$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft File: k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft (raw, json) Hash identifier: BSgnYPYREzyKNz+8qCZKBaDknmNSj+A47zDj5qTuSnM= Subject key identifier: 69:37:29:75:BE:24:99:4F:41:B7:57:E5:6A:9B:50:7C:DE:5A:19:38 Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Certificate serial: 13CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft Manifest number: 13B2 Signing time: Sat 14 Jun 2025 16:54:45 +0000 Manifest this update: Sat 14 Jun 2025 16:54:44 +0000 Manifest next update: Sat 21 Jun 2025 16:54:44 +0000 Files and hashes: 1: k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl (hash: wdwdy2bi3jGPZltSBCYFoYYUDRbd8NOfQ5ZSk30mN68=) 2: A04E05E42CE911EC8F99F486C4F9AE02.roa (hash: bw4oyTaqoqfdp29e2lYAU370gy2twH+W8CpSCQrTXLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5069 (0x13cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D15, serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Validity Not Before: Jun 14 16:54:44 2025 GMT Not After : Jun 21 16:54:44 2025 GMT Subject: CN=684da954-5f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7a:0a:52:cd:3e:b4:04:fd:ff:c5:7d:2f:a0: 06:49:2a:9a:c1:54:ba:20:a6:d6:38:8e:ab:20:74: 87:93:64:cd:31:79:ad:6a:7e:a7:b7:f4:9c:6c:39: 35:37:4a:7a:57:88:b4:8a:f8:f6:d8:25:67:4a:27: 9d:cb:d0:53:fc:f5:e8:b7:55:1e:c8:c4:98:24:67: 4b:d7:9d:3a:f5:27:d8:b4:12:bd:06:3d:56:85:a5: 96:73:32:f8:f1:0e:a7:df:a6:83:5c:fe:4c:62:87: 3f:ad:09:65:5d:11:91:9c:1e:9e:31:77:11:d6:77: 14:54:a1:e7:c2:1c:dc:11:35:ec:bb:e1:29:fb:b2: 55:74:5c:52:8b:71:5a:44:af:45:6e:d4:b7:e9:aa: 12:eb:3f:c6:a0:1b:e3:e9:dd:52:7d:f8:8b:c7:63: 54:84:7b:b8:0e:6b:92:b6:bf:2c:75:7c:9f:bd:9b: 16:9f:d5:85:e1:92:00:8e:47:f6:9f:ef:b0:8f:d1: 0a:4d:fd:e4:d2:7d:c7:d4:b2:e4:bc:03:58:b2:ab: 51:36:7a:ab:f7:03:8c:0e:e4:3e:c9:1a:9b:02:f4: df:f9:3d:f1:1a:75:35:fb:3c:a6:07:a1:70:5c:b3: ca:e9:be:02:82:7f:a6:3e:29:55:15:7f:63:37:c9: 39:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:37:29:75:BE:24:99:4F:41:B7:57:E5:6A:9B:50:7C:DE:5A:19:38 X509v3 Authority Key Identifier: keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:cc:0c:f2:e1:aa:f7:d2:8f:c3:cc:1f:a4:da:95:7d:0b:26: 6c:06:6e:1d:f7:64:f2:71:f6:ac:ac:5d:43:2a:59:8c:35:17: 04:f3:a2:e4:0d:69:6d:b0:ae:e0:13:b3:81:c7:6b:83:a0:58: fa:23:63:de:6d:b1:21:19:5b:fe:85:a6:a1:cf:69:d6:35:5a: 7a:c4:f6:a1:fc:a2:3d:f5:f3:6b:16:2a:20:56:c9:ab:11:7e: 62:18:f5:6b:7d:bd:1a:79:f9:b7:54:6b:a7:e9:a2:20:b3:75: c5:a0:ef:35:99:9c:f2:f3:52:bd:0a:5b:b7:64:91:22:47:00: ff:56:49:cb:d4:41:a2:b5:2d:12:d7:36:7f:79:03:13:66:b9: 3c:39:81:f2:26:9a:54:e3:aa:68:9d:57:aa:f6:c7:fd:40:25: 53:39:b6:e9:cf:87:3d:5a:1e:cb:62:95:9d:7e:6c:2c:4b:a5: a1:2c:ce:1d:60:e6:17:82:22:14:c2:03:d7:f2:62:d2:80:fc: cb:8c:b6:c7:56:d1:94:c8:7f:a7:b1:94:e4:63:47:01:11:28: 61:cf:3e:79:ae:75:fb:e1:91:4a:06:2f:55:13:16:8c:22:58: cc:0f:ee:09:42:2f:0f:67:24:da:ae:97:88:4b:58:cf:19:60: e3:f8:8e:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMTUxMTAvBgNVBAUTKDkzQzRENzREMThGNTJDRUE1ODUyODBCQjMzMTJGMzEw RTEyMEMwRTkwHhcNMjUwNjE0MTY1NDQ0WhcNMjUwNjIxMTY1NDQ0WjAYMRYwFAYD VQQDEw02ODRkYTk1NC01Zjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33oKUs0+tAT9/8V9L6AGSSqawVS6IKbWOI6rIHSHk2TNMXmtan6nt/ScbDk1 N0p6V4i0ivj22CVnSiedy9BT/PXot1UeyMSYJGdL15069SfYtBK9Bj1WhaWWczL4 8Q6n36aDXP5MYoc/rQllXRGRnB6eMXcR1ncUVKHnwhzcETXsu+Ep+7JVdFxSi3Fa RK9FbtS36aoS6z/GoBvj6d1SffiLx2NUhHu4DmuStr8sdXyfvZsWn9WF4ZIAjkf2 n++wj9EKTf3k0n3H1LLkvANYsqtRNnqr9wOMDuQ+yRqbAvTf+T3xGnU1+zymB6Fw XLPK6b4Cgn+mPilVFX9jN8k53QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGk3KXW+ JJlPQbdX5WqbUHzeWhk4MB8GA1UdIwQYMBaAFJPE100Y9SzqWFKAuzMS8xDhIMDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QxNS83QzY4NUE4Mjk1 QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxPcFlVb0M3TXhMekVPRWd3 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4VFhUUmoxTE9wWVVvQzdNeEx6RU9FZ3dPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QxNS83QzY4NUE4Mjk1QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxP cFlVb0M3TXhMekVPRWd3T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWzAzy4ar30o/DzB+k2pV9CyZsBm4d92TycfasrF1DKlmMNRcE86Lk DWltsK7gE7OBx2uDoFj6I2PebbEhGVv+haahz2nWNVp6xPah/KI99fNrFiogVsmr EX5iGPVrfb0aefm3VGun6aIgs3XFoO81mZzy81K9Clu3ZJEiRwD/VknL1EGitS0S 1zZ/eQMTZrk8OYHyJppU46ponVeq9sf9QCVTObbpz4c9Wh7LYpWdfmwsS6WhLM4d YOYXgiIUwgPX8mLSgPzLjLbHVtGUyH+nsZTkY0cBEShhzz55rnX74ZFKBi9VExaM IljMD+4JQi8PZyTarpeIS1jPGWDj+I6G -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:44 2025 by rpki-client