$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json) Hash identifier: oYRLhFiPaHH9ByIVtkW43VqlzaPauzMWFpP2ca/1IUM= Subject key identifier: 4C:AB:69:34:8C:ED:36:18:4B:08:2C:AB:D8:20:3A:69:73:2C:0B:81 Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C Certificate serial: 0FC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft Manifest number: 0FAA Signing time: Fri 06 Jun 2025 17:33:41 +0000 Manifest this update: Fri 06 Jun 2025 17:33:40 +0000 Manifest next update: Fri 13 Jun 2025 17:33:40 +0000 Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: K3ash00Wxikwr6yGlO/FpVCBgiWCoJWOnjN5yIz2sr4=) 2: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: HeL3v4bVI9uczPOUq41UBh1VIigK//d/8NJCyMV1Esw=) 3: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: jKjjt2VMX2OyaKrGVueLOjhPSZoYcuGJoWMyYUxs8bM=) 4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: MIfxKi8mqzy4qfoso9S7UhSd/IeBwSzQBKvFHVpyedo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 17:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4034 (0xfc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C Validity Not Before: Jun 6 17:33:40 2025 GMT Not After : Jun 13 17:33:40 2025 GMT Subject: CN=68432674-69d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:e9:25:0c:f5:2f:02:ce:39:e5:57:43:c5: 77:a7:5e:58:e4:63:29:8c:36:42:27:33:70:14:da: a7:22:53:bd:af:a2:4f:03:af:a4:58:b1:57:1f:b0: 4f:8e:9c:ba:1e:e2:a8:88:06:19:34:7d:b8:88:9d: ab:0a:a7:70:e8:0b:29:87:58:a7:a6:1c:78:ca:c9: 74:14:f3:e3:cc:7d:e9:95:51:be:2b:b4:0e:26:05: fe:19:07:08:03:8c:5a:01:9e:c5:8a:6c:e6:a1:45: 3c:0b:34:1e:af:dd:86:39:c1:c8:ad:82:7e:0a:d1: 85:40:6d:19:e8:43:f0:9e:ba:b9:09:4a:2f:58:93: 27:3f:92:a0:50:37:a0:3d:53:98:2c:1a:18:b5:fb: a7:e5:3f:93:7f:7e:3f:e1:df:26:89:10:7b:8a:63: c4:66:06:db:72:26:b1:b3:05:4e:d5:53:fc:dc:2b: 12:b1:c7:d3:3c:16:b8:8b:f0:40:d3:df:3d:07:89: bf:9c:4d:0f:cd:f6:84:cd:59:d8:4b:e1:2a:d1:68: 59:36:41:c6:f4:2f:4d:1f:28:75:f9:9a:03:1c:64: a4:36:d5:97:24:b9:72:36:b1:d4:12:c1:77:82:44: 28:43:74:46:73:f0:50:22:f3:a5:61:d0:c1:2f:90: e6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AB:69:34:8C:ED:36:18:4B:08:2C:AB:D8:20:3A:69:73:2C:0B:81 X509v3 Authority Key Identifier: keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:66:73:9b:ca:de:97:14:72:06:fb:11:db:10:6e:95:88:ec: 3a:6a:d9:14:15:21:8e:69:de:a1:0b:97:2a:dc:07:4a:9a:93: 17:82:13:da:c7:24:40:9d:eb:b2:9c:79:3e:a1:75:80:78:53: 1a:e5:ee:41:49:cb:e0:34:17:d5:6e:6a:6c:82:9a:a1:3b:02: da:8c:de:57:7c:56:38:54:8d:a8:b9:3e:66:50:44:19:f5:76: ca:19:61:e2:6d:7b:15:48:a1:6b:ac:c1:10:13:74:2b:c5:b6: 16:10:b7:bf:79:8c:6a:fd:73:fa:5d:b7:a2:23:a2:ba:d3:5d: b7:77:55:89:76:cd:c3:42:55:1c:bb:8b:ea:0c:a3:c0:80:3d: 36:35:20:e8:47:68:43:75:25:ce:78:34:f7:f8:4c:d7:1b:24: bd:1c:5c:91:ea:b5:6f:a0:9f:b9:ac:f8:8f:42:28:60:49:77: ca:d8:ed:52:f2:01:b2:cd:a5:a0:4a:ad:15:aa:5f:aa:6e:14: c6:80:0e:01:6a:f8:bc:45:37:40:d7:3f:89:a4:8f:22:85:63: d4:55:63:09:92:85:d0:74:3d:9c:17:b3:f2:9b:4e:61:55:0c: 4a:52:00:f2:fa:0c:de:42:4b:eb:d4:df:55:c9:25:6f:fe:22: 6f:ae:85:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG RENDMjQxMEMwHhcNMjUwNjA2MTczMzQwWhcNMjUwNjEzMTczMzQwWjAYMRYwFAYD VQQDEw02ODQzMjY3NC02OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwXpJQz1LwLOOeVXQ8V3p15Y5GMpjDZCJzNwFNqnIlO9r6JPA6+kWLFXH7BP jpy6HuKoiAYZNH24iJ2rCqdw6Asph1inphx4ysl0FPPjzH3plVG+K7QOJgX+GQcI A4xaAZ7FimzmoUU8CzQer92GOcHIrYJ+CtGFQG0Z6EPwnrq5CUovWJMnP5KgUDeg PVOYLBoYtfun5T+Tf34/4d8miRB7imPEZgbbciaxswVO1VP83CsSscfTPBa4i/BA 0989B4m/nE0PzfaEzVnYS+Eq0WhZNkHG9C9NHyh1+ZoDHGSkNtWXJLlyNrHUEsF3 gkQoQ3RGc/BQIvOlYdDBL5DmiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyraTSM 7TYYSwgsq9ggOmlzLAuBMB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdFOC9GMTZFMTg1NjVDNTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdV R3JjMHh5QmhmZmY5ekNRUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ZnObyt6XFHIG+xHbEG6ViOw6atkUFSGOad6hC5cq3AdKmpMXghPa xyRAneuynHk+oXWAeFMa5e5BScvgNBfVbmpsgpqhOwLajN5XfFY4VI2ouT5mUEQZ 9XbKGWHibXsVSKFrrMEQE3QrxbYWELe/eYxq/XP6XbeiI6K60123d1WJds3DQlUc u4vqDKPAgD02NSDoR2hDdSXOeDT3+EzXGyS9HFyR6rVvoJ+5rPiPQihgSXfK2O1S 8gGyzaWgSq0Vql+qbhTGgA4Bavi8RTdA1z+JpI8ihWPUVWMJkoXQdD2cF7Pym05h VQxKUgDy+gzeQkvr1N9VySVv/iJvroVp -----END CERTIFICATE-----Generated at Sat Jun 7 00:23:49 2025 by rpki-client