$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: fYljNyDEVWwNWUyc6vTC88sYPN5XUQmPGu/XX79NMBU= Subject key identifier: 83:26:3B:E6:6B:2D:56:FD:58:5E:6D:5F:E2:92:AA:5A:54:8A:87:30 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 084E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 0844 Signing time: Thu 12 Jun 2025 20:28:52 +0000 Manifest this update: Thu 12 Jun 2025 20:28:51 +0000 Manifest next update: Thu 19 Jun 2025 20:28:51 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: GPddHFTD9KOiSVi23wRsQy1zCEPJCYJX6YKiLNLcr/c=) 2: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: 2uyPyTnKA5Zwl2pBoHO39thl2FFHLVE7fFoHDqNgHC8=) 3: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: jgTYi57dnGXhFEZx8F96LVtuauTCfgLefdSP5U2KTns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2126 (0x84e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Jun 12 20:28:51 2025 GMT Not After : Jun 19 20:28:51 2025 GMT Subject: CN=684b3884-4576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:70:95:ea:c0:23:30:f2:73:63:ad:5f:d6: e2:ee:3d:26:33:f3:a2:36:bf:4b:45:d2:50:3c:94: 62:0c:1f:81:f7:d7:c5:f7:ea:58:56:41:4e:d3:34: dd:66:24:a2:f5:46:22:a1:e8:a0:29:c7:8e:eb:8d: 10:17:70:ca:0f:39:48:77:2f:ec:41:ab:95:be:8c: c0:5a:b5:03:3f:cd:dd:69:44:8b:83:dd:63:d5:9d: 41:b0:69:a9:cc:89:99:d8:69:72:07:b7:25:df:95: 51:0b:a4:39:b0:e7:0d:e0:58:93:f2:70:9f:ac:78: e4:92:7e:35:92:47:c2:c4:e1:2b:ee:02:b5:5f:e2: fa:b5:8c:fc:54:a1:73:df:73:9e:86:d8:4a:d7:36: 56:f8:57:b7:84:9b:81:4b:24:64:8f:5b:76:73:49: 3b:cf:2d:9e:3a:a8:ab:1c:b2:c8:9d:1e:8c:dc:9d: 1b:b2:dc:34:c3:c3:33:17:53:2d:b3:58:84:20:f6: db:a6:69:3c:f9:ff:c5:ae:2d:62:d3:25:40:a5:33: 07:60:d0:60:11:d8:98:96:bc:92:cd:ad:72:0f:5b: 1e:64:11:fe:9e:12:73:8d:74:04:e6:ce:da:a1:ad: ef:4d:37:66:21:fc:5b:ec:b1:7d:de:b8:de:43:00: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:26:3B:E6:6B:2D:56:FD:58:5E:6D:5F:E2:92:AA:5A:54:8A:87:30 X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:95:3c:45:6b:b0:fb:10:67:71:4a:50:5b:36:7c:3a:26:fd: 81:7d:77:5a:e5:0e:13:3e:10:89:35:eb:d7:8b:9b:8d:f1:92: 40:40:88:51:7c:b5:f6:10:ae:cd:82:c5:b9:3c:fc:65:61:71: 2f:2a:59:49:35:b7:ca:ef:1d:f6:25:b0:14:26:9d:23:22:8d: 56:de:ae:57:98:51:2d:b9:1c:90:7c:4f:03:26:b0:94:b4:28: 80:8c:32:a1:d9:10:1b:95:a6:b4:9d:30:f0:47:20:d8:a9:91: 3a:55:a5:0e:e0:a4:1c:38:c6:ae:ea:63:69:19:a7:70:85:79: bc:29:6b:3d:4d:21:4c:42:24:17:0b:8d:59:aa:fa:e9:93:af: 8a:22:9b:15:a8:f1:85:f2:61:89:04:d7:d3:48:31:53:df:0a: 5c:64:71:e0:0b:a3:bb:e8:c2:d1:98:d1:7c:ff:25:f4:e5:8c: 19:ad:64:c1:d1:eb:57:bf:50:47:0d:e0:54:eb:74:32:43:db: e7:48:8c:87:9e:ad:d9:9b:f0:16:40:a9:0d:ce:08:8a:97:44: 75:93:ca:20:a3:82:59:1b:7d:d8:da:d7:fe:83:d3:75:61:d5: 7a:a6:f7:c5:84:ff:9f:64:8b:b0:48:ad:27:25:7e:cc:ad:5f: 35:50:59:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjUwNjEyMjAyODUxWhcNMjUwNjE5MjAyODUxWjAYMRYwFAYD VQQDEw02ODRiMzg4NC00NTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKFwlerAIzDyc2OtX9bi7j0mM/OiNr9LRdJQPJRiDB+B99fF9+pYVkFO0zTd ZiSi9UYioeigKceO640QF3DKDzlIdy/sQauVvozAWrUDP83daUSLg91j1Z1BsGmp zImZ2GlyB7cl35VRC6Q5sOcN4FiT8nCfrHjkkn41kkfCxOEr7gK1X+L6tYz8VKFz 33OehthK1zZW+Fe3hJuBSyRkj1t2c0k7zy2eOqirHLLInR6M3J0bstw0w8MzF1Mt s1iEIPbbpmk8+f/Fri1i0yVApTMHYNBgEdiYlrySza1yD1seZBH+nhJzjXQE5s7a oa3vTTdmIfxb7LF93rjeQwBqTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMmO+Zr LVb9WF5tX+KSqlpUiocwMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGlTxFa7D7EGdxSlBbNnw6Jv2BfXda5Q4TPhCJNevXi5uN8ZJAQIhR fLX2EK7NgsW5PPxlYXEvKllJNbfK7x32JbAUJp0jIo1W3q5XmFEtuRyQfE8DJrCU tCiAjDKh2RAblaa0nTDwRyDYqZE6VaUO4KQcOMau6mNpGadwhXm8KWs9TSFMQiQX C41Zqvrpk6+KIpsVqPGF8mGJBNfTSDFT3wpcZHHgC6O76MLRmNF8/yX05YwZrWTB 0etXv1BHDeBU63QyQ9vnSIyHnq3Zm/AWQKkNzgiKl0R1k8ogo4JZG33Y2tf+g9N1 YdV6pvfFhP+fZIuwSK0nJX7MrV81UFk0 -----END CERTIFICATE-----Generated at Sat Jun 14 18:55:50 2025 by rpki-client