$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: FKBpOk+TUMcHiC3rLHTzIjWY5rXky5FKXBnE25RzeZo= Subject key identifier: EE:2C:4C:67:6C:75:98:FB:1F:D4:76:FC:60:71:9F:02:B9:0B:D5:55 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 017F Signing time: Sun 15 Jun 2025 03:26:23 +0000 Manifest this update: Sun 15 Jun 2025 03:26:22 +0000 Manifest next update: Sun 22 Jun 2025 03:26:22 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: pGhboTNOg1pGCz2s18RAmr/UibQ3B0SiE/XX/OrJ0VY=) 2: C720A07A3AB711F0A910C36CC4F9AE02.roa (hash: xFvPPfgMjusuKz/2TdbQZuzxjIVcgMZKU8w82vWIIXI=) 3: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: o6iFpFIV0jtxY3uECfavGNZC5f2SO5jee3QS3JMuNlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 03:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Jun 15 03:26:22 2025 GMT Not After : Jun 22 03:26:22 2025 GMT Subject: CN=684e3d5f-835c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e2:a1:92:4d:db:5c:9d:96:9c:b3:d8:0c:4b: 74:52:08:5a:2a:64:3f:db:47:db:c4:51:71:85:bf: bb:b8:a7:9a:07:01:6e:69:6d:02:67:ad:12:e4:96: 40:9a:ec:d0:1c:df:7b:55:29:63:c5:73:b7:7a:bb: ed:91:eb:4a:14:45:b5:23:53:6a:9e:3e:26:38:e1: 16:c6:41:29:ae:a1:46:49:88:5d:e4:b8:cf:8e:ea: 24:63:3d:9e:c5:08:ea:c5:ff:d2:45:d0:39:7a:f2: e8:3f:b5:de:48:f5:b9:33:fa:bd:37:95:e3:fb:31: 5f:33:07:dc:d3:60:a7:ed:77:51:68:5e:5c:9a:b1: 4e:e3:f5:cf:05:c1:ee:23:60:61:ab:fb:b8:0f:ba: 74:75:33:5f:08:fa:a4:8e:7b:ca:e3:9b:16:8f:07: 4e:0c:a2:36:5f:aa:63:c7:06:16:19:a2:75:70:fe: b0:86:cd:a1:e5:43:44:73:07:a7:cd:f6:80:05:82: ac:b8:f7:4a:82:d2:e9:3b:33:54:b2:a2:7e:88:8b: 5f:78:a2:24:fd:f9:5b:e6:a8:1d:f7:ab:99:87:29: c4:d1:b5:23:cf:69:b8:41:bc:f6:dd:ea:9a:fe:19: 24:5e:a1:5c:3f:60:23:3a:c7:c4:a9:6f:cb:26:3d: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2C:4C:67:6C:75:98:FB:1F:D4:76:FC:60:71:9F:02:B9:0B:D5:55 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:df:79:cc:ba:63:7c:5f:3f:ee:89:f9:2e:18:69:c9:f0:21: 7f:b2:63:50:04:8e:8e:b0:ad:b2:4b:36:1a:88:88:64:bb:7b: 1b:1c:b1:44:d5:f3:61:15:0b:be:da:f9:8f:87:c0:2e:30:f3: e5:18:f5:7b:25:14:ba:cd:b5:cd:1e:7a:e2:31:ca:f7:cb:ab: 38:7f:c3:31:06:6c:ed:1c:aa:9e:07:2f:1f:de:79:94:d2:f8: 98:a7:50:19:8a:51:34:3c:86:63:fa:f8:3f:46:d7:56:56:c9: fe:7c:b5:b3:96:35:65:5f:1f:9e:8c:8f:5c:e6:b3:84:bd:6b: 57:b2:a5:2a:74:54:7d:f9:23:ad:c3:64:f5:68:77:c1:90:1c: c2:90:34:99:5a:7a:19:ab:6d:af:19:13:17:3e:e3:89:9b:ab: ff:6c:c1:df:4e:9c:27:55:34:c2:96:f5:6f:b8:05:eb:80:5e: e2:11:11:bf:0b:6d:ab:d4:c0:11:bf:02:33:ea:df:ce:2a:3c: 1d:55:bf:67:a4:b3:e6:d4:a4:28:02:ef:ff:8d:44:fa:c5:c4: ea:e1:51:ef:bc:02:5d:18:cc:96:80:3f:f0:19:f7:f8:19:82: a8:fd:21:77:f4:4f:36:2a:3b:8a:db:e8:9b:28:84:38:03:56: 77:1c:0f:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUwNjE1MDMyNjIyWhcNMjUwNjIyMDMyNjIyWjAYMRYwFAYD VQQDEw02ODRlM2Q1Zi04MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuKhkk3bXJ2WnLPYDEt0UghaKmQ/20fbxFFxhb+7uKeaBwFuaW0CZ60S5JZA muzQHN97VSljxXO3ervtketKFEW1I1Nqnj4mOOEWxkEprqFGSYhd5LjPjuokYz2e xQjqxf/SRdA5evLoP7XeSPW5M/q9N5Xj+zFfMwfc02Cn7XdRaF5cmrFO4/XPBcHu I2Bhq/u4D7p0dTNfCPqkjnvK45sWjwdODKI2X6pjxwYWGaJ1cP6whs2h5UNEcwen zfaABYKsuPdKgtLpOzNUsqJ+iItfeKIk/flb5qgd96uZhynE0bUjz2m4Qbz23eqa /hkkXqFcP2AjOsfEqW/LJj1ilQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4sTGds dZj7H9R2/GBxnwK5C9VVMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI33nMumN8Xz/uifkuGGnJ8CF/smNQBI6OsK2ySzYaiIhku3sbHLFE 1fNhFQu+2vmPh8AuMPPlGPV7JRS6zbXNHnriMcr3y6s4f8MxBmztHKqeBy8f3nmU 0viYp1AZilE0PIZj+vg/RtdWVsn+fLWzljVlXx+ejI9c5rOEvWtXsqUqdFR9+SOt w2T1aHfBkBzCkDSZWnoZq22vGRMXPuOJm6v/bMHfTpwnVTTClvVvuAXrgF7iERG/ C22r1MARvwIz6t/OKjwdVb9npLPm1KQoAu//jUT6xcTq4VHvvAJdGMyWgD/wGff4 GYKo/SF39E82KjuK2+ibKIQ4A1Z3HA97 -----END CERTIFICATE-----Generated at Mon Jun 16 15:09:37 2025 by rpki-client