$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: ELoekLY1cfwJc4BuiAYPolVDWjCsBwLlBG+QWb47fZs= Subject key identifier: C0:D7:DE:28:B8:5D:01:85:3C:81:4D:43:FE:FF:D9:0E:3F:B2:95:D8 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 01D1 Signing time: Sat 31 May 2025 02:39:42 +0000 Manifest this update: Sat 31 May 2025 02:39:41 +0000 Manifest next update: Sat 07 Jun 2025 02:39:41 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: P82JPzyI+4vmsMGYwJpD+30DyUuCT4pprVyeM+4y+kE=) 2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=) 3: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=) 4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=) 5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: May 31 02:39:41 2025 GMT Not After : Jun 7 02:39:41 2025 GMT Subject: CN=683a6bed-be5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:c7:e2:39:09:28:10:63:c3:a6:09:7f:d7: 93:ac:d9:b4:4b:e8:df:dd:87:5b:ab:21:3f:48:43: 3b:f7:3b:a8:85:ee:a5:dc:26:d5:19:fe:6a:50:66: 6a:0f:9c:a9:df:05:e2:4d:a1:24:d9:39:29:24:58: e1:00:f6:22:a2:7c:3d:b5:d4:c4:b1:56:53:46:cb: e0:da:f2:e7:50:2d:d4:0a:9f:73:73:a3:bb:3b:d4: 20:44:af:7a:7d:f6:6d:6e:43:8d:23:41:b9:44:e4: 37:2d:ad:e5:63:31:f7:d1:65:8a:af:99:74:e0:c5: 62:02:de:63:c3:5d:15:c3:d0:48:4f:48:77:d9:94: 9e:b3:84:75:5d:c4:da:16:c5:7b:a9:0e:fd:bd:f9: af:f2:1f:d2:7f:c5:1b:8d:51:ad:9d:d5:9f:06:18: 50:10:cd:f8:44:6c:ef:8c:41:38:cb:7c:8f:ea:c5: c3:41:2d:40:39:8d:c1:66:31:e3:77:92:1d:50:7d: 0f:40:61:1c:f0:b2:0f:c5:bc:8f:4e:e8:bf:c5:b2: a3:35:da:c9:d2:47:03:2a:6b:87:b7:e4:fb:c7:4d: d5:05:80:1c:4b:e4:1b:ff:dd:9d:7d:62:99:37:db: 4c:0e:e8:a4:29:b1:35:5e:39:78:1d:e4:f3:48:0a: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D7:DE:28:B8:5D:01:85:3C:81:4D:43:FE:FF:D9:0E:3F:B2:95:D8 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e0:b4:7d:a5:bd:58:f9:35:5a:84:43:86:8f:82:b4:9b:5a: 6b:b2:f3:2a:ab:d8:1a:7a:37:78:61:b9:ab:ec:7f:70:ce:67: 9a:04:b5:89:3e:ec:12:da:85:86:db:87:52:0d:ce:f7:80:28: 01:bf:5f:36:f0:63:e0:d4:5e:b0:0c:7e:fc:c9:59:70:3d:bb: e5:1d:a4:f4:69:8f:bd:b7:40:04:81:ff:ed:90:1d:d8:c8:85: b4:d5:bd:c4:2a:94:4c:b4:2c:93:f9:68:e7:b5:34:18:e3:03: d6:60:c3:67:60:96:39:ba:a0:45:96:6f:58:66:ac:69:36:97: 37:36:36:62:41:23:cf:94:6d:d0:fc:f1:96:fe:f7:f4:41:b8: 6d:f1:6c:8b:ca:89:54:d7:ad:f0:35:28:0f:8f:f2:01:10:0c: 06:dd:c5:1c:2b:c8:5a:c2:5e:2e:2c:54:ee:88:02:37:9f:fc: d6:d7:63:94:f8:2b:24:1f:c9:ea:79:a7:38:6d:c7:b6:2e:09: c7:a5:a5:de:f1:b1:75:f3:7d:2e:67:37:f2:6d:26:b8:72:b2: 97:95:c7:c0:34:62:b8:2e:2a:98:dc:90:75:b4:f2:01:ba:ea: ab:e0:42:5a:80:1a:04:81:9d:27:7a:16:be:f1:fa:68:59:7c: 46:1f:28:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUwNTMxMDIzOTQxWhcNMjUwNjA3MDIzOTQxWjAYMRYwFAYD VQQDEw02ODNhNmJlZC1iZTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RnH4jkJKBBjw6YJf9eTrNm0S+jf3YdbqyE/SEM79zuohe6l3CbVGf5qUGZq D5yp3wXiTaEk2TkpJFjhAPYionw9tdTEsVZTRsvg2vLnUC3UCp9zc6O7O9QgRK96 ffZtbkONI0G5ROQ3La3lYzH30WWKr5l04MViAt5jw10Vw9BIT0h32ZSes4R1XcTa FsV7qQ79vfmv8h/Sf8UbjVGtndWfBhhQEM34RGzvjEE4y3yP6sXDQS1AOY3BZjHj d5IdUH0PQGEc8LIPxbyPTui/xbKjNdrJ0kcDKmuHt+T7x03VBYAcS+Qb/92dfWKZ N9tMDuikKbE1Xjl4HeTzSAq70QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDX3ii4 XQGFPIFNQ/7/2Q4/spXYMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP4LR9pb1Y+TVahEOGj4K0m1prsvMqq9gaejd4Ybmr7H9wzmeaBLWJ PuwS2oWG24dSDc73gCgBv1828GPg1F6wDH78yVlwPbvlHaT0aY+9t0AEgf/tkB3Y yIW01b3EKpRMtCyT+WjntTQY4wPWYMNnYJY5uqBFlm9YZqxpNpc3NjZiQSPPlG3Q /PGW/vf0Qbht8WyLyolU163wNSgPj/IBEAwG3cUcK8hawl4uLFTuiAI3n/zW12OU +CskH8nqeac4bce2LgnHpaXe8bF1830uZzfybSa4crKXlcfANGK4LiqY3JB1tPIB uuqr4EJagBoEgZ0neha+8fpoWXxGHyhk -----END CERTIFICATE-----Generated at Sat May 31 16:57:53 2025 by rpki-client