$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json) Hash identifier: luMGqrPPrAfQz2tX8Y8D+Zqslq7C4LVzCDQ5ewYgObE= Subject key identifier: 75:06:78:D9:65:76:D8:B9:26:C7:F8:C7:B5:3B:F6:26:2E:01:36:74 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 04F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft Manifest number: 04E8 Signing time: Wed 18 Jun 2025 23:35:22 +0000 Manifest this update: Wed 18 Jun 2025 23:35:22 +0000 Manifest next update: Wed 25 Jun 2025 23:35:22 +0000 Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: hY0JVFWL8QpC+v/FWOdWIPXcGyidW6dY/ILQpcTdpsE=) 2: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: VeKl0MHR8TI54m6waTajw/toZ1ifpbQZ1lUNcn/xegU=) 3: E66070EE36F911F0B0111510C4F9AE02.roa (hash: s0fTkj19sRTx/+BDg72CnNonlKPiE7C9YigY/ZfS3pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: Jun 18 23:35:22 2025 GMT Not After : Jun 25 23:35:22 2025 GMT Subject: CN=68534d3a-23a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:99:82:db:e7:87:4b:59:b3:24:c5:7c:04: 03:49:48:e2:63:7c:bd:23:62:44:eb:78:b3:67:01: 32:10:88:29:27:18:02:9b:e1:46:46:a9:3d:e1:b6: a5:0f:5d:7b:03:5b:da:19:cd:a0:a7:03:f5:a1:6b: 08:dc:1e:5a:67:88:29:0e:d3:46:1a:ea:52:3e:99: 8c:ce:40:69:95:5c:88:21:2d:c1:a9:85:b7:c1:b8: 13:15:b4:3e:d9:be:21:00:bd:e4:42:20:18:dd:b0: 2f:8a:52:98:4c:89:c8:0b:bc:84:55:80:64:b3:e4: 37:41:bf:77:10:8d:a7:6d:0c:71:62:b1:cf:a4:64: 24:8b:dc:f4:ab:26:b1:f3:c9:2d:42:6a:ac:c8:b8: d8:c5:99:2f:00:cb:08:fa:da:57:c4:50:cb:b1:d3: fb:1e:e1:c6:6a:f9:08:49:5e:d5:b6:34:cc:01:2c: 9d:c2:b3:67:4b:df:93:e1:36:e9:a2:8f:50:d9:6d: d8:ee:c1:86:e3:54:ff:45:54:31:ee:05:81:c2:5b: 9e:85:89:69:08:ca:ca:8a:2f:63:5b:f4:8d:c4:b8: db:6f:10:89:b1:f9:dc:21:7b:64:32:58:55:36:bf: fe:b8:3e:3d:3a:38:05:ff:bd:20:7c:cf:48:21:89: a7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:06:78:D9:65:76:D8:B9:26:C7:F8:C7:B5:3B:F6:26:2E:01:36:74 X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:33:f6:a5:a7:c9:4e:21:17:42:28:82:e7:9a:4e:84:84:58: c6:f9:2c:bb:ed:2d:5f:c9:70:4a:c7:87:5c:dc:b0:5f:1f:fb: 1c:cc:c0:b3:ad:21:7a:3c:2e:f3:0c:dc:87:78:5d:c1:d9:41: 53:24:7e:ce:46:ac:63:23:93:32:a3:0a:80:82:81:2e:42:90: 42:fe:51:fe:10:bd:9a:e6:88:bc:95:80:f2:09:63:fe:9e:4b: 37:6e:c6:3b:09:80:2e:43:cc:fb:c0:c0:01:f9:7a:c3:b5:02: 1d:fb:3c:f9:e3:d5:da:35:68:ed:c7:d3:04:7c:d7:05:1e:74: 97:0c:7e:bf:41:52:6d:2d:62:a2:05:b2:8e:aa:34:f8:b3:fc: 8b:0c:9e:7c:54:f4:c6:db:03:54:e1:78:4a:f1:86:ca:53:7e: 7f:10:ab:42:1d:e5:f5:0d:8c:2c:c0:35:ee:c4:e4:47:e6:da: d9:a8:ee:cd:66:1a:ef:55:be:61:63:f7:9b:f3:e3:83:8c:e9: 4c:59:67:1f:11:c4:b7:f1:68:b1:6c:c8:3d:73:8b:5e:d4:7e: 07:a3:f9:23:1a:e5:b7:6e:e4:99:38:b3:30:57:02:8d:fd:ce: 24:7a:57:7a:d8:e0:cb:1b:0b:93:90:4f:b5:6d:fd:63:84:a1: 53:c3:f6:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjUwNjE4MjMzNTIyWhcNMjUwNjI1MjMzNTIyWjAYMRYwFAYD VQQDEw02ODUzNGQzYS0yM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKKZgtvnh0tZsyTFfAQDSUjiY3y9I2JE63izZwEyEIgpJxgCm+FGRqk94bal D117A1vaGc2gpwP1oWsI3B5aZ4gpDtNGGupSPpmMzkBplVyIIS3BqYW3wbgTFbQ+ 2b4hAL3kQiAY3bAvilKYTInIC7yEVYBks+Q3Qb93EI2nbQxxYrHPpGQki9z0qyax 88ktQmqsyLjYxZkvAMsI+tpXxFDLsdP7HuHGavkISV7VtjTMASydwrNnS9+T4Tbp oo9Q2W3Y7sGG41T/RVQx7gWBwluehYlpCMrKii9jW/SNxLjbbxCJsfncIXtkMlhV Nr/+uD49OjgF/70gfM9IIYmnMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUGeNll dti5Jsf4x7U79iYuATZ0MB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG Mm1FQkNBLVlNaS05WlpHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjM/alp8lOIRdCKILnmk6EhFjG+Sy77S1fyXBKx4dc3LBfH/sczMCz rSF6PC7zDNyHeF3B2UFTJH7ORqxjI5MyowqAgoEuQpBC/lH+EL2a5oi8lYDyCWP+ nks3bsY7CYAuQ8z7wMAB+XrDtQId+zz549XaNWjtx9MEfNcFHnSXDH6/QVJtLWKi BbKOqjT4s/yLDJ58VPTG2wNU4XhK8YbKU35/EKtCHeX1DYwswDXuxORH5trZqO7N ZhrvVb5hY/eb8+ODjOlMWWcfEcS38WixbMg9c4te1H4Ho/kjGuW3buSZOLMwVwKN /c4keld62ODLGwuTkE+1bf1jhKFTw/Zh -----END CERTIFICATE-----Generated at Thu Jun 19 06:17:10 2025 by rpki-client