$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: J2emHoE8pZ1UEqkN2B1DgIaa3X48Q1NsutdH/HHtCa0= Subject key identifier: 05:7A:B8:46:FD:31:CC:7B:D2:E3:8B:99:A1:CC:D8:9B:1C:1E:06:9B Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 0200 Signing time: Sun 15 Jun 2025 01:56:45 +0000 Manifest this update: Sun 15 Jun 2025 01:56:45 +0000 Manifest next update: Sun 22 Jun 2025 01:56:45 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: 5SfEPM5UwuBr/7/vkbKLvSDAiDdYMjwh0J2N5btyhtY=) 2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=) 3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=) 4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: Jun 15 01:56:45 2025 GMT Not After : Jun 22 01:56:45 2025 GMT Subject: CN=684e285d-ee83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:8e:ef:82:75:14:8a:d3:2a:6b:b1:d8:4b: f7:df:44:7c:2c:87:56:df:a7:09:11:b1:8c:b2:e2: 6e:45:89:fa:31:dd:25:87:57:0f:11:6f:ed:45:ee: 65:2a:63:34:bf:02:ec:96:dd:e4:5d:db:05:cf:2e: 27:8c:43:8e:d2:bb:a6:3c:df:fe:66:63:e8:6a:78: b4:af:3f:9e:22:36:4f:9e:75:8b:64:6c:13:0b:45: 76:d1:fa:9d:79:1c:50:45:f3:5b:6e:ca:e3:c9:26: 49:92:e8:f7:54:e2:4b:51:33:e4:fa:27:19:d7:94: 95:66:d5:71:90:35:c0:5b:98:31:64:9f:3e:66:b5: a4:33:c5:ff:0c:6d:3e:15:32:6f:04:48:a5:f7:16: 23:81:9b:48:5e:7b:19:a5:4d:da:7c:c4:b2:50:02: e1:c6:df:a9:ac:05:e3:35:87:01:86:f0:de:dc:cd: 41:61:3a:3e:b4:79:a6:f2:f0:62:ae:7c:8d:0d:98: 66:ee:05:dc:ac:ae:7a:fe:b5:db:ca:8c:73:2a:71: a9:f5:a0:54:1f:8b:f0:5f:3c:91:50:4d:b3:b9:15: a9:68:49:53:18:4b:95:4c:b5:94:f4:4c:d6:70:16: 52:79:67:e7:17:f7:9f:69:15:59:c5:31:0f:ff:fb: 80:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7A:B8:46:FD:31:CC:7B:D2:E3:8B:99:A1:CC:D8:9B:1C:1E:06:9B X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f5:5f:59:32:fb:c6:db:bd:38:23:86:98:ff:ef:69:bb:60: 85:c5:c3:d4:c6:c3:f7:3a:39:d7:44:0c:39:c1:8b:a3:8d:91: 48:46:9c:06:5c:a7:f6:03:18:d9:4a:7b:dc:df:47:52:5c:e6: af:5f:b0:17:af:fa:67:b4:96:c6:96:15:c7:1a:ff:15:0a:b4: 42:94:37:06:73:94:42:30:25:be:de:5b:1f:d8:70:1c:58:6f: 7e:52:44:eb:7e:83:28:3d:3f:b1:79:4d:26:d6:c8:22:25:1c: dd:9a:2a:9a:90:64:a7:64:37:1b:25:ce:7d:89:11:4f:87:b4: f9:f8:2e:05:5a:4e:02:bd:dc:f3:41:d1:a3:63:ac:7a:7d:e4: 86:2a:eb:af:f5:78:4d:1b:10:91:4f:04:53:eb:a3:64:75:a7: 5f:27:68:c6:29:29:5d:7b:8f:a1:72:45:c0:e6:00:0e:cd:83: 2c:65:29:c6:f4:5d:51:b9:96:b2:ed:04:47:6c:ed:30:49:fb: 8c:a2:61:19:08:ec:e8:0f:36:45:be:c7:35:01:ae:03:bf:77: d8:ff:bd:62:2f:ca:9a:51:62:ed:19:20:f9:6b:61:83:19:99: 55:5c:c3:b8:a5:2f:e6:f4:51:12:f2:59:a1:e7:3c:f6:60:af: 83:3d:94:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjUwNjE1MDE1NjQ1WhcNMjUwNjIyMDE1NjQ1WjAYMRYwFAYD VQQDEw02ODRlMjg1ZC1lZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgKO74J1FIrTKmux2Ev330R8LIdW36cJEbGMsuJuRYn6Md0lh1cPEW/tRe5l KmM0vwLslt3kXdsFzy4njEOO0rumPN/+ZmPoani0rz+eIjZPnnWLZGwTC0V20fqd eRxQRfNbbsrjySZJkuj3VOJLUTPk+icZ15SVZtVxkDXAW5gxZJ8+ZrWkM8X/DG0+ FTJvBEil9xYjgZtIXnsZpU3afMSyUALhxt+prAXjNYcBhvDe3M1BYTo+tHmm8vBi rnyNDZhm7gXcrK56/rXbyoxzKnGp9aBUH4vwXzyRUE2zuRWpaElTGEuVTLWU9EzW cBZSeWfnF/efaRVZxTEP//uAQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAV6uEb9 Mcx70uOLmaHM2JscHgabMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC59V9ZMvvG2704I4aY/+9pu2CFxcPUxsP3OjnXRAw5wYujjZFIRpwG XKf2AxjZSnvc30dSXOavX7AXr/pntJbGlhXHGv8VCrRClDcGc5RCMCW+3lsf2HAc WG9+UkTrfoMoPT+xeU0m1sgiJRzdmiqakGSnZDcbJc59iRFPh7T5+C4FWk4Cvdzz QdGjY6x6feSGKuuv9XhNGxCRTwRT66NkdadfJ2jGKSlde4+hckXA5gAOzYMsZSnG 9F1RuZay7QRHbO0wSfuMomEZCOzoDzZFvsc1Aa4Dv3fY/71iL8qaUWLtGSD5a2GD GZlVXMO4pS/m9FES8lmh5zz2YK+DPZS1 -----END CERTIFICATE-----Generated at Sun Jun 15 08:33:53 2025 by rpki-client