$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json) Hash identifier: i2LoakN5TFpUqG/EEwv45W3kTbQJS/+RzLq4TJ9+EDU= Subject key identifier: 69:A3:3C:F2:97:86:B4:AE:D3:CC:DA:58:A4:A9:C8:2D:33:6C:C9:7A Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0C8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft Manifest number: 0C66 Signing time: Fri 30 May 2025 18:34:29 +0000 Manifest this update: Fri 30 May 2025 18:34:28 +0000 Manifest next update: Fri 06 Jun 2025 18:34:28 +0000 Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: Rn9Pnqj+UARMSx7UpyEkluoWo9vZ1Frx7kElOY4n5og=) 2: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: +t2OsFQRgFf0c7jNBR5fu1U2IpPKMIuwM5iZNaY//qo=) 3: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: coEgjngsR/Ce6vFWSBZaZ5rCfdvEVYlwbgZyFrxHv0s=) 4: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: amqBd7Gmw280SNEgcUdjWQQGaKazRNP/HiWRn2dZkzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3215 (0xc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: May 30 18:34:28 2025 GMT Not After : Jun 6 18:34:28 2025 GMT Subject: CN=6839fa35-2f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:bc:e0:70:e7:d9:a2:c3:b7:b9:97:c1:7f: d7:8c:a0:78:4d:3c:47:ba:98:54:08:19:a2:70:ce: 3e:5b:d0:26:fc:0c:0f:6c:37:ec:d1:2e:f8:41:6d: 34:32:cb:87:d7:26:8f:8d:8e:bd:05:20:2d:f9:3d: 0b:08:32:79:08:7d:06:aa:65:45:f7:0d:4c:c7:af: 3d:f3:91:ce:cd:b6:d4:0b:93:c6:c0:65:0e:85:55: 7b:f7:e9:f1:76:83:97:48:68:f6:86:27:05:54:b0: 7e:16:bc:6f:49:3a:0c:a5:86:0a:83:d8:ad:a4:1a: 05:45:fe:9e:71:5d:84:ac:04:ce:68:91:c5:37:14: c1:b5:04:f3:ad:db:ce:b4:89:00:93:46:75:c0:d5: 38:f0:0c:75:d9:6c:e2:6c:83:6e:e3:34:c3:83:5c: 4e:6b:9c:d1:93:36:cd:5c:e3:6c:82:01:ce:7f:f7: 72:9d:0d:e0:6a:8b:49:75:c3:38:3e:0b:e3:09:f0: b3:3e:24:4d:75:81:47:fb:06:a4:d5:ce:56:ea:d9: bc:9b:ed:96:15:70:1f:10:40:a1:41:41:6e:4a:11: 23:b0:e6:04:87:4b:88:6f:98:fb:53:bc:7d:71:31: 13:05:b2:8a:8a:f8:51:6a:af:3d:4b:9f:3a:e6:15: 68:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A3:3C:F2:97:86:B4:AE:D3:CC:DA:58:A4:A9:C8:2D:33:6C:C9:7A X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:5d:df:04:31:3d:53:01:cb:f5:8e:3c:9d:82:20:09:c2:63: 57:e7:f2:b4:1b:19:23:cf:c4:ed:9d:e3:c6:96:fa:44:33:84: 0a:0e:75:d5:0c:e4:92:f9:8a:18:54:96:41:1f:e7:af:ac:54: 51:0d:67:3c:55:b5:2b:0a:6f:5d:24:2c:0b:3d:d7:3b:88:d2: f6:24:79:a2:ea:98:4e:e9:16:f2:08:d4:1c:c8:73:a2:7b:56: b4:25:68:c0:88:af:55:7c:4a:e0:99:4b:18:32:80:5f:53:d0: c2:7a:da:bd:58:46:86:80:c9:83:14:d6:3a:25:af:dc:4f:bc: c2:d5:85:8c:b1:62:07:65:0b:ca:ce:69:e1:f2:7e:e0:f8:6f: ba:eb:26:12:f3:ac:26:34:2a:d9:d0:f8:dd:e1:12:f8:09:7b: 92:93:b5:0c:e9:fe:35:b9:1a:ff:ba:71:50:c5:76:f1:5d:ed: 96:21:05:a6:35:e7:44:9a:b5:90:99:15:d9:5a:72:a6:3c:9e: a0:5f:50:3d:95:06:0c:3b:f0:b5:08:ca:55:4c:38:d0:cf:f6: cf:23:7d:e0:ab:65:a7:af:70:92:76:8f:52:08:c9:29:00:8e: 91:b2:df:e4:93:45:1b:a3:19:71:48:ad:ed:78:4d:59:9d:01: 2d:d8:ed:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjUwNTMwMTgzNDI4WhcNMjUwNjA2MTgzNDI4WjAYMRYwFAYD VQQDEw02ODM5ZmEzNS0yZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBK84HDn2aLDt7mXwX/XjKB4TTxHuphUCBmicM4+W9Am/AwPbDfs0S74QW00 MsuH1yaPjY69BSAt+T0LCDJ5CH0GqmVF9w1Mx68985HOzbbUC5PGwGUOhVV79+nx doOXSGj2hicFVLB+FrxvSToMpYYKg9itpBoFRf6ecV2ErATOaJHFNxTBtQTzrdvO tIkAk0Z1wNU48Ax12WzibINu4zTDg1xOa5zRkzbNXONsggHOf/dynQ3gaotJdcM4 PgvjCfCzPiRNdYFH+wak1c5W6tm8m+2WFXAfEEChQUFuShEjsOYEh0uIb5j7U7x9 cTETBbKKivhRaq89S5865hVoNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmjPPKX hrSu08zaWKSpyC0zbMl6MB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdFMy8wQUZFQTdDRTAzQTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FO V29oV3BMdGxnX0c2NnVBSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlXd8EMT1TAcv1jjydgiAJwmNX5/K0Gxkjz8TtnePGlvpEM4QKDnXV DOSS+YoYVJZBH+evrFRRDWc8VbUrCm9dJCwLPdc7iNL2JHmi6phO6RbyCNQcyHOi e1a0JWjAiK9VfErgmUsYMoBfU9DCetq9WEaGgMmDFNY6Ja/cT7zC1YWMsWIHZQvK zmnh8n7g+G+66yYS86wmNCrZ0Pjd4RL4CXuSk7UM6f41uRr/unFQxXbxXe2WIQWm NedEmrWQmRXZWnKmPJ6gX1A9lQYMO/C1CMpVTDjQz/bPI33gq2Wnr3CSdo9SCMkp AI6Rst/kk0UboxlxSK3teE1ZnQEt2O0S -----END CERTIFICATE-----Generated at Sat May 31 17:30:16 2025 by rpki-client