$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft File: pSvwKHcZGUlxLT2tKdSreid57EM.mft (raw, json) Hash identifier: IeMnpr4YrgeAVa8BOpjenrs02+/2+IIF1G9bKGkCoXo= Subject key identifier: CC:42:8C:A3:AF:5F:6D:38:1C:DA:05:95:07:71:BE:6C:65:8E:5D:57 Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43 Certificate issuer: /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft Manifest number: B6 Signing time: Thu 19 Jun 2025 05:20:41 +0000 Manifest this update: Thu 19 Jun 2025 05:20:40 +0000 Manifest next update: Thu 26 Jun 2025 05:20:40 +0000 Files and hashes: 1: pSvwKHcZGUlxLT2tKdSreid57EM.crl (hash: bVNVF/5f/RvTDOurXUM2YafVjMyHloSwCisaEjR1TzY=) 2: 88F562E83DAD11EFAA46E417C4F9AE02.roa (hash: y+CwsCOmzO2omqt+7OucZwgkShxhjQvdzFrUFNJogYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43 Validity Not Before: Jun 19 05:20:40 2025 GMT Not After : Jun 26 05:20:40 2025 GMT Subject: CN=68539e28-819f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:c7:a6:d5:59:80:a8:72:54:31:2a:82:9b: 92:cf:43:c9:34:50:30:97:dd:cf:dc:7e:cc:23:2d: 4d:ba:d9:9a:7d:7d:a8:3d:66:d9:00:2b:f6:af:36: 30:dd:9e:50:a4:25:0b:39:c3:7a:7c:cf:8a:24:f1: e6:00:39:f3:3a:20:58:7c:a2:29:85:17:32:ae:7f: 73:65:3e:69:75:3f:c0:93:b9:ef:98:ff:c0:38:ac: 2f:99:c3:3b:75:29:4a:08:dd:ec:3c:b7:40:97:66: e9:24:a3:5a:8f:8f:c7:42:fc:5b:fd:0f:bf:9b:43: 92:11:d0:0c:77:9d:12:bc:1f:74:2e:92:02:68:18: 56:e9:e3:84:c4:ef:e9:a9:7e:0d:70:3a:94:83:40: 46:d2:d1:db:e5:8f:20:77:89:79:27:04:42:ff:08: 14:1c:62:23:fe:36:c4:7e:e3:6e:5d:23:80:ed:45: 9d:a1:61:df:db:ee:86:d0:57:0a:66:68:2d:58:7c: 9d:95:02:3d:35:a2:86:3f:ab:71:e1:b9:08:b1:bf: 6f:71:cd:d2:0c:6b:87:a9:8f:ea:36:d8:f6:04:13: 79:cc:c2:25:5a:56:92:08:34:d9:0d:3b:76:7a:c3: 1e:7f:98:2d:09:68:9b:16:b1:28:0f:bd:e0:bc:7b: d2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:42:8C:A3:AF:5F:6D:38:1C:DA:05:95:07:71:BE:6C:65:8E:5D:57 X509v3 Authority Key Identifier: keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d1:39:1c:bc:5c:4a:23:f7:21:bd:9a:ed:dd:4b:15:15:a1: 60:01:39:b3:50:e7:28:fb:88:4f:07:d8:04:1c:69:20:29:44: 01:f1:4a:f3:6f:60:29:ff:94:74:25:70:26:d4:30:d2:05:e2: 65:9b:52:00:b8:60:f5:0a:7d:31:70:c1:2e:77:5e:13:22:99: 62:bf:56:7a:a2:1e:d5:44:c4:44:da:fa:80:03:92:ee:86:66: d7:34:c8:c2:00:26:40:bf:45:81:ac:27:42:de:41:3c:a5:f7: 0d:46:ec:68:0f:6a:13:ca:da:ce:d2:00:67:f4:40:82:22:00: cb:30:11:fc:69:5d:83:8e:80:26:b2:4f:0f:69:06:fb:85:cd: db:22:0b:f2:19:28:1b:61:cf:3c:cf:be:74:62:f0:cf:0e:64: df:88:a7:cb:ee:9c:42:1d:14:bd:f2:e5:e5:55:75:26:9c:f6: 65:85:8a:d7:22:d7:89:b4:c3:cf:42:28:e0:1f:fa:51:5b:50: b6:99:4e:08:00:c4:53:ca:77:23:c7:0e:61:9e:98:59:90:e9: 63:04:dd:27:46:03:e9:ca:1b:df:00:6d:50:1e:21:16:8a:7b: c0:2a:b4:07:47:e4:4c:a0:f6:83:88:d3:e3:96:76:0c:b1:64: 61:a9:79:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE2MTgxMTAvBgNVBAUTKEE1MkJGMDI4NzcxOTE5NDk3MTJEM0RBRDI5RDRBQjdB Mjc3OUVDNDMwHhcNMjUwNjE5MDUyMDQwWhcNMjUwNjI2MDUyMDQwWjAYMRYwFAYD VQQDEw02ODUzOWUyOC04MTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRbHptVZgKhyVDEqgpuSz0PJNFAwl93P3H7MIy1NutmafX2oPWbZACv2rzYw 3Z5QpCULOcN6fM+KJPHmADnzOiBYfKIphRcyrn9zZT5pdT/Ak7nvmP/AOKwvmcM7 dSlKCN3sPLdAl2bpJKNaj4/HQvxb/Q+/m0OSEdAMd50SvB90LpICaBhW6eOExO/p qX4NcDqUg0BG0tHb5Y8gd4l5JwRC/wgUHGIj/jbEfuNuXSOA7UWdoWHf2+6G0FcK ZmgtWHydlQI9NaKGP6tx4bkIsb9vcc3SDGuHqY/qNtj2BBN5zMIlWlaSCDTZDTt2 esMef5gtCWibFrEoD73gvHvSiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxCjKOv X204HNoFlQdxvmxljl1XMB8GA1UdIwQYMBaAFKUr8Ch3GRlJcS09rSnUq3oneexD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTYxOC81NTdFQUIzQzNB QkUxMUVGODYxOUQyMjBDNEY5QUUwMi9wU3Z3S0hjWkdVbHhMVDJ0S2RTcmVpZDU3 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdndLSGNaR1VseExUMnRLZFNyZWlkNTdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTYxOC81NTdFQUIzQzNBQkUxMUVGODYxOUQyMjBDNEY5QUUwMi9wU3Z3S0hjWkdV bHhMVDJ0S2RTcmVpZDU3RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy0TkcvFxKI/chvZrt3UsVFaFgATmzUOco+4hPB9gEHGkgKUQB8Urz b2Ap/5R0JXAm1DDSBeJlm1IAuGD1Cn0xcMEud14TIpliv1Z6oh7VRMRE2vqAA5Lu hmbXNMjCACZAv0WBrCdC3kE8pfcNRuxoD2oTytrO0gBn9ECCIgDLMBH8aV2DjoAm sk8PaQb7hc3bIgvyGSgbYc88z750YvDPDmTfiKfL7pxCHRS98uXlVXUmnPZlhYrX IteJtMPPQijgH/pRW1C2mU4IAMRTyncjxw5hnphZkOljBN0nRgPpyhvfAG1QHiEW invAKrQHR+RMoPaDiNPjlnYMsWRhqXk8 -----END CERTIFICATE-----Generated at Thu Jun 19 19:36:10 2025 by rpki-client