$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json) Hash identifier: T03fYKJ0stbqpwasU7sS7wejqvbEoihoiOTrtMcg4VQ= Subject key identifier: D9:80:3B:3C:1C:88:61:E4:7C:D1:7D:A8:18:C6:47:F0:37:27:DD:08 Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Certificate serial: 03F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft Manifest number: 03E9 Signing time: Thu 05 Jun 2025 00:26:15 +0000 Manifest this update: Thu 05 Jun 2025 00:26:15 +0000 Manifest next update: Thu 12 Jun 2025 00:26:15 +0000 Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: njVns2o0uShsKW8llDqeVu1b8IVpi1biREyrmNvDisI=) 2: A98BD3DE91F211ECA28ADD36C4F9AE02.roa (hash: aC9p2yyQTb3Yh1HdZsc4PLjnJ/5VSg4x8HrvxdVV15Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 00:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1012 (0x3f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Validity Not Before: Jun 5 00:26:15 2025 GMT Not After : Jun 12 00:26:15 2025 GMT Subject: CN=6840e427-44f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:51:ec:d3:b1:0a:47:b8:5b:96:8a:45:d9: 18:eb:e8:fb:e5:89:81:28:95:b2:32:88:ee:09:cd: ed:20:14:11:cc:95:ff:7f:2f:c1:2a:d5:96:74:4a: 8a:3b:88:b2:b6:5c:80:71:77:75:97:f7:21:57:ae: 0f:81:14:a8:d5:a9:b4:f8:50:1f:4f:26:33:47:e4: a8:e2:96:62:cb:ef:f8:a1:5d:df:10:69:5c:ee:8d: 05:a2:31:e6:bb:69:6b:5d:ef:be:34:9e:b5:d3:8b: a2:44:9c:da:a3:26:23:52:c5:fb:7f:8b:6f:e7:2d: 9f:58:db:8b:40:97:04:e9:2f:1b:e9:ec:c2:9d:f2: 8b:00:12:78:40:2e:a4:c8:c2:c5:6c:69:87:5f:1c: 71:dd:f2:e4:36:96:db:69:61:94:54:cd:cd:5b:b9: 39:5c:7c:6b:5d:e4:e9:b8:39:b1:d5:f3:2e:21:2e: 3b:9f:97:4f:93:74:8a:b5:fa:bd:53:71:b8:11:c0: 7d:c7:6c:50:6e:ef:fe:b2:f9:d7:22:56:0c:b4:13: 8c:a1:3f:ae:fb:d8:f3:47:e9:7a:4b:7a:69:5a:ba: 04:76:bc:20:6d:06:05:a7:de:f8:9c:78:26:83:b8: 4e:21:4b:e4:a2:81:10:57:13:0f:2f:a4:96:b3:32: c2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:80:3B:3C:1C:88:61:E4:7C:D1:7D:A8:18:C6:47:F0:37:27:DD:08 X509v3 Authority Key Identifier: keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d7:3f:56:2c:d6:fd:a6:ec:20:3e:cc:77:30:b3:c5:ec:2b: 33:32:de:ba:e2:37:6f:0f:0e:b5:2a:59:fa:11:5d:91:ba:7b: 10:11:c4:6b:d3:99:d7:78:ae:86:14:92:e2:f2:af:ae:b4:83: d2:00:9e:36:47:45:67:b1:eb:52:76:63:fb:64:3d:e4:ed:78: 9b:5f:4d:0f:e2:97:49:c8:ff:aa:44:b5:5f:cb:9d:84:03:de: 90:d7:70:bd:cf:41:35:19:cb:74:e8:b4:a7:f5:c8:c2:45:ca: 69:30:4a:e7:d5:b5:9a:c4:ec:8c:b2:1d:13:d5:15:cc:cb:84: 86:4a:31:df:bc:45:26:96:4c:fe:a2:9d:f1:4a:fa:eb:d1:be: 31:8c:4b:b8:3e:91:0c:5f:a3:14:bb:c8:80:c8:ab:31:6c:44: 5c:69:af:5e:34:d2:83:06:e5:4e:19:e7:db:01:ce:b0:05:a1: 1f:5b:eb:48:7b:74:dc:e8:bb:92:2a:84:45:31:b6:69:36:aa: c6:e0:f4:7d:84:30:21:01:22:84:45:1b:9b:7c:94:1f:b1:20: b7:e3:50:53:af:2f:be:4e:5f:31:cc:b3:6b:dc:ee:d7:c4:21: 17:9e:81:dd:77:bf:2c:c0:aa:f6:16:71:15:57:85:b2:18:a2: ee:8f:46:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzQjQxMTAvBgNVBAUTKEFFQjgzOUNDQkZBRDVCRDk4QTdBMERBOTA1M0JDMjcy NkYyNjkwNEYwHhcNMjUwNjA1MDAyNjE1WhcNMjUwNjEyMDAyNjE1WjAYMRYwFAYD VQQDEw02ODQwZTQyNy00NGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PBR7NOxCke4W5aKRdkY6+j75YmBKJWyMojuCc3tIBQRzJX/fy/BKtWWdEqK O4iytlyAcXd1l/chV64PgRSo1am0+FAfTyYzR+So4pZiy+/4oV3fEGlc7o0FojHm u2lrXe++NJ6104uiRJzaoyYjUsX7f4tv5y2fWNuLQJcE6S8b6ezCnfKLABJ4QC6k yMLFbGmHXxxx3fLkNpbbaWGUVM3NW7k5XHxrXeTpuDmx1fMuIS47n5dPk3SKtfq9 U3G4EcB9x2xQbu/+svnXIlYMtBOMoT+u+9jzR+l6S3ppWroEdrwgbQYFp974nHgm g7hOIUvkooEQVxMPL6SWszLCIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmAOzwc iGHkfNF9qBjGR/A3J90IMB8GA1UdIwQYMBaAFK64Ocy/rVvZinoNqQU7wnJvJpBP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODNCNC9FNzlFRDQ5MDgz RjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5bUtlZzJwQlR2Q2NtOG1r RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyZzV6TC10VzltS2VnMnBCVHZDY204bWtFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODNCNC9FNzlFRDQ5MDgzRjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5 bUtlZzJwQlR2Q2NtOG1rRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG1z9WLNb9puwgPsx3MLPF7CszMt664jdvDw61Kln6EV2RunsQEcRr 05nXeK6GFJLi8q+utIPSAJ42R0VnsetSdmP7ZD3k7XibX00P4pdJyP+qRLVfy52E A96Q13C9z0E1Gct06LSn9cjCRcppMErn1bWaxOyMsh0T1RXMy4SGSjHfvEUmlkz+ op3xSvrr0b4xjEu4PpEMX6MUu8iAyKsxbERcaa9eNNKDBuVOGefbAc6wBaEfW+tI e3Tc6LuSKoRFMbZpNqrG4PR9hDAhASKERRubfJQfsSC341BTry++Tl8xzLNr3O7X xCEXnoHdd78swKr2FnEVV4WyGKLuj0Y/ -----END CERTIFICATE-----Generated at Thu Jun 5 19:13:41 2025 by rpki-client