$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft File: bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json) Hash identifier: PeSyVN2ggHQEk44yPpmvwqQOjiUZYhZ59MQrcjg+S20= Subject key identifier: 96:48:05:8A:87:F0:0F:A0:B2:1C:38:1A:FA:AC:54:85:E4:F7:A6:4A Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft Manifest number: 0102 Signing time: Thu 19 Jun 2025 04:29:38 +0000 Manifest this update: Thu 19 Jun 2025 04:29:37 +0000 Manifest next update: Thu 26 Jun 2025 04:29:37 +0000 Files and hashes: 1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: 2lQGrqiXPu5IJ01kuso00VpUXq2nXxAQk36SlWx/1LM=) 2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: pARn59mvC3EFmnc54zsYhH0vh0pFsHJXtSQmvirMetQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Validity Not Before: Jun 19 04:29:37 2025 GMT Not After : Jun 26 04:29:37 2025 GMT Subject: CN=68539231-8a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:59:f9:32:fe:23:c9:ac:08:fc:31:54:ec: 9a:05:17:a6:15:e1:aa:56:49:aa:a4:fe:e6:e4:4f: 29:91:42:a5:95:26:e4:a1:a0:33:6d:fc:02:24:ff: b0:32:e7:7c:c2:fc:e3:7b:8c:d3:af:b5:6f:b3:73: f2:e7:ab:7a:35:d4:91:3b:c6:28:2d:c6:10:e4:fd: 03:c6:ff:65:dc:09:cd:a1:e3:12:e9:f5:fa:22:69: 8a:c0:c8:8e:2a:ff:69:7a:98:ee:38:e2:e8:a6:17: 7f:6a:99:4b:b3:34:f2:81:fa:44:5c:35:0b:50:36: 73:ec:2f:f3:72:f2:39:a9:26:d1:3d:84:6e:20:58: 41:6b:84:32:b8:16:64:95:29:86:83:c7:c4:19:f0: 72:8f:72:6d:3d:c9:b4:d6:99:8b:b8:a4:7b:e6:24: 7e:1c:9d:93:13:11:71:c6:d0:b2:95:c7:7c:87:6b: 3a:6e:3e:99:d0:69:0c:c8:c3:b7:3a:ea:0b:8b:05: 82:3f:42:af:fc:a4:ed:94:09:8a:d3:e7:e5:39:36: 7f:93:53:43:27:f4:92:97:c9:54:cf:0f:4d:6f:f5: df:87:4c:56:19:e4:41:a8:f7:67:76:94:63:7d:b3: e2:bc:d9:e6:5a:a1:f2:1f:af:42:02:03:33:47:8d: e0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:48:05:8A:87:F0:0F:A0:B2:1C:38:1A:FA:AC:54:85:E4:F7:A6:4A X509v3 Authority Key Identifier: keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bd:3a:df:f2:c6:ee:35:3b:e4:80:b9:8a:a2:36:3f:f1:e1: ea:3c:e6:36:11:17:32:0a:35:c0:3d:6e:a0:f3:ee:bc:d7:82: 82:63:e9:17:f6:56:76:c7:79:f9:c5:a0:52:55:37:4f:0a:15: e0:63:f7:4b:92:c8:d9:f8:de:d8:b1:23:6a:70:00:d5:0c:cc: a7:52:26:81:b9:4c:d1:17:03:f7:63:99:ee:17:e4:47:8f:65: a0:9e:99:b1:a0:37:bd:08:eb:e3:24:ff:19:f6:25:66:48:06: b6:fa:52:70:51:8b:b7:8e:73:46:cc:58:ee:ea:ae:c2:25:b6: 60:3b:80:70:f5:f2:fb:ff:53:4e:79:2f:5a:45:9d:04:25:87: 2f:6f:20:65:ef:0a:61:a5:12:dd:56:68:ea:be:c1:75:e6:ce: e9:63:d1:b0:75:51:9f:94:7f:10:c5:31:57:ce:2a:31:e0:cc: 91:3d:2f:40:69:28:8e:46:42:16:de:ef:4c:1f:aa:e5:16:19: db:e7:c4:71:fa:bf:56:83:ff:ca:ce:5c:c9:05:1e:05:c8:d0: c3:3d:51:d1:cc:02:8e:b7:e9:0c:32:1c:bd:b9:fb:0c:f4:e9: 94:c8:89:bf:06:7e:a8:a7:aa:3b:0e:27:e2:ea:13:b2:f0:b4: 78:36:c1:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKDZDODAzMDUyQkY5NkMyQUI0QUJBQTlFRDI2QTNBOUI0 NjM5NjA1QTMwHhcNMjUwNjE5MDQyOTM3WhcNMjUwNjI2MDQyOTM3WjAYMRYwFAYD VQQDEw02ODUzOTIzMS04YTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbNZ+TL+I8msCPwxVOyaBRemFeGqVkmqpP7m5E8pkUKllSbkoaAzbfwCJP+w Mud8wvzje4zTr7Vvs3Py56t6NdSRO8YoLcYQ5P0Dxv9l3AnNoeMS6fX6ImmKwMiO Kv9pepjuOOLophd/aplLszTygfpEXDULUDZz7C/zcvI5qSbRPYRuIFhBa4QyuBZk lSmGg8fEGfByj3JtPcm01pmLuKR75iR+HJ2TExFxxtCylcd8h2s6bj6Z0GkMyMO3 OuoLiwWCP0Kv/KTtlAmK0+flOTZ/k1NDJ/SSl8lUzw9Nb/Xfh0xWGeRBqPdndpRj fbPivNnmWqHyH69CAgMzR43gEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZIBYqH 8A+gshw4GvqsVIXk96ZKMB8GA1UdIwQYMBaAFGyAMFK/lsKrSrqp7SajqbRjlgWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CQ0JBRTBDRUM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dxdEt1cW50SnFPcHRHT1dC YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JJQXdVci1Xd3F0S3VxbnRKcU9wdEdPV0JhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CQ0JBRTBDRUM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dx dEt1cW50SnFPcHRHT1dCYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOvTrf8sbuNTvkgLmKojY/8eHqPOY2ERcyCjXAPW6g8+6814KCY+kX 9lZ2x3n5xaBSVTdPChXgY/dLksjZ+N7YsSNqcADVDMynUiaBuUzRFwP3Y5nuF+RH j2WgnpmxoDe9COvjJP8Z9iVmSAa2+lJwUYu3jnNGzFju6q7CJbZgO4Bw9fL7/1NO eS9aRZ0EJYcvbyBl7wphpRLdVmjqvsF15s7pY9GwdVGflH8QxTFXziox4MyRPS9A aSiORkIW3u9MH6rlFhnb58Rx+r9Wg//KzlzJBR4FyNDDPVHRzAKOt+kMMhy9ufsM 9OmUyIm/Bn6op6o7Difi6hOy8LR4NsG0 -----END CERTIFICATE-----Generated at Thu Jun 19 08:25:43 2025 by rpki-client