$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: PTRtiNfmqYLTRsjtYUaVc8k7HoT7+9v6gNGJpiy6bOU= Subject key identifier: 4D:32:D1:D8:3A:C2:F7:C3:88:87:11:63:23:31:3C:A0:A0:39:71:BF Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 348F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 348F Signing time: Sat 14 Jun 2025 14:35:14 +0000 Manifest this update: Sat 14 Jun 2025 14:35:13 +0000 Manifest next update: Sat 21 Jun 2025 14:35:13 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: 3S2cSqYLPA54x53Vx36rxnzJ3p1cb/fGKrS1hZLu2AI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13455 (0x348f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Jun 14 14:35:13 2025 GMT Not After : Jun 21 14:35:13 2025 GMT Subject: CN=684d88a1-76ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2f:ad:9e:38:92:4f:7f:d2:a8:d9:ef:8c:89: 82:e0:cb:e9:36:03:bd:12:ab:e2:f0:97:c9:09:1a: 8c:b4:25:8a:1c:0f:89:45:e6:f1:a6:94:bc:21:76: 82:96:e0:44:70:20:af:c0:6c:9a:9e:66:71:52:c7: a3:0e:d7:a1:a4:2e:e9:9a:27:46:7f:a9:d1:72:3f: f9:8f:85:af:07:e7:05:56:62:10:59:d5:a7:3b:0e: 1b:c2:2a:d1:0e:30:f4:f7:5a:23:f5:a1:35:6e:1c: 38:d3:04:4f:9f:05:48:ee:41:50:2e:dd:e1:64:eb: e3:2c:2c:35:56:c8:dd:91:6d:a7:62:3f:aa:d3:f2: 44:b9:8a:13:69:81:f1:0c:24:4f:32:63:f5:da:a5: 82:fc:52:6a:04:fa:f4:60:ea:aa:00:08:2f:73:3e: c5:47:80:d8:d1:af:2a:6b:5b:ea:9d:0b:eb:40:28: c5:44:c4:8e:af:2f:ee:97:3b:78:76:56:ea:e0:f0: 2e:54:26:72:93:aa:fe:50:20:18:d5:07:62:3f:f1: 39:ea:91:65:f9:72:dd:d0:db:01:f0:3f:b6:ce:36: 44:2d:b4:fd:94:c8:54:2f:1d:69:bc:8c:a9:cf:c1: 69:7a:19:a9:84:b3:2e:7d:ba:65:5c:1d:d4:51:2f: 4a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:32:D1:D8:3A:C2:F7:C3:88:87:11:63:23:31:3C:A0:A0:39:71:BF X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:36:dd:4c:16:9b:01:24:aa:2e:4f:4f:dc:96:e9:52:4a:ea: b8:34:26:83:40:ec:c0:df:51:93:05:b7:27:88:96:58:55:61: 10:52:e5:87:f8:de:f8:40:8d:55:53:30:8d:7b:23:ba:01:7a: 4f:bf:d8:bd:b6:89:1a:7e:9e:95:76:d5:11:3a:ad:9b:2d:87: 72:66:2d:f6:db:54:72:a9:0a:64:20:bc:a6:65:8a:4d:f6:83: 08:84:89:c2:0b:b9:05:39:85:1d:29:df:f7:a0:2b:a7:72:0c: 32:48:ab:a0:b7:93:c8:9f:1a:33:44:73:db:c6:e1:59:ba:0f: 9f:b5:29:4f:db:46:4c:0a:ab:a2:36:8f:d4:5b:82:79:b9:a1: 0f:ee:22:23:f6:91:0d:f4:6f:9f:fa:60:b9:77:da:c6:e8:71: ba:6d:9d:10:50:f5:2e:c1:f5:73:e3:72:79:8b:82:b8:1b:70: 89:5b:8b:98:f4:7e:ee:7f:c6:41:e8:d9:3f:31:1e:fb:28:7f: 79:7b:e8:c9:fb:3a:29:46:e5:40:26:e6:5d:60:c0:8d:3a:7d: a5:a5:53:ba:79:11:d5:df:b8:3b:4c:60:39:2e:23:6c:68:fe: f9:f8:cd:2f:07:01:4d:f1:29:f3:98:64:28:13:39:b4:4a:2f: 13:2c:56:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjUwNjE0MTQzNTEzWhcNMjUwNjIxMTQzNTEzWjAYMRYwFAYD VQQDEw02ODRkODhhMS03NmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2i+tnjiST3/SqNnvjImC4MvpNgO9Eqvi8JfJCRqMtCWKHA+JRebxppS8IXaC luBEcCCvwGyanmZxUsejDtehpC7pmidGf6nRcj/5j4WvB+cFVmIQWdWnOw4bwirR DjD091oj9aE1bhw40wRPnwVI7kFQLt3hZOvjLCw1VsjdkW2nYj+q0/JEuYoTaYHx DCRPMmP12qWC/FJqBPr0YOqqAAgvcz7FR4DY0a8qa1vqnQvrQCjFRMSOry/ulzt4 dlbq4PAuVCZyk6r+UCAY1QdiP/E56pFl+XLd0NsB8D+2zjZELbT9lMhULx1pvIyp z8FpehmphLMufbplXB3UUS9KWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0y0dg6 wvfDiIcRYyMxPKCgOXG/MB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxNt1MFpsBJKouT0/clulSSuq4NCaDQOzA31GTBbcniJZYVWEQUuWH +N74QI1VUzCNeyO6AXpPv9i9tokafp6VdtUROq2bLYdyZi3221RyqQpkILymZYpN 9oMIhInCC7kFOYUdKd/3oCuncgwySKugt5PInxozRHPbxuFZug+ftSlP20ZMCqui No/UW4J5uaEP7iIj9pEN9G+f+mC5d9rG6HG6bZ0QUPUuwfVz43J5i4K4G3CJW4uY 9H7uf8ZB6Nk/MR77KH95e+jJ+zopRuVAJuZdYMCNOn2lpVO6eRHV37g7TGA5LiNs aP75+M0vBwFN8SnzmGQoEzm0Si8TLFYo -----END CERTIFICATE-----Generated at Sun Jun 15 05:44:36 2025 by rpki-client