$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft File: cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json) Hash identifier: dk1pEqWqhwP/HAJQYn8tuJpAleZigwQi8b+ssZNcUyA= Subject key identifier: 9E:C5:45:F9:84:12:74:F0:6A:FF:F7:DB:42:84:C2:C3:BC:BC:94:8E Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 Certificate issuer: /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft Manifest number: 03A3 Signing time: Tue 01 Jul 2025 01:23:27 +0000 Manifest this update: Tue 01 Jul 2025 01:23:26 +0000 Manifest next update: Tue 08 Jul 2025 01:23:26 +0000 Files and hashes: 1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: hmTI1tWOugBFujzEU3nvPtxDTuwJxJROiC+4NwbT3Nw=) 2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: WktAZLAHSw7QkU+hNH84sEG4OXo+/tq5XSlAqKGLv18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Validity Not Before: Jul 1 01:23:26 2025 GMT Not After : Jul 8 01:23:26 2025 GMT Subject: CN=6863388e-41ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:cd:c9:dd:e5:87:ee:85:61:6f:0e:c6:05: 23:b1:e3:1c:2a:8d:bf:2f:06:1a:62:a9:fd:3e:53: d2:4a:8c:f2:11:2f:2a:18:3d:1e:0d:d7:81:72:37: 3c:bc:0b:49:0c:63:38:68:db:23:9b:34:24:f2:66: 6e:90:9f:03:9d:e9:da:d1:7a:85:c1:6e:7a:da:ec: 8c:19:4b:87:ef:56:de:2c:52:84:a2:46:50:6f:2f: b6:b1:9e:0d:56:72:96:e0:9a:99:46:65:2e:eb:99: bc:3a:f3:f9:63:c1:c3:e6:dd:50:5f:db:35:99:b2: 9e:06:f4:7e:98:c5:8e:a1:c3:31:b7:67:f3:17:53: 7d:e5:34:97:16:92:50:f5:57:da:d9:b0:31:87:08: 3c:5b:5c:ad:9e:f3:28:43:33:e8:61:05:f7:30:cf: 13:48:c7:c7:4d:d4:ab:cc:ac:17:f1:2b:86:11:3d: ae:f0:f4:d3:af:82:a1:da:d3:8a:7a:58:c3:32:bd: e3:1f:bf:fe:93:0f:40:9a:bd:d5:af:b7:23:66:4f: a9:7d:7b:8d:e5:42:02:73:1b:0d:2a:3f:1a:68:58: cb:ce:fd:0a:38:c3:84:bb:c7:34:10:4b:a5:a1:1d: 5e:39:43:e1:a8:55:e8:c1:f1:91:a1:eb:3c:a8:d1: bc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C5:45:F9:84:12:74:F0:6A:FF:F7:DB:42:84:C2:C3:BC:BC:94:8E X509v3 Authority Key Identifier: keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:aa:70:95:ac:92:d4:e0:01:08:1e:f8:fe:50:7b:01:48:3d: a9:3c:51:a1:0b:d1:2a:37:c0:e2:24:72:29:32:65:e8:09:bf: 62:4a:15:27:93:7c:79:8d:30:9f:14:c7:5d:11:d8:82:bb:9a: d6:6e:98:cb:3a:e9:18:51:45:eb:a3:4c:9a:47:64:b2:33:9e: 73:a1:4c:7d:13:48:dc:e9:45:7c:f5:6f:0b:2b:f1:fe:00:cd: 39:01:ae:28:bb:5e:50:da:92:21:fb:39:75:93:6f:8a:25:7b: 30:21:50:2b:98:65:2a:09:8f:5d:6e:ce:8e:21:b1:2f:42:ee: 36:bb:cd:62:bd:ca:7f:52:e8:4a:58:e6:fd:f5:bb:17:46:09: 78:00:ee:3a:c4:0d:f9:f9:ae:ea:51:3d:44:26:68:e2:5e:a9: 21:01:f7:e6:8f:42:51:69:40:44:4b:d6:c9:87:4c:0a:f0:98: 5d:0f:3f:94:bf:1b:f4:84:f1:e2:ac:1d:30:fa:1f:15:82:f0: 1e:e8:73:4e:e8:fa:0c:f9:36:c6:2b:f2:27:17:67:ed:4b:53: a5:56:07:ae:6b:40:d6:1a:46:a7:9e:69:75:1b:ff:06:8e:e4: bc:f8:01:8a:9e:fb:32:37:27:ae:9c:3f:1c:ef:a4:d5:db:bd: 3c:ea:f7:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFEOTExMTAvBgNVBAUTKDcwNTU4MUQ0MEM5NTgxQTI2NTFFNTMyNTIzOERCM0JE Q0IzQTdEMDUwHhcNMjUwNzAxMDEyMzI2WhcNMjUwNzA4MDEyMzI2WjAYMRYwFAYD VQQDEw02ODYzMzg4ZS00MWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgvNyd3lh+6FYW8OxgUjseMcKo2/LwYaYqn9PlPSSozyES8qGD0eDdeBcjc8 vAtJDGM4aNsjmzQk8mZukJ8Dnena0XqFwW562uyMGUuH71beLFKEokZQby+2sZ4N VnKW4JqZRmUu65m8OvP5Y8HD5t1QX9s1mbKeBvR+mMWOocMxt2fzF1N95TSXFpJQ 9Vfa2bAxhwg8W1ytnvMoQzPoYQX3MM8TSMfHTdSrzKwX8SuGET2u8PTTr4Kh2tOK eljDMr3jH7/+kw9Amr3Vr7cjZk+pfXuN5UICcxsNKj8aaFjLzv0KOMOEu8c0EEul oR1eOUPhqFXowfGRoes8qNG8pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7FRfmE EnTwav/320KEwsO8vJSOMB8GA1UdIwQYMBaAFHBVgdQMlYGiZR5TJSONs73LOn0F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ5MS81RDhDMTcxMkEw NDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5VmdhSmxIbE1sSTQyenZjczZm UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGV0IxQXlWZ2FKbEhsTWxJNDJ6dmNzNmZRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ5MS81RDhDMTcxMkEwNDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5Vmdh SmxIbE1sSTQyenZjczZmUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCqnCVrJLU4AEIHvj+UHsBSD2pPFGhC9EqN8DiJHIpMmXoCb9iShUn k3x5jTCfFMddEdiCu5rWbpjLOukYUUXro0yaR2SyM55zoUx9E0jc6UV89W8LK/H+ AM05Aa4ou15Q2pIh+zl1k2+KJXswIVArmGUqCY9dbs6OIbEvQu42u81ivcp/UuhK WOb99bsXRgl4AO46xA35+a7qUT1EJmjiXqkhAffmj0JRaUBES9bJh0wK8JhdDz+U vxv0hPHirB0w+h8VgvAe6HNO6PoM+TbGK/InF2ftS1OlVgeua0DWGkannml1G/8G juS8+AGKnvsyNyeunD8c76TV27086vd7 -----END CERTIFICATE-----Generated at Wed Jul 2 05:32:46 2025 by rpki-client