$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json) Hash identifier: /u9SWIGGY1FLYJwx9fFzqGeHav6EH2Kc5VIRJ2R8z18= Subject key identifier: 0C:8A:E1:C4:EF:6B:6E:25:F1:30:8E:D5:AE:A6:55:3E:1B:F9:D6:64 Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft Manifest number: 0792 Signing time: Thu 12 Jun 2025 21:03:31 +0000 Manifest this update: Thu 12 Jun 2025 21:03:31 +0000 Manifest next update: Thu 19 Jun 2025 21:03:31 +0000 Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: dUzpjzSoY6Em7WVQjwy6yAdN3zJpzwThQf9LIURGJnU=) 2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: IYriA7iqlPrIGEwVZWLwnn3g/0OVL8pkTIBJVf9/TyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Validity Not Before: Jun 12 21:03:31 2025 GMT Not After : Jun 19 21:03:31 2025 GMT Subject: CN=684b40a3-fc4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:29:1f:e2:7f:4b:94:c9:e2:98:d6:84:5e: d6:25:20:6f:bf:e8:d4:99:9e:9f:59:ed:33:18:33: 97:de:04:c3:60:1f:3c:51:90:8d:88:fb:97:2f:74: c3:1b:1c:36:d2:a2:06:2a:17:d0:42:39:79:17:ab: 1b:d2:b1:e1:7c:fc:42:b8:bc:0c:c2:7b:86:df:1a: 51:b9:03:38:94:32:e6:39:7f:dd:54:ab:09:97:8c: 08:37:3d:a7:77:46:2c:b8:a1:3e:2e:1c:97:8f:6f: b1:1e:23:4a:10:29:c4:dd:76:ef:ea:d4:31:e9:b6: a0:92:c6:79:b3:11:aa:f9:bd:4e:e7:a5:70:55:2f: ec:a7:b7:bc:4f:2d:ad:c3:14:cc:7f:1d:60:f9:39: 32:a6:c2:d1:be:ab:c8:72:6c:f7:1d:7d:2f:2f:5e: 3c:a5:dc:35:74:2e:7b:5a:8e:17:1c:23:98:e2:37: 28:96:3a:b3:da:35:5d:96:e2:56:86:32:e1:4b:a9: de:0e:42:d0:02:53:e6:26:05:d7:e8:97:fa:73:eb: 18:78:66:ce:ce:c6:af:40:dc:9d:d1:22:43:e0:f4: 4d:80:fd:e4:d7:09:f5:30:f6:fd:76:b6:ac:62:a7: 77:31:1c:f7:fb:cc:b6:1c:fa:7b:51:90:63:b0:53: 77:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8A:E1:C4:EF:6B:6E:25:F1:30:8E:D5:AE:A6:55:3E:1B:F9:D6:64 X509v3 Authority Key Identifier: keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:11:21:4c:3a:4b:12:da:b2:41:cf:10:2e:37:cc:12:6e:0a: 82:95:64:c8:72:1e:ec:d8:0d:47:e2:80:da:ed:e6:54:b3:b6: e8:5a:c4:75:7c:0c:a9:45:82:1b:e4:ff:1c:81:ce:c2:6e:8a: 5a:20:77:f3:17:d7:53:09:03:23:65:f9:00:cd:ce:89:ea:e0: 09:ec:e2:02:c1:0c:7c:33:d3:f7:f8:cb:b4:de:d6:2f:64:cc: 1f:a6:93:e8:23:7b:9d:f3:bd:f9:2d:52:3a:3c:cd:60:40:01: b4:5f:3b:74:01:97:c5:7f:a8:91:22:8a:51:e1:97:fe:de:9d: cd:74:93:10:ca:c4:0e:59:a9:4a:d6:6b:19:45:b0:ca:03:15: 55:47:a3:7f:be:7d:24:f3:ac:dc:11:0b:a7:cd:4f:4e:84:a7: 2d:99:b4:ae:88:22:b2:85:03:cf:53:86:d6:0a:e4:fb:6d:d4: ff:37:b5:b2:7f:c2:1a:e2:95:da:a2:4d:1b:bd:f9:05:4e:ae: 2d:d3:6a:a7:10:49:1d:2f:e7:95:d5:4e:e0:03:3d:45:27:61: 5d:dd:d6:e0:5c:dc:6c:77:d4:b9:fb:e3:0e:3d:08:06:1d:c7: 18:8e:f5:20:64:7a:ae:3a:f1:82:82:1a:00:7c:21:f9:d1:40: 6f:a7:d8:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJFNzYxMTAvBgNVBAUTKEQ0MTM3OEVGQ0NDRENBOEU2NTM3RTk1RjI3QUEzQjM1 Mzc1ODBBRjMwHhcNMjUwNjEyMjEwMzMxWhcNMjUwNjE5MjEwMzMxWjAYMRYwFAYD VQQDEw02ODRiNDBhMy1mYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtIpH+J/S5TJ4pjWhF7WJSBvv+jUmZ6fWe0zGDOX3gTDYB88UZCNiPuXL3TD Gxw20qIGKhfQQjl5F6sb0rHhfPxCuLwMwnuG3xpRuQM4lDLmOX/dVKsJl4wINz2n d0YsuKE+LhyXj2+xHiNKECnE3Xbv6tQx6bagksZ5sxGq+b1O56VwVS/sp7e8Ty2t wxTMfx1g+TkypsLRvqvIcmz3HX0vL148pdw1dC57Wo4XHCOY4jcoljqz2jVdluJW hjLhS6neDkLQAlPmJgXX6Jf6c+sYeGbOzsavQNyd0SJD4PRNgP3k1wn1MPb9dras Yqd3MRz3+8y2HPp7UZBjsFN3MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyK4cTv a24l8TCO1a6mVT4b+dZkMB8GA1UdIwQYMBaAFNQTeO/MzcqOZTfpXyeqOzU3WArz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkU3Ni84RjNDOUU2QTBE NzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6TnlvNWxOLWxmSjZvN05UZFlD dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCTjQ3OHpOeW81bE4tbGZKNm83TlRkWUN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkU3Ni84RjNDOUU2QTBENzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6Tnlv NWxOLWxmSjZvN05UZFlDdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANESFMOksS2rJBzxAuN8wSbgqClWTIch7s2A1H4oDa7eZUs7boWsR1 fAypRYIb5P8cgc7CbopaIHfzF9dTCQMjZfkAzc6J6uAJ7OICwQx8M9P3+Mu03tYv ZMwfppPoI3ud8735LVI6PM1gQAG0Xzt0AZfFf6iRIopR4Zf+3p3NdJMQysQOWalK 1msZRbDKAxVVR6N/vn0k86zcEQunzU9OhKctmbSuiCKyhQPPU4bWCuT7bdT/N7Wy f8Ia4pXaok0bvfkFTq4t02qnEEkdL+eV1U7gAz1FJ2Fd3dbgXNxsd9S5++MOPQgG HccYjvUgZHquOvGCghoAfCH50UBvp9g1 -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:03 2025 by rpki-client