$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft File: EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json) Hash identifier: Ixk8ukxMPmHKqra1tr/4EPTiWBwRBLG+h8R64ICDjCQ= Subject key identifier: 00:C6:C7:76:7B:AF:82:3B:04:D7:B8:82:46:A0:A0:51:67:D6:2B:0C Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A Certificate issuer: /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft Manifest number: 0106 Signing time: Tue 17 Jun 2025 04:05:15 +0000 Manifest this update: Tue 17 Jun 2025 04:05:15 +0000 Manifest next update: Tue 24 Jun 2025 04:05:14 +0000 Files and hashes: 1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: n2VBxmg3k7UhABiQBjobfkpnHwaQkbB8GhfWdIzcz6k=) 2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: YLouRJayszJ+YXIZjA0nYlRHirFmGMZNUS3tAUGchSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Validity Not Before: Jun 17 04:05:15 2025 GMT Not After : Jun 24 04:05:14 2025 GMT Subject: CN=6850e97b-72d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5d:c6:77:eb:b2:2c:f7:bc:2f:44:cd:3c:20: 2a:23:05:b6:0b:d9:96:92:38:06:3c:a0:bc:3a:a3: e5:9e:7e:d7:d5:68:b3:f8:49:39:c8:9a:09:46:12: 41:86:07:62:2d:f6:f8:e9:d8:48:e4:f3:c2:c2:fe: 08:09:0d:bf:a5:cc:e2:28:09:bd:5a:36:fb:03:33: 7d:05:16:fd:3c:9c:8f:bc:5e:80:d2:35:30:2e:3f: c0:9d:33:00:ae:0d:cf:64:5a:85:48:6a:99:b4:36: 89:f7:04:0e:9c:59:af:c4:ac:e9:8e:83:ff:e6:68: 6b:b1:86:79:ad:d2:10:3f:13:b4:8c:53:af:89:07: b6:39:3a:3b:61:03:30:5d:8a:41:0c:0a:99:3d:64: 3a:29:07:0a:5e:a3:14:c8:c6:47:f5:1f:81:88:96: 66:64:59:40:c9:60:2e:c4:72:65:f8:e2:54:c7:73: e7:58:69:da:a4:58:7a:ce:2d:47:29:36:08:e2:10: 28:2c:5e:ab:5a:d0:95:10:7a:b9:47:59:f0:4e:50: 9c:3c:41:e9:44:3b:d7:b2:71:54:76:18:68:36:ea: f1:42:e7:48:74:d5:f9:2e:42:46:25:7c:31:29:78: 51:61:b5:fa:50:29:0a:63:d6:85:64:57:7b:20:f5: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C6:C7:76:7B:AF:82:3B:04:D7:B8:82:46:A0:A0:51:67:D6:2B:0C X509v3 Authority Key Identifier: keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9f:3c:00:75:df:48:27:e4:ae:72:7b:af:f1:d4:60:e6:e6: 79:27:d2:d4:0f:f1:0f:a1:9a:ed:9e:94:f3:a9:6d:ed:ec:bb: a8:0c:bc:a2:40:f9:7a:6f:0f:e7:8e:51:26:ba:3c:ed:ec:64: 91:9a:e3:17:ec:4a:69:56:79:90:07:6c:dd:98:35:3e:58:ef: ef:f9:17:8c:1e:d4:3d:88:f3:cc:77:e3:81:5e:cf:82:ce:01: fa:f5:e7:49:75:b7:70:2c:17:c2:97:ac:0f:07:3d:62:49:3f: 46:27:83:34:98:3f:4f:f7:a9:53:fa:ff:4b:5e:d8:58:43:c9: 7c:5b:87:7e:7e:80:41:a7:fc:46:6f:fa:da:b7:16:d8:f4:2c: 56:97:3a:ab:dc:4e:e3:c7:5a:82:fb:78:16:da:02:1f:d3:71: 7a:16:c2:af:25:b9:15:27:de:57:02:32:95:fb:88:90:97:f7: 8f:b4:2c:a3:44:94:0e:23:b0:52:b3:18:97:60:29:ed:0c:49: 5f:24:47:d0:ce:9a:00:03:cd:15:44:a8:9e:28:f9:b3:ca:34: 28:92:88:4d:74:fa:2e:4b:b5:f1:94:dd:7e:0c:92:52:f4:c0: aa:70:d8:f7:0e:1e:1d:c4:c7:7b:a2:b4:5d:3d:34:85:87:3b: d8:4e:ae:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKDExNUE0MTYwQzg1NTU0N0Q5RTMxMEM2MEQzRDA4OENC QkM5QTk5MkEwHhcNMjUwNjE3MDQwNTE1WhcNMjUwNjI0MDQwNTE0WjAYMRYwFAYD VQQDEw02ODUwZTk3Yi03MmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1l3Gd+uyLPe8L0TNPCAqIwW2C9mWkjgGPKC8OqPlnn7X1Wiz+Ek5yJoJRhJB hgdiLfb46dhI5PPCwv4ICQ2/pcziKAm9Wjb7AzN9BRb9PJyPvF6A0jUwLj/AnTMA rg3PZFqFSGqZtDaJ9wQOnFmvxKzpjoP/5mhrsYZ5rdIQPxO0jFOviQe2OTo7YQMw XYpBDAqZPWQ6KQcKXqMUyMZH9R+BiJZmZFlAyWAuxHJl+OJUx3PnWGnapFh6zi1H KTYI4hAoLF6rWtCVEHq5R1nwTlCcPEHpRDvXsnFUdhhoNurxQudIdNX5LkJGJXwx KXhRYbX6UCkKY9aFZFd7IPWcjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADGx3Z7 r4I7BNe4gkagoFFn1isMMB8GA1UdIwQYMBaAFBFaQWDIVVR9njEMYNPQiMu8mpkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC9GRUNBNzUwNkJF N0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZIMmVNUXhnMDlDSXk3eWFt U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VWcEJZTWhWVkgyZU1ReGcwOUNJeTd5YW1Tby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC9GRUNBNzUwNkJFN0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZI MmVNUXhnMDlDSXk3eWFtU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPnzwAdd9IJ+Sucnuv8dRg5uZ5J9LUD/EPoZrtnpTzqW3t7LuoDLyi QPl6bw/njlEmujzt7GSRmuMX7EppVnmQB2zdmDU+WO/v+ReMHtQ9iPPMd+OBXs+C zgH69edJdbdwLBfCl6wPBz1iST9GJ4M0mD9P96lT+v9LXthYQ8l8W4d+foBBp/xG b/ratxbY9CxWlzqr3E7jx1qC+3gW2gIf03F6FsKvJbkVJ95XAjKV+4iQl/ePtCyj RJQOI7BSsxiXYCntDElfJEfQzpoAA80VRKieKPmzyjQokohNdPouS7XxlN1+DJJS 9MCqcNj3Dh4dxMd7orRdPTSFhzvYTq5h -----END CERTIFICATE-----Generated at Tue Jun 17 07:21:01 2025 by rpki-client