$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: lgGIkoCvSocmJq3UIFzIX85yH5os1wLVSbyI2coTVNI= Subject key identifier: F4:9A:3A:0B:AB:E2:8F:F5:A7:98:AE:D8:02:D6:EA:6F:98:E9:9F:A3 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 0111 Signing time: Fri 13 Jun 2025 03:56:29 +0000 Manifest this update: Fri 13 Jun 2025 03:56:29 +0000 Manifest next update: Fri 20 Jun 2025 03:56:29 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: RAzVgk+vPtVZ2NwErBJWTATLjPsdAfuYqlS4asHxEXQ=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Jun 13 03:56:29 2025 GMT Not After : Jun 20 03:56:29 2025 GMT Subject: CN=684ba16d-9ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:9b:e4:6e:21:da:36:92:3f:f1:bf:3d:68: 9a:6a:d1:7f:3b:df:10:02:d5:e4:44:83:a0:61:6d: a5:d6:1f:9d:f0:10:05:17:c2:f7:d6:18:49:61:27: 66:1f:e4:ab:b5:83:71:fe:9d:f6:cc:d9:5c:a5:d8: 3a:67:d7:19:ad:be:3e:0d:65:0d:e9:02:3d:01:82: a0:37:1a:0e:c8:b1:95:4a:2c:53:3c:ec:f4:3f:57: 12:e2:23:3d:5b:f0:39:db:a7:d0:72:3b:5f:c8:4c: ec:da:8b:b8:05:08:46:b7:e3:d6:41:f3:ee:a3:49: 43:f9:1b:9f:7a:6d:95:dc:3a:79:aa:d7:a6:c7:cf: a1:55:8e:4e:4d:39:7b:bc:e2:30:1b:2b:bd:39:a1: 8c:a2:6c:fb:71:20:0d:be:cf:a4:17:8f:88:b4:ab: 0f:e9:9d:bd:46:33:fe:04:4c:d6:3c:30:b4:bb:ca: fa:ce:5f:e1:37:a8:dc:74:79:25:80:73:5d:fe:76: ab:a1:51:a9:b2:3e:94:fc:b7:21:5c:28:e1:3b:84: a0:db:14:0f:f4:2a:ac:a9:b2:8b:b0:b0:36:0b:44: d5:05:95:d2:59:51:ea:1c:07:cb:57:c4:e6:b6:07: fe:53:19:25:66:f6:b1:e4:66:9f:2e:27:cb:4f:db: 50:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9A:3A:0B:AB:E2:8F:F5:A7:98:AE:D8:02:D6:EA:6F:98:E9:9F:A3 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:bd:9d:bd:77:bd:4f:83:88:ce:1a:12:7a:f3:16:54:1f:f2: 09:93:1a:7c:98:c1:9b:43:d6:39:cb:bc:50:e4:92:7c:1d:20: 79:d5:31:9d:4b:55:7b:0f:fa:61:15:34:d6:65:1c:84:a1:f8: 4c:6c:c4:9d:9e:1e:3b:24:d2:fc:e7:08:98:74:65:89:ca:a5: f1:f1:4c:59:0f:1b:04:97:d6:14:09:84:38:99:aa:0a:f2:5e: ae:4f:0f:6a:ca:1d:ab:cd:90:4d:9b:64:f2:d0:9b:9c:4c:ab: f4:bd:f8:f1:3d:79:3e:ed:41:da:e5:23:47:8c:b5:f5:78:f7: 48:dc:d1:27:25:90:64:d8:58:94:96:03:53:c9:6a:27:b0:50: 67:54:88:00:57:53:92:6b:03:bf:70:5d:c5:f7:5b:f6:3c:9c: 67:ba:53:ca:34:2e:0a:aa:8f:15:38:b9:ea:c6:07:0b:5d:c0: 46:76:73:04:46:24:61:a3:1f:90:e2:f6:7f:d4:c3:bd:c6:e8: de:19:0e:fe:ed:45:14:8e:59:b5:7d:ec:9e:96:c3:31:80:7d: b4:60:11:1c:ff:5c:87:c6:44:fa:3d:fe:c5:50:fb:54:31:7d: f2:12:99:ca:c5:19:c5:e4:d2:c2:89:e8:68:29:71:76:63:a6: 4f:bb:dd:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwNjEzMDM1NjI5WhcNMjUwNjIwMDM1NjI5WjAYMRYwFAYD VQQDEw02ODRiYTE2ZC05YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFyb5G4h2jaSP/G/PWiaatF/O98QAtXkRIOgYW2l1h+d8BAFF8L31hhJYSdm H+SrtYNx/p32zNlcpdg6Z9cZrb4+DWUN6QI9AYKgNxoOyLGVSixTPOz0P1cS4iM9 W/A526fQcjtfyEzs2ou4BQhGt+PWQfPuo0lD+Rufem2V3Dp5qtemx8+hVY5OTTl7 vOIwGyu9OaGMomz7cSANvs+kF4+ItKsP6Z29RjP+BEzWPDC0u8r6zl/hN6jcdHkl gHNd/naroVGpsj6U/LchXCjhO4Sg2xQP9CqsqbKLsLA2C0TVBZXSWVHqHAfLV8Tm tgf+UxklZvax5GafLifLT9tQPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSaOgur 4o/1p5iu2ALW6m+Y6Z+jMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpvZ29d71Pg4jOGhJ68xZUH/IJkxp8mMGbQ9Y5y7xQ5JJ8HSB51TGd S1V7D/phFTTWZRyEofhMbMSdnh47JNL85wiYdGWJyqXx8UxZDxsEl9YUCYQ4maoK 8l6uTw9qyh2rzZBNm2Ty0JucTKv0vfjxPXk+7UHa5SNHjLX1ePdI3NEnJZBk2FiU lgNTyWonsFBnVIgAV1OSawO/cF3F91v2PJxnulPKNC4Kqo8VOLnqxgcLXcBGdnME RiRhox+Q4vZ/1MO9xujeGQ7+7UUUjlm1feyelsMxgH20YBEc/1yHxkT6Pf7FUPtU MX3yEpnKxRnF5NLCiehoKXF2Y6ZPu92B -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:36 2025 by rpki-client