$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft File: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json) Hash identifier: S84bqdupvsuwW2UrTkkIETqfa/rYHMrk+4Svfi8D2jU= Subject key identifier: 88:A6:09:14:9B:8C:BB:76:C7:BE:4A:A2:7C:52:7C:A2:8B:00:9E:C6 Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E Certificate issuer: /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft Manifest number: 0658 Signing time: Sat 14 Jun 2025 22:18:08 +0000 Manifest this update: Sat 14 Jun 2025 22:18:08 +0000 Manifest next update: Sat 21 Jun 2025 22:18:08 +0000 Files and hashes: 1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: hf+TUvtMwETMku8E3jORF8ij4GXTw3FeT1uv36VFWtk=) 2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: kTnNlxGzV54r4KPZAQuINu1i12sln6cK8TaYfF0XXkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BBA, serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Validity Not Before: Jun 14 22:18:08 2025 GMT Not After : Jun 21 22:18:08 2025 GMT Subject: CN=684df520-55a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:20:9a:9d:6d:44:ed:e3:47:06:12:08:76:13: 10:5b:05:3c:18:b5:54:d7:d4:06:c8:05:71:58:e0: ee:9f:93:15:94:91:82:d8:f6:55:df:f5:30:9d:1c: 96:b8:89:4b:5a:60:0d:52:d2:58:60:0d:c0:22:95: 95:36:68:a0:a6:22:32:ae:0b:fe:54:38:df:87:fc: ab:20:72:f2:71:9b:b4:98:a3:88:17:40:ed:5d:52: 9d:eb:5b:5a:44:e6:05:97:e2:b8:e0:b6:63:67:8c: 96:f0:77:e2:3a:e0:d9:25:c3:3c:6d:54:cf:cf:65: 4b:d2:7f:c1:18:a1:4e:89:7c:da:c3:60:d9:4f:c3: 0b:94:17:64:2e:30:60:16:20:d3:75:6b:17:63:c6: ff:98:3e:1c:b6:4e:bd:54:ad:e1:7b:7b:1c:57:86: 6a:93:c5:c9:09:a2:f3:29:0c:e5:f0:16:95:50:39: 40:8b:0a:12:b2:dd:7e:8a:66:f5:d8:00:15:b5:70: 7c:6a:48:37:3b:d3:f0:0a:57:bc:82:09:ca:72:45: 35:22:e8:3e:40:5d:fc:32:d8:3e:b0:50:d8:f8:92: 5b:98:65:07:f8:38:21:e6:98:8f:84:29:eb:68:23: 06:30:dc:22:92:ed:fb:0d:5f:e7:f8:13:10:b5:c8: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A6:09:14:9B:8C:BB:76:C7:BE:4A:A2:7C:52:7C:A2:8B:00:9E:C6 X509v3 Authority Key Identifier: keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:35:df:5b:41:76:cc:01:e1:b2:45:30:e8:41:f9:e9:a7:91: d7:c6:d3:f2:e0:79:11:8b:30:c7:80:91:97:d8:1b:a1:51:3a: 83:2b:39:2b:09:19:09:4e:ec:ad:b5:f2:58:77:c8:33:e7:74: 22:29:b7:20:90:c9:e4:ac:74:3f:e1:06:1a:8a:2d:54:c2:e4: 0b:e7:0b:2e:7b:b0:0e:8e:ba:32:4e:e9:49:9c:b5:f4:78:80: b5:a9:47:f7:76:04:c5:2e:69:5c:d2:dc:32:43:7b:08:ef:12: 9d:ac:c2:09:6d:f2:ac:f2:93:c5:ce:55:b4:a9:04:dc:36:47: f9:ce:a8:07:02:60:e6:4d:ca:7b:11:40:c9:93:16:63:0b:90: 67:b0:d8:cf:57:24:b2:d0:a9:6e:34:15:6b:32:c5:e7:f0:fa: 3e:dc:dd:64:f8:f8:c9:93:8a:3e:31:50:97:dc:44:18:7c:3f: e7:64:b7:3d:6e:56:28:c0:a9:89:ca:27:f4:06:4c:38:26:2f: dd:ec:6a:05:ef:fd:dc:1d:84:d4:e2:21:40:59:67:2a:c7:c5: 1e:d4:0b:c1:ff:96:ad:df:3b:5b:46:a1:53:51:df:81:9f:80: 62:36:a0:e0:53:bc:28:ba:84:8b:61:c8:dc:d1:eb:af:6c:7c: 39:b0:34:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCQkExMTAvBgNVBAUTKDNFRDk5RDJBQTY4MDg2MUQwQTdCNTlDNkQxQkIyQTVC RjRDQjJFNkUwHhcNMjUwNjE0MjIxODA4WhcNMjUwNjIxMjIxODA4WjAYMRYwFAYD VQQDEw02ODRkZjUyMC01NWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyCanW1E7eNHBhIIdhMQWwU8GLVU19QGyAVxWODun5MVlJGC2PZV3/UwnRyW uIlLWmANUtJYYA3AIpWVNmigpiIyrgv+VDjfh/yrIHLycZu0mKOIF0DtXVKd61ta ROYFl+K44LZjZ4yW8HfiOuDZJcM8bVTPz2VL0n/BGKFOiXzaw2DZT8MLlBdkLjBg FiDTdWsXY8b/mD4ctk69VK3he3scV4Zqk8XJCaLzKQzl8BaVUDlAiwoSst1+imb1 2AAVtXB8akg3O9PwCle8ggnKckU1Iug+QF38Mtg+sFDY+JJbmGUH+Dgh5piPhCnr aCMGMNwiku37DV/n+BMQtcgYWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIimCRSb jLt2x75KonxSfKKLAJ7GMB8GA1UdIwQYMBaAFD7ZnSqmgIYdCntZxtG7Klv0yy5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJCQS9CREZFQ0RDMjhE NzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWhoMEtlMW5HMGJzcVdfVExM bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B0bWRLcWFBaGgwS2UxbkcwYnNxV19UTExtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkJCQS9CREZFQ0RDMjhENzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWho MEtlMW5HMGJzcVdfVExMbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNNd9bQXbMAeGyRTDoQfnpp5HXxtPy4HkRizDHgJGX2BuhUTqDKzkr CRkJTuyttfJYd8gz53QiKbcgkMnkrHQ/4QYaii1UwuQL5wsue7AOjroyTulJnLX0 eIC1qUf3dgTFLmlc0twyQ3sI7xKdrMIJbfKs8pPFzlW0qQTcNkf5zqgHAmDmTcp7 EUDJkxZjC5BnsNjPVySy0KluNBVrMsXn8Po+3N1k+PjJk4o+MVCX3EQYfD/nZLc9 blYowKmJyif0Bkw4Ji/d7GoF7/3cHYTU4iFAWWcqx8Ue1AvB/5at3ztbRqFTUd+B n4BiNqDgU7wouoSLYcjc0euvbHw5sDQu -----END CERTIFICATE-----Generated at Mon Jun 16 22:13:46 2025 by rpki-client