$ rpki-client -vvf rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft File: akunmdqw8ib6Y2bG8ceOIqwMBz0.mft (raw, json) Hash identifier: rFT7K9RpPsmGIQGizbcX+QxlWW5AMUJF6MeN7AwSzXk= Subject key identifier: 26:F5:47:04:7B:65:4F:1B:7F:43:AC:DE:90:43:1A:B7:E3:3C:A5:E4 Authority key identifier: 6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D Certificate issuer: /CN=A9122CB9/serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft Manifest number: 0775 Signing time: Fri 30 May 2025 21:42:19 +0000 Manifest this update: Fri 30 May 2025 21:42:19 +0000 Manifest next update: Fri 06 Jun 2025 21:42:19 +0000 Files and hashes: 1: akunmdqw8ib6Y2bG8ceOIqwMBz0.crl (hash: ETPHrLZ4ZJGPcLZTnccmU9BHViSIkkRvwmi71/Yre9o=) 2: FA77145A14EB11EBA13B881DC4F9AE02.roa (hash: s6zjucspba621IzJupXb2nvzbQOkfylngCtE1Ksgs8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122CB9, serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D Validity Not Before: May 30 21:42:19 2025 GMT Not After : Jun 6 21:42:19 2025 GMT Subject: CN=683a263b-c181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:2c:2d:a6:0d:f8:5a:01:dc:5a:e4:02:61: ae:d0:a8:72:eb:a5:b4:a0:12:31:15:0d:b1:a4:e0: a6:7e:cd:62:e8:93:2f:58:08:a3:4a:f4:29:b2:5b: aa:e9:22:5e:c4:2d:ae:a7:3b:ed:61:95:9b:94:25: be:1f:35:77:bc:52:a3:99:d5:a8:69:9a:43:76:a5: 53:23:90:0d:a5:80:71:14:ce:b3:04:11:91:67:1b: 21:60:88:53:b2:6c:5e:fa:27:92:1e:16:ec:61:42: 35:e7:bf:3d:e6:ed:b9:f8:ca:79:04:9c:d2:d4:6e: 15:54:c4:98:88:38:1e:fd:c9:97:93:a1:3c:43:7d: ac:0f:85:7a:ba:ca:6b:03:f2:98:1d:82:e2:33:20: dc:21:5f:72:bd:3b:63:19:29:f9:8e:93:5b:2c:35: c7:77:be:2c:08:8c:7c:fa:95:85:5d:4a:bf:e1:e8: b5:9a:17:ed:89:ae:d9:73:41:0c:51:bb:fb:84:59: a2:b9:98:17:09:44:0f:ed:75:66:f7:d2:8d:0b:56: 20:31:ec:5c:da:c8:ec:c9:08:dc:d5:97:f6:50:4b: 85:e0:8e:df:e2:e5:2d:7a:70:f0:b9:92:ba:b5:48: 97:58:5e:bf:1d:05:fa:da:13:c7:03:81:a0:e8:5d: 3b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F5:47:04:7B:65:4F:1B:7F:43:AC:DE:90:43:1A:B7:E3:3C:A5:E4 X509v3 Authority Key Identifier: keyid:6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:aa:3c:6d:a1:df:00:ad:70:ea:34:89:a4:85:b5:a0:af:3c: 02:7a:e0:40:46:5b:3c:e9:95:9f:c4:e2:b6:62:41:df:40:a6: 90:b6:68:1a:40:53:7e:7e:6c:62:8f:50:51:de:7e:cd:e6:e5: 47:68:ae:ff:24:44:0d:2c:d1:95:fb:b4:a9:87:0e:a9:7e:d9: 33:0a:06:44:d1:75:64:fa:bb:d2:84:a3:62:ab:bf:eb:dc:c4: 85:f2:e2:a2:0e:67:eb:82:d0:dc:97:30:93:7a:85:fb:31:88: 34:fb:bb:eb:c3:e3:92:56:3f:c5:c0:1b:04:de:cc:de:ca:d3: c6:b6:5f:12:0b:83:f7:9e:d2:4a:bb:c6:13:cf:c9:fa:d8:86: ff:7e:b5:f8:eb:29:41:86:c6:1d:da:65:3a:92:36:68:ab:74: 31:4d:71:51:a0:46:fa:9a:a2:23:8f:b9:2e:20:a5:29:95:a6: 22:68:e8:ca:15:1f:bd:9e:ac:a5:e4:49:f5:4a:f5:c1:7a:13: d3:93:1b:8e:f7:ef:3a:d9:aa:7a:44:32:3b:6d:af:62:4a:d5: 33:d5:c7:39:19:05:5a:58:8c:cb:2d:5b:ab:47:ed:db:73:f1: b0:45:b9:5e:7d:b3:70:fe:eb:d8:ef:a6:44:6f:89:27:6e:6c: 35:0c:99:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDQjkxMTAvBgNVBAUTKDZBNEJBNzk5REFCMEYyMjZGQTYzNjZDNkYxQzc4RTIy QUMwQzA3M0QwHhcNMjUwNTMwMjE0MjE5WhcNMjUwNjA2MjE0MjE5WjAYMRYwFAYD VQQDEw02ODNhMjYzYi1jMTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPIsLaYN+FoB3FrkAmGu0Khy66W0oBIxFQ2xpOCmfs1i6JMvWAijSvQpsluq 6SJexC2upzvtYZWblCW+HzV3vFKjmdWoaZpDdqVTI5ANpYBxFM6zBBGRZxshYIhT smxe+ieSHhbsYUI157895u25+Mp5BJzS1G4VVMSYiDge/cmXk6E8Q32sD4V6uspr A/KYHYLiMyDcIV9yvTtjGSn5jpNbLDXHd74sCIx8+pWFXUq/4ei1mhftia7Zc0EM Ubv7hFmiuZgXCUQP7XVm99KNC1YgMexc2sjsyQjc1Zf2UEuF4I7f4uUtenDwuZK6 tUiXWF6/HQX62hPHA4Gg6F07rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb1RwR7 ZU8bf0Os3pBDGrfjPKXkMB8GA1UdIwQYMBaAFGpLp5nasPIm+mNmxvHHjiKsDAc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkNCOS81NkFBMzExNDE0 RUExMUVCQkUzN0VCMUFDNEY5QUUwMi9ha3VubWRxdzhpYjZZMmJHOGNlT0lxd01C ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrdW5tZHF3OGliNlkyYkc4Y2VPSXF3TUJ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkNCOS81NkFBMzExNDE0RUExMUVCQkUzN0VCMUFDNEY5QUUwMi9ha3VubWRxdzhp YjZZMmJHOGNlT0lxd01CejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9qjxtod8ArXDqNImkhbWgrzwCeuBARls86ZWfxOK2YkHfQKaQtmga QFN+fmxij1BR3n7N5uVHaK7/JEQNLNGV+7Sphw6pftkzCgZE0XVk+rvShKNiq7/r 3MSF8uKiDmfrgtDclzCTeoX7MYg0+7vrw+OSVj/FwBsE3szeytPGtl8SC4P3ntJK u8YTz8n62Ib/frX46ylBhsYd2mU6kjZoq3QxTXFRoEb6mqIjj7kuIKUplaYiaOjK FR+9nqyl5En1SvXBehPTkxuO9+862ap6RDI7ba9iStUz1cc5GQVaWIzLLVurR+3b c/GwRblefbNw/uvY76ZEb4knbmw1DJlA -----END CERTIFICATE-----Generated at Sat May 31 16:28:42 2025 by rpki-client