$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json) Hash identifier: FDhIiZXVVuYkKkXYx3d2BGasmQmLxH7R/od/4JJ9DuA= Subject key identifier: 06:20:DF:92:7E:D3:2B:20:88:C9:FF:B3:45:4E:2A:70:03:2A:DB:97 Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft Manifest number: 349B Signing time: Sat 14 Jun 2025 14:58:45 +0000 Manifest this update: Sat 14 Jun 2025 14:58:45 +0000 Manifest next update: Sat 21 Jun 2025 14:58:45 +0000 Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: qWX0wlX/cUhyXQVyWB8j1iETTBIM9WMIX1A59CgEinQ=) 2: 991B38BC44E811F0968D8B30C4F9AE02.roa (hash: eEF2YFvICJOqay9i6WsFZPXnUiZoOP0Qsq3SyzYoK+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: Jun 14 14:58:45 2025 GMT Not After : Jun 21 14:58:45 2025 GMT Subject: CN=684d8e25-def8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:b0:69:66:8b:d9:5c:b4:30:f5:16:37:a5: 91:04:cf:05:50:1d:cd:88:4a:0d:c0:6a:a2:98:79: 80:cf:5b:ba:31:86:b3:18:3e:7c:36:24:56:14:66: 6c:d5:ea:2b:db:0c:33:15:f4:9e:bc:79:87:69:77: c3:54:f6:71:ee:9b:15:8a:d6:bd:ec:f7:b3:fc:40: 6d:64:ec:81:31:f6:a1:89:f7:59:c4:18:8c:f6:6d: fe:02:f0:d2:d0:d8:fe:e6:be:74:7f:01:7a:97:8b: 0e:62:67:f4:ec:36:35:5b:20:10:05:12:9b:9a:6d: e4:ee:5f:1d:23:74:c0:e3:25:37:88:7d:cf:78:86: fc:29:33:e2:da:d5:35:24:fb:c9:d4:03:8b:a9:58: c6:a4:37:3c:62:74:29:2e:da:53:6c:ad:29:d3:89: f4:99:61:f6:40:b6:e7:1f:1d:c8:56:1e:6b:70:ee: 39:a1:fc:89:43:13:3b:e7:dd:04:6f:09:9e:43:ce: f9:bc:b8:ca:f5:e9:8c:b6:39:03:ba:16:f8:67:46: 9d:fa:36:eb:e8:81:31:0c:e8:5f:7d:02:d8:a0:67: 42:63:9b:b5:49:e5:59:0f:02:48:35:0c:56:8f:e6: a4:d5:54:fb:77:6d:c1:05:9b:77:6f:a9:4a:02:b3: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:20:DF:92:7E:D3:2B:20:88:C9:FF:B3:45:4E:2A:70:03:2A:DB:97 X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:98:bb:d4:73:47:2b:ee:6b:49:b4:71:99:44:c3:b0:a8:ae: 5f:c6:43:6b:8c:b9:29:6a:2c:14:96:a4:4b:e3:0a:f2:16:65: 77:7b:9e:2b:39:bf:1e:68:3a:b0:76:95:b4:f1:87:52:46:a0: 01:d3:58:28:a1:78:c7:cd:10:dd:f3:56:79:52:65:0f:57:24: 9a:c6:88:44:2a:0f:8b:c3:96:dc:6e:42:e2:31:fe:a2:d7:57: c6:f9:e3:7e:bb:24:02:b1:ee:a9:94:63:72:64:00:a5:fe:21: 7d:c4:62:7a:2a:d1:dd:97:22:3c:77:2c:ff:43:e2:66:f3:91: 7b:57:45:4d:b0:b8:c7:b7:3a:4d:d7:c7:6d:03:8d:00:79:dd: ee:2c:d4:53:24:e3:2e:ff:05:db:e3:a3:c8:cf:29:3c:1b:d2: 87:64:ad:82:26:ed:36:d0:00:de:87:6f:ad:6c:b5:ba:48:6b: 17:0c:f2:87:86:f9:2b:37:6f:07:22:a5:f0:e8:e8:0f:f9:b8: f7:56:f6:bf:78:44:97:10:56:1b:5b:99:d9:30:77:d3:1a:20: c0:08:f1:5d:75:a6:59:6a:b6:b9:6c:fa:9e:d4:c3:08:8e:c9: 04:89:75:25:ce:86:bd:4b:b0:b8:f7:ba:7e:e5:af:02:0b:c5: 4f:ad:d0:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjUwNjE0MTQ1ODQ1WhcNMjUwNjIxMTQ1ODQ1WjAYMRYwFAYD VQQDEw02ODRkOGUyNS1kZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLCwaWaL2Vy0MPUWN6WRBM8FUB3NiEoNwGqimHmAz1u6MYazGD58NiRWFGZs 1eor2wwzFfSevHmHaXfDVPZx7psVita97Pez/EBtZOyBMfahifdZxBiM9m3+AvDS 0Nj+5r50fwF6l4sOYmf07DY1WyAQBRKbmm3k7l8dI3TA4yU3iH3PeIb8KTPi2tU1 JPvJ1AOLqVjGpDc8YnQpLtpTbK0p04n0mWH2QLbnHx3IVh5rcO45ofyJQxM7590E bwmeQ875vLjK9emMtjkDuhb4Z0ad+jbr6IExDOhffQLYoGdCY5u1SeVZDwJINQxW j+ak1VT7d23BBZt3b6lKArO1jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYg35J+ 0ysgiMn/s0VOKnADKtuXMB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJCMi81M0NBNDYyQTFEOUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4 TU5vNnZQLUJfWjhTX1J0UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQComLvUc0cr7mtJtHGZRMOwqK5fxkNrjLkpaiwUlqRL4wryFmV3e54r Ob8eaDqwdpW08YdSRqAB01gooXjHzRDd81Z5UmUPVySaxohEKg+Lw5bcbkLiMf6i 11fG+eN+uyQCse6plGNyZACl/iF9xGJ6KtHdlyI8dyz/Q+Jm85F7V0VNsLjHtzpN 18dtA40Aed3uLNRTJOMu/wXb46PIzyk8G9KHZK2CJu020ADeh2+tbLW6SGsXDPKH hvkrN28HIqXw6OgP+bj3Vva/eESXEFYbW5nZMHfTGiDACPFddaZZara5bPqe1MMI jskEiXUlzoa9S7C497p+5a8CC8VPrdBw -----END CERTIFICATE-----Generated at Sun Jun 15 04:54:13 2025 by rpki-client