$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: YpjOB19lPns09UMai2Gi5kMP2fdkUquJHOlcvFoMcuM= Subject key identifier: 42:A4:24:35:9D:A8:2B:33:49:01:DD:2D:EE:D2:E3:E7:3A:3A:5D:99 Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 0342 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 032D Signing time: Tue 17 Jun 2025 00:44:17 +0000 Manifest this update: Tue 17 Jun 2025 00:44:16 +0000 Manifest next update: Tue 24 Jun 2025 00:44:16 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: DHucbZ0RS15XGo+Ce2d6z5bmUfhWIv/38Iyv/UIN+2M=) 2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: 2IeO54Cp6b06u4xrChfhugqf5OR3NU+qoLsUiOOPr8M=) 3: EA2C5116450411F09738105FC4F9AE02.roa (hash: 0H8uTaAET7rYfmwW59sMExSp1d2DpP8EDTDlEPR8DwE=) 4: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: f/9vGnn2JXmJ21/jrMMvJ7DpIN0BPneJ38/5WfHmbrI=) 5: EB1C709C450411F09738105FC4F9AE02.roa (hash: 5Akf+XvDFAFRcgqDmZfvL05MyX7m6MLBdyxxtSO7LLs=) 6: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: i3ADmyA4WgLpGdAmHRBQc8Kk5ppJaulRCigFr15Uv0k=) 7: EAAF7884450411F09738105FC4F9AE02.roa (hash: uXBgt0+68c6MR0Uj3/R5shZKZVN6Oztge9QmtwR6l0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 834 (0x342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: Jun 17 00:44:16 2025 GMT Not After : Jun 24 00:44:16 2025 GMT Subject: CN=6850ba60-666f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0b:fa:56:43:1f:05:c4:1f:0f:6b:58:0e:cc: 7a:7f:13:d0:bf:ae:42:8c:59:d0:97:9c:83:93:4f: 54:ad:02:2b:a5:69:fa:ec:8f:02:2f:10:6a:52:0f: dd:17:1e:92:b9:d0:80:91:59:8e:38:0f:ee:63:85: a0:9e:8a:d7:8d:8f:0d:68:07:07:05:3a:97:65:5f: ab:66:e0:ff:7f:dc:37:68:78:f2:a1:19:6f:a5:d6: 47:00:e2:df:2c:4b:55:22:3f:6f:5f:61:8e:b6:7a: 6e:ee:e6:7c:2b:0b:ae:a9:aa:10:06:b0:d3:ba:d8: de:9d:3a:1b:5d:4a:87:20:fc:e1:1d:aa:15:20:b4: 5b:b9:f6:6b:52:8c:28:3b:8c:de:f1:45:c9:14:47: f1:91:48:26:d8:1e:17:c8:fd:5f:3e:f9:b3:ae:0c: 14:c9:a5:7f:73:63:ed:60:36:64:9e:b9:53:0b:48: c0:fa:c5:1d:56:a1:ac:d0:7c:ae:e0:01:5d:ba:d6: 37:38:e1:dd:0e:49:b7:ed:94:b5:fe:12:f6:4e:3d: c1:c3:31:77:b9:bb:4c:3e:1d:3a:1a:a0:30:25:d1: 84:38:66:ea:44:54:8f:b7:34:4e:20:24:49:f7:d3: ca:40:f8:9a:ec:04:fa:fd:4a:e9:d3:1b:93:53:fb: af:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A4:24:35:9D:A8:2B:33:49:01:DD:2D:EE:D2:E3:E7:3A:3A:5D:99 X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:2f:4a:c8:28:1d:8d:63:f5:04:65:31:d5:6e:18:f2:47:32: b9:76:53:b0:6f:7d:54:ca:0c:ee:b5:1f:af:a2:93:82:de:f7: 1e:38:59:ac:2f:d4:26:71:7c:d2:b8:4f:71:66:b4:d8:7b:77: 86:e2:f2:14:08:69:45:d1:c9:29:a5:21:97:c6:45:bd:b4:52: 37:89:15:31:fd:ae:25:6d:44:67:d3:18:cc:95:4e:a4:0e:4d: d9:56:44:b4:25:9e:5b:bc:4a:bb:ac:f1:52:33:44:e8:ba:55: 30:5d:c0:e1:b2:06:38:ee:07:4f:c8:4c:d9:12:d1:3f:45:80: 26:94:b1:e0:e1:e7:65:7c:17:3a:58:c8:49:a4:88:a6:88:72: 25:20:90:63:cd:fc:5e:5f:0a:04:2a:85:d5:8f:dc:dc:e1:19: 36:87:4f:9a:f5:c6:06:ec:ee:48:f8:d9:fa:f5:4a:27:5c:cc: af:3d:7d:f4:39:77:1d:bb:1d:32:5f:ff:07:70:66:2d:ed:9c: d3:b8:72:e2:ed:7f:ac:64:2e:a5:85:56:a8:f0:8a:97:92:c1: a5:5c:c8:5c:98:15:9c:e8:90:fd:a5:8d:0b:cb:38:21:35:48: 26:06:00:85:e3:65:22:1a:f4:f3:04:45:d6:d0:85:30:f0:d3: 83:ea:f7:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjUwNjE3MDA0NDE2WhcNMjUwNjI0MDA0NDE2WjAYMRYwFAYD VQQDEw02ODUwYmE2MC02NjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgv6VkMfBcQfD2tYDsx6fxPQv65CjFnQl5yDk09UrQIrpWn67I8CLxBqUg/d Fx6SudCAkVmOOA/uY4WgnorXjY8NaAcHBTqXZV+rZuD/f9w3aHjyoRlvpdZHAOLf LEtVIj9vX2GOtnpu7uZ8KwuuqaoQBrDTutjenTobXUqHIPzhHaoVILRbufZrUowo O4ze8UXJFEfxkUgm2B4XyP1fPvmzrgwUyaV/c2PtYDZknrlTC0jA+sUdVqGs0Hyu 4AFdutY3OOHdDkm37ZS1/hL2Tj3BwzF3ubtMPh06GqAwJdGEOGbqRFSPtzROICRJ 99PKQPia7AT6/Urp0xuTU/uvqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKkJDWd qCszSQHdLe7S4+c6Ol2ZMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSL0rIKB2NY/UEZTHVbhjyRzK5dlOwb31UygzutR+vopOC3vceOFms L9QmcXzSuE9xZrTYe3eG4vIUCGlF0ckppSGXxkW9tFI3iRUx/a4lbURn0xjMlU6k Dk3ZVkS0JZ5bvEq7rPFSM0ToulUwXcDhsgY47gdPyEzZEtE/RYAmlLHg4edlfBc6 WMhJpIimiHIlIJBjzfxeXwoEKoXVj9zc4Rk2h0+a9cYG7O5I+Nn69UonXMyvPX30 OXcdux0yX/8HcGYt7ZzTuHLi7X+sZC6lhVao8IqXksGlXMhcmBWc6JD9pY0Lyzgh NUgmBgCF42UiGvTzBEXW0IUw8NOD6veT -----END CERTIFICATE-----Generated at Wed Jun 18 04:54:02 2025 by rpki-client