$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: Rz2ne8gWLQJgeBKhV+OfUzlVOw5Uk3M5zsupFzoVwQc= Subject key identifier: F0:BD:2D:50:E7:8A:44:10:E4:1B:38:2E:0D:42:25:76:64:1D:0A:88 Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 34B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 349E Signing time: Wed 18 Jun 2025 15:14:07 +0000 Manifest this update: Wed 18 Jun 2025 15:14:06 +0000 Manifest next update: Wed 25 Jun 2025 15:14:06 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: 8FKjJCIUEuyrUL6G7jW1U/0PFIui8jDVXisiumlfRp4=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13491 (0x34b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Jun 18 15:14:06 2025 GMT Not After : Jun 25 15:14:06 2025 GMT Subject: CN=6852d7bf-5b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:27:eb:26:fd:14:cd:a9:73:b3:a4:b0:a8: 5a:79:be:8a:f0:87:35:20:c7:bc:cb:ff:d1:b9:bd: 51:f1:a8:0f:ee:c1:76:fe:1a:c8:c7:7d:7d:fe:fd: de:5f:7c:ee:28:19:93:aa:ab:50:17:31:83:74:c2: 79:df:dd:0f:1a:34:06:64:7e:9b:78:12:4f:d4:ad: 06:1d:21:a1:23:5a:6f:96:8a:d2:32:4b:37:f3:58: 7f:da:44:be:a4:3c:a1:04:c8:47:9f:22:27:3e:c4: 0c:8e:e8:64:5e:3a:bc:e8:60:e3:77:f3:da:a1:44: 3c:dd:34:ab:15:dc:a0:dc:33:c5:f5:7e:d3:2b:07: fd:24:57:50:1d:9b:ec:0c:4b:30:46:50:5c:50:ab: 2a:dc:8b:ad:8f:40:68:54:1c:da:ae:cc:14:fe:34: 1e:43:f3:3d:ba:39:ae:6e:09:60:24:a7:de:d7:e4: 27:8e:1a:a9:44:1c:28:67:47:82:61:6d:a7:45:ae: 3d:cb:74:9a:8c:cd:2e:7f:d8:4f:ff:79:f9:7c:3b: ff:11:88:e8:72:47:4a:ca:c6:c8:a2:07:1d:24:cf: 34:ae:f6:a9:c7:ec:44:2c:04:43:1d:75:c1:cb:a0: 63:64:d3:6a:32:19:4d:06:e0:f6:8f:39:07:88:84: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BD:2D:50:E7:8A:44:10:E4:1B:38:2E:0D:42:25:76:64:1D:0A:88 X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f4:0b:c7:d9:6b:1b:b6:8b:56:5d:90:11:bb:b1:95:06:6b: 62:20:72:bc:84:d9:6e:71:db:1d:9f:f0:c8:9a:97:91:c1:31: f4:1f:c4:33:ba:4f:11:c0:70:04:fe:71:f1:e2:24:3a:5d:34: 63:4b:2c:f5:5f:07:32:45:7f:5b:26:4a:04:de:3f:34:21:40: 0a:96:6a:fa:44:4f:f4:32:93:c0:29:cd:9b:bf:f2:6c:aa:93: bb:e1:0a:bc:f8:e8:ef:c2:d8:1a:ac:95:a2:46:af:1f:ac:d9: a6:66:78:cc:77:bf:51:05:8f:de:c6:b6:54:14:0e:6f:e6:06: 88:d2:b0:a4:ee:86:21:46:71:3f:27:fb:52:f4:a3:e2:e1:c3: 4f:85:05:78:66:e2:88:90:fd:d8:4f:97:10:27:bb:91:d1:96: 3e:8d:29:fe:29:03:8b:ef:aa:0b:4e:bc:2b:54:2e:03:77:47: 3c:81:64:79:9e:67:7b:87:7d:17:1f:4c:30:55:b6:e8:bc:83: e0:b6:8a:38:d6:fa:9f:07:43:e9:b8:e3:56:43:99:8e:ab:30: 7d:91:98:d3:0b:92:5e:e0:9d:c7:ba:d2:78:86:94:97:d4:3e: af:dc:13:e6:45:88:f7:17:d1:e2:11:83:2a:39:29:cf:e5:a4: a9:e5:3a:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjUwNjE4MTUxNDA2WhcNMjUwNjI1MTUxNDA2WjAYMRYwFAYD VQQDEw02ODUyZDdiZi01YjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkAn6yb9FM2pc7OksKhaeb6K8Ic1IMe8y//Rub1R8agP7sF2/hrIx319/v3e X3zuKBmTqqtQFzGDdMJ5390PGjQGZH6beBJP1K0GHSGhI1pvlorSMks381h/2kS+ pDyhBMhHnyInPsQMjuhkXjq86GDjd/PaoUQ83TSrFdyg3DPF9X7TKwf9JFdQHZvs DEswRlBcUKsq3Iutj0BoVBzarswU/jQeQ/M9ujmubglgJKfe1+QnjhqpRBwoZ0eC YW2nRa49y3SajM0uf9hP/3n5fDv/EYjockdKysbIogcdJM80rvapx+xELARDHXXB y6BjZNNqMhlNBuD2jzkHiIScNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPC9LVDn ikQQ5Bs4Lg1CJXZkHQqIMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA49AvH2WsbtotWXZARu7GVBmtiIHK8hNlucdsdn/DImpeRwTH0H8Qz uk8RwHAE/nHx4iQ6XTRjSyz1XwcyRX9bJkoE3j80IUAKlmr6RE/0MpPAKc2bv/Js qpO74Qq8+OjvwtgarJWiRq8frNmmZnjMd79RBY/exrZUFA5v5gaI0rCk7oYhRnE/ J/tS9KPi4cNPhQV4ZuKIkP3YT5cQJ7uR0ZY+jSn+KQOL76oLTrwrVC4Dd0c8gWR5 nmd7h30XH0wwVbbovIPgtoo41vqfB0PpuONWQ5mOqzB9kZjTC5Je4J3HutJ4hpSX 1D6v3BPmRYj3F9HiEYMqOSnP5aSp5Toe -----END CERTIFICATE-----Generated at Thu Jun 19 06:55:45 2025 by rpki-client