$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft File: A72QmhoVpFA9-tWUw8bem5RgTmY.mft (raw, json) Hash identifier: EQX6u2oy98EysPGUNeD2MOhaqwO7zkJ4QNCoo8Ojk04= Subject key identifier: DD:ED:5E:A7:24:5E:B4:53:93:C9:28:B4:72:1C:8E:E4:0B:7F:EE:29 Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 Certificate issuer: /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Certificate serial: 033F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft Manifest number: 0338 Signing time: Sun 15 Jun 2025 00:47:26 +0000 Manifest this update: Sun 15 Jun 2025 00:47:25 +0000 Manifest next update: Sun 22 Jun 2025 00:47:25 +0000 Files and hashes: 1: A72QmhoVpFA9-tWUw8bem5RgTmY.crl (hash: QCf6xPdXbyzDAWmMjOUX6iGa8inx9j6XgvF1+3GuYUs=) 2: E15CC33CD55011EFB17CB022C4F9AE02.roa (hash: YkgVY3NySYm4wFHmOVUk89wTvIIkdJt3TNVnKoMCNEA=) 3: 5409C188C6CB11ECB185E43EC4F9AE02.roa (hash: qkNJcqJasGm5DqRK6RDLwIc76BxJl9ChsFknMyrjOEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D873B, serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Validity Not Before: Jun 15 00:47:25 2025 GMT Not After : Jun 22 00:47:25 2025 GMT Subject: CN=684e181e-3220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:3f:7a:30:c5:21:61:c0:11:9e:67:c8:c1: 99:09:0f:93:60:5e:61:81:5a:33:cb:21:dc:e5:2f: 54:5b:89:9f:03:91:2b:73:37:f8:15:bd:1d:ad:56: 54:53:b0:f1:d5:5e:2c:9d:74:57:96:41:93:7c:5e: 74:50:94:cf:41:51:59:9d:19:c8:b3:f8:0c:50:86: fe:ea:98:b8:de:04:eb:c7:d9:88:77:1f:20:21:e2: a5:c3:4a:ed:24:67:b9:b0:61:a8:9a:c2:ad:9f:9d: f1:31:2e:16:8f:cf:cf:96:cc:9e:eb:c9:26:cf:ab: 8d:e9:49:70:8d:63:c0:18:e6:dd:83:3e:58:b0:ed: 0d:11:3a:12:e5:f5:9e:02:43:41:0e:dc:c1:f7:ac: 6d:a2:c4:c1:47:99:72:4f:e9:a7:1f:58:a7:02:e2: f6:c4:b8:eb:c8:17:21:88:77:7e:ff:42:49:0c:47: f7:4d:30:85:42:2a:fb:b2:11:27:c5:a4:8d:5f:fe: ac:9e:3e:22:15:ab:75:8e:2c:be:f2:35:ec:a1:7f: 6e:05:7b:c8:4e:cd:46:d0:29:20:11:e4:c5:d0:4a: 10:0b:eb:a1:f2:b4:45:6d:3c:8f:d3:74:e3:0d:21: 0a:1e:c5:c9:c3:99:0d:e3:17:1d:e5:57:7a:4b:f4: d5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:ED:5E:A7:24:5E:B4:53:93:C9:28:B4:72:1C:8E:E4:0B:7F:EE:29 X509v3 Authority Key Identifier: keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e4:66:ef:98:b7:1a:19:eb:6f:d8:c7:fd:f4:cd:1f:a2:59: 79:d1:db:0b:06:b1:9a:d1:c3:8e:97:91:c9:3e:3f:fb:f9:b8: a8:db:98:e4:41:f5:ac:cc:ab:95:a4:26:0d:84:06:2f:64:1f: b1:a0:b7:80:42:ad:75:27:f4:81:c9:f7:76:04:47:72:39:e7: 3a:d1:e6:f9:4f:49:ea:a4:4d:9d:ec:cf:b0:fa:e7:f8:08:08: 08:df:0d:53:92:bf:b1:0e:ff:f2:93:c0:fc:c9:68:63:66:61: de:5d:e6:f3:9e:62:c3:bc:9b:df:17:1a:30:6c:f1:95:1e:57: a2:cc:31:0d:a6:6f:2d:19:ca:86:70:2f:77:b6:50:c9:08:ce: 79:fe:74:9d:d8:c0:23:9a:5e:ec:c5:85:d0:6d:23:0f:2a:48: 54:4a:75:a9:c5:4f:bf:0e:3b:fa:96:75:33:aa:fe:91:d9:b4: 8d:91:07:b3:d4:e9:3d:51:64:16:e7:c5:91:d4:54:9a:d6:6e: 48:fa:e8:80:e6:1e:8d:7d:4c:1e:16:63:95:36:28:45:8c:a6: bc:94:97:00:71:ac:d7:8d:c0:73:9f:be:93:2a:c7:90:e5:f2: 2b:4c:be:3a:9b:05:74:16:f4:7b:54:05:89:0b:db:3a:dd:6b: 5d:c2:3b:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC OTQ2MDRFNjYwHhcNMjUwNjE1MDA0NzI1WhcNMjUwNjIyMDA0NzI1WjAYMRYwFAYD VQQDEw02ODRlMTgxZS0zMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCw/ejDFIWHAEZ5nyMGZCQ+TYF5hgVozyyHc5S9UW4mfA5Erczf4Fb0drVZU U7Dx1V4snXRXlkGTfF50UJTPQVFZnRnIs/gMUIb+6pi43gTrx9mIdx8gIeKlw0rt JGe5sGGomsKtn53xMS4Wj8/Plsye68kmz6uN6UlwjWPAGObdgz5YsO0NEToS5fWe AkNBDtzB96xtosTBR5lyT+mnH1inAuL2xLjryBchiHd+/0JJDEf3TTCFQir7shEn xaSNX/6snj4iFat1jiy+8jXsoX9uBXvITs1G0CkgEeTF0EoQC+uh8rRFbTyP03Tj DSEKHsXJw5kN4xcd5Vd6S/TV3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3tXqck XrRTk8kotHIcjuQLf+4pMB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2 MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBG QTktdFdVdzhiZW01UmdUbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD5GbvmLcaGetv2Mf99M0foll50dsLBrGa0cOOl5HJPj/7+bio25jk QfWszKuVpCYNhAYvZB+xoLeAQq11J/SByfd2BEdyOec60eb5T0nqpE2d7M+w+uf4 CAgI3w1Tkr+xDv/yk8D8yWhjZmHeXebznmLDvJvfFxowbPGVHleizDENpm8tGcqG cC93tlDJCM55/nSd2MAjml7sxYXQbSMPKkhUSnWpxU+/Djv6lnUzqv6R2bSNkQez 1Ok9UWQW58WR1FSa1m5I+uiA5h6NfUweFmOVNihFjKa8lJcAcazXjcBzn76TKseQ 5fIrTL46mwV0FvR7VAWJC9s63WtdwjtY -----END CERTIFICATE-----Generated at Sun Jun 15 08:48:01 2025 by rpki-client