$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft File: r_zmN5iBZebFG_v-vRKD1REkAZA.mft (raw, json) Hash identifier: 5a5YFDp2BbYb0cEXx8GAL4uCw4ygqlYAszDj4iX2H3U= Subject key identifier: 06:5C:DA:38:79:B3:F8:A8:40:1A:91:4A:4D:2C:48:87:AF:13:7B:C1 Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft Manifest number: 012A Signing time: Tue 17 Jun 2025 03:43:46 +0000 Manifest this update: Tue 17 Jun 2025 03:43:45 +0000 Manifest next update: Tue 24 Jun 2025 03:43:45 +0000 Files and hashes: 1: r_zmN5iBZebFG_v-vRKD1REkAZA.crl (hash: JXm7u2965fhrV397iDa16GpDHEEvURYst1e5f3d0e+0=) 2: C531DD12226F11EF8D24AD63C4F9AE02.roa (hash: a2/vehSWDoff6mLTg7VEADcM0ey8iDfcQQZxJYEqkDM=) 3: C608133C226F11EF8D24AD63C4F9AE02.roa (hash: GATUqbNDhKaVb/i1ZjCIO1rgwevFVCyWk8Ts83izVL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Validity Not Before: Jun 17 03:43:45 2025 GMT Not After : Jun 24 03:43:45 2025 GMT Subject: CN=6850e471-1f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:65:65:01:ff:cc:82:45:a3:40:c8:ba:2d: 7d:4e:a6:b3:85:36:82:0f:ce:99:19:c3:84:b0:68: bc:40:a8:69:16:21:86:86:86:e6:02:ed:c7:af:36: 34:5c:7b:cb:68:e1:94:5d:fc:ff:85:8c:d7:8f:a5: 80:c6:27:59:4b:1c:d3:c8:5e:83:b4:78:cf:58:f2: ae:96:4f:7c:c4:29:38:9d:c3:d2:06:48:8b:d2:c8: 7b:2a:55:f2:8d:8c:31:22:8a:4b:e1:d0:b1:3d:d2: a4:d7:e4:08:04:ca:61:34:0f:7c:fd:62:f7:6c:8a: 8d:6f:3e:45:1d:34:4a:be:69:e4:3e:db:70:a1:55: 2f:0e:0d:f3:2c:7b:72:58:53:24:7e:90:70:11:2c: 37:44:f8:a8:c4:0e:28:70:a5:a7:b8:34:2f:eb:79: c8:a0:54:51:aa:0e:71:3d:1c:5c:88:88:50:2e:38: d4:dc:1b:ed:dc:fc:21:9c:32:45:e2:11:99:f0:4d: b0:57:69:a8:58:7d:26:61:80:d9:30:33:00:84:e9: 4d:9f:4a:d8:31:94:d2:b5:b6:81:32:83:0c:6b:07: b8:67:16:14:81:21:c3:99:10:33:06:bf:74:8d:c1: 0c:23:7c:eb:a2:10:e1:ef:d0:27:31:93:05:83:fd: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5C:DA:38:79:B3:F8:A8:40:1A:91:4A:4D:2C:48:87:AF:13:7B:C1 X509v3 Authority Key Identifier: keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d6:22:74:80:dc:a3:d1:97:ed:2c:0c:70:98:d9:bc:7d:e9: e2:1c:a6:92:21:49:d7:24:69:3d:51:91:39:2c:28:3f:38:9e: 29:1a:30:7f:db:bc:af:e1:de:72:f2:76:a2:e1:77:ef:12:9f: 61:af:5f:73:9b:97:03:44:8c:5c:96:36:af:89:88:a7:07:51: b6:bf:c0:f1:07:18:99:4e:ed:a4:b8:8f:d4:18:25:79:b5:f3: ff:85:e0:f9:b5:75:bf:79:6f:a0:71:e5:49:67:fb:18:67:08: 54:a1:cb:b7:16:f2:0a:23:13:f5:95:81:13:6e:36:b7:6b:d5: 88:b0:1a:3a:48:2b:d4:4c:e3:b6:55:e4:73:67:d7:16:91:b6: 69:42:12:1e:16:74:39:f3:de:03:f5:af:4e:54:3a:16:6f:91: b8:c6:28:ae:06:b8:25:75:bb:7c:6c:27:e0:b1:08:ca:49:6c: 50:c3:a3:a2:24:69:23:96:f6:5d:e5:34:e1:87:e1:32:11:55: 03:28:cc:9f:9f:64:65:55:78:d5:6e:bc:8e:37:2a:6c:8c:e6: 5e:8f:a1:74:aa:15:2d:51:59:3d:f6:16:f7:fe:40:8b:e1:6c: e5:8d:d3:51:14:78:b4:82:49:fd:10:dc:56:3b:dd:9d:77:56: a1:bc:e9:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjgxMTAvBgNVBAUTKEFGRkNFNjM3OTg4MTY1RTZDNTFCRkJGRUJEMTI4M0Q1 MTEyNDAxOTAwHhcNMjUwNjE3MDM0MzQ1WhcNMjUwNjI0MDM0MzQ1WjAYMRYwFAYD VQQDEw02ODUwZTQ3MS0xZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQNlZQH/zIJFo0DIui19TqazhTaCD86ZGcOEsGi8QKhpFiGGhobmAu3HrzY0 XHvLaOGUXfz/hYzXj6WAxidZSxzTyF6DtHjPWPKulk98xCk4ncPSBkiL0sh7KlXy jYwxIopL4dCxPdKk1+QIBMphNA98/WL3bIqNbz5FHTRKvmnkPttwoVUvDg3zLHty WFMkfpBwESw3RPioxA4ocKWnuDQv63nIoFRRqg5xPRxciIhQLjjU3Bvt3PwhnDJF 4hGZ8E2wV2moWH0mYYDZMDMAhOlNn0rYMZTStbaBMoMMawe4ZxYUgSHDmRAzBr90 jcEMI3zrohDh79AnMZMFg/0xmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZc2jh5 s/ioQBqRSk0sSIevE3vBMB8GA1UdIwQYMBaAFK/85jeYgWXmxRv7/r0Sg9URJAGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2OC84Mjc1MjRFODhF RTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlplYkZHX3YtdlJLRDFSRWtB WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jfem1ONWlCWmViRkdfdi12UktEMVJFa0FaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2OC84Mjc1MjRFODhFRTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlpl YkZHX3YtdlJLRDFSRWtBWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG1iJ0gNyj0ZftLAxwmNm8feniHKaSIUnXJGk9UZE5LCg/OJ4pGjB/ 27yv4d5y8nai4XfvEp9hr19zm5cDRIxcljaviYinB1G2v8DxBxiZTu2kuI/UGCV5 tfP/heD5tXW/eW+gceVJZ/sYZwhUocu3FvIKIxP1lYETbja3a9WIsBo6SCvUTOO2 VeRzZ9cWkbZpQhIeFnQ5894D9a9OVDoWb5G4xiiuBrgldbt8bCfgsQjKSWxQw6Oi JGkjlvZd5TThh+EyEVUDKMyfn2RlVXjVbryONypsjOZej6F0qhUtUVk99hb3/kCL 4WzljdNRFHi0gkn9ENxWO92dd1ahvOnX -----END CERTIFICATE-----Generated at Wed Jun 18 06:45:57 2025 by rpki-client