$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft File: 1f9FyAWBJcJy3wRtwLjgb6owT88.mft (raw, json) Hash identifier: uxpBs5J79DAweCtZktaW8mb39ySoMVBuXS08J39PF68= Subject key identifier: A3:4B:45:AF:19:D6:2C:34:7B:61:FF:10:2D:B7:3E:01:E5:FE:FA:3E Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF Certificate issuer: /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF Certificate serial: 03E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft Manifest number: 03DE Signing time: Sun 15 Jun 2025 00:18:23 +0000 Manifest this update: Sun 15 Jun 2025 00:18:22 +0000 Manifest next update: Sun 22 Jun 2025 00:18:22 +0000 Files and hashes: 1: 1f9FyAWBJcJy3wRtwLjgb6owT88.crl (hash: J/v+XaFGdMFFaeyWMMZAEXt9PfeWbojOg31ks15ykH8=) 2: 99F51284A1E911EDAD7CE929C4F9AE02.roa (hash: DgFh0007lZzBIY6/Uazy8v7Lvih8jtP3rAyQ1LouyMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7E29, serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF Validity Not Before: Jun 15 00:18:22 2025 GMT Not After : Jun 22 00:18:22 2025 GMT Subject: CN=684e114e-12d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:17:76:f2:c0:1b:60:32:8d:01:c0:2b:8f:67: db:2a:37:da:9f:5d:b3:8b:23:58:4e:de:32:dd:14: e6:f3:58:d5:6d:1a:c4:9d:51:8f:91:e7:a6:21:c8: 81:15:60:d4:a1:9b:ce:f9:c4:75:f9:9d:4a:af:d3: cb:f2:cd:4f:e5:0c:4f:78:6b:ea:e4:08:27:22:0e: c2:6c:44:64:54:6b:a3:54:50:74:8c:a0:17:c4:4f: 09:28:0e:ee:3b:13:4e:48:b2:e2:4e:9d:18:9b:90: 75:f4:dc:93:6c:22:29:73:b7:50:1a:99:b4:01:9a: 9f:af:13:14:a3:a2:03:04:9b:d6:f1:a7:04:d0:05: 66:2f:c5:f5:b4:5c:bd:98:54:9c:8c:81:7e:b2:1a: 89:00:50:cb:cd:48:66:9d:64:bb:b2:a6:1f:62:90: 67:2e:1b:fa:64:78:af:05:56:36:4d:5d:2e:36:3d: 42:82:9a:69:f0:21:0f:9b:f9:7a:67:67:5e:f4:ec: e8:4d:e1:4f:40:33:aa:49:c9:b8:fb:ad:66:65:ee: 7f:d6:44:c5:52:4b:30:ea:ed:52:b5:79:1e:6a:37: 5e:3a:6a:68:ab:fd:e6:16:ad:71:9d:72:9e:90:31: cd:bb:53:80:63:bb:ce:21:0d:8e:9f:b1:e9:c6:31: e8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4B:45:AF:19:D6:2C:34:7B:61:FF:10:2D:B7:3E:01:E5:FE:FA:3E X509v3 Authority Key Identifier: keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:87:89:d7:ad:7b:9b:b8:95:70:8e:1a:f2:03:f6:1b:31:46: 2e:cf:43:3e:ec:d5:70:74:1c:42:73:af:eb:7c:70:af:26:9f: 39:8b:c8:71:43:9c:c0:0d:5d:f8:76:13:a3:6a:f6:7c:16:f4: 37:68:22:f6:71:7f:9d:b0:ca:12:1c:da:fc:08:1c:53:de:63: 12:ed:4f:09:69:ec:da:ee:c3:29:0b:19:35:f9:1b:80:de:10: 77:21:82:a2:6a:b1:ad:af:8a:69:83:4a:ad:42:cb:dc:9c:70: 75:05:4f:52:f5:28:ad:08:f2:60:9d:bb:ae:f6:8d:6e:c6:a5: d3:66:2e:55:a6:18:c2:d6:fc:77:d0:cc:b9:1f:4c:c4:28:50: 2b:d3:04:6a:b4:1e:4d:ba:40:a1:cf:8c:43:0c:37:ba:0b:8c: dd:28:89:5d:f7:2a:c5:05:37:6a:4a:40:5e:14:f8:28:7a:b0: 98:ac:03:8c:0c:5d:9c:74:b9:25:20:b8:f7:2a:7b:c8:6e:72: d7:b9:93:fa:13:47:63:24:55:b7:7c:4f:3f:ce:c5:7f:26:e2: 11:14:7f:3b:fc:65:ce:38:14:73:d5:e6:72:a2:ad:62:dd:24: 34:e1:c8:24:50:2d:7a:f3:13:a8:ac:12:90:95:4b:1e:d2:99: 0e:62:a4:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFMjkxMTAvBgNVBAUTKEQ1RkY0NUM4MDU4MTI1QzI3MkRGMDQ2REMwQjhFMDZG QUEzMDRGQ0YwHhcNMjUwNjE1MDAxODIyWhcNMjUwNjIyMDAxODIyWjAYMRYwFAYD VQQDEw02ODRlMTE0ZS0xMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Bd28sAbYDKNAcArj2fbKjfan12ziyNYTt4y3RTm81jVbRrEnVGPkeemIciB FWDUoZvO+cR1+Z1Kr9PL8s1P5QxPeGvq5AgnIg7CbERkVGujVFB0jKAXxE8JKA7u OxNOSLLiTp0Ym5B19NyTbCIpc7dQGpm0AZqfrxMUo6IDBJvW8acE0AVmL8X1tFy9 mFScjIF+shqJAFDLzUhmnWS7sqYfYpBnLhv6ZHivBVY2TV0uNj1Cgppp8CEPm/l6 Z2de9OzoTeFPQDOqScm4+61mZe5/1kTFUksw6u1StXkeajdeOmpoq/3mFq1xnXKe kDHNu1OAY7vOIQ2On7HpxjHooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNLRa8Z 1iw0e2H/EC23PgHl/vo+MB8GA1UdIwQYMBaAFNX/RcgFgSXCct8EbcC44G+qME/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0UyOS81NkYxQzUzMjg3 OTAxMUVDODZEMDQ0MUVDNEY5QUUwMi8xZjlGeUFXQkpjSnkzd1J0d0xqZ2I2b3dU ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmOUZ5QVdCSmNKeTN3UnR3TGpnYjZvd1Q4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0UyOS81NkYxQzUzMjg3OTAxMUVDODZEMDQ0MUVDNEY5QUUwMi8xZjlGeUFXQkpj Snkzd1J0d0xqZ2I2b3dUODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjh4nXrXubuJVwjhryA/YbMUYuz0M+7NVwdBxCc6/rfHCvJp85i8hx Q5zADV34dhOjavZ8FvQ3aCL2cX+dsMoSHNr8CBxT3mMS7U8Jaeza7sMpCxk1+RuA 3hB3IYKiarGtr4ppg0qtQsvcnHB1BU9S9SitCPJgnbuu9o1uxqXTZi5VphjC1vx3 0My5H0zEKFAr0wRqtB5NukChz4xDDDe6C4zdKIld9yrFBTdqSkBeFPgoerCYrAOM DF2cdLklILj3KnvIbnLXuZP6E0djJFW3fE8/zsV/JuIRFH87/GXOOBRz1eZyoq1i 3SQ04cgkUC168xOorBKQlUse0pkOYqSd -----END CERTIFICATE-----Generated at Sun Jun 15 08:31:59 2025 by rpki-client