$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: gI+h/ZM3Ejw6pH37W1ETtF3XJfBf58tDiFUN1q7Zt0g= Subject key identifier: 5F:37:87:39:5D:42:EC:34:0A:AE:33:5A:88:E1:2F:93:56:31:26:09 Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 013C Signing time: Sun 15 Jun 2025 03:35:58 +0000 Manifest this update: Sun 15 Jun 2025 03:35:57 +0000 Manifest next update: Sun 22 Jun 2025 03:35:57 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: xtHIkv8Lo9JzZ8OUVRfUk7kmjprFnd/D1or+fyERqpA=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: UDY5XZZpboPOe4PuKIjoZcv8Z+maPhsL8V3N8OWNJu4=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: QxDb9utS5i/B8urK72tRRFJFcT0cVUwBUSamNqzNfT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 03:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Jun 15 03:35:57 2025 GMT Not After : Jun 22 03:35:57 2025 GMT Subject: CN=684e3f9d-aaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:d9:d9:79:c8:a2:d6:48:9d:55:aa:9a:2d: ed:d9:d7:ef:12:bd:f7:73:6d:1a:27:54:eb:ba:13: 73:6d:5c:60:a5:2a:c6:eb:31:fc:6e:93:cc:9d:0a: de:e9:05:87:e0:aa:56:ce:e3:c5:0c:2b:86:1f:41: ed:06:2c:c2:27:08:83:c8:43:89:d3:9d:b9:78:1b: c3:ff:23:e3:f9:7c:df:5b:ed:20:5a:a6:4e:25:a1: 3d:d6:17:5c:3f:b5:02:36:73:66:3f:77:3a:e4:6e: 60:b1:c0:0d:84:24:6c:6b:af:f0:ea:1c:86:19:25: ab:ed:38:ad:5d:c9:b6:f9:aa:de:c2:e1:2e:57:e0: ab:93:7a:df:a7:16:b1:ee:a7:52:a2:79:f1:65:67: aa:80:b5:8a:bf:e1:80:f9:d1:12:f6:11:f4:99:50: 6a:8c:f2:34:b8:1b:e4:a7:59:26:17:bf:a2:7b:8a: 44:36:65:cf:9f:9c:88:fa:cd:67:ac:3a:0b:92:80: 15:d7:40:63:58:df:aa:7b:f0:db:38:fa:49:56:39: 73:2c:1b:1f:ec:c7:c0:80:61:0b:b7:a2:f5:ff:b7: ee:37:97:4c:cd:e7:5c:57:7e:92:35:0f:de:eb:a1: 1f:01:e1:dd:cc:9c:79:1d:8e:93:f1:b7:b2:da:66: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:37:87:39:5D:42:EC:34:0A:AE:33:5A:88:E1:2F:93:56:31:26:09 X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bc:48:71:a2:0f:c1:ca:80:19:89:29:f1:95:18:6d:de:c9: 3e:49:88:15:73:35:13:2a:f3:7a:e9:7f:71:f3:c5:c3:90:52: a4:18:cd:8b:74:66:d7:59:9b:42:76:56:71:fd:a2:14:8f:4b: 64:23:ea:61:6f:98:fb:ef:b9:72:56:ea:3f:1b:d8:4f:3f:fc: 96:d4:a9:ef:5e:1a:aa:41:2b:9a:cd:0d:f7:33:77:1e:ed:8b: 26:e1:84:35:c1:17:ea:ac:93:f8:6d:50:b5:dd:2e:dc:e4:3a: 7f:6c:1d:cf:5d:15:52:5e:8d:b8:11:de:d0:81:ac:95:f1:b6: d7:cc:77:3a:17:47:2b:13:ee:21:a4:da:0b:fe:af:f8:22:08: 51:15:70:24:52:18:2d:a1:a4:c5:c5:77:1d:11:16:25:a6:ab: 30:4c:3f:96:66:05:ab:8c:a2:60:66:ef:6e:84:b0:81:07:ab: 56:6c:e7:72:b7:69:57:20:10:08:eb:aa:ae:34:af:59:89:23: 18:36:db:25:d4:e0:32:d0:da:6d:40:12:59:87:ef:c5:2c:2d: 91:5e:03:72:8a:f5:f2:07:ef:36:b4:35:15:95:9e:c7:82:40: 81:72:61:34:c6:f2:0d:70:1d:e3:3b:69:76:20:28:02:a7:83: 3e:dc:2c:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjUwNjE1MDMzNTU3WhcNMjUwNjIyMDMzNTU3WjAYMRYwFAYD VQQDEw02ODRlM2Y5ZC1hYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhzZ2XnIotZInVWqmi3t2dfvEr33c20aJ1TruhNzbVxgpSrG6zH8bpPMnQre 6QWH4KpWzuPFDCuGH0HtBizCJwiDyEOJ0525eBvD/yPj+XzfW+0gWqZOJaE91hdc P7UCNnNmP3c65G5gscANhCRsa6/w6hyGGSWr7TitXcm2+arewuEuV+Crk3rfpxax 7qdSonnxZWeqgLWKv+GA+dES9hH0mVBqjPI0uBvkp1kmF7+ie4pENmXPn5yI+s1n rDoLkoAV10BjWN+qe/DbOPpJVjlzLBsf7MfAgGELt6L1/7fuN5dMzedcV36SNQ/e 66EfAeHdzJx5HY6T8bey2mbanQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF83hzld Quw0Cq4zWojhL5NWMSYJMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLvEhxog/ByoAZiSnxlRht3sk+SYgVczUTKvN66X9x88XDkFKkGM2L dGbXWZtCdlZx/aIUj0tkI+phb5j777lyVuo/G9hPP/yW1KnvXhqqQSuazQ33M3ce 7Ysm4YQ1wRfqrJP4bVC13S7c5Dp/bB3PXRVSXo24Ed7QgayV8bbXzHc6F0crE+4h pNoL/q/4IghRFXAkUhgtoaTFxXcdERYlpqswTD+WZgWrjKJgZu9uhLCBB6tWbOdy t2lXIBAI66quNK9ZiSMYNtsl1OAy0NptQBJZh+/FLC2RXgNyivXyB+82tDUVlZ7H gkCBcmE0xvINcB3jO2l2ICgCp4M+3Cyr -----END CERTIFICATE-----Generated at Tue Jun 17 00:01:18 2025 by rpki-client