$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft File: du8ZOVeobWTTw83rngdGdG70KQo.mft (raw, json) Hash identifier: 4OweWHWIfT5BnBFIGkkKYjKNoV/EgCCeOOT5c4GJxmo= Subject key identifier: A7:B4:E8:5E:28:9B:20:54:43:C1:AB:B0:A7:40:E5:04:BC:44:E8:C5 Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A Certificate issuer: /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft Manifest number: 0101 Signing time: Sat 14 Jun 2025 20:06:46 +0000 Manifest this update: Sat 14 Jun 2025 20:06:46 +0000 Manifest next update: Sat 21 Jun 2025 20:06:46 +0000 Files and hashes: 1: du8ZOVeobWTTw83rngdGdG70KQo.crl (hash: X2UTv1wM528HOjSsj0wnJ1HiudVeE5bydgwx1Q5YZcw=) 2: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (hash: /FORfGBg9zOxItBO8An19jk30uxSaavKCQfEXQzUIIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Validity Not Before: Jun 14 20:06:46 2025 GMT Not After : Jun 21 20:06:46 2025 GMT Subject: CN=684dd656-5bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:f4:db:6c:85:e2:a7:bb:ca:b0:fc:cd:8d: 11:c8:8d:ce:3f:a0:e5:22:65:b7:d1:f0:b6:4a:85: 51:5f:f2:73:e4:c5:20:37:62:f5:9f:fb:de:e1:55: d9:1a:77:c0:8a:8a:ee:bd:65:6c:b8:5a:2b:d6:43: 89:8e:a1:dc:5d:30:77:35:85:da:21:b3:47:2a:a1: 1e:3f:cc:b2:db:ab:3e:d1:ea:98:96:d2:98:32:36: 8c:74:e4:81:98:91:47:42:55:25:66:2e:2b:13:f6: 0e:2f:57:90:2c:c2:92:1d:5d:f0:0d:c6:92:fd:91: f0:6c:aa:b2:27:b2:bb:e2:58:35:bd:44:59:26:5b: bc:23:d0:cd:a4:fc:34:93:36:62:fe:79:4a:5f:fb: fd:3e:0e:90:04:c3:91:63:68:5d:aa:e2:41:13:55: a3:e2:a7:9f:9e:07:d9:d5:f9:4d:18:2c:3f:57:1f: b3:56:2f:dc:e7:33:c0:a5:29:a3:1a:69:6f:c3:d3: 4b:b4:df:8a:56:1c:fa:85:08:1f:23:de:11:5e:4f: ee:68:90:7c:17:a9:63:60:92:51:52:2e:73:24:8b: 24:a9:cd:98:e7:bf:5e:57:5f:9f:a1:49:e7:ba:82: 37:d1:21:83:14:da:23:47:88:dc:d0:19:7c:82:73: 9a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B4:E8:5E:28:9B:20:54:43:C1:AB:B0:A7:40:E5:04:BC:44:E8:C5 X509v3 Authority Key Identifier: keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:59:51:96:ef:22:05:16:13:c2:e4:df:64:53:f7:3a:58:d5: 5d:a2:63:97:99:38:05:9a:db:8d:29:d0:99:43:56:bd:47:32: 31:cf:28:b7:32:6b:3a:27:c3:35:97:e8:1d:98:d4:5d:1d:ac: 97:73:68:d1:8d:d3:e8:98:6b:6d:f4:a4:fa:1a:db:be:9b:0c: 9d:f3:24:95:6e:3e:0d:b6:2c:16:08:4e:6c:fc:fc:d3:7b:c7: 96:7b:c3:57:37:82:2d:a7:99:92:ff:9c:7c:22:36:f4:fa:90: 03:36:fe:f1:c0:d9:85:82:5e:8b:b5:ef:bc:f1:b9:09:c0:0b: a2:cc:c0:2b:2a:23:80:af:71:ad:4d:8c:ac:40:67:c2:ef:a5: 7a:a3:42:7a:95:fd:0e:7e:93:fa:9a:02:98:64:38:1d:2b:d7: 79:a8:7e:8c:2a:8b:87:52:8c:f0:bf:75:c5:fa:3b:6b:af:21: 2b:0d:e9:4d:cb:e6:a2:f6:24:34:c5:3c:64:63:f5:5c:6a:55: 91:7e:0d:11:0c:b9:25:20:bf:7e:32:40:0d:a3:34:f0:77:05: 7e:04:f2:a8:88:c3:9b:30:e4:d6:bc:80:4c:5b:9b:0a:ea:be: 62:f6:86:eb:a2:42:79:1f:47:01:64:01:f7:f9:70:33:2c:7e: ec:04:3f:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDc2RUYxOTM5NTdBODZENjREM0MzQ0RFQjlFMDc0Njc0 NkVGNDI5MEEwHhcNMjUwNjE0MjAwNjQ2WhcNMjUwNjIxMjAwNjQ2WjAYMRYwFAYD VQQDEw02ODRkZDY1Ni01YmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtz022yF4qe7yrD8zY0RyI3OP6DlImW30fC2SoVRX/Jz5MUgN2L1n/ve4VXZ GnfAioruvWVsuFor1kOJjqHcXTB3NYXaIbNHKqEeP8yy26s+0eqYltKYMjaMdOSB mJFHQlUlZi4rE/YOL1eQLMKSHV3wDcaS/ZHwbKqyJ7K74lg1vURZJlu8I9DNpPw0 kzZi/nlKX/v9Pg6QBMORY2hdquJBE1Wj4qefngfZ1flNGCw/Vx+zVi/c5zPApSmj Gmlvw9NLtN+KVhz6hQgfI94RXk/uaJB8F6ljYJJRUi5zJIskqc2Y579eV1+foUnn uoI30SGDFNojR4jc0Bl8gnOaRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKe06F4o myBUQ8GrsKdA5QS8ROjFMB8GA1UdIwQYMBaAFHbvGTlXqG1k08PN654HRnRu9CkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi8wNUY4NjAxNEM1 MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JXVFR3ODNybmdkR2RHNzBL UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R1OFpPVmVvYldUVHc4M3JuZ2RHZEc3MEtRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi8wNUY4NjAxNEM1MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JX VFR3ODNybmdkR2RHNzBLUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBWVGW7yIFFhPC5N9kU/c6WNVdomOXmTgFmtuNKdCZQ1a9RzIxzyi3 Mms6J8M1l+gdmNRdHayXc2jRjdPomGtt9KT6Gtu+mwyd8ySVbj4NtiwWCE5s/PzT e8eWe8NXN4Itp5mS/5x8Ijb0+pADNv7xwNmFgl6Lte+88bkJwAuizMArKiOAr3Gt TYysQGfC76V6o0J6lf0OfpP6mgKYZDgdK9d5qH6MKouHUozwv3XF+jtrryErDelN y+ai9iQ0xTxkY/VcalWRfg0RDLklIL9+MkANozTwdwV+BPKoiMObMOTWvIBMW5sK 6r5i9obrokJ5H0cBZAH3+XAzLH7sBD8a -----END CERTIFICATE-----Generated at Mon Jun 16 15:56:21 2025 by rpki-client