$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft File: _f0WbMUdnjq3SWQHS25klGdOL24.mft (raw, json) Hash identifier: EC5LpphYaqka3Rnbv+OqgEr4I6K5Swwe/Ub/cf9sEro= Subject key identifier: E6:03:87:41:C4:E5:3C:DC:57:8E:15:FF:49:3F:76:30:9C:22:23:01 Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E Certificate issuer: /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Certificate serial: 1EB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft Manifest number: 1EA6 Signing time: Thu 12 Jun 2025 16:00:37 +0000 Manifest this update: Thu 12 Jun 2025 16:00:36 +0000 Manifest next update: Thu 19 Jun 2025 16:00:36 +0000 Files and hashes: 1: _f0WbMUdnjq3SWQHS25klGdOL24.crl (hash: cvPuDUc3OA/MTo9I3dsmeXrZMw/ukZSAXe3keQgUts0=) 2: 888B4AC26B3611E6A149F871C4F9AE02.roa (hash: JNpFgM+KWXtVAKMLIECfprcazoPzZ95joJw//lWOa/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7856 (0x1eb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Validity Not Before: Jun 12 16:00:36 2025 GMT Not After : Jun 19 16:00:36 2025 GMT Subject: CN=684af9a4-f46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bd:cc:65:fb:51:b6:a7:a4:cd:be:6a:92:89: b7:9c:dc:d1:a1:5e:ba:9f:97:10:b1:5e:e3:f2:0e: ef:75:80:3c:a9:31:92:64:c1:7f:c6:6d:02:31:48: a7:c2:f2:d5:81:15:fd:e5:c2:c1:ec:b3:35:f9:a9: 51:5b:35:af:b0:6c:4f:fe:a0:ad:a6:c9:53:87:af: c3:45:96:9d:29:7e:d6:f1:7f:cc:35:f1:df:e6:e6: 9b:0b:56:de:de:80:af:1f:0a:3a:79:78:6e:86:9a: 12:de:37:5e:0c:e1:8e:e4:67:dc:25:1d:f4:92:86: d2:99:26:a6:fd:8b:3b:47:b0:91:f0:ce:74:4d:c4: 94:9b:60:e0:af:fa:42:f8:54:3f:e9:47:c4:0a:2b: ce:89:43:dd:35:df:01:a5:fb:f9:44:19:23:3a:2c: 9d:68:90:48:b3:5f:6d:46:48:00:85:27:b9:12:4d: 87:8c:c2:3c:a7:d1:14:bc:14:19:98:e1:89:7d:af: 4a:0d:78:41:eb:28:69:79:f9:cf:49:e6:1d:9d:31: 27:f7:d7:c5:39:b3:ed:82:fa:a3:12:29:a2:ea:44: 6f:45:35:89:aa:dc:e5:e4:b9:a4:91:c6:79:83:5a: a8:7f:fc:ce:35:41:77:3f:91:9b:d5:7e:ce:48:e0: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:03:87:41:C4:E5:3C:DC:57:8E:15:FF:49:3F:76:30:9C:22:23:01 X509v3 Authority Key Identifier: keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:84:84:ac:2a:95:3c:19:d5:88:74:ff:b0:9c:29:5a:a9:a0: 4a:b6:6f:81:a8:a2:49:a9:85:40:87:ef:7c:f2:ed:74:60:82: 03:a3:ab:19:a0:c5:eb:49:85:28:3a:d9:a9:a6:18:9a:67:7d: ff:3e:53:c0:4b:99:d2:f5:ee:0d:c1:ed:78:04:11:28:ed:7d: dc:ff:72:bb:bc:b0:03:89:3c:70:9c:93:1f:63:d8:bf:ef:a5: d1:e4:1e:11:fc:27:06:2d:fc:67:f5:ca:11:17:de:4f:fe:18: 00:b0:b5:d7:ee:fd:43:26:e8:d1:a0:08:c8:1a:71:6b:e7:c5: d6:48:03:c2:0c:a0:20:15:98:9e:3e:c2:74:a6:4f:93:ad:19: d6:3a:e6:94:25:39:6c:49:5e:10:b0:2f:97:47:85:67:5e:34: 3d:34:1d:fc:85:11:fa:7e:91:5d:4d:cb:60:9a:1d:72:da:39: 0c:a0:b0:94:a0:40:f3:b4:55:41:d8:28:63:82:66:d0:33:01: 82:2e:cd:36:ba:c1:39:03:94:d7:f7:96:a2:2f:41:4b:e9:1b: d4:25:7c:94:80:45:8c:e2:95:62:fa:bc:b4:e0:0c:53:42:54: 80:f6:63:a9:57:0f:db:1a:3c:c9:74:83:ac:68:7f:94:d4:c3: 66:9c:3b:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0RjgxMTAvBgNVBAUTKEZERkQxNjZDQzUxRDlFM0FCNzQ5NjQwNzRCNkU2NDk0 Njc0RTJGNkUwHhcNMjUwNjEyMTYwMDM2WhcNMjUwNjE5MTYwMDM2WjAYMRYwFAYD VQQDEw02ODRhZjlhNC1mNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA673MZftRtqekzb5qkom3nNzRoV66n5cQsV7j8g7vdYA8qTGSZMF/xm0CMUin wvLVgRX95cLB7LM1+alRWzWvsGxP/qCtpslTh6/DRZadKX7W8X/MNfHf5uabC1be 3oCvHwo6eXhuhpoS3jdeDOGO5GfcJR30kobSmSam/Ys7R7CR8M50TcSUm2Dgr/pC +FQ/6UfECivOiUPdNd8Bpfv5RBkjOiydaJBIs19tRkgAhSe5Ek2HjMI8p9EUvBQZ mOGJfa9KDXhB6yhpefnPSeYdnTEn99fFObPtgvqjEimi6kRvRTWJqtzl5LmkkcZ5 g1qof/zONUF3P5Gb1X7OSOANEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYDh0HE 5TzcV44V/0k/djCcIiMBMB8GA1UdIwQYMBaAFP39FmzFHZ46t0lkB0tuZJRnTi9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRGOC8yMjhBRDNFQTZC MzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5qcTNTV1FIUzI1a2xHZE9M MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mMFdiTVVkbmpxM1NXUUhTMjVrbEdkT0wyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRGOC8yMjhBRDNFQTZCMzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5q cTNTV1FIUzI1a2xHZE9MMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzhISsKpU8GdWIdP+wnClaqaBKtm+BqKJJqYVAh+988u10YIIDo6sZ oMXrSYUoOtmpphiaZ33/PlPAS5nS9e4Nwe14BBEo7X3c/3K7vLADiTxwnJMfY9i/ 76XR5B4R/CcGLfxn9coRF95P/hgAsLXX7v1DJujRoAjIGnFr58XWSAPCDKAgFZie PsJ0pk+TrRnWOuaUJTlsSV4QsC+XR4VnXjQ9NB38hRH6fpFdTctgmh1y2jkMoLCU oEDztFVB2ChjgmbQMwGCLs02usE5A5TX95aiL0FL6RvUJXyUgEWM4pVi+ry04AxT QlSA9mOpVw/bGjzJdIOsaH+U1MNmnDsx -----END CERTIFICATE-----Generated at Fri Jun 13 07:42:12 2025 by rpki-client