$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json) Hash identifier: thicJO7m9LOWFVHm313E2SaYnURmeA62lPLPpzcKOqI= Subject key identifier: F3:76:5F:EB:C2:20:80:1B:AB:A0:E7:D4:BC:50:E2:13:9D:FF:58:2F Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Certificate serial: 0C45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft Manifest number: 0C3B Signing time: Sun 20 Jul 2025 18:41:14 +0000 Manifest this update: Sun 20 Jul 2025 18:41:14 +0000 Manifest next update: Sun 27 Jul 2025 18:41:14 +0000 Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: dY9mgJK5j4AUOuSTPDHFEWpAikoJw0jhbFDhx43SCBU=) 2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: pTtLtXiP6+lMZs1IbS5QyauPkH+CLmMvProexjSKJSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Validity Not Before: Jul 20 18:41:14 2025 GMT Not After : Jul 27 18:41:14 2025 GMT Subject: CN=687d384a-0c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:9d:1c:0a:f7:50:51:0f:51:5e:50:c7:79: fa:ad:a4:d2:95:a7:6c:8d:4a:11:f9:1e:fe:b1:e1: 09:ff:53:23:fa:f7:a5:1d:c3:e4:e0:51:29:38:1d: d8:18:9a:4c:11:4f:cb:33:3c:42:62:43:ba:20:20: 9f:9b:f6:2a:3c:ca:5e:ab:53:12:a2:ff:6a:43:3f: 98:56:5f:65:4b:a9:7d:ec:b8:dd:7a:11:2f:21:30: 6f:be:d4:a5:cc:4f:5f:6a:04:f6:be:1e:26:4d:1d: de:f2:67:5b:dc:e6:b5:7d:10:3c:a1:49:9e:df:e2: 1f:c2:8d:6f:20:a3:21:19:e2:f1:8b:8e:0d:00:c8: 7e:88:0d:1f:00:d5:45:0c:02:fc:3c:cb:f8:11:3c: 99:d4:e8:73:0c:d3:c5:41:a4:c3:9a:f6:83:a2:78: 52:39:4e:ac:56:41:2f:79:af:4a:90:a6:19:62:a1: 43:c3:df:0c:c6:84:0e:30:be:13:d5:b1:3d:79:cd: 1b:28:b1:46:ff:46:f9:74:cc:b4:a9:c8:95:c5:fe: 18:63:31:c6:da:c2:b1:ff:eb:cf:58:32:ab:80:87: d7:d2:55:5f:0c:59:b0:37:a2:c3:94:4a:51:40:7d: 99:9a:43:29:ed:32:b6:fd:c2:c3:54:58:66:f0:7b: 74:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:76:5F:EB:C2:20:80:1B:AB:A0:E7:D4:BC:50:E2:13:9D:FF:58:2F X509v3 Authority Key Identifier: keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2a:06:84:8f:aa:fc:5a:0b:69:96:b3:e5:66:8d:31:fa:5d: 76:75:9b:79:f0:a3:65:27:d0:48:54:51:b4:fa:fb:7b:99:78: 89:44:02:0c:6d:9e:91:90:f7:6a:71:67:0e:17:81:5e:12:46: da:27:b0:d0:04:82:d8:0b:f8:e3:0f:f9:1b:55:57:13:70:b4: 81:8e:75:e3:6b:0e:2d:49:65:f4:31:6d:9a:49:02:a2:27:17: 1b:ea:d2:bd:3a:2f:60:9e:31:ee:82:42:a3:79:58:12:81:0e: cb:30:b4:ca:9b:75:d4:ee:68:7e:fd:81:d6:5e:16:2d:e6:e5: 62:ac:d4:1b:f0:8f:40:ba:7d:35:41:97:66:5e:23:7e:b1:fb: 00:45:27:8d:25:9e:e1:76:79:07:24:fd:04:4e:73:b4:a9:bb: c8:b6:5e:51:73:32:56:51:98:12:59:25:51:b0:bc:53:ea:12: 0a:e4:29:3a:5d:e8:58:e9:34:07:6a:47:98:3e:f6:75:f7:a9: 4e:a8:be:71:f5:75:3b:48:af:9b:d5:fb:29:ea:2d:ca:e2:d6: a6:74:de:6d:80:1f:5f:20:ec:e7:2c:e5:d6:e7:30:a7:81:e2: 95:04:9a:d8:61:61:4a:68:06:1c:e8:41:d8:e9:8e:21:50:b9: 6d:a4:a6:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkUxMTAvBgNVBAUTKEE3NDYwNUNCOUQ1MDcxQ0ExNzI5RDkwODc4MzQ0MDdG MTRFQTg1NzAwHhcNMjUwNzIwMTg0MTE0WhcNMjUwNzI3MTg0MTE0WjAYMRYwFAYD VQQDEw02ODdkMzg0YS0wYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7GdHAr3UFEPUV5Qx3n6raTSladsjUoR+R7+seEJ/1Mj+velHcPk4FEpOB3Y GJpMEU/LMzxCYkO6ICCfm/YqPMpeq1MSov9qQz+YVl9lS6l97LjdehEvITBvvtSl zE9fagT2vh4mTR3e8mdb3Oa1fRA8oUme3+Ifwo1vIKMhGeLxi44NAMh+iA0fANVF DAL8PMv4ETyZ1OhzDNPFQaTDmvaDonhSOU6sVkEvea9KkKYZYqFDw98MxoQOML4T 1bE9ec0bKLFG/0b5dMy0qciVxf4YYzHG2sKx/+vPWDKrgIfX0lVfDFmwN6LDlEpR QH2ZmkMp7TK2/cLDVFhm8Ht0UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPN2X+vC IIAbq6Dn1LxQ4hOd/1gvMB8GA1UdIwQYMBaAFKdGBcudUHHKFynZCHg0QH8U6oVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCRS9BM0Y1MDlGMjBD NEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNjb1hLZGtJZURSQWZ4VHFo WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwWUZ5NTFRY2NvWEtka0llRFJBZnhUcWhYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCRS9BM0Y1MDlGMjBDNEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNj b1hLZGtJZURSQWZ4VHFoWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgKgaEj6r8WgtplrPlZo0x+l12dZt58KNlJ9BIVFG0+vt7mXiJRAIM bZ6RkPdqcWcOF4FeEkbaJ7DQBILYC/jjD/kbVVcTcLSBjnXjaw4tSWX0MW2aSQKi Jxcb6tK9Oi9gnjHugkKjeVgSgQ7LMLTKm3XU7mh+/YHWXhYt5uVirNQb8I9Aun01 QZdmXiN+sfsARSeNJZ7hdnkHJP0ETnO0qbvItl5RczJWUZgSWSVRsLxT6hIK5Ck6 XehY6TQHakeYPvZ196lOqL5x9XU7SK+b1fsp6i3K4tamdN5tgB9fIOznLOXW5zCn geKVBJrYYWFKaAYc6EHY6Y4hULltpKao -----END CERTIFICATE-----Generated at Mon Jul 21 07:14:07 2025 by rpki-client