$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: iCsHxbARvf9MNrd89aNzW4t0DY9X0YEJWPlL38IgjFI= Subject key identifier: 20:7D:4A:4D:54:A3:55:62:CB:F8:4F:44:30:52:02:E6:F7:0F:75:3E Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 015E Signing time: Sun 15 Jun 2025 03:16:43 +0000 Manifest this update: Sun 15 Jun 2025 03:16:43 +0000 Manifest next update: Sun 22 Jun 2025 03:16:43 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: Wrw4eTsvspdn7uaNHC3Z8xuBQaBnebNIuVUkhvpFdJY=) 2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: MRW+pxq2rIQWqz0eewlHDxgHTLGzIYysThVYJrp2BDc=) 3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: Fv5yzaRaYXm7EcaxJ9d0RT5up4myTdlO4UPvIXp3L88=) 4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: mGJXgF/PKI9FEq/cPxsdqAyVl2gi74HVL2n1gwNWhDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Jun 15 03:16:43 2025 GMT Not After : Jun 22 03:16:43 2025 GMT Subject: CN=684e3b1b-9927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:ca:de:cc:59:f7:2d:ce:f3:d6:01:13:c3: 49:6c:cf:63:75:62:4e:3c:7d:20:b0:1c:2d:ce:eb: f6:e7:51:5d:67:37:64:3f:c9:bf:cc:d2:9b:41:93: cf:a1:e0:7c:c4:f7:7f:f3:3d:83:ce:6e:bb:5a:ba: a9:5d:3e:40:7e:2a:64:d8:b1:d9:56:32:4b:20:4b: 04:d7:3b:9b:da:76:dc:fe:29:b1:41:8b:8c:ae:08: c8:bf:11:6f:eb:3b:1e:02:eb:d3:44:08:1f:40:9d: 97:38:6c:04:e2:fb:c8:2c:69:c1:f9:f1:2a:34:3c: 44:e1:63:1c:c2:e0:14:c0:f6:30:db:d7:90:5b:14: 79:50:94:1f:f8:4a:e4:ab:df:e1:9d:a7:23:d2:d2: a3:8e:ad:f1:06:19:8d:4a:16:da:62:e7:b4:f4:9c: 74:55:2c:50:31:d5:d1:22:48:a6:31:b8:92:90:96: 06:b9:69:57:61:7f:59:a4:52:3c:15:f1:e3:84:1d: a9:5b:1f:99:38:87:58:c3:48:3b:55:2d:2e:51:ed: 36:e1:01:5d:4f:da:65:f4:97:bd:13:3f:8b:77:cf: 65:45:97:ac:a5:ca:c4:49:2b:13:84:e0:a4:d4:d2: 70:12:f7:54:1c:6f:52:f2:d4:be:c0:60:85:28:28: 6c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7D:4A:4D:54:A3:55:62:CB:F8:4F:44:30:52:02:E6:F7:0F:75:3E X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:60:5a:b8:39:12:04:ff:88:75:c0:c8:a2:7d:09:4c:df:e5: cf:56:24:70:97:56:88:ff:b5:44:42:76:f7:29:e9:41:ee:9f: e2:bc:11:b1:4e:da:d2:cb:45:aa:aa:d9:16:81:d1:8d:5b:4d: 53:1e:6e:f1:b8:fa:1d:db:03:1a:3e:f1:16:00:30:5c:68:69: fc:47:5a:99:89:dd:c3:d1:39:fc:3d:5c:be:8a:d1:93:21:4d: 16:b2:d7:dc:15:0d:bb:69:3d:25:c7:e2:8e:99:ab:d8:9d:6b: cf:71:e9:26:ee:ed:a0:39:27:bc:06:b2:01:16:d6:6b:14:5d: af:4e:7f:21:55:0c:cc:2c:8f:f2:8a:2d:03:9d:93:41:bb:2d: 73:ce:50:06:2f:90:1b:82:02:e6:15:86:5b:24:93:57:c4:db: d7:af:91:cb:5f:32:67:03:1c:2a:33:1b:82:eb:9b:37:33:d1: f8:f6:7b:e6:41:8d:ba:81:21:02:36:d2:71:1a:e3:f0:a5:38: 5f:d6:ea:d8:c0:85:76:25:cf:8c:00:65:ca:fa:4c:b9:81:98: 09:a0:12:3e:5e:fb:a3:3b:80:d8:25:a1:e4:e8:9a:9c:69:fc: dd:18:c5:63:01:13:d6:20:cb:3a:6f:59:ee:e1:40:91:99:ad: c9:55:95:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjUwNjE1MDMxNjQzWhcNMjUwNjIyMDMxNjQzWjAYMRYwFAYD VQQDEw02ODRlM2IxYi05OTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPPK3sxZ9y3O89YBE8NJbM9jdWJOPH0gsBwtzuv251FdZzdkP8m/zNKbQZPP oeB8xPd/8z2Dzm67WrqpXT5Afipk2LHZVjJLIEsE1zub2nbc/imxQYuMrgjIvxFv 6zseAuvTRAgfQJ2XOGwE4vvILGnB+fEqNDxE4WMcwuAUwPYw29eQWxR5UJQf+Erk q9/hnacj0tKjjq3xBhmNShbaYue09Jx0VSxQMdXRIkimMbiSkJYGuWlXYX9ZpFI8 FfHjhB2pWx+ZOIdYw0g7VS0uUe024QFdT9pl9Je9Ez+Ld89lRZespcrESSsThOCk 1NJwEvdUHG9S8tS+wGCFKChsNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCB9Sk1U o1Viy/hPRDBSAub3D3U+MB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqYFq4ORIE/4h1wMiifQlM3+XPViRwl1aI/7VEQnb3KelB7p/ivBGx TtrSy0WqqtkWgdGNW01THm7xuPod2wMaPvEWADBcaGn8R1qZid3D0Tn8PVy+itGT IU0WstfcFQ27aT0lx+KOmavYnWvPcekm7u2gOSe8BrIBFtZrFF2vTn8hVQzMLI/y ii0DnZNBuy1zzlAGL5AbggLmFYZbJJNXxNvXr5HLXzJnAxwqMxuC65s3M9H49nvm QY26gSECNtJxGuPwpThf1urYwIV2Jc+MAGXK+ky5gZgJoBI+XvujO4DYJaHk6Jqc afzdGMVjARPWIMs6b1nu4UCRma3JVZWl -----END CERTIFICATE-----Generated at Sun Jun 15 09:35:41 2025 by rpki-client