$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft File: rbkheCH_vuCW4c7EcJijFFokbqA.mft (raw, json) Hash identifier: eEW3iZOG6EGBL9Ykn3oLIz4/jt/wXZs4ifY3uc3foD0= Subject key identifier: 54:97:06:EE:4F:F8:D7:DA:63:2F:43:27:FA:2E:FE:20:53:36:39:F4 Authority key identifier: AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 Certificate issuer: /CN=A91F6E63/serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Certificate serial: 058B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft Manifest number: 0584 Signing time: Fri 18 Jul 2025 23:37:14 +0000 Manifest this update: Fri 18 Jul 2025 23:37:13 +0000 Manifest next update: Fri 25 Jul 2025 23:37:13 +0000 Files and hashes: 1: rbkheCH_vuCW4c7EcJijFFokbqA.crl (hash: ZFmmKsouawWwZHzuc9sqHaATt+o4cIow5GyJhfVzvGA=) 2: 0C0402DEE5CD11EBADAD0E66C4F9AE02.roa (hash: trH5jaHCGYgIOAiGZuSF42NeMtUvi3wioLPll8n3v2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E63, serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Validity Not Before: Jul 18 23:37:13 2025 GMT Not After : Jul 25 23:37:13 2025 GMT Subject: CN=687adaaa-8992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c6:45:12:e7:6f:39:df:65:e1:b7:4d:69:02: 1f:88:49:71:d3:58:03:5e:45:b3:c7:9f:9f:f5:16: c5:fb:05:2f:61:84:df:c7:78:be:d7:57:50:08:bc: c5:6b:df:18:2d:5f:78:cb:7e:55:a8:3e:9e:fe:af: 26:84:ef:5a:50:82:47:b0:30:8b:c0:7e:fe:fa:53: 50:a0:c5:c0:38:e4:17:1e:54:05:62:69:06:cb:95: 2a:5d:ad:4a:f0:e3:f2:03:9a:4b:dd:ec:44:13:e8: 51:fd:5b:10:33:6d:83:6d:42:b8:eb:8c:0b:9a:f7: d9:7a:6d:3a:d4:44:93:4f:82:72:6d:42:84:07:77: 76:cd:9e:f5:ca:97:69:ae:a2:53:5e:a9:93:c9:77: db:c4:a6:60:4d:ec:64:cc:2c:94:2d:9b:19:88:21: 58:cf:68:a3:8f:b1:56:a7:43:64:4a:35:3b:9c:b6: f4:e1:17:7c:05:8e:f0:84:d8:72:0e:01:fd:64:d4: ee:98:a8:6c:71:53:67:12:87:7d:73:aa:a5:5b:68: b5:44:fb:9e:2c:a6:07:53:42:50:46:b1:83:ed:de: 45:c2:fa:01:7b:74:f3:8c:77:4f:cf:9e:7c:f2:a0: 48:30:52:c2:10:49:12:6a:16:10:80:93:31:38:e8: f3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:97:06:EE:4F:F8:D7:DA:63:2F:43:27:FA:2E:FE:20:53:36:39:F4 X509v3 Authority Key Identifier: keyid:AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:19:f1:66:f1:a2:0d:95:ac:5c:9b:11:da:26:50:28:73:02: 29:57:3e:6a:53:f8:ae:b5:99:e7:24:8d:0c:57:bf:53:b3:b5: b4:c1:81:4b:bd:e8:55:e5:0a:bb:45:d6:da:c5:94:68:fd:0c: d0:a7:18:86:bb:bd:a9:f6:c1:42:f5:df:3e:d0:81:d0:7e:2e: b9:81:a7:ee:8b:51:f0:79:90:df:84:87:b7:a1:e6:9f:2a:fd: 03:d4:7c:62:e4:f8:34:2e:7d:6e:37:d2:16:06:a8:b7:c4:68: 5a:46:21:50:cd:d1:70:81:b5:32:49:42:5d:33:64:db:98:fb: 0e:47:5b:7f:b1:69:5c:43:aa:9a:69:e8:cb:5d:7c:3e:f9:c8: 17:5b:e2:e7:cc:d6:3a:88:29:c7:91:51:45:80:42:01:e9:50: 66:04:ec:c2:97:4e:ca:65:d0:9a:24:47:1e:90:8e:8a:17:3a: 73:95:7f:14:4a:c0:17:10:50:40:bc:b1:60:1f:f1:8b:3e:f8: 09:dd:a2:3e:76:02:38:f8:41:c3:20:2e:04:db:9c:ee:c1:e8: e4:3b:08:e9:1e:e0:73:92:e8:25:57:3b:87:8a:22:62:09:f5: 5c:8c:72:cc:47:ce:4a:c8:a8:c5:74:c9:19:46:a5:48:5f:9c: e2:aa:35:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjMxMTAvBgNVBAUTKEFEQjkyMTc4MjFGRkJFRTA5NkUxQ0VDNDcwOThBMzE0 NUEyNDZFQTAwHhcNMjUwNzE4MjMzNzEzWhcNMjUwNzI1MjMzNzEzWjAYMRYwFAYD VQQDEw02ODdhZGFhYS04OTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8MZFEudvOd9l4bdNaQIfiElx01gDXkWzx5+f9RbF+wUvYYTfx3i+11dQCLzF a98YLV94y35VqD6e/q8mhO9aUIJHsDCLwH7++lNQoMXAOOQXHlQFYmkGy5UqXa1K 8OPyA5pL3exEE+hR/VsQM22DbUK464wLmvfZem061ESTT4JybUKEB3d2zZ71ypdp rqJTXqmTyXfbxKZgTexkzCyULZsZiCFYz2ijj7FWp0NkSjU7nLb04Rd8BY7whNhy DgH9ZNTumKhscVNnEod9c6qlW2i1RPueLKYHU0JQRrGD7d5FwvoBe3TzjHdPz558 8qBIMFLCEEkSahYQgJMxOOjzgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSXBu5P +NfaYy9DJ/ou/iBTNjn0MB8GA1UdIwQYMBaAFK25IXgh/77gluHOxHCYoxRaJG6g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2My9ENjlDRDkyOEU0 QTQxMUVCOEJDNUM1NDZDNEY5QUUwMi9yYmtoZUNIX3Z1Q1c0YzdFY0ppakZGb2ti cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jia2hlQ0hfdnVDVzRjN0VjSmlqRkZva2JxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2My9ENjlDRDkyOEU0QTQxMUVCOEJDNUM1NDZDNEY5QUUwMi9yYmtoZUNIX3Z1 Q1c0YzdFY0ppakZGb2ticUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQGfFm8aINlaxcmxHaJlAocwIpVz5qU/iutZnnJI0MV79Ts7W0wYFL vehV5Qq7RdbaxZRo/QzQpxiGu72p9sFC9d8+0IHQfi65gafui1HweZDfhIe3oeaf Kv0D1Hxi5Pg0Ln1uN9IWBqi3xGhaRiFQzdFwgbUySUJdM2TbmPsOR1t/sWlcQ6qa aejLXXw++cgXW+LnzNY6iCnHkVFFgEIB6VBmBOzCl07KZdCaJEcekI6KFzpzlX8U SsAXEFBAvLFgH/GLPvgJ3aI+dgI4+EHDIC4E25zuwejkOwjpHuBzkuglVzuHiiJi CfVcjHLMR85KyKjFdMkZRqVIX5ziqjUt -----END CERTIFICATE-----Generated at Sun Jul 20 10:57:11 2025 by rpki-client