$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json) Hash identifier: ELCwpLxxUylMGjVmdnc7yoJhZZg8x7ZLe9jwq+2LnzI= Subject key identifier: 26:44:45:71:98:AB:AA:74:C2:9B:C1:EB:1E:41:9B:E3:8B:93:F0:09 Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft Manifest number: 04BB Signing time: Sun 08 Jun 2025 23:32:23 +0000 Manifest this update: Sun 08 Jun 2025 23:32:23 +0000 Manifest next update: Sun 15 Jun 2025 23:32:23 +0000 Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: rr9mBWs0VsqMmy4T45+ike8ekfu4FXLAhqSUKcinMik=) 2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: fImPoQjcCGEMtVaG0vXMRn+nIx0n4x6cFQDmdGHL2YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 23:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Validity Not Before: Jun 8 23:32:23 2025 GMT Not After : Jun 15 23:32:23 2025 GMT Subject: CN=68461d87-872c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e8:a2:fa:4e:07:8a:f2:4e:86:42:cd:b9:5b: d7:36:df:44:07:87:af:da:18:a7:06:6c:3f:5b:48: a7:23:5a:c1:c9:a5:fb:ea:7a:e2:8a:44:dc:17:a7: 55:10:09:ef:6f:9a:4b:be:4f:7b:54:06:b0:71:4b: 79:d9:17:d2:8b:44:ac:02:dd:0e:4f:7e:e1:c0:14: 16:d7:9b:dd:65:12:85:c6:5b:1c:99:33:5e:17:9e: 50:37:8b:dc:53:03:51:9a:6d:50:f5:29:7d:3c:25: e6:bc:c7:75:1c:f7:b4:a8:45:d5:4e:11:4a:19:ab: 35:86:d8:55:a5:2b:cd:04:fc:6a:d6:fd:6c:68:63: 65:26:23:8f:e8:a7:c5:c0:08:a5:6a:07:2a:5e:80: a2:1f:80:18:d2:58:06:f0:1d:99:74:8b:a7:19:ae: a5:71:ba:ea:3b:66:38:a8:66:16:bc:db:09:1b:94: 9d:cc:19:5a:1e:fa:77:ce:bf:17:33:9d:7f:51:42: 3b:29:4a:27:04:b0:54:6d:1e:ae:b2:08:58:fa:99: 8e:7f:e7:4a:52:42:93:02:5e:be:15:cc:94:d5:fe: 67:5d:f7:fa:85:41:c7:40:70:6f:62:53:cd:e2:9b: 1e:3b:9e:a1:65:1a:25:29:aa:06:20:73:50:ce:ca: 75:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:44:45:71:98:AB:AA:74:C2:9B:C1:EB:1E:41:9B:E3:8B:93:F0:09 X509v3 Authority Key Identifier: keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:2d:13:36:97:a2:47:5b:44:86:b9:aa:a5:40:ac:e3:dc:29: cb:51:71:dc:28:32:4f:2c:c8:2f:64:b3:f2:4a:bf:8c:97:87: 11:b6:b4:2a:7e:74:c3:53:60:ae:43:09:8c:63:df:e3:ed:37: 75:99:14:ab:ae:5f:37:3e:68:0c:ea:4b:28:13:f8:27:4a:71: e0:34:a8:4f:06:42:8f:bd:0f:05:5c:89:2a:7b:3a:45:e1:38: 40:64:43:08:71:52:1e:f7:c1:55:68:79:c9:cd:e5:1a:b7:86: 2d:a6:8e:b1:a3:88:c6:49:c3:37:a2:7d:4b:4a:59:e1:34:61: 9e:10:99:e3:0a:b7:41:0e:a7:dd:20:13:69:ca:e9:74:eb:40: 55:21:00:b9:09:6f:0e:ab:dc:7e:11:b3:c5:58:6d:64:94:62: 3b:70:ac:8f:4d:17:11:19:1b:d4:98:c3:c1:48:b2:3d:26:2f: df:b2:6b:45:10:ae:3b:35:73:65:ed:f9:a9:50:6d:b0:2a:57: 86:28:75:fb:c1:11:af:41:5f:0d:ff:68:64:a6:7d:ad:e4:65: 6e:0b:32:a2:58:ad:67:d7:0a:c7:9c:ab:81:37:c5:a4:f4:1c: fd:fc:fc:22:0c:c2:ab:30:ac:b1:aa:d3:57:07:46:d6:3d:8a: 86:51:a2:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzRTExMTAvBgNVBAUTKEVCQUUxRjlBQjQ5NTZGMTgzNEI3MzUyOTM1N0M5RjNG MUUxMjA1RjAwHhcNMjUwNjA4MjMzMjIzWhcNMjUwNjE1MjMzMjIzWjAYMRYwFAYD VQQDEw02ODQ2MWQ4Ny04NzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Oii+k4HivJOhkLNuVvXNt9EB4ev2hinBmw/W0inI1rByaX76nriikTcF6dV EAnvb5pLvk97VAawcUt52RfSi0SsAt0OT37hwBQW15vdZRKFxlscmTNeF55QN4vc UwNRmm1Q9Sl9PCXmvMd1HPe0qEXVThFKGas1hthVpSvNBPxq1v1saGNlJiOP6KfF wAilagcqXoCiH4AY0lgG8B2ZdIunGa6lcbrqO2Y4qGYWvNsJG5SdzBlaHvp3zr8X M51/UUI7KUonBLBUbR6usghY+pmOf+dKUkKTAl6+FcyU1f5nXff6hUHHQHBvYlPN 4pseO56hZRolKaoGIHNQzsp1DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZERXGY q6p0wpvB6x5Bm+OLk/AJMB8GA1UdIwQYMBaAFOuuH5q0lW8YNLc1KTV8nz8eEgXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNFMS8yQUY0QjM3NDMy MjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4ZzB0elVwTlh5ZlB4NFNC ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY2NGZtclNWYnhnMHR6VXBOWHlmUHg0U0JmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNFMS8yQUY0QjM3NDMyMjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4 ZzB0elVwTlh5ZlB4NFNCZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1LRM2l6JHW0SGuaqlQKzj3CnLUXHcKDJPLMgvZLPySr+Ml4cRtrQq fnTDU2CuQwmMY9/j7Td1mRSrrl83PmgM6ksoE/gnSnHgNKhPBkKPvQ8FXIkqezpF 4ThAZEMIcVIe98FVaHnJzeUat4Ytpo6xo4jGScM3on1LSlnhNGGeEJnjCrdBDqfd IBNpyul060BVIQC5CW8Oq9x+EbPFWG1klGI7cKyPTRcRGRvUmMPBSLI9Ji/fsmtF EK47NXNl7fmpUG2wKleGKHX7wRGvQV8N/2hkpn2t5GVuCzKiWK1n1wrHnKuBN8Wk 9Bz9/PwiDMKrMKyxqtNXB0bWPYqGUaKo -----END CERTIFICATE-----Generated at Tue Jun 10 08:48:11 2025 by rpki-client