$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json) Hash identifier: Mn0Ji0/mmTOfhPDVr45NbhARI1xZ6x19ez2g9ZnDNjk= Subject key identifier: 82:5D:7C:A2:8F:FF:E8:D4:A3:C7:B6:63:B9:44:7A:E6:80:D6:00:7B Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft Manifest number: 06A2 Signing time: Mon 02 Jun 2025 23:58:33 +0000 Manifest this update: Mon 02 Jun 2025 23:58:32 +0000 Manifest next update: Mon 09 Jun 2025 23:58:32 +0000 Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: 5ki6DY80Gs3t8dHtGjhXgtafwW8wXil1D/EIw2Pr268=) 2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: i3AC8vPuhzwp18lBIjdc3QexvCV8/oJkEtYwjXr5lB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Validity Not Before: Jun 2 23:58:32 2025 GMT Not After : Jun 9 23:58:32 2025 GMT Subject: CN=683e3aa9-3430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5b:cb:09:26:d3:89:52:e5:2b:84:fa:e5:8b: a4:6b:7c:3e:4c:6f:86:2f:1a:0c:6f:07:47:60:e2: f0:5a:5e:8f:dd:ca:ed:73:94:d6:13:d6:f8:20:9d: ad:70:a0:42:08:e1:83:ac:d5:1c:24:14:0e:b4:d2: c2:14:19:65:41:b8:b7:9a:f0:62:1e:ad:17:7b:65: e8:73:0b:83:93:2f:e5:28:eb:96:a9:fb:88:ff:94: db:c3:89:d3:09:03:8d:54:f1:dd:a9:fe:85:a7:36: ac:0f:d6:2a:de:42:f7:2b:c8:b1:e4:05:c9:c7:28: 89:e3:e2:b8:5f:6b:95:31:5c:4b:61:53:9e:86:7d: aa:34:e5:8e:17:db:58:6b:1c:21:29:f9:40:ee:99: a8:83:8a:7a:25:5e:7f:90:5a:70:df:ee:a6:8f:86: be:c3:d9:91:54:87:48:bf:e9:19:31:82:f4:7b:14: 39:b2:94:e6:2c:3b:b7:90:b6:97:30:1b:dc:86:57: 43:1a:00:1e:6d:d4:4b:47:e0:e8:d0:fb:60:c6:13: 28:cf:70:ea:eb:7d:33:3e:3b:b0:de:bd:bd:05:3a: ef:0b:d0:45:93:bf:8b:d2:da:23:a5:62:3b:8c:6c: e2:c6:e9:d9:9a:a1:a7:7e:00:70:d0:0f:f7:aa:ee: 63:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5D:7C:A2:8F:FF:E8:D4:A3:C7:B6:63:B9:44:7A:E6:80:D6:00:7B X509v3 Authority Key Identifier: keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:38:89:88:e6:52:65:9a:3b:91:64:d4:74:a4:4c:39:2b:33: b6:1d:68:c9:9e:fd:f4:6e:b1:fa:33:3b:4c:0a:f3:1b:4a:82: 17:01:d5:2c:fb:e1:a6:10:97:ab:80:7c:c5:40:08:79:fe:2c: 01:47:ca:09:e4:10:9e:5d:44:5a:14:39:d8:b9:64:99:bf:96: 2f:10:e1:7b:9e:ab:a0:83:21:f0:a7:5f:9c:40:03:5a:f3:23: 7c:9e:73:b0:02:81:e8:5b:67:54:0d:cd:c5:1f:95:4c:c8:ee: c7:18:fd:75:31:38:06:1f:84:99:07:d2:f3:6a:3a:4b:76:f3: 23:92:38:72:19:a9:5e:f8:01:7a:2e:20:f5:7b:60:ab:d9:1a: ed:ec:42:60:39:98:89:8c:83:a6:a7:1a:ff:6e:32:52:b9:74: ac:26:cc:94:22:8b:6a:7f:c3:3d:08:2d:cd:0a:41:e5:18:0a: 3a:85:0e:e8:f2:0e:d3:6f:02:5f:f8:3b:e5:9f:44:26:ce:64: d3:f9:90:7b:1f:49:d3:22:63:77:91:9f:c6:4f:44:54:43:f3: ff:ae:dc:97:cd:13:07:6f:3a:fb:14:59:6d:98:7a:90:0d:b5: 7e:a2:92:0f:b2:52:d0:89:f9:d0:9d:7f:5f:c6:e2:f7:d2:de: 1c:bb:36:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz NDI0MTY3NTkwHhcNMjUwNjAyMjM1ODMyWhcNMjUwNjA5MjM1ODMyWjAYMRYwFAYD VQQDEw02ODNlM2FhOS0zNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lvLCSbTiVLlK4T65Yuka3w+TG+GLxoMbwdHYOLwWl6P3crtc5TWE9b4IJ2t cKBCCOGDrNUcJBQOtNLCFBllQbi3mvBiHq0Xe2XocwuDky/lKOuWqfuI/5Tbw4nT CQONVPHdqf6FpzasD9Yq3kL3K8ix5AXJxyiJ4+K4X2uVMVxLYVOehn2qNOWOF9tY axwhKflA7pmog4p6JV5/kFpw3+6mj4a+w9mRVIdIv+kZMYL0exQ5spTmLDu3kLaX MBvchldDGgAebdRLR+Do0PtgxhMoz3Dq630zPjuw3r29BTrvC9BFk7+L0tojpWI7 jGzixunZmqGnfgBw0A/3qu5jGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJdfKKP /+jUo8e2Y7lEeuaA1gB7MB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJ N3FwQTM1WU5wUE0wSkJaMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVOImI5lJlmjuRZNR0pEw5KzO2HWjJnv30brH6MztMCvMbSoIXAdUs ++GmEJergHzFQAh5/iwBR8oJ5BCeXURaFDnYuWSZv5YvEOF7nquggyHwp1+cQANa 8yN8nnOwAoHoW2dUDc3FH5VMyO7HGP11MTgGH4SZB9LzajpLdvMjkjhyGale+AF6 LiD1e2Cr2Rrt7EJgOZiJjIOmpxr/bjJSuXSsJsyUIotqf8M9CC3NCkHlGAo6hQ7o 8g7TbwJf+Dvln0QmzmTT+ZB7H0nTImN3kZ/GT0RUQ/P/rtyXzRMHbzr7FFltmHqQ DbV+opIPslLQifnQnX9fxuL30t4cuzbv -----END CERTIFICATE-----Generated at Tue Jun 3 23:55:38 2025 by rpki-client