$ rpki-client -vvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft File: 6PktayopMPClvq9TBEyF2OreHro.mft (raw, json) Hash identifier: fNrwtSV6EXh5Ee6WoghA2Q1GvgaCMK74+HWdNPnMHbk= Subject key identifier: B3:50:67:AD:D5:6C:16:B6:C2:4B:A7:2E:EE:2B:96:EA:91:A5:CA:23 Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA Certificate issuer: /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft Manifest number: 0437 Signing time: Sat 07 Jun 2025 00:21:17 +0000 Manifest this update: Sat 07 Jun 2025 00:21:17 +0000 Manifest next update: Sat 14 Jun 2025 00:21:17 +0000 Files and hashes: 1: 6PktayopMPClvq9TBEyF2OreHro.crl (hash: 7e1kHoMQ77KSXuu7K5bVx8nembB3ZvvpjuSrlq9RjXY=) 2: 80A9DE56614C11EC9175DE54C4F9AE02.roa (hash: ygV29+CdpRjO1HlIMJ6Gkg3eEGxPeEnonRI3YwMUHgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 00:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129C87, serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Validity Not Before: Jun 7 00:21:17 2025 GMT Not After : Jun 14 00:21:17 2025 GMT Subject: CN=684385fd-f931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:a0:c3:b0:02:5d:c5:2f:5c:a8:c2:61:c5: eb:c0:3b:31:3b:ab:bc:f3:36:b6:0a:81:bc:c3:07: 09:e8:89:46:1c:ab:27:ab:a0:41:8f:54:3f:73:4d: 47:2f:e5:4a:d6:4c:e4:04:86:c9:67:f9:58:d4:3f: 1b:e7:d3:63:0d:d5:44:55:dc:ba:16:43:74:3a:61: 3b:bb:73:55:ba:7f:65:e2:5c:56:58:e3:a3:6d:70: 15:2b:3d:53:e1:f3:6b:b5:66:b4:dd:14:43:2b:e4: 40:e9:61:d5:82:f7:6e:b2:84:a8:b5:da:24:8b:85: 00:07:27:62:6f:e5:fa:43:74:ce:b9:7d:3e:af:c2: 7c:0d:03:c3:53:d7:14:ad:54:be:1f:20:1c:1a:90: f1:1e:6b:b4:11:cd:1b:86:ba:46:ab:34:de:8e:ec: 46:2d:53:96:f5:57:11:a7:93:64:fa:82:71:fa:17: 50:18:86:22:52:84:29:2b:54:e1:8b:fd:04:97:02: 9e:ee:65:28:d6:28:98:dd:13:e3:55:56:e6:f7:ce: 27:21:02:19:fe:c9:01:19:59:ec:f4:49:69:3d:80: 19:e4:42:ff:c2:7d:bf:4e:dd:98:4b:38:dd:83:ea: c5:66:2a:7f:d5:e7:b6:6d:a9:8c:88:27:6d:0e:55: fe:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:50:67:AD:D5:6C:16:B6:C2:4B:A7:2E:EE:2B:96:EA:91:A5:CA:23 X509v3 Authority Key Identifier: keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d9:34:fc:cb:af:c4:1e:5f:6e:ee:9d:21:ef:55:aa:4d:67: e9:5b:0e:e5:c6:05:60:3e:d8:ab:d6:fe:f6:a2:0e:2c:cb:14: fb:5e:bb:61:41:e1:cd:bc:cd:80:bc:d0:13:96:82:c1:68:3a: b9:89:fc:e8:86:89:0a:4d:9d:c9:1c:4b:b1:9c:31:3a:2a:04: 88:be:b5:67:94:d2:e7:c3:46:0c:f3:7b:9c:d1:1a:a1:1e:f1: 5d:0d:ad:dd:70:9c:a9:d3:73:78:32:b1:95:13:a0:bb:25:bf: b1:b7:f3:4d:41:e5:18:ec:a4:2c:2f:a2:c3:49:0e:54:80:be: 29:2d:d7:81:5e:25:45:bc:b1:d1:6f:33:34:8d:9e:80:68:28: e0:03:9b:d9:55:24:60:99:01:b5:ff:6d:2c:c1:78:0e:96:d0: 25:e7:bb:77:a5:a0:35:11:80:80:01:ad:dc:e3:8f:6f:08:2f: 6f:9a:f2:52:72:37:12:4b:bd:ea:4f:0b:97:79:0d:dd:64:70: f1:f7:ca:dc:69:4b:31:64:6f:61:2e:49:a7:7c:70:1c:8d:7d: 47:a5:05:e4:53:6d:1b:c1:a7:42:98:e2:9d:37:82:ff:ab:79: 72:6f:d2:17:f0:95:de:82:e8:c6:a6:dd:29:26:8c:24:8e:8e: 36:b2:5f:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlDODcxMTAvBgNVBAUTKEU4RjkyRDZCMkEyOTMwRjBBNUJFQUY1MzA0NEM4NUQ4 RUFERTFFQkEwHhcNMjUwNjA3MDAyMTE3WhcNMjUwNjE0MDAyMTE3WjAYMRYwFAYD VQQDEw02ODQzODVmZC1mOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXKgw7ACXcUvXKjCYcXrwDsxO6u88za2CoG8wwcJ6IlGHKsnq6BBj1Q/c01H L+VK1kzkBIbJZ/lY1D8b59NjDdVEVdy6FkN0OmE7u3NVun9l4lxWWOOjbXAVKz1T 4fNrtWa03RRDK+RA6WHVgvdusoSotdoki4UABydib+X6Q3TOuX0+r8J8DQPDU9cU rVS+HyAcGpDxHmu0Ec0bhrpGqzTejuxGLVOW9VcRp5Nk+oJx+hdQGIYiUoQpK1Th i/0ElwKe7mUo1iiY3RPjVVbm984nIQIZ/skBGVns9ElpPYAZ5EL/wn2/Tt2YSzjd g+rFZip/1ee2bamMiCdtDlX+5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNQZ63V bBa2wkunLu4rluqRpcojMB8GA1UdIwQYMBaAFOj5LWsqKTDwpb6vUwRMhdjq3h66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUM4Ny9GRDA4M0Y1ODVF RUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1QQ2x2cTlUQkV5RjJPcmVI cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZQa3RheW9wTVBDbHZxOVRCRXlGMk9yZUhyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUM4Ny9GRDA4M0Y1ODVFRUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1Q Q2x2cTlUQkV5RjJPcmVIcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH2TT8y6/EHl9u7p0h71WqTWfpWw7lxgVgPtir1v72og4syxT7Xrth QeHNvM2AvNATloLBaDq5ifzohokKTZ3JHEuxnDE6KgSIvrVnlNLnw0YM83uc0Rqh HvFdDa3dcJyp03N4MrGVE6C7Jb+xt/NNQeUY7KQsL6LDSQ5UgL4pLdeBXiVFvLHR bzM0jZ6AaCjgA5vZVSRgmQG1/20swXgOltAl57t3paA1EYCAAa3c449vCC9vmvJS cjcSS73qTwuXeQ3dZHDx98rcaUsxZG9hLkmnfHAcjX1HpQXkU20bwadCmOKdN4L/ q3lyb9IX8JXegujGpt0pJowkjo42sl+6 -----END CERTIFICATE-----Generated at Sat Jun 7 05:09:21 2025 by rpki-client