$ rpki-client -vvf rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft File: 8n_4duRl5zyaUv04SNvXZb-yNdQ.mft (raw, json) Hash identifier: gokyhBYpqk+Yrwbl3Iyxa5w/SkPcFHr2Aj4WFyr58RA= Subject key identifier: 07:DD:97:AC:A1:7B:07:5B:A7:7B:2F:FB:3A:FB:E2:93:FA:D6:68:85 Authority key identifier: F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 Certificate issuer: /CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Certificate serial: 0D60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft Manifest number: 0D52 Signing time: Sun 08 Jun 2025 17:50:13 +0000 Manifest this update: Sun 08 Jun 2025 17:50:13 +0000 Manifest next update: Sun 15 Jun 2025 17:50:13 +0000 Files and hashes: 1: 8n_4duRl5zyaUv04SNvXZb-yNdQ.crl (hash: iTmDoXO8Q0IDmH1gHglO9w0Va4tEZhuUkbQVmuqAbsk=) 2: 3833FD20D09711E987F73A60C4F9AE02.roa (hash: IUQ+m8jWqnf3vf6hcCuC0VogjthEOWb1ceqBAZq2VPM=) 3: 8A00E9284FB111EDBE702516C4F9AE02.roa (hash: s8FViwNwbQunitwqHzsjUNkNGV0Mlz+MOgwlD5JB+Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 17:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3424 (0xd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175FF, serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Validity Not Before: Jun 8 17:50:13 2025 GMT Not After : Jun 15 17:50:13 2025 GMT Subject: CN=6845cd55-4f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:67:8f:67:ca:27:f6:db:6f:b6:a6:e6:d5: 0d:5f:5a:92:69:2e:82:cb:60:9c:28:3e:8d:f7:1c: a0:c2:60:f8:16:57:e3:44:22:a0:98:ed:77:11:44: f3:21:77:f9:d3:ee:b4:95:65:2c:9d:47:e8:4a:f1: ca:62:27:cd:00:e6:c9:38:4c:7e:87:d1:ee:b8:c0: 41:e6:56:49:4b:13:51:9f:38:97:e7:4c:f7:ed:04: 85:7a:c7:a6:51:86:38:5e:00:c7:63:b6:f4:36:f4: d8:cf:45:c7:f9:f8:ee:d4:ee:b1:6f:37:a0:36:7b: e4:14:59:60:ad:5e:6b:ee:c6:6b:46:03:d6:68:64: fe:7c:2a:43:9b:47:2d:28:d0:2d:fd:6d:5a:e7:21: 84:bb:37:0c:8e:6b:ed:fe:d6:e2:24:cf:c5:57:db: 5b:8a:e8:ab:37:6a:64:07:6d:aa:1a:82:f1:c7:4c: a0:d3:fc:c8:76:c0:f9:e6:d4:79:06:06:8d:ff:08: d5:de:35:88:0d:ad:de:1a:b4:2f:53:aa:fa:6a:9d: bb:d6:6b:19:2a:6e:41:c6:21:45:19:79:ec:09:b3: 55:59:d3:3a:ee:e5:ab:e3:ed:a2:2e:3a:37:fe:e5: 03:6b:30:f9:be:46:5c:70:5b:18:d2:a0:24:20:39: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DD:97:AC:A1:7B:07:5B:A7:7B:2F:FB:3A:FB:E2:93:FA:D6:68:85 X509v3 Authority Key Identifier: keyid:F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:c6:ed:b7:00:5f:55:7f:cf:63:ad:02:be:bf:bb:6f:43:b0: ff:b1:5e:48:93:61:e0:94:06:93:3b:ef:9d:e0:07:cc:37:15: 97:cc:ff:a4:fa:b8:9a:1f:3e:71:dd:f7:6c:44:2b:21:5c:68: b5:65:e5:79:c6:fa:63:6a:4f:20:f8:64:6c:8e:43:5d:13:2d: 13:2a:7d:31:4a:e0:ab:b7:1f:11:6c:a6:25:5d:8e:5c:53:20: 8d:de:fa:0d:30:fb:cc:02:24:11:3f:17:ce:83:87:2a:33:3c: 9b:6a:28:8a:e0:05:5c:6d:87:5e:a4:5c:25:8a:6a:2b:ce:87: 71:c9:cd:c9:32:96:52:05:74:53:38:26:a0:df:b5:5a:98:69: a5:9f:0b:1c:7a:6f:c5:a0:3e:c4:ae:6d:a3:f2:27:a1:72:ad: a3:19:d1:a3:ab:42:b6:a2:e6:ec:bf:81:e8:ea:80:82:d6:40: cd:7b:65:bc:30:cb:41:7f:c6:9c:1b:03:23:9d:97:19:47:82: 58:47:15:cc:46:a9:20:ba:1d:29:69:61:31:ef:3a:e0:2a:05: 8f:7e:df:c7:dc:ad:96:f1:64:a4:a3:5d:c4:67:6f:d0:cc:37: 64:63:7f:ad:1f:e3:8b:37:b7:86:c7:16:cc:20:6c:f3:a0:48: b3:25:aa:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RkYxMTAvBgNVBAUTKEYyN0ZGODc2RTQ2NUU3M0M5QTUyRkQzODQ4REJENzY1 QkZCMjM1RDQwHhcNMjUwNjA4MTc1MDEzWhcNMjUwNjE1MTc1MDEzWjAYMRYwFAYD VQQDEw02ODQ1Y2Q1NS00ZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ddnj2fKJ/bbb7am5tUNX1qSaS6Cy2CcKD6N9xygwmD4FlfjRCKgmO13EUTz IXf50+60lWUsnUfoSvHKYifNAObJOEx+h9HuuMBB5lZJSxNRnziX50z37QSFesem UYY4XgDHY7b0NvTYz0XH+fju1O6xbzegNnvkFFlgrV5r7sZrRgPWaGT+fCpDm0ct KNAt/W1a5yGEuzcMjmvt/tbiJM/FV9tbiuirN2pkB22qGoLxx0yg0/zIdsD55tR5 BgaN/wjV3jWIDa3eGrQvU6r6ap271msZKm5BxiFFGXnsCbNVWdM67uWr4+2iLjo3 /uUDazD5vkZccFsY0qAkIDl0mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfdl6yh ewdbp3sv+zr74pP61miFMB8GA1UdIwQYMBaAFPJ/+HbkZec8mlL9OEjb12W/sjXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGRi9FMTc2RDY3QUQw OTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6eWFVdjA0U052WFpiLXlO ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuXzRkdVJsNXp5YVV2MDRTTnZYWmIteU5kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVGRi9FMTc2RDY3QUQwOTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6 eWFVdjA0U052WFpiLXlOZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3xu23AF9Vf89jrQK+v7tvQ7D/sV5Ik2HglAaTO++d4AfMNxWXzP+k +riaHz5x3fdsRCshXGi1ZeV5xvpjak8g+GRsjkNdEy0TKn0xSuCrtx8RbKYlXY5c UyCN3voNMPvMAiQRPxfOg4cqMzybaiiK4AVcbYdepFwlimorzodxyc3JMpZSBXRT OCag37VamGmlnwscem/FoD7Erm2j8iehcq2jGdGjq0K2oubsv4Ho6oCC1kDNe2W8 MMtBf8acGwMjnZcZR4JYRxXMRqkguh0paWEx7zrgKgWPft/H3K2W8WSko13EZ2/Q zDdkY3+tH+OLN7eGxxbMIGzzoEizJaoz -----END CERTIFICATE-----Generated at Mon Jun 9 16:51:18 2025 by rpki-client