$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft File: iZOTjIV1ACgOj15T3As-kweu1Kc.mft (raw, json) Hash identifier: veTsc5Ado9jWHaHcdC0zr1k5y/vUZiW2Kyvh/rKcKeA= Subject key identifier: 0F:BA:6E:2F:18:5C:4C:22:8C:0D:C8:73:85:69:6B:51:BD:CD:9B:3C Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft Manifest number: 3E Signing time: Sun 15 Jun 2025 06:36:46 +0000 Manifest this update: Sun 15 Jun 2025 06:36:46 +0000 Manifest next update: Sun 22 Jun 2025 06:36:46 +0000 Files and hashes: 1: iZOTjIV1ACgOj15T3As-kweu1Kc.crl (hash: XiTwesgSGuBO6j7vP24JTMr53exevqz5X9As2CiU55w=) 2: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (hash: t4VsjBzDPnCNqQJ4/+l/e7o+o8AvICh72VVWJ8BMmY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Validity Not Before: Jun 15 06:36:46 2025 GMT Not After : Jun 22 06:36:46 2025 GMT Subject: CN=684e69fe-315e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:2b:b0:09:c2:76:d8:79:fd:63:ac:6b:39: c6:60:b4:0a:95:4c:ef:9e:d0:b6:7c:b8:6d:7d:dc: 4e:76:8a:2e:b1:97:d5:57:50:54:fb:e5:f4:2d:70: 26:36:89:bf:76:a2:c9:c5:c1:b1:0a:5d:10:50:36: 5c:eb:05:b3:41:f8:0d:05:6b:18:d4:33:c0:27:8e: 97:35:d6:00:7b:ed:cf:1c:bc:c1:2f:06:4d:44:b6: 09:39:11:a6:b0:ec:d3:49:3a:8b:b4:88:49:97:2b: 65:96:68:f4:d3:2e:8e:4a:e3:9e:f1:f9:52:88:a8: b2:e5:50:e9:bf:07:ec:87:8b:e3:75:a2:bf:97:92: 9d:73:b4:cf:9a:5f:d8:66:7c:fe:9f:53:55:5a:0d: fa:e2:4c:f1:1c:90:9b:5d:72:6c:7b:e7:7c:5c:c5: 07:c4:08:60:a3:4a:5f:8c:f0:c4:c6:a2:98:ea:ce: 76:88:fe:6c:28:ac:c9:fa:f3:f6:fe:be:87:8f:34: bc:22:8a:96:de:e2:af:bd:17:fa:4a:44:bb:c0:97: c9:24:ba:b4:0d:93:ca:eb:d4:96:4f:54:a0:74:08: 50:40:fb:28:b0:5a:4d:59:c4:19:e5:cb:c4:9f:ec: ff:93:99:29:ca:a6:73:81:cd:cb:61:0a:6d:cb:0e: b9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BA:6E:2F:18:5C:4C:22:8C:0D:C8:73:85:69:6B:51:BD:CD:9B:3C X509v3 Authority Key Identifier: keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:aa:09:6f:a6:d9:67:ce:10:e4:a4:4f:53:6d:2a:d1:c5:26: 64:ef:a6:38:e6:93:a2:5c:de:af:3d:b4:eb:11:b2:c7:c3:1f: 51:3f:6d:02:21:26:07:2b:10:77:26:46:65:56:5b:71:73:23: 0d:f6:bb:57:1d:f7:1e:24:e4:5e:13:22:09:cd:37:24:ba:17: 55:0c:a6:e1:a2:b8:b5:21:04:45:15:07:00:17:32:15:62:a1: 8d:26:2e:6a:2c:e2:49:70:d2:4e:19:e6:e6:f6:c9:67:4e:5c: 21:c8:b4:16:64:c3:08:28:02:40:9c:85:1d:60:e8:5a:2e:d5: c5:67:93:c5:28:5e:da:7d:86:ac:7c:e0:a9:46:54:bd:b7:7b: 32:35:10:88:b2:95:cb:81:f1:b8:21:b0:6c:2e:63:4d:7b:fc: 43:67:52:cd:92:4d:fe:f8:b7:01:25:8e:33:b5:23:dc:c4:e8: 2a:c4:84:2d:99:c8:52:f7:93:49:5f:93:0c:c0:5e:74:2a:9d: 11:be:5a:53:f6:7a:85:10:07:fb:ba:2b:84:a8:b1:6b:38:2c: 32:ba:7c:61:0d:44:20:9c:e7:42:c9:10:6e:e5:c3:f2:bb:ef: 59:dc:c5:a9:9b:ae:8a:46:1a:3d:58:10:70:ad:c8:4d:64:d6: 8e:e3:f4:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDNFMTExMC8GA1UEBRMoODk5MzkzOEM4NTc1MDAyODBFOEY1RTUzREMwQjNFOTMw N0FFRDRBNzAeFw0yNTA2MTUwNjM2NDZaFw0yNTA2MjIwNjM2NDZaMBgxFjAUBgNV BAMTDTY4NGU2OWZlLTMxNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCHCuwCcJ22Hn9Y6xrOcZgtAqVTO+e0LZ8uG193E52ii6xl9VXUFT75fQtcCY2 ib92osnFwbEKXRBQNlzrBbNB+A0FaxjUM8Anjpc11gB77c8cvMEvBk1Etgk5Eaaw 7NNJOou0iEmXK2WWaPTTLo5K457x+VKIqLLlUOm/B+yHi+N1or+Xkp1ztM+aX9hm fP6fU1VaDfriTPEckJtdcmx753xcxQfECGCjSl+M8MTGopjqznaI/mworMn68/b+ voePNLwiipbe4q+9F/pKRLvAl8kkurQNk8rr1JZPVKB0CFBA+yiwWk1ZxBnly8Sf 7P+TmSnKpnOBzcthCm3LDrm3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD7puLxhc TCKMDchzhWlrUb3NmzwwHwYDVR0jBBgwFoAUiZOTjIV1ACgOj15T3As+kweu1Kcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEM0UxLzdDRjA3QkM2RUY0 NzExRUZBRjRDNDk2OEM0RjlBRTAyL2laT1RqSVYxQUNnT2oxNVQzQXMta3dldTFL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVpPVGpJVjFBQ2dPajE1VDNBcy1rd2V1MUtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE M0UxLzdDRjA3QkM2RUY0NzExRUZBRjRDNDk2OEM0RjlBRTAyL2laT1RqSVYxQUNn T2oxNVQzQXMta3dldTFLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKiqCW+m2WfOEOSkT1NtKtHFJmTvpjjmk6Jc3q89tOsRssfDH1E/bQIh JgcrEHcmRmVWW3FzIw32u1cd9x4k5F4TIgnNNyS6F1UMpuGiuLUhBEUVBwAXMhVi oY0mLmos4klw0k4Z5ub2yWdOXCHItBZkwwgoAkCchR1g6Fou1cVnk8UoXtp9hqx8 4KlGVL23ezI1EIiylcuB8bghsGwuY017/ENnUs2STf74twEljjO1I9zE6CrEhC2Z yFL3k0lfkwzAXnQqnRG+WlP2eoUQB/u6K4SosWs4LDK6fGENRCCc50LJEG7lw/K7 71ncxambropGGj1YEHCtyE1k1o7j9KU= -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:46 2025 by rpki-client