$ rpki-client -vvf rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft File: S6E9VJoFZMMeqLIxX84wI7tiiKc.mft (raw, json) Hash identifier: YAwtYhz0ISBcH/qUdI3hPXNhOgWK+RdxsgXkQQ7FIQM= Subject key identifier: F9:26:17:C8:FF:DF:86:1E:8A:CD:CD:85:F6:EA:47:5B:25:F7:90:F3 Authority key identifier: 4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7 Certificate issuer: /CN=A9120208/serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft Manifest number: 03 Signing time: Sat 31 May 2025 07:46:32 +0000 Manifest this update: Sat 31 May 2025 07:46:32 +0000 Manifest next update: Sat 07 Jun 2025 07:46:31 +0000 Files and hashes: 1: S6E9VJoFZMMeqLIxX84wI7tiiKc.crl (hash: 4NEdeOBwpQSs1Ahv49AxO8bTbk69M8w20OjmZnrhAC8=) 2: 68B7296E3B9811F0B5021A77C4F9AE02.roa (hash: gg4F5Zc8aQptm/CJNjYOsxzEWveMotdNbcTxAKleXkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120208, serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7 Validity Not Before: May 31 07:46:32 2025 GMT Not After : Jun 7 07:46:31 2025 GMT Subject: CN=683ab3d8-d95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:c8:23:e2:52:ef:c0:43:93:55:aa:ea:3e: 13:72:05:c4:85:6c:b6:91:59:c6:6e:98:0f:5b:46: 0b:cd:c1:ea:26:a6:af:b7:fe:95:93:9f:ee:c1:61: 70:06:bf:50:a8:ec:82:b2:18:75:1e:19:27:5b:73: 90:1f:8a:aa:57:a1:89:b7:02:fd:b4:bb:ec:39:09: 64:a2:a1:c0:8f:dc:33:05:ee:b6:1b:7e:13:41:29: 2a:1d:c8:67:3d:e5:ed:a2:f3:21:0b:9b:90:06:ff: 49:b8:8b:cb:28:5b:b8:50:8b:ba:e7:e2:d8:8d:cc: 01:74:50:57:fe:55:53:2a:c9:67:f0:82:7f:32:5f: c3:c5:fb:05:af:c6:9a:b9:3a:0b:a5:10:49:2d:33: d5:61:be:0f:52:22:e5:cb:65:86:ea:d4:b2:3e:cc: 72:22:c3:94:da:ea:99:14:bd:04:85:87:d6:a5:d6: 9c:91:56:90:3f:90:85:b7:5b:44:86:c8:4a:0d:20: 88:ca:79:25:40:23:7b:43:50:25:20:01:24:9e:8d: 10:04:d2:de:7a:a3:c8:eb:02:30:3e:30:50:c9:cf: 98:dc:18:39:1a:6c:40:98:d3:00:20:62:54:f2:60: c9:f6:dc:81:20:80:94:b2:11:d7:65:de:92:14:93: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:26:17:C8:FF:DF:86:1E:8A:CD:CD:85:F6:EA:47:5B:25:F7:90:F3 X509v3 Authority Key Identifier: keyid:4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f8:09:af:ed:1d:82:b0:87:2d:6b:58:4a:73:a0:af:4e:3d: 58:0d:b6:92:71:c0:2a:bf:00:a5:9c:71:de:74:54:6d:71:6e: 3b:a0:8e:a3:1f:86:a0:eb:2b:d4:3c:8a:3b:f9:74:8e:33:c5: 7a:42:a6:e2:49:41:df:c3:37:55:31:35:52:c0:94:59:5f:5c: 74:da:a9:fc:5d:52:d8:d1:46:2c:f9:37:8e:66:aa:af:7c:1a: bf:a8:be:41:1d:55:3a:0f:18:2a:c2:dc:a0:f6:1c:2d:7a:8b: 58:e6:db:2c:5d:48:24:0e:7c:6d:f2:a5:97:ed:21:8c:4d:e7: 15:b4:1d:36:a5:e4:0b:a0:d4:5e:2f:ed:e7:0d:0d:a5:05:63: 8b:d1:ad:0b:41:57:33:99:ca:9d:fd:c6:a2:41:4b:6b:5e:06: 74:ac:7d:fd:52:52:04:0b:d0:00:8b:70:96:8f:6b:b0:19:1c: b2:f1:a2:d9:d5:84:de:42:83:1a:31:b3:92:03:e9:21:f3:09: 1c:3b:77:5c:12:5f:0e:a4:84:cd:e4:89:87:9b:fb:22:ad:5f: 2b:3d:5e:c3:e6:a7:99:82:d8:dd:5b:6e:be:f0:b2:e5:86:09: a8:27:39:7c:76:fb:ce:e7:1e:de:45:fe:e5:06:be:08:2c:35: eb:49:6c:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDIwODExMC8GA1UEBRMoNEJBMTNENTQ5QTA1NjRDMzFFQThCMjMxNUZDRTMwMjNC QjYyODhBNzAeFw0yNTA1MzEwNzQ2MzJaFw0yNTA2MDcwNzQ2MzFaMBgxFjAUBgNV BAMTDTY4M2FiM2Q4LWQ5NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv8cgj4lLvwEOTVarqPhNyBcSFbLaRWcZumA9bRgvNweompq+3/pWTn+7BYXAG v1Co7IKyGHUeGSdbc5AfiqpXoYm3Av20u+w5CWSiocCP3DMF7rYbfhNBKSodyGc9 5e2i8yELm5AG/0m4i8soW7hQi7rn4tiNzAF0UFf+VVMqyWfwgn8yX8PF+wWvxpq5 OgulEEktM9Vhvg9SIuXLZYbq1LI+zHIiw5Ta6pkUvQSFh9al1pyRVpA/kIW3W0SG yEoNIIjKeSVAI3tDUCUgASSejRAE0t56o8jrAjA+MFDJz5jcGDkabECY0wAgYlTy YMn23IEggJSyEddl3pIUk3TNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+SYXyP/f hh6Kzc2F9upHWyX3kPMwHwYDVR0jBBgwFoAUS6E9VJoFZMMeqLIxX84wI7tiiKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMjA4L0JBODY3NDI2M0I5 NzExRjBBMTcwQzc3NUM0RjlBRTAyL1M2RTlWSm9GWk1NZXFMSXhYODR3STd0aWlL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzZFOVZKb0ZaTU1lcUxJeFg4NHdJN3RpaUtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MjA4L0JBODY3NDI2M0I5NzExRjBBMTcwQzc3NUM0RjlBRTAyL1M2RTlWSm9GWk1N ZXFMSXhYODR3STd0aWlLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAID4Ca/tHYKwhy1rWEpzoK9OPVgNtpJxwCq/AKWccd50VG1xbjugjqMf hqDrK9Q8ijv5dI4zxXpCpuJJQd/DN1UxNVLAlFlfXHTaqfxdUtjRRiz5N45mqq98 Gr+ovkEdVToPGCrC3KD2HC16i1jm2yxdSCQOfG3ypZftIYxN5xW0HTal5Aug1F4v 7ecNDaUFY4vRrQtBVzOZyp39xqJBS2teBnSsff1SUgQL0ACLcJaPa7AZHLLxotnV hN5Cgxoxs5ID6SHzCRw7d1wSXw6khM3kiYeb+yKtXys9XsPmp5mC2N1bbr7wsuWG CagnOXx2+87nHt5F/uUGvggsNetJbCQ= -----END CERTIFICATE-----Generated at Sat May 31 17:50:43 2025 by rpki-client