$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json) Hash identifier: 404FuFqVCYRxfG2tHwl+6MyKaG69XeXz4WXg26ZRjKg= Subject key identifier: 98:C7:6C:B5:CB:7C:38:10:6A:98:19:93:12:71:DB:E3:9D:21:96:1E Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft Manifest number: 37 Signing time: Fri 13 Jun 2025 06:32:08 +0000 Manifest this update: Fri 13 Jun 2025 06:32:08 +0000 Manifest next update: Fri 20 Jun 2025 06:32:08 +0000 Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: gkZR1TVJc4oO+lO/hWs3mekqhHE98db+5USpJvOJ7MI=) 2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Validity Not Before: Jun 13 06:32:08 2025 GMT Not After : Jun 20 06:32:08 2025 GMT Subject: CN=684bc5e8-3956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:15:4a:cb:9a:62:5d:f7:27:a6:4a:31:2e: 1b:2d:e1:7f:f0:40:13:d1:b0:6e:4b:9c:81:2b:45: d2:29:c1:37:d7:2b:58:92:52:36:50:6a:e8:8a:6a: 87:3a:b9:1e:3a:32:2f:4c:79:45:5a:64:c9:08:1e: a5:51:e5:72:10:c7:90:90:3c:f9:a0:1c:40:70:7e: dc:22:7e:51:11:f9:32:a6:dd:c6:dc:3b:e3:e9:3b: 10:4f:31:95:45:20:76:65:c6:2a:eb:fc:2e:f5:1a: f7:2c:da:62:d3:57:eb:98:53:76:a2:45:6e:4d:28: 1c:01:ac:93:ca:7d:24:e8:bf:42:6d:1e:a9:8e:69: 9b:d4:0e:64:e0:4d:04:fe:39:c5:70:0f:b6:23:01: 28:1c:74:69:5b:bf:10:44:0b:50:79:8e:c2:1f:7b: f9:2b:c0:d4:be:67:06:3f:98:9b:4d:d9:28:26:77: 5a:95:d3:11:45:8f:82:cc:31:c3:7d:b7:68:88:22: da:07:c5:86:c1:e8:42:a9:3f:71:0c:04:be:b5:70: a9:64:78:95:12:7a:9e:31:11:f4:c5:5d:80:ae:26: 9e:f1:0f:02:6d:c9:72:26:45:7c:b9:27:e1:09:82: 64:b6:04:e8:62:ba:d8:46:04:9d:00:5f:cd:6c:2c: 09:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C7:6C:B5:CB:7C:38:10:6A:98:19:93:12:71:DB:E3:9D:21:96:1E X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:09:fa:6f:e8:f5:81:1b:0d:2d:d8:31:f5:93:14:2a:ab:d1: 8b:32:dc:0f:4b:ac:fc:c3:14:7a:33:58:86:0d:bf:2a:05:a7: 24:95:f6:c6:64:f4:3c:20:97:39:83:0c:7c:b2:85:22:55:ab: ab:da:bd:39:5a:32:77:1b:84:7c:2b:d4:dd:8e:5e:a6:a4:53: 40:49:bd:54:b0:4c:09:1d:d4:1d:db:92:ee:9e:fd:23:c1:b8: fd:a2:a5:da:0e:a7:85:5c:f6:7d:b9:06:b2:2d:c1:0c:01:74: 43:2f:20:2c:a1:0b:d7:95:b0:fa:e3:cf:0f:ea:53:b9:a1:e7: e0:7c:66:e1:f8:6e:0c:99:15:78:28:d3:f9:ee:d6:b8:1f:e5: 95:b4:54:79:8b:1f:4f:7e:dc:ba:c5:78:d6:05:2e:1c:42:99: 88:40:f5:24:54:2e:9d:7c:0a:da:ea:81:f0:0d:b1:7e:47:0a: 6c:ac:8c:f1:c7:34:de:a1:8e:58:72:ea:aa:ab:0e:a3:7e:5f: 01:4e:d7:4a:7b:b8:09:87:da:fb:e0:5e:25:ae:a2:29:6e:b2: 0b:2c:76:98:ea:5d:64:ff:53:8b:fb:e3:b7:b0:0a:55:b2:40: 42:66:77:66:c1:8d:16:0c:f3:8e:9a:4e:1d:bd:50:fb:97:3b: ec:6f:e0:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDc2OTExMC8GA1UEBRMoMkZDQjNDMjU1NjVDOTQwNDE3QkVFMkFBRjg4MzhDRTQz M0UyQjgzQTAeFw0yNTA2MTMwNjMyMDhaFw0yNTA2MjAwNjMyMDhaMBgxFjAUBgNV BAMTDTY4NGJjNWU4LTM5NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCpRVKy5piXfcnpkoxLhst4X/wQBPRsG5LnIErRdIpwTfXK1iSUjZQauiKaoc6 uR46Mi9MeUVaZMkIHqVR5XIQx5CQPPmgHEBwftwiflER+TKm3cbcO+PpOxBPMZVF IHZlxirr/C71Gvcs2mLTV+uYU3aiRW5NKBwBrJPKfSTov0JtHqmOaZvUDmTgTQT+ OcVwD7YjASgcdGlbvxBEC1B5jsIfe/krwNS+ZwY/mJtN2Sgmd1qV0xFFj4LMMcN9 t2iIItoHxYbB6EKpP3EMBL61cKlkeJUSep4xEfTFXYCuJp7xDwJtyXImRXy5J+EJ gmS2BOhiuthGBJ0AX81sLAn7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmMdstct8 OBBqmBmTEnHb450hlh4wHwYDVR0jBBgwFoAUL8s8JVZclAQXvuKq+IOM5DPiuDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNzY5LzU0NTY4OENBRkIy NDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDhzOEpWWmNsQVFYdnVLcS1JT001RFBpdURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NzY5LzU0NTY4OENBRkIyNDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFR WHZ1S3EtSU9NNURQaXVEby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF0J+m/o9YEbDS3YMfWTFCqr0Ysy3A9LrPzDFHozWIYNvyoFpySV9sZk 9DwglzmDDHyyhSJVq6vavTlaMncbhHwr1N2OXqakU0BJvVSwTAkd1B3bku6e/SPB uP2ipdoOp4Vc9n25BrItwQwBdEMvICyhC9eVsPrjzw/qU7mh5+B8ZuH4bgyZFXgo 0/nu1rgf5ZW0VHmLH09+3LrFeNYFLhxCmYhA9SRULp18CtrqgfANsX5HCmysjPHH NN6hjlhy6qqrDqN+XwFO10p7uAmH2vvgXiWuoilusgssdpjqXWT/U4v747ewClWy QEJmd2bBjRYM846aTh29UPuXO+xv4MQ= -----END CERTIFICATE-----Generated at Sat Jun 14 17:42:22 2025 by rpki-client