$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json) Hash identifier: 6ETmo6fk1LS7kFXmhxasp8mi9gyNgco1diu8SLtCgis= Subject key identifier: F8:A2:51:F1:D9:2E:8F:15:AA:CD:AF:C8:4F:E6:8F:ED:68:2F:EC:2C Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft Manifest number: 07 Signing time: Sat 31 May 2025 07:42:53 +0000 Manifest this update: Sat 31 May 2025 07:42:52 +0000 Manifest next update: Sat 07 Jun 2025 07:42:52 +0000 Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: Xvnab9rds/HFMmHgueV15eAUgDbeVLhtut9VXXXZGJs=) 2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Validity Not Before: May 31 07:42:52 2025 GMT Not After : Jun 7 07:42:52 2025 GMT Subject: CN=683ab2fd-4612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ab:d3:79:0e:5a:4b:db:1b:0c:a9:f6:5b:02: 53:ec:10:81:14:31:39:9e:bc:f2:2e:16:93:d8:f6: c9:1b:dc:09:50:9f:7d:86:af:81:d5:91:5c:cb:92: df:f7:5d:5e:aa:62:1a:3a:17:fb:42:1d:fe:ab:e8: 17:a0:09:96:61:40:db:a5:0e:32:4b:d8:54:e1:ca: 9c:a4:a5:92:53:fa:c4:19:98:24:36:8d:fa:de:59: d3:d7:0d:a8:49:68:5f:c1:63:c8:f3:8c:26:2f:64: 9f:24:28:f6:51:43:43:24:08:58:8c:33:3b:cb:b9: b1:46:3a:16:95:c7:d2:6f:0b:c9:fb:b1:fe:1a:9c: 44:dc:d5:67:6e:52:c8:d5:65:31:36:14:10:8c:07: 76:dd:86:1c:d0:4d:e3:a7:d4:cf:19:5e:81:b5:f1: b2:90:e1:4a:1d:b6:77:41:c0:ee:39:d4:df:7d:d1: 91:d9:dd:48:4a:ca:9f:50:d4:95:7f:1c:5f:6f:92: 69:56:ef:68:ce:41:89:60:10:2f:2c:05:1a:0c:d9: 56:02:c9:0b:cc:90:40:9c:73:b4:6b:4f:a3:3c:d4: b2:ec:ba:fe:3b:b5:87:5f:b6:3f:b1:51:5c:72:eb: 4d:67:dd:21:17:8d:1f:95:c0:b2:26:46:93:c8:6e: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A2:51:F1:D9:2E:8F:15:AA:CD:AF:C8:4F:E6:8F:ED:68:2F:EC:2C X509v3 Authority Key Identifier: keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:1e:c2:e9:39:c6:3f:86:2a:6d:cf:26:5a:04:b1:26:ea:c6: 66:f3:f7:b9:66:1e:30:20:09:e6:5c:6f:de:f0:53:b4:86:89: 90:1a:0f:89:46:bc:46:db:f5:75:08:47:88:ff:90:58:13:fe: d3:2d:47:db:f4:15:15:cd:44:fe:87:ee:a3:2b:09:23:90:da: 6e:8f:a5:00:c2:f5:81:46:12:31:26:2e:37:44:15:a4:d2:b1: 9f:ec:95:75:fe:3f:2f:7d:4e:94:19:10:f3:8d:c7:b5:b2:ff: 24:2c:cd:e8:bc:93:98:75:74:2a:34:24:25:9d:7f:f0:2a:30: ab:c3:fc:58:82:c2:03:01:11:09:e7:87:4e:8c:3e:86:5b:7a: b4:4a:2c:46:d2:7d:ab:dc:b9:42:c3:19:ca:80:4e:ab:d7:06: d0:c3:00:41:69:ed:4f:81:49:6e:6b:f2:c7:54:59:a2:5b:8c: 46:3e:df:a4:33:a5:b0:63:9e:ff:3c:73:57:07:fe:9f:1c:d9: 7b:b0:28:f5:51:03:c3:05:84:24:5d:3a:12:3a:61:b6:58:29: 9e:cd:91:f0:ba:cf:54:94:b1:fc:a5:fb:a1:41:e1:ef:a9:b0: 25:38:ce:2a:80:bf:77:19:bf:c7:b3:20:15:c4:76:29:4c:32: b4:3a:41:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RUZGRDExMC8GA1UEBRMoRjZGMzg1REYxRkVBMjg1N0I2ODQzRjY2MzU2NTQzRkI3 NkJGMDhBNjAeFw0yNTA1MzEwNzQyNTJaFw0yNTA2MDcwNzQyNTJaMBgxFjAUBgNV BAMTDTY4M2FiMmZkLTQ2MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkq9N5DlpL2xsMqfZbAlPsEIEUMTmevPIuFpPY9skb3AlQn32Gr4HVkVzLkt/3 XV6qYho6F/tCHf6r6BegCZZhQNulDjJL2FThypykpZJT+sQZmCQ2jfreWdPXDahJ aF/BY8jzjCYvZJ8kKPZRQ0MkCFiMMzvLubFGOhaVx9JvC8n7sf4anETc1WduUsjV ZTE2FBCMB3bdhhzQTeOn1M8ZXoG18bKQ4UodtndBwO451N990ZHZ3UhKyp9Q1JV/ HF9vkmlW72jOQYlgEC8sBRoM2VYCyQvMkECcc7RrT6M81LLsuv47tYdftj+xUVxy 601n3SEXjR+VwLImRpPIbluxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+KJR8dku jxWqza/IT+aP7Wgv7CwwHwYDVR0jBBgwFoAU9vOF3x/qKFe2hD9mNWVD+3a/CKYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFRkZEL0VBMTI5OTBFMzMy MjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0ZlMmhEOW1OV1ZELTNhX0NL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXZPRjN4X3FLRmUyaEQ5bU5XVkQtM2FfQ0tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF RkZEL0VBMTI5OTBFMzMyMjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0Zl MmhEOW1OV1ZELTNhX0NLWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGYewuk5xj+GKm3PJloEsSbqxmbz97lmHjAgCeZcb97wU7SGiZAaD4lG vEbb9XUIR4j/kFgT/tMtR9v0FRXNRP6H7qMrCSOQ2m6PpQDC9YFGEjEmLjdEFaTS sZ/slXX+Py99TpQZEPONx7Wy/yQszei8k5h1dCo0JCWdf/AqMKvD/FiCwgMBEQnn h06MPoZberRKLEbSfavcuULDGcqATqvXBtDDAEFp7U+BSW5r8sdUWaJbjEY+36Qz pbBjnv88c1cH/p8c2XuwKPVRA8MFhCRdOhI6YbZYKZ7NkfC6z1SUsfyl+6FB4e+p sCU4ziqAv3cZv8ezIBXEdilMMrQ6Qe0= -----END CERTIFICATE-----Generated at Sat May 31 16:05:22 2025 by rpki-client