$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json) Hash identifier: uBMJHaRYAvhSF3J013dxNRA5QzfRPbQ64lY1EYHL7qA= Subject key identifier: DF:EC:38:B6:D3:A5:47:8E:4A:AC:C8:62:F1:67:65:F2:10:18:F5:87 Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft Manifest number: 0261 Signing time: Thu 19 Jun 2025 01:45:36 +0000 Manifest this update: Thu 19 Jun 2025 01:45:35 +0000 Manifest next update: Thu 26 Jun 2025 01:45:35 +0000 Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: qlJbcsp2JH9cHvj2z+ECxGz6FxfX6ONT7tLEsvwYWvA=) 2: 0F1BFF983C6411F08247312EC4F9AE02.roa (hash: 8qUuDVndIDg2NrEC8AKM8tdD0/103K09L9Yt7oBaFMM=) 3: E309B1883C9711EF88C2B284C4F9AE02.roa (hash: w51TUZ9aKXo3NJmk6dhABfqfugO3+EeHqPsN7Ek6pSc=) 4: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: QqcsybSo4IYcyiaXsqo+jWTeq4K18MPbnynQPtbdI+c=) 5: 6E41DE08310A11F0AC8DF544C4F9AE02.roa (hash: 1rvs0GBAuHrNAHdvsK+LkWPhncBagdhoXnnxzRRg5HA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Validity Not Before: Jun 19 01:45:35 2025 GMT Not After : Jun 26 01:45:35 2025 GMT Subject: CN=68536bc0-0d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:f2:70:8c:2d:13:9b:96:a5:20:fc:2e:fe: 45:d5:bb:a4:17:35:38:2f:7f:72:5e:5f:24:2a:58: 71:83:44:b2:ab:df:96:04:75:16:bf:c7:75:eb:df: 20:bd:3e:2b:4a:6b:f2:8c:ef:32:9e:86:a4:5f:e2: cf:57:6f:71:f4:f9:fe:fa:13:04:f9:f7:12:37:dd: a5:e2:78:80:9a:2e:e7:a5:dc:8c:f0:e3:85:7f:a2: a3:1e:0f:15:1e:92:c0:7a:fb:bd:68:6e:a3:17:be: f1:1b:77:d9:90:54:69:20:88:03:c6:ba:02:f5:9c: 4f:a9:ab:fa:68:47:9b:5e:ad:c4:c1:d4:ad:28:51: 74:d7:57:56:f4:85:63:66:b1:b3:e5:c2:31:2a:0c: f9:5c:50:25:f2:27:db:74:b3:bc:0c:df:30:ca:9b: 6c:da:c8:18:fa:45:17:78:56:e2:a2:ba:dc:ab:92: 63:25:de:a3:10:5d:7f:3b:c0:9c:e8:c5:6f:f3:53: f0:7f:42:be:b6:b3:77:d9:35:e6:4c:e5:b3:59:68: 73:13:c9:eb:3f:48:0e:de:ee:06:cc:0c:5f:2e:26: 47:28:6d:ae:06:17:f1:ea:89:24:f3:fb:87:1c:56: d1:ef:93:f2:94:f9:80:3e:52:78:2b:40:8d:77:a2: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EC:38:B6:D3:A5:47:8E:4A:AC:C8:62:F1:67:65:F2:10:18:F5:87 X509v3 Authority Key Identifier: keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:17:62:a3:34:df:5d:db:e1:44:f1:c3:6f:60:e9:e0:26:d5: 39:e1:d9:1c:6f:54:57:0f:8d:e1:10:0d:da:ab:b1:dc:2e:66: d9:0c:ed:19:b8:a1:b8:e7:20:3b:49:51:00:1b:5d:4a:c3:21: 1a:bc:5a:33:b6:e7:08:c6:63:36:da:b0:fc:78:e5:98:83:5f: 0f:f1:7b:9a:f5:de:c7:4e:8d:76:3f:d2:37:5b:21:62:7b:71: 8e:30:4b:f1:73:07:c5:90:d5:ff:a5:02:b4:a6:14:d4:e7:02: c9:22:f4:15:3e:00:ac:ee:33:99:03:83:4e:bb:1f:67:54:b6: cf:ac:92:ed:98:54:12:92:d3:33:4a:04:d2:ec:d0:b0:4d:f8: 14:7f:3b:5f:a6:2a:78:6b:d2:43:45:1b:a2:21:19:6c:fb:e3: 65:b2:0a:d8:57:f0:71:dc:fc:29:6e:0f:c4:5b:8a:82:6e:b1: 36:cc:05:ce:20:fd:da:af:54:a3:0c:ad:10:6b:63:c5:85:ba: b0:82:de:03:f8:05:06:41:1f:f6:7f:ca:64:bf:d7:92:d1:ea: 13:79:7c:2d:9b:80:b9:43:a4:0f:a4:34:68:0e:da:58:7d:5d: 4e:70:e0:54:0b:59:1a:d6:6b:ee:1b:84:17:87:a4:7c:b9:0b: d1:96:60:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkExMTAvBgNVBAUTKEIwNjdDNkJCNzBERjBEQzA0Q0U3N0Y3QzhENzY3MDZB NDlGNkNCODUwHhcNMjUwNjE5MDE0NTM1WhcNMjUwNjI2MDE0NTM1WjAYMRYwFAYD VQQDEw02ODUzNmJjMC0wZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr73ycIwtE5uWpSD8Lv5F1bukFzU4L39yXl8kKlhxg0Syq9+WBHUWv8d1698g vT4rSmvyjO8ynoakX+LPV29x9Pn++hME+fcSN92l4niAmi7npdyM8OOFf6KjHg8V HpLAevu9aG6jF77xG3fZkFRpIIgDxroC9ZxPqav6aEebXq3EwdStKFF011dW9IVj ZrGz5cIxKgz5XFAl8ifbdLO8DN8wypts2sgY+kUXeFbiorrcq5JjJd6jEF1/O8Cc 6MVv81Pwf0K+trN32TXmTOWzWWhzE8nrP0gO3u4GzAxfLiZHKG2uBhfx6okk8/uH HFbR75PylPmAPlJ4K0CNd6IUIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/sOLbT pUeOSqzIYvFnZfIQGPWHMB8GA1UdIwQYMBaAFLBnxrtw3w3ATOd/fI12cGpJ9suF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2QS9FQzA5QUE0QTMw N0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRjQk01Mzk4alhad2FrbjJ5 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHZkd1M0RmRGNCTTUzOThqWFp3YWtuMnk0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2QS9FQzA5QUE0QTMwN0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRj Qk01Mzk4alhad2FrbjJ5NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvF2KjNN9d2+FE8cNvYOngJtU54dkcb1RXD43hEA3aq7HcLmbZDO0Z uKG45yA7SVEAG11KwyEavFoztucIxmM22rD8eOWYg18P8Xua9d7HTo12P9I3WyFi e3GOMEvxcwfFkNX/pQK0phTU5wLJIvQVPgCs7jOZA4NOux9nVLbPrJLtmFQSktMz SgTS7NCwTfgUfztfpip4a9JDRRuiIRls++NlsgrYV/Bx3Pwpbg/EW4qCbrE2zAXO IP3ar1SjDK0Qa2PFhbqwgt4D+AUGQR/2f8pkv9eS0eoTeXwtm4C5Q6QPpDRoDtpY fV1OcOBUC1ka1mvuG4QXh6R8uQvRlmDx -----END CERTIFICATE-----Generated at Thu Jun 19 05:35:42 2025 by rpki-client