$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: UWJj4OAl04WeFfVJmF/D8f/RmoH1gGN/A/N47DfW/84= Subject key identifier: ED:91:BF:F2:35:1F:57:69:25:04:4E:64:A9:F6:57:D9:43:8C:00:A2 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 0322 Signing time: Sun 15 Jun 2025 00:54:31 +0000 Manifest this update: Sun 15 Jun 2025 00:54:30 +0000 Manifest next update: Sun 22 Jun 2025 00:54:30 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: rNd/3NIJuxEbkpHS+D9VLlNiuEkEhDoa6s8F1L8mQD4=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: +2b/qGdWsAWR/BKJskTGfjOIk8WF3Jjfuxvh9LPPuaA=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: QkUOxUdOqeDJq40oU7W9ZvA1XabLukGzl2cHkw2yMIw=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 6J35YVUmzZ1s4Ice2keaYAnPdVe/zMmpQD23cIxvFqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Jun 15 00:54:30 2025 GMT Not After : Jun 22 00:54:30 2025 GMT Subject: CN=684e19c6-84e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:23:13:1b:11:f9:d4:61:e4:8c:16:c1:25: b6:3e:01:f9:3a:4d:13:db:d6:88:da:93:e4:ef:54: 79:7f:9d:f4:93:2e:65:20:78:15:84:a8:a7:09:fa: 7d:7c:64:6a:b6:6c:6d:0f:b5:44:1d:b2:5f:6f:99: 0b:56:e0:0e:de:2b:87:dd:50:c2:c4:b3:02:e1:66: 8e:9e:99:d9:5f:cc:f2:4f:f6:89:7c:e1:8b:b5:e3: 96:e2:d9:12:a1:48:7c:14:d5:a0:e3:be:9b:ec:ba: 05:e9:d2:c1:54:c5:6e:03:95:92:41:a3:3f:bf:d9: b6:7f:08:bb:b3:30:2c:f2:c9:c2:23:f1:1b:d6:3e: d1:30:24:c6:e1:b4:b9:2b:34:16:18:b7:d9:27:10: f3:6b:a6:71:d8:2b:4e:7d:8d:8d:f1:0e:e6:f0:0d: 24:6f:b1:de:06:d4:91:55:51:0c:78:c3:b7:12:09: b1:17:ce:2e:d8:9f:b3:2d:ce:1b:fd:a6:15:2e:ec: f0:6d:de:1f:85:8f:02:4c:4b:ad:a8:f0:a1:8d:64: fb:c9:c4:61:58:d4:c3:69:fe:fb:80:38:89:e3:ef: 28:71:b1:d5:0f:cc:91:6a:34:08:33:56:b9:ac:76: c8:15:ab:26:1d:a3:d5:0c:c4:8c:47:dd:73:bf:57: 7e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:91:BF:F2:35:1F:57:69:25:04:4E:64:A9:F6:57:D9:43:8C:00:A2 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:74:4e:c5:12:39:61:fe:23:e2:60:16:41:ca:71:cb:a6:9d: 47:7e:19:39:e3:23:f1:73:0d:dc:a4:18:d9:50:5d:bb:33:14: df:33:fe:4c:08:9e:6f:b5:f5:8b:31:fc:ab:60:4f:ab:80:0a: 64:59:58:25:8d:ed:51:65:8b:ae:48:de:e3:3c:49:15:b0:12: 89:c9:ce:92:d4:df:95:d9:76:ad:60:26:32:b4:d6:32:05:3c: f7:f5:d9:ae:f9:42:19:c7:c0:6b:8d:0e:0a:31:7a:2f:f7:39: 0d:7a:48:7c:30:f9:93:5e:22:db:98:60:22:a6:82:74:06:01: 5f:63:37:12:2b:5d:e6:25:19:fe:a4:f5:c3:bc:85:4f:b3:ba: 50:1b:40:6e:60:e1:16:80:59:33:b7:b4:b8:93:22:e6:49:67: 2c:da:f5:41:f5:a3:72:65:09:a5:00:10:a8:19:cd:18:b7:ba: a5:27:cb:77:03:cf:5d:62:85:9a:74:d9:9e:cc:f3:f9:a3:d4: be:5a:64:54:37:14:7e:6d:02:06:b0:4b:66:02:6c:91:4b:d8: dc:50:e2:3a:16:0f:e1:91:30:a2:8e:7c:26:39:b4:20:55:2b: f5:d0:6c:82:50:9e:6c:61:ab:c2:54:13:4f:9a:fd:5e:29:dd: 4d:57:2f:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjUwNjE1MDA1NDMwWhcNMjUwNjIyMDA1NDMwWjAYMRYwFAYD VQQDEw02ODRlMTljNi04NGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/gjExsR+dRh5IwWwSW2PgH5Ok0T29aI2pPk71R5f530ky5lIHgVhKinCfp9 fGRqtmxtD7VEHbJfb5kLVuAO3iuH3VDCxLMC4WaOnpnZX8zyT/aJfOGLteOW4tkS oUh8FNWg476b7LoF6dLBVMVuA5WSQaM/v9m2fwi7szAs8snCI/Eb1j7RMCTG4bS5 KzQWGLfZJxDza6Zx2CtOfY2N8Q7m8A0kb7HeBtSRVVEMeMO3EgmxF84u2J+zLc4b /aYVLuzwbd4fhY8CTEutqPChjWT7ycRhWNTDaf77gDiJ4+8ocbHVD8yRajQIM1a5 rHbIFasmHaPVDMSMR91zv1d+BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2Rv/I1 H1dpJQROZKn2V9lDjACiMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFdE7FEjlh/iPiYBZBynHLpp1Hfhk54yPxcw3cpBjZUF27MxTfM/5M CJ5vtfWLMfyrYE+rgApkWVglje1RZYuuSN7jPEkVsBKJyc6S1N+V2XatYCYytNYy BTz39dmu+UIZx8BrjQ4KMXov9zkNekh8MPmTXiLbmGAipoJ0BgFfYzcSK13mJRn+ pPXDvIVPs7pQG0BuYOEWgFkzt7S4kyLmSWcs2vVB9aNyZQmlABCoGc0Yt7qlJ8t3 A89dYoWadNmezPP5o9S+WmRUNxR+bQIGsEtmAmyRS9jcUOI6Fg/hkTCijnwmObQg VSv10GyCUJ5sYavCVBNPmv1eKd1NVy+y -----END CERTIFICATE-----Generated at Sun Jun 15 05:50:55 2025 by rpki-client