$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: DSYGrz+cRwZA/2zRNgtrMDETQ6L8G31y16ZMcidCjHQ= Subject key identifier: 59:30:30:F7:36:8A:77:08:C8:E6:C7:77:E3:78:5B:AB:78:CC:7D:9E Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 06B1 Signing time: Sun 08 Jun 2025 21:48:33 +0000 Manifest this update: Sun 08 Jun 2025 21:48:32 +0000 Manifest next update: Sun 15 Jun 2025 21:48:32 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: aFJxackK82+LH6E28Tglgz9Z4j1P5Zj2sU/sSCrEB2c=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: Zn98IKw1ORShKjYTsznVV3Nuz5otGr6pldJ4tgtNf00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 21:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Jun 8 21:48:32 2025 GMT Not After : Jun 15 21:48:32 2025 GMT Subject: CN=68460530-cbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:85:8d:05:2f:48:46:b3:5e:06:00:35:98: f4:9e:22:89:59:27:ed:a2:e8:76:dc:ad:23:46:0e: c9:e9:f0:6e:c2:d4:56:ef:dc:38:e9:3e:62:2c:bd: 93:5d:3b:cc:b5:2c:b7:7e:94:b0:27:2c:5b:bc:e3: e1:a5:3c:fd:b6:8d:e5:7b:b8:9e:83:62:7a:4c:bc: 29:47:69:10:a6:99:86:48:5c:a6:cf:1e:90:f7:0e: dc:5d:38:52:6b:56:4b:95:a2:86:f1:cc:60:12:28: cd:26:08:6e:7a:87:a8:13:92:db:72:1a:58:79:41: 4f:b1:40:78:be:9d:80:55:ba:c5:1a:3d:6d:71:e9: f4:f4:d1:f6:d0:00:22:5b:4e:7c:88:65:5d:c4:34: 39:5a:2c:bd:c7:a3:0b:2a:ff:02:66:ce:a9:5f:d8: d4:9a:4e:4c:34:78:ac:46:0c:16:26:96:7a:8a:c4: fa:36:2f:de:74:b6:45:f8:bd:f8:87:9d:de:7d:44: 6e:c4:26:7c:90:3a:24:04:cf:78:02:87:d5:34:35: 14:dc:57:af:19:5f:7a:45:2f:ed:a2:fc:32:6b:1a: 23:dd:dc:9b:e4:9a:70:b0:64:41:cd:b5:bf:31:4a: 6c:74:28:4f:d4:0f:14:ff:c9:42:d5:56:27:73:98: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:30:30:F7:36:8A:77:08:C8:E6:C7:77:E3:78:5B:AB:78:CC:7D:9E X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:29:6a:f0:35:ba:67:7d:2f:55:a4:e0:fc:ce:a3:2c:86:cb: 26:82:1b:51:a1:b7:79:02:45:9e:53:54:da:53:76:d1:8b:06: 0c:d4:59:d8:f3:56:d2:d8:ab:11:0e:3c:6b:fb:f6:46:e9:43: 11:55:1a:f5:48:90:3c:30:42:e1:4f:85:bc:7f:3f:9f:22:e0: 9e:9c:3d:59:69:09:ee:cc:55:bc:61:f4:7b:37:e8:f5:32:ae: 8c:7f:b2:e9:2c:24:05:ac:55:5a:77:a9:f2:4d:e5:44:5e:6d: 00:3f:42:88:c0:a0:8c:9a:0a:72:bb:be:a4:26:a0:9b:75:79: 6e:2e:af:05:0b:6c:99:d3:27:be:7a:90:53:4b:67:f4:3b:56: a5:f3:b1:49:64:95:2e:04:ef:41:05:6b:44:85:23:c9:3f:02: dc:69:81:f3:dd:83:8a:f7:e8:b7:17:53:4b:05:f9:d5:3c:3c: 9b:4c:75:fe:b3:f2:b3:03:84:b9:cb:b2:3d:af:b7:79:2c:20: 75:eb:ef:7c:d3:39:19:55:a0:31:3e:ae:1b:33:4f:95:f6:25: db:9b:52:fe:2f:7f:69:cf:e3:ac:92:f9:83:75:6a:fc:ae:3c: a8:b9:9c:88:ae:c5:f7:64:7b:c9:df:8c:13:8b:98:4d:59:1d: eb:da:c7:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjUwNjA4MjE0ODMyWhcNMjUwNjE1MjE0ODMyWjAYMRYwFAYD VQQDEw02ODQ2MDUzMC1jYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul6FjQUvSEazXgYANZj0niKJWSftouh23K0jRg7J6fBuwtRW79w46T5iLL2T XTvMtSy3fpSwJyxbvOPhpTz9to3le7ieg2J6TLwpR2kQppmGSFymzx6Q9w7cXThS a1ZLlaKG8cxgEijNJghueoeoE5LbchpYeUFPsUB4vp2AVbrFGj1tcen09NH20AAi W058iGVdxDQ5Wiy9x6MLKv8CZs6pX9jUmk5MNHisRgwWJpZ6isT6Ni/edLZF+L34 h53efURuxCZ8kDokBM94AofVNDUU3FevGV96RS/tovwyaxoj3dyb5JpwsGRBzbW/ MUpsdChP1A8U/8lC1VYnc5jNTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkwMPc2 incIyObHd+N4W6t4zH2eMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7KWrwNbpnfS9VpOD8zqMshssmghtRobd5AkWeU1TaU3bRiwYM1FnY 81bS2KsRDjxr+/ZG6UMRVRr1SJA8MELhT4W8fz+fIuCenD1ZaQnuzFW8YfR7N+j1 Mq6Mf7LpLCQFrFVad6nyTeVEXm0AP0KIwKCMmgpyu76kJqCbdXluLq8FC2yZ0ye+ epBTS2f0O1al87FJZJUuBO9BBWtEhSPJPwLcaYHz3YOK9+i3F1NLBfnVPDybTHX+ s/KzA4S5y7I9r7d5LCB16+980zkZVaAxPq4bM0+V9iXbm1L+L39pz+OskvmDdWr8 rjyouZyIrsX3ZHvJ34wTi5hNWR3r2scI -----END CERTIFICATE-----Generated at Mon Jun 9 05:29:46 2025 by rpki-client