$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: TY5R0+ZEVe3Y/bRmNG7ab0Bfm5TtN82b+SXt7niMeqo= Subject key identifier: 72:4F:71:83:63:EB:13:40:57:3D:F9:B9:B9:D6:DA:16:DA:3A:45:DC Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 01FB Signing time: Sun 15 Jun 2025 01:47:43 +0000 Manifest this update: Sun 15 Jun 2025 01:47:43 +0000 Manifest next update: Sun 22 Jun 2025 01:47:42 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: S7Rz9HVE4hpvdKOlf3WMjwkA5FJChBEhTozeOOOeb8A=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: GEtYiWLknMjIUtasCLz3xO+Z9HJ/gkoudL4BFK8Uyb8=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: JJtIODUU0vxeCd16MdkVxGe00rno7Fl7ALBMI2DvnXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Jun 15 01:47:43 2025 GMT Not After : Jun 22 01:47:42 2025 GMT Subject: CN=684e263f-1ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:88:b1:87:1e:b6:99:1a:28:8a:3d:48:7e: f4:fb:88:e4:31:68:82:f9:7f:40:05:0c:e1:89:cb: 77:cc:be:44:77:ab:52:82:8c:9f:a1:a1:83:b3:02: 9c:07:bc:2c:6f:1b:77:52:53:7f:40:94:eb:f5:d0: 53:79:88:61:f9:ab:6f:c7:89:b5:81:14:58:f5:1e: fd:29:cf:2b:1d:0a:f7:39:41:4a:fa:bd:9d:21:a1: dd:ac:34:b0:98:a6:1b:cd:23:f4:a9:ad:c6:a7:dc: 42:65:1d:a6:2b:39:ee:b5:61:e5:03:e7:63:4a:f9: 0b:c0:98:f0:6c:f8:d2:b6:51:85:9e:b4:d9:d8:f6: 6e:fe:5d:da:cd:b8:68:bb:af:d9:47:01:e0:f6:2b: 21:30:5a:d7:75:7d:86:36:2b:8d:fe:c7:12:7e:32: 27:16:29:5a:aa:f2:53:ac:11:13:72:5a:6e:2e:0a: b0:8a:33:2b:c7:c0:c2:9e:d4:24:04:f3:c4:e8:2a: f3:e3:31:bd:94:5b:d4:f8:2f:14:88:2f:e0:c8:91: a3:b2:59:d4:62:2b:db:8b:5b:78:3c:c4:16:4f:9d: 21:41:d8:7c:92:80:5a:a5:ae:a9:06:f6:38:3f:0c: b0:bc:be:d8:a2:5c:90:33:fe:57:bc:53:4e:bd:89: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4F:71:83:63:EB:13:40:57:3D:F9:B9:B9:D6:DA:16:DA:3A:45:DC X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:52:67:37:42:3c:c7:b8:f3:af:46:f5:7a:e7:02:cd:42:02: 6b:6b:d1:8e:4e:c5:33:cf:ef:3a:87:16:cc:98:0e:de:0d:3a: b7:55:22:ee:4b:15:2b:16:4a:95:c8:4a:07:10:3c:84:b6:99: ca:af:46:8b:a9:16:ff:a0:22:35:35:b4:5e:01:95:7f:c8:5b: 6b:3e:45:94:fd:46:c5:47:39:69:c6:33:dd:5c:81:c0:57:a9: dc:9b:fb:ba:8d:f2:85:7f:f0:f8:7e:0f:e2:19:43:a6:78:a4: 69:f5:cb:5f:3f:d9:02:ba:a0:dc:92:6f:69:60:cb:0c:da:b5: ea:4b:a6:b7:a7:b3:74:7c:87:43:7b:07:ac:fe:3b:b2:34:f2: b8:4b:4f:ef:87:4b:6b:04:60:fc:9f:ab:46:3b:21:6e:63:6c: d4:53:18:c3:84:2f:17:0e:73:72:60:f4:d1:98:22:19:8f:48: aa:b2:fb:2f:85:6a:24:3a:2a:58:12:a7:75:57:98:63:48:c3: 82:6a:0c:cc:da:19:cb:a1:d3:0b:73:84:fb:21:21:7e:5c:eb: 86:e3:79:14:21:1b:95:bd:8a:6e:2b:ed:14:d2:e0:6d:71:81: 13:0d:de:c7:5a:0a:8d:6e:c6:cc:dc:f1:42:fb:be:fb:20:be: 53:80:4e:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjUwNjE1MDE0NzQzWhcNMjUwNjIyMDE0NzQyWjAYMRYwFAYD VQQDEw02ODRlMjYzZi0xY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0aIsYcetpkaKIo9SH70+4jkMWiC+X9ABQzhict3zL5Ed6tSgoyfoaGDswKc B7wsbxt3UlN/QJTr9dBTeYhh+atvx4m1gRRY9R79Kc8rHQr3OUFK+r2dIaHdrDSw mKYbzSP0qa3Gp9xCZR2mKznutWHlA+djSvkLwJjwbPjStlGFnrTZ2PZu/l3azbho u6/ZRwHg9ishMFrXdX2GNiuN/scSfjInFilaqvJTrBETclpuLgqwijMrx8DCntQk BPPE6Crz4zG9lFvU+C8UiC/gyJGjslnUYivbi1t4PMQWT50hQdh8koBapa6pBvY4 PwywvL7YolyQM/5XvFNOvYnBqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJPcYNj 6xNAVz35ubnW2hbaOkXcMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVUmc3QjzHuPOvRvV65wLNQgJra9GOTsUzz+86hxbMmA7eDTq3VSLu SxUrFkqVyEoHEDyEtpnKr0aLqRb/oCI1NbReAZV/yFtrPkWU/UbFRzlpxjPdXIHA V6ncm/u6jfKFf/D4fg/iGUOmeKRp9ctfP9kCuqDckm9pYMsM2rXqS6a3p7N0fIdD ewes/juyNPK4S0/vh0trBGD8n6tGOyFuY2zUUxjDhC8XDnNyYPTRmCIZj0iqsvsv hWokOipYEqd1V5hjSMOCagzM2hnLodMLc4T7ISF+XOuG43kUIRuVvYpuK+0U0uBt cYETDd7HWgqNbsbM3PFC+777IL5TgE6g -----END CERTIFICATE-----Generated at Sun Jun 15 08:42:04 2025 by rpki-client