$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: diwnfWI0wFoPcbNWlq34NAFmXWjj/4pr90DAkaPlVos= Subject key identifier: 64:70:7A:F1:D3:AB:BD:79:09:BC:8A:F8:C0:5D:FD:00:C4:27:F0:E5 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 07E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 07DB Signing time: Sun 08 Jun 2025 20:44:41 +0000 Manifest this update: Sun 08 Jun 2025 20:44:40 +0000 Manifest next update: Sun 15 Jun 2025 20:44:40 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: BxIkVxL2zcenExPmI/h6VY5VWB1fo048I5gC+oqffTY=) 2: D7A207C2F33611EAA449F44CC4F9AE02.roa (hash: /kcNu2DzvPjb/K+Cuz9Luoiid37N2ZQdhRNxbuzcd2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 20:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2020 (0x7e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Jun 8 20:44:40 2025 GMT Not After : Jun 15 20:44:40 2025 GMT Subject: CN=6845f639-a340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a9:ad:ca:12:99:fd:e4:9f:b1:2a:16:07:64: b9:e5:f3:64:8a:2f:9d:6c:d5:3d:a3:0e:c3:7e:57: 80:1b:fe:cd:03:9d:e8:00:04:91:c3:65:d5:87:1f: e0:15:25:c5:3f:31:b6:4c:ff:b8:2d:50:cd:2f:52: f9:06:6e:8b:ad:c6:cb:f5:1a:5f:6b:60:50:21:d1: fa:55:5e:bc:6d:d0:e0:d1:52:be:04:5f:d3:48:43: c1:17:18:27:56:8c:71:b4:4f:6f:84:6a:11:25:d8: 41:d4:94:d7:49:f1:ad:69:a3:cd:24:86:4b:00:a5: 54:62:3d:6c:4a:18:1b:40:e2:05:23:21:fe:75:be: f6:57:eb:0c:3f:46:b5:ab:1d:c9:04:37:54:9f:38: 1d:17:09:f8:1a:60:44:b6:73:c2:b5:0a:4b:72:9c: 65:d6:c0:25:48:ea:c7:a0:2e:c8:8d:80:e6:05:c3: 63:74:bd:75:2a:2f:13:8e:65:38:84:bf:f1:27:4f: 65:2e:59:63:a2:b9:31:4f:97:ff:21:77:34:a1:aa: 53:b9:3b:21:95:c8:8c:6e:1e:78:49:09:28:c8:06: cd:62:a2:b7:60:dc:6d:79:01:4e:22:c0:24:13:ef: 9b:dd:08:4f:ce:42:58:56:d2:2a:b7:a5:18:f3:94: 13:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:70:7A:F1:D3:AB:BD:79:09:BC:8A:F8:C0:5D:FD:00:C4:27:F0:E5 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:09:fd:4d:09:7d:3d:29:1c:7d:9e:fd:62:f3:77:21:1f:2d: cc:3b:79:16:c3:9c:73:f4:89:11:a4:5d:db:76:d9:30:fc:f2: ab:7b:a5:ab:ef:ba:ec:bb:27:64:9a:89:94:7d:31:46:45:14: 43:24:06:bd:fc:94:9f:cb:20:e8:aa:b2:f6:49:52:e9:17:0e: 41:e5:6b:ce:a7:0d:4e:c3:bb:ec:15:64:ad:f5:bc:81:d9:81: b5:cb:65:ab:bb:ad:bd:5b:5e:4e:24:46:5d:75:4b:f3:1f:4b: 5c:78:c5:68:33:a8:56:e0:0d:28:22:3a:39:7e:57:16:d1:ff: db:2d:9b:f9:3e:71:63:90:49:c0:28:17:1c:57:58:bf:c5:21: 16:39:40:be:1d:ce:14:d3:74:ed:45:8e:ab:31:91:ec:13:ef: ce:7b:a2:47:31:6f:24:d3:77:ba:c5:bd:79:26:4d:46:5d:79: f3:b0:85:2e:b1:c2:72:bc:26:62:76:6c:39:2e:31:8b:c1:7d: fb:bf:1a:cf:73:a1:6b:eb:ea:94:74:53:21:32:17:6f:7a:35: 05:bd:13:00:a8:17:d8:8f:fd:7b:a7:de:db:3f:e6:e8:a8:91: 9b:58:04:90:8d:b3:b0:a5:d2:1f:4c:55:19:e4:bc:4b:5b:49: 69:c7:9d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjUwNjA4MjA0NDQwWhcNMjUwNjE1MjA0NDQwWjAYMRYwFAYD VQQDEw02ODQ1ZjYzOS1hMzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KmtyhKZ/eSfsSoWB2S55fNkii+dbNU9ow7DfleAG/7NA53oAASRw2XVhx/g FSXFPzG2TP+4LVDNL1L5Bm6LrcbL9Rpfa2BQIdH6VV68bdDg0VK+BF/TSEPBFxgn VoxxtE9vhGoRJdhB1JTXSfGtaaPNJIZLAKVUYj1sShgbQOIFIyH+db72V+sMP0a1 qx3JBDdUnzgdFwn4GmBEtnPCtQpLcpxl1sAlSOrHoC7IjYDmBcNjdL11Ki8TjmU4 hL/xJ09lLlljorkxT5f/IXc0oapTuTshlciMbh54SQkoyAbNYqK3YNxteQFOIsAk E++b3QhPzkJYVtIqt6UY85QThwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRwevHT q715CbyK+MBd/QDEJ/DlMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXCf1NCX09KRx9nv1i83chHy3MO3kWw5xz9IkRpF3bdtkw/PKre6Wr 77rsuydkmomUfTFGRRRDJAa9/JSfyyDoqrL2SVLpFw5B5WvOpw1Ow7vsFWSt9byB 2YG1y2Wru629W15OJEZddUvzH0tceMVoM6hW4A0oIjo5flcW0f/bLZv5PnFjkEnA KBccV1i/xSEWOUC+Hc4U03TtRY6rMZHsE+/Oe6JHMW8k03e6xb15Jk1GXXnzsIUu scJyvCZidmw5LjGLwX37vxrPc6Fr6+qUdFMhMhdvejUFvRMAqBfYj/17p97bP+bo qJGbWASQjbOwpdIfTFUZ5LxLW0lpx52O -----END CERTIFICATE-----Generated at Tue Jun 10 02:57:00 2025 by rpki-client