$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft File: -D3DokbRIVGsh6dyzsoO3SFfhio.mft (raw, json) Hash identifier: T/YA2Xdj1+v5MQlTfClddPGXIEBt2ZkxSU6KU1R5iPI= Subject key identifier: BD:17:7A:31:A2:17:27:CA:19:43:BD:9E:7C:9F:B0:B2:D1:37:4D:BE Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft Manifest number: E4 Signing time: Mon 09 Jun 2025 04:25:54 +0000 Manifest this update: Mon 09 Jun 2025 04:25:53 +0000 Manifest next update: Mon 16 Jun 2025 04:25:53 +0000 Files and hashes: 1: -D3DokbRIVGsh6dyzsoO3SFfhio.crl (hash: O/UDfGpfsBnOTQjvhGP6ZZC/esUO9jMAqvR61LTFYRg=) 2: EC7311FEE5C311EEBF217685C4F9AE02.roa (hash: qmFjn7wAfMqWkF24WNm8IekVR4ecxQdIio3RLzGcoHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 04:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDFF2, serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Validity Not Before: Jun 9 04:25:53 2025 GMT Not After : Jun 16 04:25:53 2025 GMT Subject: CN=68466251-9547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7e:85:2b:a9:9a:9e:d5:81:78:51:16:da:39: 6f:62:fd:e5:d9:8e:d4:f0:1e:3e:34:1f:44:73:25: 73:a8:2b:23:9e:eb:12:6a:71:5a:23:54:c4:9d:6c: 7d:81:df:97:60:2e:78:81:71:44:b9:aa:aa:48:2f: 46:f6:6a:d3:f0:69:25:7f:67:98:3b:1d:98:85:f9: 34:9c:26:2b:4a:46:ab:a5:c8:a9:90:d7:d2:a9:e9: 11:d3:07:9f:a1:02:c2:f9:14:06:48:2d:de:ef:d8: ba:73:e7:b1:15:99:a9:94:75:4f:db:22:dc:ce:b0: f1:0f:e7:69:38:03:41:ee:b1:65:de:7e:3e:89:a1: 1a:11:99:54:f9:9d:76:54:ce:8e:db:e5:ac:6a:a2: 79:8b:8e:f1:77:1f:18:e6:28:73:0f:94:c9:93:83: a8:79:87:41:d9:00:e9:4f:18:89:d7:af:e0:dc:f9: 52:73:d3:b6:ed:ca:1b:38:c9:a2:50:9c:d2:f8:56: 1a:8d:0c:2f:de:f3:c0:c2:e6:d5:e9:04:bf:4b:38: e3:37:11:8c:2f:7a:e9:af:b8:f6:1f:5d:c8:5d:ce: b4:12:68:71:77:d2:b7:04:32:05:66:9c:40:b5:9e: a9:0f:1f:76:d8:a8:b0:b4:22:fd:8c:50:51:12:0b: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:17:7A:31:A2:17:27:CA:19:43:BD:9E:7C:9F:B0:B2:D1:37:4D:BE X509v3 Authority Key Identifier: keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:b2:48:92:3e:63:4f:16:d9:ef:22:7e:0a:95:1e:88:2c:eb: d7:87:78:d1:f5:ea:ad:5d:51:56:1f:06:ab:0c:e6:94:89:a2: d9:37:14:ad:c4:07:b6:cc:60:18:01:f5:b3:2f:15:aa:2f:ae: 0d:de:dd:f8:61:f2:3f:02:df:b0:65:cb:b2:dd:a4:ca:73:92: b5:46:53:49:d5:ca:80:ed:4d:18:f8:16:24:2c:08:4c:47:51: 7a:47:65:2d:3c:0f:68:db:16:83:73:7a:46:d7:fe:14:8a:9a: 16:fe:b3:60:03:ec:7a:0e:70:de:f2:d7:fa:b5:55:ca:6b:38: 74:01:f4:51:fb:b7:87:a5:79:13:0c:9a:73:2a:d0:11:78:b6: c2:b4:5d:11:f5:df:08:92:5c:41:0e:13:e4:4b:5d:4e:92:8f: 46:90:e6:f8:33:5a:68:9d:1c:04:52:c0:af:2f:bf:98:8b:45: 14:f8:22:73:c0:14:fa:97:10:76:f4:11:2e:d2:c2:83:c7:08: ce:ff:97:71:cb:74:d7:ab:e0:a9:fe:09:85:0f:2d:aa:88:43: f5:c5:a2:11:65:d1:00:ff:b8:5b:d8:9e:55:7a:b3:97:8d:d4: bb:ce:61:2f:0e:4b:60:14:f8:9d:0d:00:40:9c:54:4f:cb:71: c4:91:3b:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERGRjIxMTAvBgNVBAUTKEY4M0RDM0EyNDZEMTIxNTFBQzg3QTc3MkNFQ0EwRURE MjE1Rjg2MkEwHhcNMjUwNjA5MDQyNTUzWhcNMjUwNjE2MDQyNTUzWjAYMRYwFAYD VQQDEw02ODQ2NjI1MS05NTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4n6FK6mantWBeFEW2jlvYv3l2Y7U8B4+NB9EcyVzqCsjnusSanFaI1TEnWx9 gd+XYC54gXFEuaqqSC9G9mrT8Gklf2eYOx2Yhfk0nCYrSkarpcipkNfSqekR0wef oQLC+RQGSC3e79i6c+exFZmplHVP2yLczrDxD+dpOANB7rFl3n4+iaEaEZlU+Z12 VM6O2+WsaqJ5i47xdx8Y5ihzD5TJk4OoeYdB2QDpTxiJ16/g3PlSc9O27cobOMmi UJzS+FYajQwv3vPAwubV6QS/SzjjNxGML3rpr7j2H13IXc60Emhxd9K3BDIFZpxA tZ6pDx922KiwtCL9jFBREgvC6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0XejGi FyfKGUO9nnyfsLLRN02+MB8GA1UdIwQYMBaAFPg9w6JG0SFRrIencs7KDt0hX4Yq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREZGMi9DOUFGMjkzNEU1 QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklWR3NoNmR5enNvTzNTRmZo aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REZGMi9DOUFGMjkzNEU1QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklW R3NoNmR5enNvTzNTRmZoaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1skiSPmNPFtnvIn4KlR6ILOvXh3jR9eqtXVFWHwarDOaUiaLZNxSt xAe2zGAYAfWzLxWqL64N3t34YfI/At+wZcuy3aTKc5K1RlNJ1cqA7U0Y+BYkLAhM R1F6R2UtPA9o2xaDc3pG1/4UipoW/rNgA+x6DnDe8tf6tVXKazh0AfRR+7eHpXkT DJpzKtAReLbCtF0R9d8IklxBDhPkS11Oko9GkOb4M1ponRwEUsCvL7+Yi0UU+CJz wBT6lxB29BEu0sKDxwjO/5dxy3TXq+Cp/gmFDy2qiEP1xaIRZdEA/7hb2J5VerOX jdS7zmEvDktgFPidDQBAnFRPy3HEkTsk -----END CERTIFICATE-----Generated at Tue Jun 10 15:00:20 2025 by rpki-client