35:d2:ca:02:6c:57:11:31:c1:e5:ac:c3:9c:cc:25: aa:2a:f9:d6:b3:8e:29:1b:3c:86:9d:3f:0a:e8:e5: 35:0b:e4:72:e3:de:fd:71:54:4b:11:36:c2:63:a8: df:df:74:f3:bd:f7:b4:0e:f8:98:0b:f3:e4:4c:7b: 24:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5F:68:41:C8:70:8A:10:C5:EF:4E:40:9C:4D:ED:42:AE:71:4E:F4 X509v3 Authority Key Identifier: keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b9:74:61:33:73:8d:a4:f8:9a:a3:94:8f:66:62:af:29:25: 26:e8:1f:1d:a7:ab:2c:15:8d:31:5b:bf:77:d2:a7:c1:c4:45: a0:84:a6:ef:c0:6d:d5:04:c0:e9:8f:11:52:de:11:57:87:c5: b0:be:43:29:37:2b:0b:62:32:14:b1:c9:60:75:30:c1:ad:e5: 52:9d:d0:b7:7b:9b:82:91:95:f7:ed:f7:11:b1:19:ec:41:89: 86:d5:9d:92:08:ab:9e:06:db:86:0b:66:9a:16:a9:21:8e:d2: d4:e2:63:6b:e0:e9:5f:01:53:4e:3c:5e:d0:3d:3b:14:82:a4: ea:eb:f2:d6:43:29:0e:20:73:75:5e:69:54:85:15:bc:95:03: 0d:63:2a:6e:af:b8:00:0e:a0:34:fc:5d:d4:e2:5c:b1:8f:bb: c9:2c:99:7b:55:ee:54:ce:36:7b:6e:03:05:00:c1:45:20:13: 15:64:45:17:8f:11:94:bf:d9:fd:c8:65:f5:b8:55:63:a3:bf: 3c:28:cd:2f:7d:b9:84:34:54:5f:f2:30:e5:45:27:46:bb:5d: 42:65:cb:dc:0d:a2:e6:64:11:0d:e7:42:6d:42:67:80:b2:da: 01:0f:d7:43:5f:47:ac:62:de:da:5a:37:8e:1f:02:20:43:9d: 3e:7d:71:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBNjQxMTAvBgNVBAUTKDkwN0JCMjYyQjU3MTYyM0UzNEIyRTIwQzYwQTcxOEMx NzM5Q0MzQkQwHhcNMjUwNjEzMDAxODE2WhcNMjUwNjIwMDAxODE2WjAYMRYwFAYD VQQDEw02ODRiNmU0OC00NWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1pPKZxILwjdqCOu/Zuc9GaRrNxv8qWM46PWfWR8MWL15+IaBPs+TlONKyOY OEDF7RXx7S6xAWSS1JzWmQC43UMb0daTDAQRczfi5PlFz23zZHNaTQc2WGOGwyHO ptrSt6pegFn859ACb/RxWkCVNPjekEHnCCcIshcZyu60vRtmcPpV3d1l5a+grQ0g A7eOdJVq8S7sEcevqc3/DffbrRZUc2NerJAYSn++uEvhDXvY+SoSq3CQZyTIn6Z2 OGWzoEI10soCbFcRMcHlrMOczCWqKvnWs44pGzyGnT8K6OU1C+Ry4979cVRLETbC Y6jf33Tzvfe0DviYC/PkTHsk0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1faEHI cIoQxe9OQJxN7UKucU70MB8GA1UdIwQYMBaAFJB7smK1cWI+NLLiDGCnGMFznMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0E2NC8zNThDNjdCRTlB REExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlqNDBzdUlNWUtjWXdYT2N3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIdXlZclZ4WWo0MHN1SU1ZS2NZd1hPY3c3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0E2NC8zNThDNjdCRTlBREExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlq NDBzdUlNWUtjWXdYT2N3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIuXRhM3ONpPiao5SPZmKvKSUm6B8dp6ssFY0xW7930qfBxEWghKbv wG3VBMDpjxFS3hFXh8WwvkMpNysLYjIUsclgdTDBreVSndC3e5uCkZX37fcRsRns QYmG1Z2SCKueBtuGC2aaFqkhjtLU4mNr4OlfAVNOPF7QPTsUgqTq6/LWQykOIHN1 XmlUhRW8lQMNYypur7gADqA0/F3U4lyxj7vJLJl7Ve5UzjZ7bgMFAMFFIBMVZEUX jxGUv9n9yGX1uFVjo788KM0vfbmENFRf8jDlRSdGu11CZcvcDaLmZBEN50JtQmeA stoBD9dDX0esYt7aWjeOHwIgQ50+fXEG -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:59 2025 by rpki-client