$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft File: _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json) Hash identifier: vEzOYi6ncYCqcYE8yBG7qR3RMC4VmGygu7Ka9ETssSw= Subject key identifier: 02:20:C4:EC:C6:44:7D:DB:A1:0E:7B:A4:1F:41:22:FB:9A:91:51:38 Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA Certificate issuer: /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Certificate serial: 0525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft Manifest number: 051F Signing time: Fri 06 Jun 2025 23:37:54 +0000 Manifest this update: Fri 06 Jun 2025 23:37:54 +0000 Manifest next update: Fri 13 Jun 2025 23:37:54 +0000 Files and hashes: 1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: j56/LVICp95Dv9LNnJuQImmGfhxAbB9BhUcxeRw0YSY=) 2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: gNJTzz5gTRCi7TWu8OqobzQyrN+9OUDBMZ0c3PoKanY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 23:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Validity Not Before: Jun 6 23:37:54 2025 GMT Not After : Jun 13 23:37:54 2025 GMT Subject: CN=68437bd2-4938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:8d:57:b9:2e:ab:4b:da:0d:ac:a9:be:93: 3b:f0:4f:ed:ce:88:d7:82:42:41:0c:5b:37:9f:dc: bd:5e:86:88:35:71:71:74:61:3a:30:31:9e:27:6e: ac:57:27:89:f5:19:e8:8c:7b:93:ad:c8:03:cf:9d: 29:5b:43:8a:d1:43:95:2e:9b:5a:0d:4d:a0:ab:ff: 47:0e:64:83:75:63:04:b3:02:d1:c0:d4:1c:dc:5e: de:50:7e:82:74:9d:1c:c0:50:e9:84:19:d5:85:55: cf:66:6c:d2:bc:77:66:6f:64:26:95:18:fd:39:5d: 01:6f:92:47:c4:c5:00:41:e7:85:39:a2:83:dd:f1: d1:d9:5b:f8:83:05:90:45:61:3f:5a:87:79:32:a6: da:a7:6d:50:85:7c:03:34:78:02:68:18:8b:87:e6: ff:8c:e3:30:ab:5c:9b:a9:02:3e:56:ae:4f:f3:6d: f2:1b:94:35:01:cf:df:2b:7a:ab:94:49:a0:ee:13: 4e:7f:38:7c:3d:6e:f7:f3:e3:1f:96:08:20:9b:c5: bb:39:ea:fe:e6:85:60:8c:43:aa:97:a1:ce:01:a2: 0c:fc:20:e0:14:78:98:c4:31:bd:d6:38:d7:6a:11: 4a:b0:26:7a:81:ce:76:a4:04:dc:1d:ab:ed:f0:2b: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:C4:EC:C6:44:7D:DB:A1:0E:7B:A4:1F:41:22:FB:9A:91:51:38 X509v3 Authority Key Identifier: keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:37:c2:23:30:b2:ae:2e:c2:87:ad:6d:4b:27:75:b0:de:fd: 3e:ea:88:81:1f:eb:25:e3:38:1b:80:2d:a2:3b:0c:78:89:f9: 8f:45:54:0c:af:ea:d9:60:90:86:c3:1d:2a:d2:1c:99:55:80: b0:bd:36:e3:1c:86:4b:d9:56:6a:42:d5:24:0a:81:0a:8d:15: 06:1b:e0:37:cf:ef:08:6b:29:25:56:b9:47:6b:b1:46:94:5f: ee:1e:b1:dc:f8:a4:2f:6e:47:20:16:bd:d1:94:9d:c9:f6:6c: 8f:2e:39:98:7b:30:91:7c:c9:3b:45:a3:8d:64:37:9d:fd:90: 65:f8:96:68:9a:9c:e6:92:cc:4e:3b:4f:8d:e2:7b:e2:56:f7: 69:fa:75:0f:3a:25:dd:d1:ad:70:ce:f0:c2:c8:2c:b6:6a:a7: 47:58:a6:71:ab:88:03:ef:34:9c:18:38:02:fd:b9:ad:28:4c: 62:1e:41:26:11:cf:62:48:98:c4:f8:f6:9f:ce:33:86:e8:76: ac:8a:4e:1b:11:87:69:59:0a:b4:f7:65:64:4b:f9:2a:1d:2d: ac:55:79:86:c0:dd:59:26:20:f5:7b:5b:d7:8f:cd:d8:37:98: 1a:64:fe:8d:61:a1:9c:c2:3b:0d:ee:2a:91:67:cb:fd:60:1c: 83:06:55:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEzRDAxMTAvBgNVBAUTKEZDODBCNDlCNTA3MzMyRkQ0QzlDOTJERDVFMjdBMkRG Q0E4MDY0REEwHhcNMjUwNjA2MjMzNzU0WhcNMjUwNjEzMjMzNzU0WjAYMRYwFAYD VQQDEw02ODQzN2JkMi00OTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF2NV7kuq0vaDaypvpM78E/tzojXgkJBDFs3n9y9XoaINXFxdGE6MDGeJ26s VyeJ9RnojHuTrcgDz50pW0OK0UOVLptaDU2gq/9HDmSDdWMEswLRwNQc3F7eUH6C dJ0cwFDphBnVhVXPZmzSvHdmb2QmlRj9OV0Bb5JHxMUAQeeFOaKD3fHR2Vv4gwWQ RWE/Wod5Mqbap21QhXwDNHgCaBiLh+b/jOMwq1ybqQI+Vq5P823yG5Q1Ac/fK3qr lEmg7hNOfzh8PW738+Mflgggm8W7Oer+5oVgjEOql6HOAaIM/CDgFHiYxDG91jjX ahFKsCZ6gc52pATcHavt8Csv0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIgxOzG RH3boQ57pB9BIvuakVE4MB8GA1UdIwQYMBaAFPyAtJtQczL9TJyS3V4not/KgGTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTNEMC9EN0E0QkI1NjA0 QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12MU1uSkxkWGllaTM4cUFa Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JQzBtMUJ6TXYxTW5KTGRYaWVpMzhxQVpOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTNEMC9EN0E0QkI1NjA0QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12 MU1uSkxkWGllaTM4cUFaTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANN8IjMLKuLsKHrW1LJ3Ww3v0+6oiBH+sl4zgbgC2iOwx4ifmPRVQM r+rZYJCGwx0q0hyZVYCwvTbjHIZL2VZqQtUkCoEKjRUGG+A3z+8IayklVrlHa7FG lF/uHrHc+KQvbkcgFr3RlJ3J9myPLjmYezCRfMk7RaONZDed/ZBl+JZompzmksxO O0+N4nviVvdp+nUPOiXd0a1wzvDCyCy2aqdHWKZxq4gD7zScGDgC/bmtKExiHkEm Ec9iSJjE+PafzjOG6Hasik4bEYdpWQq092VkS/kqHS2sVXmGwN1ZJiD1e1vXj83Y N5gaZP6NYaGcwjsN7iqRZ8v9YByDBlX6 -----END CERTIFICATE-----Generated at Sat Jun 7 05:26:48 2025 by rpki-client