$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json) Hash identifier: JhF2OpeoQnVtkFJqZjs4tHRbq+EEFhvxMeDg6Uzm+9Q= Subject key identifier: 27:BF:DB:96:67:68:46:98:BC:E7:EC:9D:6F:B3:69:C4:A4:B4:5B:DE Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Certificate serial: 06E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft Manifest number: 06DB Signing time: Fri 30 May 2025 22:12:48 +0000 Manifest this update: Fri 30 May 2025 22:12:48 +0000 Manifest next update: Fri 06 Jun 2025 22:12:48 +0000 Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: bYUB9A/yEl0WWWDqHJen2nU3SLXXM442UAezW7H6Ld4=) 2: B6FCD4F60CD111ECABD2264AC4F9AE02.roa (hash: bB+9hsPPapCcbcV407klYfK5DJTWT3wpVck7/MMMHXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1761 (0x6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Validity Not Before: May 30 22:12:48 2025 GMT Not After : Jun 6 22:12:48 2025 GMT Subject: CN=683a2d60-01db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:37:5f:be:af:6d:8a:35:f3:dd:f4:0e:ed:bd: ed:be:1e:79:41:79:6d:51:f4:c3:a8:ed:85:e8:08: 34:9e:4a:0b:39:16:a4:69:16:be:12:7f:b7:61:59: 08:ec:b6:0a:02:4a:72:76:f6:f7:03:3e:61:ee:c9: f8:ba:0d:82:92:f7:da:d1:8c:46:a9:80:8d:2e:f3: dc:67:6b:3c:a7:f0:aa:6d:3d:e8:c9:11:17:65:bc: 55:1b:d0:f3:d7:5b:18:9c:c6:89:95:57:03:8c:14: fd:19:13:c2:c4:ec:5d:72:96:87:9b:44:b6:af:f1: 1d:24:66:7b:37:9d:30:42:60:a4:3d:28:ff:d7:cc: f9:a2:77:b4:fc:e9:c4:01:e7:64:5f:93:a8:49:eb: c8:b2:17:d0:14:d1:a1:63:8b:d8:02:59:e7:70:89: ca:44:e1:7d:38:01:a5:44:07:64:29:e0:df:e8:2b: 02:bf:20:89:c1:41:14:c4:3b:57:93:c1:86:43:fd: 49:57:d5:c4:57:bb:7d:19:d9:f9:46:de:33:1f:ad: 77:7e:9d:67:9f:8a:97:b9:2b:1d:6d:b4:2a:bc:ae: fc:19:4e:73:5a:1a:3c:1a:aa:07:e6:6d:3e:39:de: e8:ba:43:40:ed:75:ab:68:64:b2:88:7c:bc:43:1b: 7b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BF:DB:96:67:68:46:98:BC:E7:EC:9D:6F:B3:69:C4:A4:B4:5B:DE X509v3 Authority Key Identifier: keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7e:d5:70:c1:3a:88:55:1f:5a:e9:68:e8:9c:25:75:0e:98: 81:88:02:bb:78:ac:0a:63:e3:d3:c6:78:28:a0:79:6c:fa:c7: 85:be:5e:2b:9c:f9:ee:d4:f6:1c:af:dc:09:34:78:05:a1:f7: c6:cb:78:c3:33:6a:f7:c7:64:ce:3b:35:f1:3d:d5:4d:c4:54: 62:32:84:1f:08:4a:85:34:63:29:b2:61:9a:38:76:e3:1c:1a: a2:c6:0d:51:a2:9f:2f:99:6a:57:e5:24:59:a4:bf:23:52:4f: 6b:73:3c:18:53:7b:22:61:21:03:4d:5c:ef:6a:6e:a3:24:34: d6:72:1a:1a:00:ed:46:71:a1:0d:cb:cb:44:c6:da:d1:02:63: ae:13:72:7f:b6:df:02:72:69:75:82:de:6a:d2:5c:ba:76:e7: 15:3c:ab:15:62:da:94:30:c2:01:29:32:b0:7a:80:78:6d:54: 69:a6:01:38:18:6a:c5:e6:b2:09:ff:d1:4f:a7:77:89:ac:a2: d9:88:ae:eb:44:69:b1:6f:b1:2d:44:62:c2:ba:59:c0:6b:44: 90:ff:00:e7:37:f3:d4:1a:23:36:68:a0:c5:96:d9:d6:9e:4a: f9:2b:4d:7e:b9:21:c3:ee:6e:5b:d2:f3:a9:f0:d7:19:74:bd: 1a:37:96:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGOTMxMTAvBgNVBAUTKDZCQzI2M0I1MUE1NkI1MTc0MDc3NzQ1OTc5NjIyN0VE MDBERjRENzAwHhcNMjUwNTMwMjIxMjQ4WhcNMjUwNjA2MjIxMjQ4WjAYMRYwFAYD VQQDEw02ODNhMmQ2MC0wMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Ddfvq9tijXz3fQO7b3tvh55QXltUfTDqO2F6Ag0nkoLORakaRa+En+3YVkI 7LYKAkpydvb3Az5h7sn4ug2Ckvfa0YxGqYCNLvPcZ2s8p/CqbT3oyREXZbxVG9Dz 11sYnMaJlVcDjBT9GRPCxOxdcpaHm0S2r/EdJGZ7N50wQmCkPSj/18z5one0/OnE AedkX5OoSevIshfQFNGhY4vYAlnncInKROF9OAGlRAdkKeDf6CsCvyCJwUEUxDtX k8GGQ/1JV9XEV7t9Gdn5Rt4zH613fp1nn4qXuSsdbbQqvK78GU5zWho8GqoH5m0+ Od7oukNA7XWraGSyiHy8Qxt7ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe/25Zn aEaYvOfsnW+zacSktFveMB8GA1UdIwQYMBaAFGvCY7UaVrUXQHd0WXliJ+0A301w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkY5My82OTk5Rjc4RTUy NDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RSZEFkM1JaZVdJbjdRRGZU WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4Smp0UnBXdFJkQWQzUlplV0luN1FEZlRYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkY5My82OTk5Rjc4RTUyNDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RS ZEFkM1JaZVdJbjdRRGZUWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7ftVwwTqIVR9a6WjonCV1DpiBiAK7eKwKY+PTxngooHls+seFvl4r nPnu1PYcr9wJNHgFoffGy3jDM2r3x2TOOzXxPdVNxFRiMoQfCEqFNGMpsmGaOHbj HBqixg1Rop8vmWpX5SRZpL8jUk9rczwYU3siYSEDTVzvam6jJDTWchoaAO1GcaEN y8tExtrRAmOuE3J/tt8Ccml1gt5q0ly6ducVPKsVYtqUMMIBKTKweoB4bVRppgE4 GGrF5rIJ/9FPp3eJrKLZiK7rRGmxb7EtRGLCulnAa0SQ/wDnN/PUGiM2aKDFltnW nkr5K01+uSHD7m5b0vOp8NcZdL0aN5a9 -----END CERTIFICATE-----Generated at Sat May 31 16:49:04 2025 by rpki-client