$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft File: MekS6f9zr1vER2k1KNclslorF_c.mft (raw, json) Hash identifier: qClkpv3LJVZLWzvK+pfmSPdavAnJK1YOGfCGHBBnxhQ= Subject key identifier: F4:9A:67:9A:77:0B:31:D5:EF:70:4E:0C:C4:E4:E7:13:58:33:F4:B8 Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7 Certificate issuer: /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7 Certificate serial: 14D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft Manifest number: 14CE Signing time: Fri 30 May 2025 17:01:49 +0000 Manifest this update: Fri 30 May 2025 17:01:48 +0000 Manifest next update: Fri 06 Jun 2025 17:01:48 +0000 Files and hashes: 1: MekS6f9zr1vER2k1KNclslorF_c.crl (hash: b7D+d4Xd9Qr1eSXzuqP9t2JGV+HOeu8DN+FUnBqYioY=) 2: 9C524DA858CE11E891382260C4F9AE02.roa (hash: pz/sh5ewtugJGaQEjLj/4LhT6VQlQpXzMK/OXn+CHaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5337 (0x14d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127673, serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7 Validity Not Before: May 30 17:01:48 2025 GMT Not After : Jun 6 17:01:48 2025 GMT Subject: CN=6839e47d-6e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:f5:b7:8a:7e:a5:07:8b:91:63:1a:50:66: 4d:cd:94:48:8c:86:e3:e2:b2:d9:b1:1b:c4:60:f6: b4:24:21:38:ef:8b:ee:eb:c8:ea:37:2f:8c:3b:eb: 4a:00:1a:74:18:b9:61:89:20:d6:61:40:10:6b:72: 40:53:c0:71:ea:30:ab:97:f0:7c:cc:34:e5:82:c8: e2:2c:20:37:32:ee:1c:90:62:e4:db:3a:05:cd:3a: 9a:e3:93:41:d5:e4:87:84:3f:e2:04:13:6d:23:28: 10:cf:0b:f7:8d:7a:af:67:47:10:4d:33:c8:da:be: a6:0e:1d:e5:66:09:ed:91:40:50:42:48:25:bb:e2: 38:6e:d2:51:1c:95:27:7d:c9:f7:4d:95:b8:96:47: a8:72:43:7f:90:a0:c2:4c:8b:59:bb:d6:6d:df:78: 2d:d2:84:1e:64:7c:ba:db:01:0d:c1:39:ab:3e:61: 14:b8:af:a1:c0:08:15:e9:21:d7:c3:95:19:0f:08: 65:1f:be:ba:f2:38:27:49:0e:6f:0f:dc:ca:36:13: 54:4d:dd:e2:56:c8:33:ea:33:f1:b3:18:6f:cc:52: 10:0f:f5:17:56:74:bc:9d:d6:5e:f8:d6:a7:5a:cc: f5:2e:5a:30:09:2e:a4:6b:c7:4c:82:61:5f:bc:71: 76:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9A:67:9A:77:0B:31:D5:EF:70:4E:0C:C4:E4:E7:13:58:33:F4:B8 X509v3 Authority Key Identifier: keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f9:ee:03:75:9b:61:9a:2a:91:dc:01:ff:13:f1:3e:68:81: e4:51:75:47:60:a4:b7:d1:61:7f:e0:63:77:a8:9d:a2:53:3e: 24:11:ef:a4:fb:52:ff:40:28:c6:30:06:1b:06:06:9e:3c:f3: a7:69:cb:1f:0c:cd:0a:b7:52:f5:82:c9:5e:77:33:d9:45:5e: 9a:08:96:b7:46:ac:a4:3c:c5:9e:26:88:6a:6b:88:e1:98:71: f7:01:4f:d5:db:ab:e6:d8:08:81:1d:cb:bd:44:c1:0a:89:72: 15:d2:8c:22:4b:49:7f:05:b5:e8:19:12:6e:cc:29:7e:51:2c: b6:cc:e1:88:28:84:be:63:a9:27:92:7e:65:70:32:74:60:9f: 7f:67:ca:17:b8:e2:15:8c:80:2f:0e:61:88:5c:1c:00:4c:66: b5:c8:27:6e:e7:09:2f:d8:9b:0a:08:a8:29:9d:73:59:fe:5c: 32:8e:50:65:b3:78:c7:92:2d:bc:38:e8:43:81:be:60:24:0d: df:cd:d9:4f:2c:8e:21:0f:51:6a:8c:64:b2:60:86:8c:c8:24: 10:c8:14:86:01:7e:3c:bf:e4:d6:c1:3f:e0:9d:9e:dc:64:f9: 17:24:cd:42:6a:35:e6:ce:4c:84:0c:a9:22:5d:7e:86:00:a7: 6e:e2:ed:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NzMxMTAvBgNVBAUTKDMxRTkxMkU5RkY3M0FGNUJDNDQ3NjkzNTI4RDcyNUIy NUEyQjE3RjcwHhcNMjUwNTMwMTcwMTQ4WhcNMjUwNjA2MTcwMTQ4WjAYMRYwFAYD VQQDEw02ODM5ZTQ3ZC02ZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykH1t4p+pQeLkWMaUGZNzZRIjIbj4rLZsRvEYPa0JCE474vu68jqNy+MO+tK ABp0GLlhiSDWYUAQa3JAU8Bx6jCrl/B8zDTlgsjiLCA3Mu4ckGLk2zoFzTqa45NB 1eSHhD/iBBNtIygQzwv3jXqvZ0cQTTPI2r6mDh3lZgntkUBQQkglu+I4btJRHJUn fcn3TZW4lkeockN/kKDCTItZu9Zt33gt0oQeZHy62wENwTmrPmEUuK+hwAgV6SHX w5UZDwhlH7668jgnSQ5vD9zKNhNUTd3iVsgz6jPxsxhvzFIQD/UXVnS8ndZe+Nan Wsz1LlowCS6ka8dMgmFfvHF2FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSaZ5p3 CzHV73BODMTk5xNYM/S4MB8GA1UdIwQYMBaAFDHpEun/c69bxEdpNSjXJbJaKxf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY3My8wM0Y0MzA5QTU4 Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIxdkVSMmsxS05jbHNsb3JG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01la1M2Zjl6cjF2RVIyazFLTmNsc2xvckZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY3My8wM0Y0MzA5QTU4Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIx dkVSMmsxS05jbHNsb3JGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh+e4DdZthmiqR3AH/E/E+aIHkUXVHYKS30WF/4GN3qJ2iUz4kEe+k +1L/QCjGMAYbBgaePPOnacsfDM0Kt1L1gsledzPZRV6aCJa3RqykPMWeJohqa4jh mHH3AU/V26vm2AiBHcu9RMEKiXIV0owiS0l/BbXoGRJuzCl+USy2zOGIKIS+Y6kn kn5lcDJ0YJ9/Z8oXuOIVjIAvDmGIXBwATGa1yCdu5wkv2JsKCKgpnXNZ/lwyjlBl s3jHki28OOhDgb5gJA3fzdlPLI4hD1FqjGSyYIaMyCQQyBSGAX48v+TWwT/gnZ7c ZPkXJM1CajXmzkyEDKkiXX6GAKdu4u1C -----END CERTIFICATE-----Generated at Sat May 31 16:26:57 2025 by rpki-client