$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft File: r0YdV6kKM1svp3p6rsFnNJVJI7E.mft (raw, json) Hash identifier: hdwuuGjY0nLniNeQ9qZUdMDGw0dhqFQQGrfdP/ycQyo= Subject key identifier: EC:9A:F1:4D:F2:03:43:FD:65:7A:B5:ED:41:82:EE:1D:7C:62:8E:07 Authority key identifier: AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 Certificate issuer: /CN=A9114EF6/serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft Manifest number: 55 Signing time: Sun 01 Jun 2025 07:04:56 +0000 Manifest this update: Sun 01 Jun 2025 07:04:55 +0000 Manifest next update: Sun 08 Jun 2025 07:04:55 +0000 Files and hashes: 1: r0YdV6kKM1svp3p6rsFnNJVJI7E.crl (hash: VOgEr9bGtU/S3mXHPqmrocZNy+wR5ZZy7yjYygty35M=) 2: 7EF2846AD16911EF9ECCE01FC4F9AE02.roa (hash: rKGqZf7K9QKHRBXlpgZth78K2mjkrDt+mwCvAfFIYLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Validity Not Before: Jun 1 07:04:55 2025 GMT Not After : Jun 8 07:04:55 2025 GMT Subject: CN=683bfb97-36c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:17:a5:5d:7a:f1:05:25:e0:ec:b8:33:97: a2:ca:5c:eb:4e:35:6b:aa:88:68:c5:34:08:6b:1b: 24:74:7d:54:22:5f:d5:1d:1f:0d:1d:7a:9f:b5:16: 37:d5:14:49:65:22:73:9d:90:b5:1d:13:a3:73:d7: 77:6e:e4:46:c0:80:be:49:3d:41:d2:b8:0f:ab:83: c9:07:89:55:76:8b:7e:2c:6b:34:d8:9b:01:7f:33: fd:27:d4:98:09:43:54:e4:d2:e5:ca:86:20:fa:1e: 5c:88:c2:4b:a8:aa:f1:df:4c:e0:dc:7d:40:ab:1b: d9:2b:f1:bc:69:1c:14:34:50:22:a0:66:8f:38:52: 2b:b6:54:e3:fa:2d:c1:5a:51:c0:a1:ad:19:ad:b6: a0:2d:f8:43:48:dd:42:2c:61:96:d9:8e:21:40:74: 3d:0b:2d:6c:a6:fe:b6:14:b3:cf:d5:f2:62:ce:cd: 61:bc:19:f9:07:43:98:87:63:00:6c:9c:1c:01:5c: 40:af:0a:47:14:e6:b4:ad:f2:15:39:69:fb:c2:bd: dd:6e:af:a7:13:e8:b1:ea:01:94:fa:19:94:5e:6f: 34:71:30:77:e6:10:d3:8d:50:e0:73:c7:13:57:da: b7:44:45:1f:09:92:e7:3b:93:87:73:11:5f:ee:e9: 5b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9A:F1:4D:F2:03:43:FD:65:7A:B5:ED:41:82:EE:1D:7C:62:8E:07 X509v3 Authority Key Identifier: keyid:AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f1:f3:d8:2e:f7:8a:f3:05:b4:55:f3:59:cc:fb:e6:4e:c2: 8b:80:58:43:4f:f2:68:52:65:de:52:b2:71:1f:a0:d5:63:02: c7:a3:0c:51:81:b8:0e:60:1d:d7:01:3b:e3:d4:86:63:75:95: be:4d:d5:82:80:49:b8:d2:21:a1:38:58:c2:7b:0f:8f:a1:72: 8a:bc:70:90:2d:ec:2f:30:49:9a:1f:e9:20:85:5e:14:4c:c9: 62:1e:ee:b7:48:c1:42:e0:7d:e8:eb:9d:ca:bd:ac:06:b0:85: ec:eb:06:d8:6e:18:ba:60:4f:b0:66:2a:87:d2:96:95:8d:18: bf:4a:f7:56:32:0d:b9:4a:fd:02:8e:2c:91:e3:79:07:0c:a2: ad:fa:4e:08:ef:c8:80:b7:e7:26:d9:4d:1e:0c:07:7e:ac:c7: 84:a7:00:b4:a5:7a:be:97:5f:f0:20:f0:dc:18:f9:cb:0a:2e: 21:b7:9d:df:2e:13:fb:4d:9a:9b:e9:24:80:60:59:c5:55:8a: 17:9f:98:e2:9c:32:b5:d7:0b:80:13:e9:d0:7e:b2:a8:d1:2c: 24:71:d0:18:95:15:93:59:75:28:9c:82:4c:95:9f:c7:11:c8: 0e:00:c2:54:00:f7:ca:ea:40:45:09:93:e2:4b:38:eb:05:16: ea:94:b7:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoQUY0NjFENTdBOTBBMzM1QjJGQTc3QTdBQUVDMTY3MzQ5 NTQ5MjNCMTAeFw0yNTA2MDEwNzA0NTVaFw0yNTA2MDgwNzA0NTVaMBgxFjAUBgNV BAMTDTY4M2JmYjk3LTM2YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb1BelXXrxBSXg7Lgzl6LKXOtONWuqiGjFNAhrGyR0fVQiX9UdHw0dep+1FjfV FEllInOdkLUdE6Nz13du5EbAgL5JPUHSuA+rg8kHiVV2i34sazTYmwF/M/0n1JgJ Q1Tk0uXKhiD6HlyIwkuoqvHfTODcfUCrG9kr8bxpHBQ0UCKgZo84Uiu2VOP6LcFa UcChrRmttqAt+ENI3UIsYZbZjiFAdD0LLWym/rYUs8/V8mLOzWG8GfkHQ5iHYwBs nBwBXECvCkcU5rSt8hU5afvCvd1ur6cT6LHqAZT6GZRebzRxMHfmENONUOBzxxNX 2rdERR8Jkuc7k4dzEV/u6VujAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7JrxTfID Q/1lerXtQYLuHXxijgcwHwYDVR0jBBgwFoAUr0YdV6kKM1svp3p6rsFnNJVJI7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2LzhEQUUwNUEwRDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFzdnAzcDZyc0ZuTkpWSkk3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcjBZZFY2a0tNMXN2cDNwNnJzRm5OSlZKSTdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2LzhEQUUwNUEwRDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFz dnAzcDZyc0ZuTkpWSkk3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjx89gu94rzBbRV81nM++ZOwouAWENP8mhSZd5SsnEfoNVjAsejDFGB uA5gHdcBO+PUhmN1lb5N1YKASbjSIaE4WMJ7D4+hcoq8cJAt7C8wSZof6SCFXhRM yWIe7rdIwULgfejrncq9rAawhezrBthuGLpgT7BmKofSlpWNGL9K91YyDblK/QKO LJHjeQcMoq36TgjvyIC35ybZTR4MB36sx4SnALSler6XX/Ag8NwY+csKLiG3nd8u E/tNmpvpJIBgWcVVihefmOKcMrXXC4AT6dB+sqjRLCRx0BiVFZNZdSicgkyVn8cR yA4AwlQA98rqQEUJk+JLOOsFFuqUt3A= -----END CERTIFICATE-----Generated at Mon Jun 2 20:15:17 2025 by rpki-client