$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft File: F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json) Hash identifier: M8/VZEmuTueHwBWQI2bApke6JLJIoRZTGzZ2eIjeXUw= Subject key identifier: 4B:6F:DB:3A:17:3D:92:FD:05:D6:1B:4B:62:8A:19:CD:E7:C6:7D:C8 Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Certificate serial: 0F45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft Manifest number: 0F3C Signing time: Tue 10 Jun 2025 17:33:50 +0000 Manifest this update: Tue 10 Jun 2025 17:33:50 +0000 Manifest next update: Tue 17 Jun 2025 17:33:50 +0000 Files and hashes: 1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: Pp/tTowxafv7apE/AVl5AZUgjUhdBMVUJEMyB8mvrhA=) 2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 17:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3909 (0xf45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Validity Not Before: Jun 10 17:33:50 2025 GMT Not After : Jun 17 17:33:50 2025 GMT Subject: CN=68486c7e-89cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:e6:62:16:96:d4:5d:4e:52:52:bf:67:14: 72:1d:fd:3d:ca:75:dd:13:52:6d:76:ad:05:37:08: 86:d0:cf:5c:40:9e:9e:8f:3c:47:d4:85:37:4f:44: 8b:50:a9:c8:f7:77:64:46:40:04:a6:cd:f6:33:ba: 23:e6:9d:c4:de:bc:8d:03:dc:8f:f9:4b:2c:0f:ba: bb:dc:11:11:a4:01:a2:4a:d9:85:a7:69:04:51:cc: be:85:d3:42:0b:a6:74:af:fd:5c:8d:db:9e:b5:32: 7e:7e:73:1f:76:1b:c4:c3:3d:ce:7d:59:80:c9:b2: de:2e:89:2a:71:28:75:50:6d:ee:33:c1:0e:6c:46: a9:72:f4:da:de:73:6c:17:41:1c:c3:32:f5:d5:4b: c3:81:38:c6:82:8e:09:28:7d:0b:4d:08:7c:ba:95: 08:77:73:2b:52:c4:a5:6d:d7:ed:18:38:a2:33:e2: 19:35:02:f2:a7:6c:20:67:85:c0:6e:b6:69:32:11: 76:e5:d8:ee:7c:87:50:6e:c0:cf:a4:57:9a:0b:9a: 38:f6:e6:a4:63:b7:14:67:20:e3:22:18:fb:df:32: 39:47:b1:b4:06:d5:f1:40:f1:18:82:b1:76:30:5a: 56:af:73:75:77:9b:5c:8d:db:25:26:df:03:48:de: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6F:DB:3A:17:3D:92:FD:05:D6:1B:4B:62:8A:19:CD:E7:C6:7D:C8 X509v3 Authority Key Identifier: keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:78:c1:47:b0:b9:ce:84:58:9e:6c:de:83:8e:45:2a:26:57: d2:4b:c3:4b:1b:94:61:6c:89:99:c7:d7:30:54:8d:42:7a:6d: 0f:95:ed:eb:c8:ab:94:23:c6:32:05:3e:70:f4:52:46:00:c0: 24:a3:72:ed:83:ab:04:3a:92:e1:e8:a2:20:ff:b0:11:fc:ad: 56:c2:92:2e:94:2b:84:3d:f4:4b:a9:b7:0e:62:b8:86:c8:0f: d0:d8:2c:6c:08:d6:8c:76:7e:5d:53:94:f2:34:61:c1:6b:e2: ef:76:7c:a8:58:a0:61:96:1d:6b:66:47:4b:81:f4:56:40:46: bc:a0:31:f6:12:02:a2:f5:b2:0b:47:95:6e:11:dc:86:01:11: 0c:8c:8a:42:b6:a9:a8:3f:ce:7a:4c:d1:f7:50:fe:06:ca:29: 3e:b8:ee:c1:55:4f:83:6a:9f:8f:4f:e0:f3:f0:84:f8:8a:2f: f9:8a:77:81:a0:4c:58:89:d3:32:31:59:40:ed:ce:ec:08:17: d6:e5:0b:e2:a9:27:3b:ae:b7:7e:59:b8:f9:88:78:8f:98:d5: 25:58:e4:31:09:e6:f0:3c:62:50:e8:d6:51:97:d2:fe:09:89: 85:cf:f9:e3:39:aa:1d:d7:20:de:dc:ff:bf:79:43:dd:bc:51: a6:52:2b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5 Rjc2RkZCMkYwHhcNMjUwNjEwMTczMzUwWhcNMjUwNjE3MTczMzUwWjAYMRYwFAYD VQQDEw02ODQ4NmM3ZS04OWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1XmYhaW1F1OUlK/ZxRyHf09ynXdE1Jtdq0FNwiG0M9cQJ6ejzxH1IU3T0SL UKnI93dkRkAEps32M7oj5p3E3ryNA9yP+UssD7q73BERpAGiStmFp2kEUcy+hdNC C6Z0r/1cjduetTJ+fnMfdhvEwz3OfVmAybLeLokqcSh1UG3uM8EObEapcvTa3nNs F0EcwzL11UvDgTjGgo4JKH0LTQh8upUId3MrUsSlbdftGDiiM+IZNQLyp2wgZ4XA brZpMhF25djufIdQbsDPpFeaC5o49uakY7cUZyDjIhj73zI5R7G0BtXxQPEYgrF2 MFpWr3N1d5tcjdslJt8DSN4jRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtv2zoX PZL9BdYbS2KKGc3nxn3IMB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzMC9BREZBNTU0QzcwODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5 VVVxTHh4bkN1Zy1mZHYteTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdeMFHsLnOhFiebN6DjkUqJlfSS8NLG5RhbImZx9cwVI1Cem0Ple3r yKuUI8YyBT5w9FJGAMAko3Ltg6sEOpLh6KIg/7AR/K1WwpIulCuEPfRLqbcOYriG yA/Q2CxsCNaMdn5dU5TyNGHBa+LvdnyoWKBhlh1rZkdLgfRWQEa8oDH2EgKi9bIL R5VuEdyGAREMjIpCtqmoP856TNH3UP4Gyik+uO7BVU+Dap+PT+Dz8IT4ii/5ineB oExYidMyMVlA7c7sCBfW5QviqSc7rrd+Wbj5iHiPmNUlWOQxCebwPGJQ6NZRl9L+ CYmFz/njOaod1yDe3P+/eUPdvFGmUitO -----END CERTIFICATE-----Generated at Tue Jun 10 22:22:09 2025 by rpki-client