$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: bYgGfYNvaiA0BTL89fHtX5DPV9MJyO2a1nhlXSUd7dc= Subject key identifier: 34:9A:F9:68:35:97:5D:26:D5:00:BB:89:15:FA:77:EA:F3:A2:DC:29 Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0C67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0C57 Signing time: Sun 08 Jun 2025 18:10:56 +0000 Manifest this update: Sun 08 Jun 2025 18:10:56 +0000 Manifest next update: Sun 15 Jun 2025 18:10:55 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: /oDlGEV9lnjFM9zfeFJARoN5q9UHwfMEJC6PFy4AaGo=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: Wk7XsElJ9QejMrm05qJ4YVcTMAAYD+d8lLLUdBQZCXY=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: vTFXyGHYGe6s3SqvcZNP+dIhUxLeP7oO2VI4PVLGlrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3175 (0xc67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Jun 8 18:10:56 2025 GMT Not After : Jun 15 18:10:55 2025 GMT Subject: CN=6845d230-e3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:b6:08:a9:fb:b4:2c:27:c3:44:37:8b:3a: 28:7a:53:db:c4:44:f6:64:05:c0:3c:c5:24:2a:d0: 8a:cf:f4:0c:ac:ba:58:5d:15:0c:55:9b:fc:9d:55: 27:de:d4:4a:80:df:8c:b3:9c:c5:2a:8b:c7:0f:91: d0:62:7e:45:e6:3d:75:9d:d6:a0:5b:9c:91:52:de: b1:76:92:6a:56:76:a6:39:25:65:51:91:50:93:23: 06:50:00:91:e9:ca:78:0b:0b:14:90:f1:75:ce:f0: 19:da:b4:b9:e4:4a:ef:3b:9e:0a:e2:15:07:24:2c: 9b:6b:60:d7:70:72:70:58:2f:2d:f4:e0:e7:2f:48: 6a:cc:14:4b:1d:54:d6:9d:3f:05:b6:45:d9:74:b7: c9:52:c5:1b:23:c9:5c:bd:27:2b:e1:9e:90:1e:9c: aa:aa:4c:ef:9e:68:3c:34:4c:ab:06:79:19:a6:f2: d2:04:9a:5a:37:16:b8:98:af:6b:c4:f9:07:b7:53: 0e:2c:e4:15:77:51:27:e2:0b:64:15:9d:5c:b5:6e: 51:fa:79:28:53:ac:7b:43:81:45:30:de:b8:99:04: d2:8f:8c:3b:14:89:89:70:21:e1:c8:c9:d5:81:85: 0e:fc:77:9b:23:c2:fe:a1:4c:9c:fe:60:01:62:74: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9A:F9:68:35:97:5D:26:D5:00:BB:89:15:FA:77:EA:F3:A2:DC:29 X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:2c:31:5c:84:74:05:ce:7d:50:f6:30:b7:c7:41:12:9c:7a: 60:70:44:45:f3:f4:79:6c:43:86:0d:05:cc:75:72:d2:96:25: 28:fc:15:75:c0:e5:c1:55:cc:f6:c3:37:f7:1e:6a:9a:04:1f: a0:4b:b1:18:98:67:03:a3:1e:80:ee:3e:d2:91:68:ca:4c:68: 24:0e:c9:cb:13:41:05:10:88:8d:1a:0b:6c:72:a7:0d:4c:28: b4:22:a8:40:39:e3:64:48:df:da:42:21:1a:b4:07:45:36:f9: 08:3e:89:39:0e:6d:02:5b:56:97:ef:30:ef:d0:8d:4e:94:de: 70:1d:e0:46:13:f7:41:a8:f1:b2:8e:9f:7e:a7:5f:d6:0a:c4: 61:07:e8:9c:97:5e:26:57:8c:19:4d:12:a6:32:40:8a:04:b1: 7f:01:3d:fb:6a:8e:13:52:7b:3d:8f:c8:4f:a5:d6:b6:34:19: 22:cd:9c:1a:74:12:e3:2e:9e:c5:ee:d3:46:d0:5f:58:ca:cc: e6:8d:c6:fd:72:9d:cb:b0:ed:f3:c1:ec:a4:8d:60:df:10:27: 3c:16:7b:cf:76:ca:22:e9:b3:a3:93:de:b0:47:c9:55:60:13: 0b:eb:b6:c5:d6:e6:28:63:bc:51:57:a4:36:a5:45:55:3a:37: 7b:e4:39:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjUwNjA4MTgxMDU2WhcNMjUwNjE1MTgxMDU1WjAYMRYwFAYD VQQDEw02ODQ1ZDIzMC1lM2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQm2CKn7tCwnw0Q3izooelPbxET2ZAXAPMUkKtCKz/QMrLpYXRUMVZv8nVUn 3tRKgN+Ms5zFKovHD5HQYn5F5j11ndagW5yRUt6xdpJqVnamOSVlUZFQkyMGUACR 6cp4CwsUkPF1zvAZ2rS55ErvO54K4hUHJCyba2DXcHJwWC8t9ODnL0hqzBRLHVTW nT8FtkXZdLfJUsUbI8lcvScr4Z6QHpyqqkzvnmg8NEyrBnkZpvLSBJpaNxa4mK9r xPkHt1MOLOQVd1En4gtkFZ1ctW5R+nkoU6x7Q4FFMN64mQTSj4w7FImJcCHhyMnV gYUO/HebI8L+oUyc/mABYnSCjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSa+Wg1 l10m1QC7iRX6d+rzotwpMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXLDFchHQFzn1Q9jC3x0ESnHpgcERF8/R5bEOGDQXMdXLSliUo/BV1 wOXBVcz2wzf3HmqaBB+gS7EYmGcDox6A7j7SkWjKTGgkDsnLE0EFEIiNGgtscqcN TCi0IqhAOeNkSN/aQiEatAdFNvkIPok5Dm0CW1aX7zDv0I1OlN5wHeBGE/dBqPGy jp9+p1/WCsRhB+icl14mV4wZTRKmMkCKBLF/AT37ao4TUns9j8hPpda2NBkizZwa dBLjLp7F7tNG0F9Yyszmjcb9cp3LsO3zweykjWDfECc8FnvPdsoi6bOjk96wR8lV YBML67bF1uYoY7xRV6Q2pUVVOjd75DlI -----END CERTIFICATE-----Generated at Mon Jun 9 12:38:53 2025 by rpki-client