$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: jIZ/KtVEphkxNoe4CCNXX86ndrD0nylvl9AMrMZjycY= Subject key identifier: DC:73:10:FE:A4:58:48:B1:0E:94:5A:79:07:99:15:9B:81:CE:3C:C3 Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0D25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0D1B Signing time: Mon 30 Jun 2025 18:15:27 +0000 Manifest this update: Mon 30 Jun 2025 18:15:27 +0000 Manifest next update: Mon 07 Jul 2025 18:15:27 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: unMKZHHv/3hHReAgVPNELlXf5RCiZ8b3U29MtJk5wio=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: YQKzakVZRwkEoSkOxzmifYwaHBBE1uM/hdsf+7QDJq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3365 (0xd25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Jun 30 18:15:27 2025 GMT Not After : Jul 7 18:15:27 2025 GMT Subject: CN=6862d43f-b50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:48:18:41:0d:7d:cf:b7:91:83:78:a9:66: a4:f3:bb:2d:75:d9:ce:38:77:c6:aa:65:5b:38:14: dc:86:13:36:f2:bf:14:63:67:17:89:af:fa:30:d8: 88:d6:81:65:64:bd:1b:4e:74:19:1a:35:5a:16:54: a0:74:66:a2:3b:4d:da:07:a2:15:07:c6:8a:80:2a: 6b:3d:56:ff:e3:fd:4e:bb:a1:f1:76:68:35:14:36: 34:1d:99:ab:30:a9:dd:11:45:4e:a2:bf:66:4d:fd: 1d:c4:e6:1e:ef:fc:02:4e:0b:ab:31:71:4a:26:0f: e5:f0:04:b1:30:b2:f1:b4:76:95:62:ce:eb:ad:52: ba:6b:52:22:0e:8a:54:c1:20:3d:43:46:fb:b6:17: ba:7c:d8:84:89:c7:f3:2b:64:67:19:c2:33:a5:e2: be:0a:f7:3d:92:9c:75:bf:0f:df:b1:56:c6:65:cb: a3:37:c7:59:ab:0b:e1:fa:d1:81:0e:b4:8d:b0:b8: 27:ae:e8:d9:23:3d:6a:c1:c0:57:60:a9:a4:bd:db: cd:82:d8:24:49:54:21:a5:aa:43:db:37:27:a8:94: 22:85:d5:0e:ff:c0:76:b4:db:48:44:3e:ac:b2:54: 37:b5:19:07:98:8b:fe:8c:62:6e:ea:3e:95:25:da: 7b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:73:10:FE:A4:58:48:B1:0E:94:5A:79:07:99:15:9B:81:CE:3C:C3 X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:7d:bc:5d:48:72:e4:fd:87:03:a2:52:05:d6:4a:2e:68:16: 47:6f:c8:38:31:2b:33:de:69:b2:c4:30:b0:aa:56:44:55:4a: a9:87:f3:c3:00:87:bf:5c:31:3b:2c:f9:b9:d9:09:f1:85:a3: 1e:fb:ef:e2:10:3a:e5:e6:28:7e:85:02:e7:17:18:c0:c3:75: f4:9e:19:7b:11:b1:6e:8b:91:80:5b:bf:8d:7e:6d:d4:04:f4: 14:df:78:e6:53:94:35:57:ca:bc:5b:50:c9:ec:ca:01:54:ad: 29:c0:d1:c5:33:bf:b5:bd:4f:f1:ab:c2:b6:84:56:18:01:8c: d8:35:34:de:c4:fd:f9:55:37:d7:60:01:95:1c:8f:8e:fc:40: 9f:b2:96:57:dd:92:4a:03:cc:ad:69:92:13:20:46:61:91:a8: 45:74:24:e6:79:cb:a6:92:54:2b:ad:7a:54:d7:ac:72:4d:f8: 8a:a2:dd:ef:93:1e:2a:22:cf:48:ab:66:ce:c0:93:59:c6:d8: fa:4d:9f:e8:d5:f6:0d:fb:52:17:5e:c2:d4:14:8e:ac:d7:d1: e1:ff:eb:fe:e6:34:04:84:76:bc:87:2d:c3:0d:7c:89:9e:05: be:17:29:39:72:92:a9:27:53:14:4c:2d:ee:7a:5b:5d:2f:ce: 03:b6:4c:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjUwNjMwMTgxNTI3WhcNMjUwNzA3MTgxNTI3WjAYMRYwFAYD VQQDEw02ODYyZDQzZi1iNTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf1IGEENfc+3kYN4qWak87stddnOOHfGqmVbOBTchhM28r8UY2cXia/6MNiI 1oFlZL0bTnQZGjVaFlSgdGaiO03aB6IVB8aKgCprPVb/4/1Ou6Hxdmg1FDY0HZmr MKndEUVOor9mTf0dxOYe7/wCTgurMXFKJg/l8ASxMLLxtHaVYs7rrVK6a1IiDopU wSA9Q0b7the6fNiEicfzK2RnGcIzpeK+Cvc9kpx1vw/fsVbGZcujN8dZqwvh+tGB DrSNsLgnrujZIz1qwcBXYKmkvdvNgtgkSVQhpapD2zcnqJQihdUO/8B2tNtIRD6s slQ3tRkHmIv+jGJu6j6VJdp7dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxzEP6k WEixDpRaeQeZFZuBzjzDMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHfbxdSHLk/YcDolIF1kouaBZHb8g4MSsz3mmyxDCwqlZEVUqph/PD AIe/XDE7LPm52QnxhaMe++/iEDrl5ih+hQLnFxjAw3X0nhl7EbFui5GAW7+Nfm3U BPQU33jmU5Q1V8q8W1DJ7MoBVK0pwNHFM7+1vU/xq8K2hFYYAYzYNTTexP35VTfX YAGVHI+O/ECfspZX3ZJKA8ytaZITIEZhkahFdCTmecumklQrrXpU16xyTfiKot3v kx4qIs9Iq2bOwJNZxtj6TZ/o1fYN+1IXXsLUFI6s19Hh/+v+5jQEhHa8hy3DDXyJ ngW+Fyk5cpKpJ1MUTC3ueltdL84Dtkwb -----END CERTIFICATE-----Generated at Tue Jul 1 21:23:18 2025 by rpki-client