$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft File: -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json) Hash identifier: 9chpACd1vjEU6TALPK2vwTJaCh2Eszp4V81z5oEVHhc= Subject key identifier: FD:17:09:62:5B:89:EC:24:07:D1:AD:6E:5E:C7:67:C8:E3:3D:9C:A1 Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB Certificate issuer: /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft Manifest number: B4 Signing time: Fri 13 Jun 2025 04:59:41 +0000 Manifest this update: Fri 13 Jun 2025 04:59:41 +0000 Manifest next update: Fri 20 Jun 2025 04:59:41 +0000 Files and hashes: 1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: wKDNhtXM8s3O9eiHpWBWz1bitmnKsjPdY01UUkZSuCY=) 2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: 8zOiXd3kRlQoiz32Gjahx1aoeuvy3cZGr/aU3t8eEp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB Validity Not Before: Jun 13 04:59:41 2025 GMT Not After : Jun 20 04:59:41 2025 GMT Subject: CN=684bb03d-2e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:83:d6:e9:9d:af:71:dc:c0:12:2d:88:cd: 6e:ec:2a:73:6d:11:07:0f:cc:32:00:44:52:04:c4: 47:3f:d5:de:bc:5d:4f:f2:ef:91:15:23:dc:96:af: cc:f0:12:d0:35:ea:2e:ec:18:67:85:c5:74:d7:f7: d4:70:52:a4:e9:4e:3c:e5:42:d8:4e:09:8b:91:8c: d2:95:2e:63:1d:cf:25:a1:04:70:9d:8b:93:06:eb: a6:59:b0:8f:be:6a:57:8e:c3:2d:97:43:1d:c0:b9: 1f:c9:1b:01:c5:6c:e6:16:cf:2c:d0:fb:5c:8a:aa: a5:0d:10:4e:ca:ba:92:c5:f8:cf:37:c2:93:c3:92: 5b:c3:97:ef:92:3a:ea:42:fd:61:5e:40:cf:d9:22: 61:66:64:57:67:20:37:6e:39:64:ad:d2:04:5c:a4: fa:07:63:b5:02:81:e6:06:df:a6:e4:0c:f9:9f:38: 9a:71:3f:b8:e1:8a:fe:c6:43:94:35:e1:ea:41:4a: ec:9e:cb:a2:9e:31:7b:05:d9:01:bb:0d:2a:4e:d4: 69:a8:ac:28:c8:67:9b:62:61:5b:c0:98:ce:95:3e: 4d:20:72:f7:94:85:40:db:1e:30:3f:5d:10:7a:1e: 82:25:83:bd:1a:28:4b:a3:a3:17:9f:f7:dc:f4:88: e8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:17:09:62:5B:89:EC:24:07:D1:AD:6E:5E:C7:67:C8:E3:3D:9C:A1 X509v3 Authority Key Identifier: keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:2f:cf:52:93:a3:3a:9d:d7:cc:b3:f4:22:03:e0:6f:f5:ae: c8:72:71:32:77:d0:e9:02:32:74:8d:d6:71:0e:be:19:d2:6d: 84:57:b3:6f:50:94:64:1b:52:8e:73:a0:19:d7:fc:02:bf:33: 59:20:0a:79:57:85:be:1d:f4:d9:09:b2:4b:40:60:6b:ec:bf: 6c:bd:4f:04:2a:52:39:0a:09:ee:b7:59:c4:12:58:e0:ea:70: 7f:ac:d0:e1:59:85:09:fb:4e:4e:e2:39:e2:50:b0:47:68:e0: 6d:a7:f3:06:2c:33:13:73:5a:7f:53:72:cf:80:ad:8d:65:5b: 23:f8:26:55:ed:44:23:b2:66:be:f6:e4:0d:96:1a:a7:d4:c6: f2:a0:b5:95:1f:43:b1:46:6c:c3:69:42:59:8f:85:35:1a:65: 59:89:0a:a6:c9:73:68:ca:6a:06:18:7f:a0:7c:86:3a:b6:f8: 02:da:d2:1a:16:ca:04:12:0b:40:00:63:73:41:4f:f7:f5:ff: 99:7f:30:b1:83:87:5b:72:5a:b2:3b:70:68:26:81:8e:0d:7d: 11:95:0c:e5:cb:df:11:20:e8:5e:f9:d6:7b:7c:69:04:c2:78: 42:b5:31:d0:f1:92:25:b6:75:f3:e1:0c:e2:75:3f:89:bf:9a: 25:c2:91:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjExRUUxMTAvBgNVBAUTKEZBQzJCMkU1NDE0NDVCNUI0N0M1OURBRTFERTJEREU4 ODc5QUI4QkIwHhcNMjUwNjEzMDQ1OTQxWhcNMjUwNjIwMDQ1OTQxWjAYMRYwFAYD VQQDEw02ODRiYjAzZC0yZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgKD1umdr3HcwBItiM1u7CpzbREHD8wyAERSBMRHP9XevF1P8u+RFSPclq/M 8BLQNeou7BhnhcV01/fUcFKk6U485ULYTgmLkYzSlS5jHc8loQRwnYuTBuumWbCP vmpXjsMtl0MdwLkfyRsBxWzmFs8s0PtciqqlDRBOyrqSxfjPN8KTw5Jbw5fvkjrq Qv1hXkDP2SJhZmRXZyA3bjlkrdIEXKT6B2O1AoHmBt+m5Az5nziacT+44Yr+xkOU NeHqQUrsnsuinjF7BdkBuw0qTtRpqKwoyGebYmFbwJjOlT5NIHL3lIVA2x4wP10Q eh6CJYO9GihLo6MXn/fc9IjobwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0XCWJb iewkB9Gtbl7HZ8jjPZyhMB8GA1UdIwQYMBaAFPrCsuVBRFtbR8Wdrh3i3eiHmri7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTFFRS9FOThBNDY1MjNF ODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcxdEh4WjJ1SGVMZDZJZWF1 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1zS3k1VUZFVzF0SHhaMnVIZUxkNkllYXVMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTFFRS9FOThBNDY1MjNFODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcx dEh4WjJ1SGVMZDZJZWF1THMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5L89Sk6M6ndfMs/QiA+Bv9a7IcnEyd9DpAjJ0jdZxDr4Z0m2EV7Nv UJRkG1KOc6AZ1/wCvzNZIAp5V4W+HfTZCbJLQGBr7L9svU8EKlI5Cgnut1nEEljg 6nB/rNDhWYUJ+05O4jniULBHaOBtp/MGLDMTc1p/U3LPgK2NZVsj+CZV7UQjsma+ 9uQNlhqn1MbyoLWVH0OxRmzDaUJZj4U1GmVZiQqmyXNoymoGGH+gfIY6tvgC2tIa FsoEEgtAAGNzQU/39f+ZfzCxg4dbclqyO3BoJoGODX0RlQzly98RIOhe+dZ7fGkE wnhCtTHQ8ZIltnXz4QzidT+Jv5olwpGJ -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:14 2025 by rpki-client