$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft File: 29u3f7gUXp1EhgdPtz74TVSOpiI.mft (raw, json) Hash identifier: nvtgUq4Zmu5QQ6uR7XqFFSK+oth0UXnww3wpE7vfpGA= Subject key identifier: 8A:92:DC:CC:9A:7A:EE:A7:95:B3:9C:14:C9:6B:F2:4C:C9:E9:58:9A Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 Certificate issuer: /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft Manifest number: CB Signing time: Tue 17 Jun 2025 04:39:52 +0000 Manifest this update: Tue 17 Jun 2025 04:39:52 +0000 Manifest next update: Tue 24 Jun 2025 04:39:52 +0000 Files and hashes: 1: 29u3f7gUXp1EhgdPtz74TVSOpiI.crl (hash: FbLo9oJ0yriEjku+Gx/woDzpvY5L4YoVz/SXNeVcnKY=) 2: 5741EB0A159311EFA0CC790BC4F9AE02.roa (hash: jE4GzHd14AerZws/zq+eZy5XQS34aDVO012G4f0K8Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1511, serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Validity Not Before: Jun 17 04:39:52 2025 GMT Not After : Jun 24 04:39:52 2025 GMT Subject: CN=6850f198-31aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:df:2c:d4:37:f7:99:aa:ad:2a:61:33:75: d5:cd:8f:13:eb:7c:63:23:14:f7:71:2c:32:df:79: 38:a0:dd:4f:97:60:e6:07:74:66:a1:43:08:c8:74: 1b:ee:77:41:0c:a1:35:ca:63:fa:e4:3a:a3:6c:fc: 16:10:70:20:35:36:b4:e0:44:0f:24:1d:e9:12:72: 39:f5:a9:d2:ca:1e:5f:b7:70:0c:bb:dc:d8:80:48: e9:e2:01:e9:eb:fd:22:cc:78:24:82:8c:8e:d3:75: cb:4c:da:6d:38:36:3a:bf:19:88:b5:53:68:ef:df: 60:b1:df:5b:ae:09:87:d5:90:6a:58:67:ec:50:60: 6c:9e:38:72:bf:6a:f9:29:2f:05:a9:a3:57:c9:c3: 0a:a5:c7:1c:f8:40:2a:2e:fa:3d:59:d7:02:68:b1: a2:cf:b7:2a:0f:5b:3c:06:d9:50:fd:b0:9d:e3:52: 5b:03:6f:c3:ab:aa:9d:b6:58:2d:12:f2:37:2c:09: 0d:a8:34:de:cc:c2:bb:44:84:63:a7:54:27:2a:ba: 81:c4:6e:c9:6f:09:c8:e5:53:69:df:71:18:88:91: 7c:5c:1f:69:7b:cf:cf:39:31:ed:bc:86:93:d3:9f: f9:a2:59:02:ec:62:aa:8f:9c:bb:0f:8c:ff:37:57: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:92:DC:CC:9A:7A:EE:A7:95:B3:9C:14:C9:6B:F2:4C:C9:E9:58:9A X509v3 Authority Key Identifier: keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:00:3a:66:78:3e:8d:e6:cd:ad:30:80:60:db:95:75:63:4c: bf:54:3a:64:d9:89:42:f1:fe:f2:1d:5d:ff:0b:af:b6:d4:bf: 20:d2:b2:fa:2d:ec:03:43:5d:fb:08:5a:3b:b5:13:18:4d:e3: f2:c2:65:3e:13:02:34:eb:b3:cb:d5:65:08:c2:24:7c:59:49: bf:f5:25:7f:c6:69:ff:23:88:e4:43:1f:39:88:6b:c5:8c:d3: ae:4a:54:a8:f5:7b:4d:57:ba:24:bd:37:a1:61:02:77:c0:f0: 4b:ec:d4:18:38:32:4d:55:b6:ff:52:32:7f:7e:22:53:74:bf: 36:71:58:b3:cd:d9:bd:c3:78:9f:88:e6:de:4b:78:3a:fe:d7: 66:1e:76:59:61:40:2b:49:46:4b:52:23:6b:6f:c5:48:25:6a: 60:af:2d:60:98:c2:27:b9:0d:67:b8:ef:18:52:cd:fc:cd:86: 25:90:8c:8a:a3:41:ff:0d:ff:35:42:f5:00:9c:84:3f:c0:f6: 83:a9:af:75:33:d1:da:25:4a:ba:59:61:bc:52:83:b0:5e:0e: 68:39:e4:52:0e:9b:a7:33:1c:27:64:1e:8b:f2:38:e7:fb:89: 96:9b:a7:37:42:e8:dc:0e:bc:75:0d:18:e3:0d:4b:3a:24:ce: e0:03:88:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1MTExMTAvBgNVBAUTKERCREJCNzdGQjgxNDVFOUQ0NDg2MDc0RkI3M0VGODRE NTQ4RUE2MjIwHhcNMjUwNjE3MDQzOTUyWhcNMjUwNjI0MDQzOTUyWjAYMRYwFAYD VQQDEw02ODUwZjE5OC0zMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZLfLNQ395mqrSphM3XVzY8T63xjIxT3cSwy33k4oN1Pl2DmB3RmoUMIyHQb 7ndBDKE1ymP65DqjbPwWEHAgNTa04EQPJB3pEnI59anSyh5ft3AMu9zYgEjp4gHp 6/0izHgkgoyO03XLTNptODY6vxmItVNo799gsd9brgmH1ZBqWGfsUGBsnjhyv2r5 KS8FqaNXycMKpccc+EAqLvo9WdcCaLGiz7cqD1s8BtlQ/bCd41JbA2/Dq6qdtlgt EvI3LAkNqDTezMK7RIRjp1QnKrqBxG7JbwnI5VNp33EYiJF8XB9pe8/POTHtvIaT 05/5olkC7GKqj5y7D4z/N1fB7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqS3Mya eu6nlbOcFMlr8kzJ6ViaMB8GA1UdIwQYMBaAFNvbt3+4FF6dRIYHT7c++E1UjqYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTUxMS84RDM0MzIzQzEz RjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhwMUVoZ2RQdHo3NFRWU09w aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5dTNmN2dVWHAxRWhnZFB0ejc0VFZTT3BpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTUxMS84RDM0MzIzQzEzRjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhw MUVoZ2RQdHo3NFRWU09waUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmADpmeD6N5s2tMIBg25V1Y0y/VDpk2YlC8f7yHV3/C6+21L8g0rL6 LewDQ137CFo7tRMYTePywmU+EwI067PL1WUIwiR8WUm/9SV/xmn/I4jkQx85iGvF jNOuSlSo9XtNV7okvTehYQJ3wPBL7NQYODJNVbb/UjJ/fiJTdL82cVizzdm9w3if iObeS3g6/tdmHnZZYUArSUZLUiNrb8VIJWpgry1gmMInuQ1nuO8YUs38zYYlkIyK o0H/Df81QvUAnIQ/wPaDqa91M9HaJUq6WWG8UoOwXg5oOeRSDpunMxwnZB6L8jjn +4mWm6c3QujcDrx1DRjjDUs6JM7gA4jf -----END CERTIFICATE-----Generated at Tue Jun 17 09:21:37 2025 by rpki-client