$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: mLXvOf9qVXKQY4apOGx3ui75z0pSXoNdutjAgaNC3Mo= Subject key identifier: 16:18:BA:A7:09:F9:11:DE:38:75:10:06:35:BD:BF:95:D9:06:02:DF Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 02DF Signing time: Mon 09 Jun 2025 00:54:38 +0000 Manifest this update: Mon 09 Jun 2025 00:54:38 +0000 Manifest next update: Mon 16 Jun 2025 00:54:38 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: BS8SvDGCbLUpEly1I7A9ABuGVd2Psk9byg4ZCfeT++A=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: ZM5rRUd00+nBfPasOFVmxXpUPYX0MShZkN1FXso/iDI=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: pjNUbtH7HoaOJ7Yp/zo9LBV9AiGXTeeEg0CufDMnsg0=) 4: 43CEF64C5E7111EDAD328E21C4F9AE02.roa (hash: CMs488Hhl5oLPF4YmVkuRaqJu0RzsjH0FTfUHm+gkes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 00:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Jun 9 00:54:38 2025 GMT Not After : Jun 16 00:54:38 2025 GMT Subject: CN=684630ce-c630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:7c:66:c5:26:75:ad:15:c1:82:ce:3f:be: 82:2e:24:4d:6e:c2:9f:50:f1:b3:51:f1:6d:6c:de: 06:97:39:35:cc:ee:c1:b7:b2:c6:c8:08:85:28:2d: 04:fd:8d:6f:eb:20:e9:d0:b5:dc:d5:26:ed:e9:9d: 3f:1b:13:a4:e2:bd:c0:05:99:fd:f2:91:55:ed:ae: 00:df:55:04:ee:5e:1a:9a:17:c1:6e:56:00:3c:86: 29:f0:9f:92:5e:ae:fb:2a:42:18:40:86:80:18:06: d3:ac:0b:b1:25:4d:a4:ac:49:73:97:33:93:be:54: 79:33:53:64:ab:7f:f8:78:e5:76:92:2d:ef:e6:61: c0:86:5c:bf:a3:d9:39:56:7d:da:3a:0a:62:23:54: 5f:30:22:55:17:bd:f9:47:f3:12:90:df:80:77:34: 17:74:41:8b:ae:ca:ed:13:08:16:2e:60:11:c0:fc: 68:b9:7c:58:a8:07:8c:dc:2d:98:22:27:ba:d3:24: 24:d8:77:3e:a6:7f:97:fa:49:54:65:07:79:62:bd: 53:06:d3:95:18:20:74:8f:b7:69:6c:36:73:e0:29: 8c:cb:da:2a:04:58:b4:99:5f:32:18:ac:ae:c5:74: 08:6b:6c:88:0d:14:b6:70:05:dc:3e:5f:ee:cc:bd: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:18:BA:A7:09:F9:11:DE:38:75:10:06:35:BD:BF:95:D9:06:02:DF X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:70:af:6f:d7:78:4d:fd:8e:97:64:a4:60:07:86:e9:06:8a: 0b:e5:5e:d7:3f:69:41:41:30:b2:d8:b5:51:8a:b5:3f:79:ff: b5:30:29:f0:2a:95:d7:57:d5:a8:07:0f:93:5c:f0:ec:e3:14: 65:bb:60:c1:91:c9:1f:fe:6c:9d:4f:7b:28:c3:d8:16:62:36: af:63:69:49:6c:ae:d0:4a:8e:fa:d8:a2:bf:5b:bc:d2:e8:07: 1a:a0:94:a1:c7:b9:95:81:8d:ba:e7:09:7d:f7:22:93:b5:d7: 98:01:4e:9b:bd:fb:6a:8a:09:2f:99:27:ef:fd:70:6d:39:96: c0:95:72:08:8d:15:3a:b5:77:ea:d8:b1:ab:68:21:20:eb:1a: ae:ac:ee:bb:25:4f:85:00:3b:6f:f0:26:cd:09:71:81:df:d9: 5e:8a:ca:8d:d5:0b:cf:2a:17:de:af:b0:29:e0:e8:33:ea:93: 7f:89:b1:b2:e9:76:6d:28:82:16:d9:86:64:73:ff:90:7e:0b: d4:c6:bd:72:03:35:ba:8c:87:51:33:38:0b:f2:c4:68:ab:e7: 3c:3c:36:88:a6:dc:d4:99:17:8f:a5:28:7e:4f:e3:98:ce:7d: bd:81:5e:37:a7:0e:b5:6e:2f:6b:26:b1:d9:ca:bb:6b:8d:28: 42:0c:7b:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjUwNjA5MDA1NDM4WhcNMjUwNjE2MDA1NDM4WjAYMRYwFAYD VQQDEw02ODQ2MzBjZS1jNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+x8ZsUmda0VwYLOP76CLiRNbsKfUPGzUfFtbN4Glzk1zO7Bt7LGyAiFKC0E /Y1v6yDp0LXc1Sbt6Z0/GxOk4r3ABZn98pFV7a4A31UE7l4amhfBblYAPIYp8J+S Xq77KkIYQIaAGAbTrAuxJU2krElzlzOTvlR5M1Nkq3/4eOV2ki3v5mHAhly/o9k5 Vn3aOgpiI1RfMCJVF735R/MSkN+AdzQXdEGLrsrtEwgWLmARwPxouXxYqAeM3C2Y Iie60yQk2Hc+pn+X+klUZQd5Yr1TBtOVGCB0j7dpbDZz4CmMy9oqBFi0mV8yGKyu xXQIa2yIDRS2cAXcPl/uzL0ZnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYYuqcJ +RHeOHUQBjW9v5XZBgLfMB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4cK9v13hN/Y6XZKRgB4bpBooL5V7XP2lBQTCy2LVRirU/ef+1MCnw KpXXV9WoBw+TXPDs4xRlu2DBkckf/mydT3sow9gWYjavY2lJbK7QSo762KK/W7zS 6AcaoJShx7mVgY265wl99yKTtdeYAU6bvftqigkvmSfv/XBtOZbAlXIIjRU6tXfq 2LGraCEg6xqurO67JU+FADtv8CbNCXGB39leisqN1QvPKhfer7Ap4Ogz6pN/ibGy 6XZtKIIW2YZkc/+QfgvUxr1yAzW6jIdRMzgL8sRoq+c8PDaIptzUmRePpSh+T+OY zn29gV43pw61bi9rJrHZyrtrjShCDHtF -----END CERTIFICATE-----Generated at Tue Jun 10 16:03:38 2025 by rpki-client