$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft File: r80S80CYeM1KtEXERVRK6NqFGoQ.mft (raw, json) Hash identifier: h9Q5Vptd5xVNDfMQZeA7pwFgoP/3skm+aqv7tnh68Rw= Subject key identifier: 1F:76:56:39:F8:6A:FB:40:2A:50:43:51:A5:BC:0E:A9:E3:6E:DF:D6 Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 Certificate issuer: /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft Manifest number: 07F1 Signing time: Mon 02 Jun 2025 21:11:00 +0000 Manifest this update: Mon 02 Jun 2025 21:11:00 +0000 Manifest next update: Mon 09 Jun 2025 21:11:00 +0000 Files and hashes: 1: r80S80CYeM1KtEXERVRK6NqFGoQ.crl (hash: xQhTL6aemwqW0ai1DtqztRaedH7ixhWfMgX3pdS4F/E=) 2: 85A0A1086C9711EEA4941846C4F9AE02.roa (hash: QE3nW2mNMr96ecxL+2Sa0cUHeFInEqjbi3IjJoVbX1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BD9, serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Validity Not Before: Jun 2 21:11:00 2025 GMT Not After : Jun 9 21:11:00 2025 GMT Subject: CN=683e1364-2ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:b7:a1:36:82:fe:be:d9:bf:09:53:5a:73: 1d:1b:36:e1:5a:b2:f9:69:fa:37:f7:3c:4d:45:e7: d8:f2:2d:f4:f1:65:92:1b:06:aa:aa:71:be:77:a4: 56:51:cc:d7:5a:52:fb:47:7f:a5:06:df:9b:06:d5: dd:0c:e3:0d:85:0f:d2:06:6f:04:cc:be:6d:3f:3d: 54:da:f1:89:a1:a4:b6:a1:1e:31:c1:a4:a3:62:b1: 10:e5:bc:a5:30:36:7d:d2:d1:7e:32:01:f6:7f:67: e0:0e:b3:4e:2b:3b:4b:02:5d:76:ac:af:6c:80:ff: 4b:bf:34:90:4e:5d:f6:74:73:81:f0:69:88:7a:8f: f8:e8:ce:8a:12:69:76:57:ef:c0:11:eb:ad:3c:8d: fe:c4:dd:3e:2f:9e:4e:ee:27:ac:3c:e4:18:14:e4: 8d:11:c0:c5:d6:a8:1a:09:9f:a1:66:8d:f3:e2:af: 3d:06:e2:cd:6e:9b:3a:13:26:c3:2a:94:bf:95:8a: 93:1f:64:0a:3e:99:f2:2c:2b:f6:8d:6f:aa:a4:55: 64:d1:54:de:8a:4a:3b:f1:cb:50:8b:c9:cb:f3:94: 3b:0d:ab:8b:f7:73:44:ac:71:08:15:cb:63:22:92: e7:36:42:a6:f1:39:bc:6d:e1:b6:39:c2:14:ba:0f: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:76:56:39:F8:6A:FB:40:2A:50:43:51:A5:BC:0E:A9:E3:6E:DF:D6 X509v3 Authority Key Identifier: keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8b:02:57:64:12:45:d9:9c:80:6d:5f:21:2d:8f:60:4a:3e: 73:6a:df:78:b7:ab:ba:fd:46:f6:3b:c6:5b:3c:42:c9:f4:ce: b8:10:53:cc:33:56:fe:c3:1e:ae:64:df:97:cf:67:cc:6e:78: f5:ce:36:d8:8e:f4:4b:65:83:07:2b:66:2a:15:8c:d0:a6:ef: 17:4a:0a:c8:00:2a:be:9c:43:b4:b7:14:91:08:28:22:05:8e: c4:d5:e6:1e:59:29:c0:b7:20:a1:2e:cb:10:2d:58:00:26:b5: 2c:9e:62:4f:84:d9:e8:92:7f:23:f6:46:e1:80:65:1b:f6:9b: 1d:88:f2:50:84:38:51:21:17:e2:93:05:ea:b9:3c:85:c7:dd: 85:c0:c1:55:9c:4b:5c:5a:09:e6:6b:67:3e:62:87:82:19:e8: 23:4c:17:e9:61:d9:26:5e:e2:b2:20:b5:11:31:59:cd:b9:e0: 2e:43:56:ae:8a:c7:94:dd:ae:63:dc:20:2b:b8:ab:6b:44:57: ab:9e:c6:7f:33:ce:d8:65:01:8a:4d:37:a3:64:7f:28:a9:fc: 61:23:28:1d:8d:a0:70:c6:ea:ec:28:47:18:ae:90:f8:63:33: 49:fd:f3:5b:f4:7d:cb:8f:4a:13:98:12:36:8b:ea:9c:47:c1: 6d:3a:5d:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCRDkxMTAvBgNVBAUTKEFGQ0QxMkYzNDA5ODc4Q0Q0QUI0NDVDNDQ1NTQ0QUU4 REE4NTFBODQwHhcNMjUwNjAyMjExMTAwWhcNMjUwNjA5MjExMTAwWjAYMRYwFAYD VQQDEw02ODNlMTM2NC0yYmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ23oTaC/r7ZvwlTWnMdGzbhWrL5afo39zxNRefY8i308WWSGwaqqnG+d6RW UczXWlL7R3+lBt+bBtXdDOMNhQ/SBm8EzL5tPz1U2vGJoaS2oR4xwaSjYrEQ5byl MDZ90tF+MgH2f2fgDrNOKztLAl12rK9sgP9LvzSQTl32dHOB8GmIeo/46M6KEml2 V+/AEeutPI3+xN0+L55O7iesPOQYFOSNEcDF1qgaCZ+hZo3z4q89BuLNbps6EybD KpS/lYqTH2QKPpnyLCv2jW+qpFVk0VTeiko78ctQi8nL85Q7DauL93NErHEIFctj IpLnNkKm8Tm8beG2OcIUug95owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB92Vjn4 avtAKlBDUaW8Dqnjbt/WMB8GA1UdIwQYMBaAFK/NEvNAmHjNSrRFxEVUSujahRqE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJEOS8wNDgxRjc4NkVD MTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVNMUt0RVhFUlZSSzZOcUZH b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4MFM4MENZZU0xS3RFWEVSVlJLNk5xRkdvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJEOS8wNDgxRjc4NkVDMTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVN MUt0RVhFUlZSSzZOcUZHb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPiwJXZBJF2ZyAbV8hLY9gSj5zat94t6u6/Ub2O8ZbPELJ9M64EFPM M1b+wx6uZN+Xz2fMbnj1zjbYjvRLZYMHK2YqFYzQpu8XSgrIACq+nEO0txSRCCgi BY7E1eYeWSnAtyChLssQLVgAJrUsnmJPhNnokn8j9kbhgGUb9psdiPJQhDhRIRfi kwXquTyFx92FwMFVnEtcWgnma2c+YoeCGegjTBfpYdkmXuKyILURMVnNueAuQ1au iseU3a5j3CAruKtrRFernsZ/M87YZQGKTTejZH8oqfxhIygdjaBwxursKEcYrpD4 YzNJ/fNb9H3Lj0oTmBI2i+qcR8FtOl2Q -----END CERTIFICATE-----Generated at Wed Jun 4 00:43:05 2025 by rpki-client