$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: Wfk+FbwFELDMH1RLTJzlH9JSPEEuwbsFJ713o21DQ9Y= Subject key identifier: 16:19:4E:9B:DC:76:46:65:3B:CD:71:99:8E:E5:D0:3A:41:2C:4A:00 Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: DE Signing time: Thu 19 Jun 2025 04:58:42 +0000 Manifest this update: Thu 19 Jun 2025 04:58:42 +0000 Manifest next update: Thu 26 Jun 2025 04:58:42 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: eEbnF3DzUcveNU8FQPGLeMm7zEpnKEJ27b24gHqvdLk=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: sT0cMmz3LwTY9msFrBTT0GIkbrL7Fs7LTvjg3aLQ9/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Jun 19 04:58:42 2025 GMT Not After : Jun 26 04:58:42 2025 GMT Subject: CN=68539902-bd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:50:ca:52:c2:ee:0c:4a:7b:e7:5f:95:01: a5:66:95:6e:53:8b:98:84:d2:67:ad:e2:4d:5a:5b: a1:42:e5:69:ce:c6:e2:8c:75:6f:4d:be:19:70:be: a6:41:7f:e4:c4:24:27:77:f9:99:6c:b6:88:44:21: 8b:9e:e7:3f:5a:92:4c:36:c6:08:32:f9:8a:a6:5c: b5:83:f6:2e:fe:a3:27:89:81:3c:9e:a1:65:51:8c: b1:32:e7:95:d8:20:84:0d:69:d0:b9:c8:38:51:38: 6b:0d:3e:c6:61:ac:ed:83:a1:61:f5:09:af:d4:a7: 6e:b2:f1:83:e8:43:44:38:cc:97:d5:6b:55:03:dc: f0:77:06:e1:b1:2a:ee:e0:8d:be:08:f5:8c:76:31: 95:6c:9a:c4:28:b7:ad:3e:29:ff:91:9b:a8:9e:5e: ce:c3:f3:10:48:63:35:e1:44:5d:19:3b:cc:cc:09: c2:43:5b:40:0d:f0:e3:f9:bf:93:19:24:59:2e:22: a3:70:10:14:b9:c2:b0:1e:28:da:b9:3a:11:d7:cc: e7:18:e4:2c:c2:0d:25:fd:8f:53:69:ec:7f:b7:26: ce:73:24:3c:73:4a:eb:ff:c0:36:f2:b8:08:c8:7c: 2c:58:db:45:67:ec:8f:d0:2d:62:03:b0:83:a0:ab: d9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:19:4E:9B:DC:76:46:65:3B:CD:71:99:8E:E5:D0:3A:41:2C:4A:00 X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:24:1d:bb:b0:bd:d5:7d:cd:d4:c4:d6:8b:fe:0f:bc:0c:86: 20:e3:45:11:de:4c:20:ae:2a:3a:e1:d2:5b:68:1a:91:2d:86: b6:ff:8b:4a:62:d3:3c:02:0a:6b:55:e2:58:46:e8:60:d4:4d: 38:34:bf:52:46:d6:84:0b:9f:73:91:92:52:a1:0e:dc:7b:c4: fc:bf:74:80:cc:dc:a8:57:0f:48:ec:27:bb:61:64:71:f7:72: ce:03:80:a3:33:6e:d1:3d:6a:53:69:6b:90:82:02:73:c5:e7: fa:46:e9:d9:cf:f6:62:9b:7a:7d:93:46:0d:7b:ad:65:47:5c: b6:b5:39:30:07:bc:1c:32:74:82:68:8e:54:c1:97:92:1b:74: 2d:af:ec:f8:fa:82:8c:c3:1a:74:33:4f:91:88:d6:a7:18:22: 80:50:9a:8d:d4:a7:7d:af:62:ba:ed:95:ad:a2:4b:ed:f3:5b: cd:33:5b:c2:67:20:13:40:7b:78:9a:32:32:97:63:93:b9:c6: 81:91:0d:ef:5a:42:89:57:74:99:e4:2a:a1:9f:3d:57:e5:c8: 66:ec:f0:32:d0:67:6e:93:6d:17:71:22:e1:9b:57:37:47:9a: 1a:1f:25:27:5e:28:fb:41:39:a8:4d:ef:7e:06:a5:d9:d9:97: 2a:18:a0:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjUwNjE5MDQ1ODQyWhcNMjUwNjI2MDQ1ODQyWjAYMRYwFAYD VQQDEw02ODUzOTkwMi1iZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hRQylLC7gxKe+dflQGlZpVuU4uYhNJnreJNWluhQuVpzsbijHVvTb4ZcL6m QX/kxCQnd/mZbLaIRCGLnuc/WpJMNsYIMvmKply1g/Yu/qMniYE8nqFlUYyxMueV 2CCEDWnQucg4UThrDT7GYaztg6Fh9Qmv1KdusvGD6ENEOMyX1WtVA9zwdwbhsSru 4I2+CPWMdjGVbJrEKLetPin/kZuonl7Ow/MQSGM14URdGTvMzAnCQ1tADfDj+b+T GSRZLiKjcBAUucKwHijauToR18znGOQswg0l/Y9Taex/tybOcyQ8c0rr/8A28rgI yHwsWNtFZ+yP0C1iA7CDoKvZSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYZTpvc dkZlO81xmY7l0DpBLEoAMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxJB27sL3Vfc3UxNaL/g+8DIYg40UR3kwgrio64dJbaBqRLYa2/4tK YtM8AgprVeJYRuhg1E04NL9SRtaEC59zkZJSoQ7ce8T8v3SAzNyoVw9I7Ce7YWRx 93LOA4CjM27RPWpTaWuQggJzxef6RunZz/Zim3p9k0YNe61lR1y2tTkwB7wcMnSC aI5UwZeSG3Qtr+z4+oKMwxp0M0+RiNanGCKAUJqN1Kd9r2K67ZWtokvt81vNM1vC ZyATQHt4mjIyl2OTucaBkQ3vWkKJV3SZ5Cqhnz1X5chm7PAy0Gduk20XcSLhm1c3 R5oaHyUnXij7QTmoTe9+BqXZ2ZcqGKAj -----END CERTIFICATE-----Generated at Fri Jun 20 23:43:36 2025 by rpki-client