$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: Grytue9T68wSZpdMcsPc0D4fslmnLcfJnpvo5KW4yas= Subject key identifier: 9B:EF:7D:E4:A3:84:1D:DD:A0:3A:27:E5:06:84:64:8E:CE:21:E0:81 Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 0253 Signing time: Tue 03 Jun 2025 02:05:55 +0000 Manifest this update: Tue 03 Jun 2025 02:05:55 +0000 Manifest next update: Tue 10 Jun 2025 02:05:55 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: DWtKu4ihpoGhtdnEdqyp7HPQ1c8xsG7E5HoHLr+L3+s=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: nUMhsxhIRqeHeQEDGBtbEEh0D5JOlIzRcfpKkf1PF5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Jun 3 02:05:55 2025 GMT Not After : Jun 10 02:05:55 2025 GMT Subject: CN=683e5883-7c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:c1:d9:13:46:69:6e:96:d1:67:b0:8d:9d: 24:aa:23:23:af:1a:58:1a:4d:d4:ea:1b:5d:83:d3: a1:bd:6d:62:9e:bd:da:13:f2:fb:56:5f:07:3e:79: a5:71:25:9b:af:bf:05:7c:72:d9:44:c6:6f:7e:73: ed:60:85:67:92:ef:f8:04:c7:c4:f8:16:2a:15:ab: 06:ee:23:4e:76:68:fd:70:8e:7d:5c:95:e5:cc:b4: ca:cc:fe:6e:59:9f:f1:ad:b5:91:b5:1b:04:b2:a2: cf:b5:47:50:37:bc:b4:b7:d2:62:a6:41:b2:d5:92: 1a:9f:35:c3:e6:76:3f:21:4b:98:44:e1:42:93:28: 50:42:c5:6f:49:ec:b7:5f:58:af:45:bc:02:26:87: b8:3b:48:59:08:47:1b:7a:1d:12:8f:76:d8:7c:0a: 4a:6b:86:73:a9:7d:f7:24:57:4e:4d:b6:00:5b:a7: 99:13:91:db:dc:fe:f6:be:92:6b:d2:3b:c7:fc:95: d9:2e:6e:03:6e:c4:8c:a1:a9:93:a6:df:fc:4d:93: b1:43:da:e4:ed:c8:19:2b:48:eb:2c:56:3d:ed:57: 8b:26:12:80:eb:3e:52:be:96:81:84:6c:89:3d:e8: ed:bb:e1:9c:14:68:18:77:d9:6d:dc:ca:09:e2:eb: 7d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EF:7D:E4:A3:84:1D:DD:A0:3A:27:E5:06:84:64:8E:CE:21:E0:81 X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:19:cf:ec:d8:f5:dc:c0:d8:40:3a:db:1d:98:db:4c:9d:c2: 41:27:45:87:41:7c:0b:6f:ec:de:20:4d:30:16:c9:f5:0c:46: c4:54:9c:c0:cb:31:71:86:2f:81:80:ae:61:36:96:c4:dd:3c: 7b:aa:92:12:23:42:f4:f1:48:cc:3a:9e:10:58:46:2d:f5:44: d5:46:87:2b:aa:f6:cd:75:bd:20:06:1c:e1:96:54:6a:c1:c0: ae:59:8c:6c:ac:a4:33:6f:98:66:32:1f:3e:d2:ad:1f:46:9a: a8:9b:77:18:32:eb:0e:4f:32:5b:4b:d5:6b:c3:fb:0f:d2:9c: 7b:d1:86:33:ec:59:8b:3a:17:fe:93:fb:a4:b9:e0:56:5f:a4: 29:02:d5:ad:5e:07:7b:b4:1a:3c:58:43:d9:17:77:4f:49:61: 28:19:97:9d:3b:5a:be:2e:07:48:3f:09:7a:e8:fb:58:75:39: 42:c9:70:89:14:44:34:13:48:04:ab:10:54:0e:21:af:44:1b: 51:a7:93:bd:67:5f:9b:95:4a:f7:d3:e1:c2:62:c2:c9:24:88: 28:6a:55:8d:bf:7d:02:44:fe:50:36:c6:c9:83:f4:e0:87:c1: d3:10:a2:60:f7:2b:46:4b:2c:c3:6d:2c:83:d1:fc:3e:5b:14: 83:4e:88:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUwNjAzMDIwNTU1WhcNMjUwNjEwMDIwNTU1WjAYMRYwFAYD VQQDEw02ODNlNTg4My03YzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+DB2RNGaW6W0WewjZ0kqiMjrxpYGk3U6htdg9OhvW1inr3aE/L7Vl8HPnml cSWbr78FfHLZRMZvfnPtYIVnku/4BMfE+BYqFasG7iNOdmj9cI59XJXlzLTKzP5u WZ/xrbWRtRsEsqLPtUdQN7y0t9JipkGy1ZIanzXD5nY/IUuYROFCkyhQQsVvSey3 X1ivRbwCJoe4O0hZCEcbeh0Sj3bYfApKa4ZzqX33JFdOTbYAW6eZE5Hb3P72vpJr 0jvH/JXZLm4DbsSMoamTpt/8TZOxQ9rk7cgZK0jrLFY97VeLJhKA6z5SvpaBhGyJ Pejtu+GcFGgYd9lt3MoJ4ut9KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvvfeSj hB3doDon5QaEZI7OIeCBMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmGc/s2PXcwNhAOtsdmNtMncJBJ0WHQXwLb+zeIE0wFsn1DEbEVJzA yzFxhi+BgK5hNpbE3Tx7qpISI0L08UjMOp4QWEYt9UTVRocrqvbNdb0gBhzhllRq wcCuWYxsrKQzb5hmMh8+0q0fRpqom3cYMusOTzJbS9Vrw/sP0px70YYz7FmLOhf+ k/ukueBWX6QpAtWtXgd7tBo8WEPZF3dPSWEoGZedO1q+LgdIPwl66PtYdTlCyXCJ FEQ0E0gEqxBUDiGvRBtRp5O9Z1+blUr30+HCYsLJJIgoalWNv30CRP5QNsbJg/Tg h8HTEKJg9ytGSyzDbSyD0fw+WxSDTogL -----END CERTIFICATE-----Generated at Wed Jun 4 00:15:23 2025 by rpki-client