$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft File: 6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json) Hash identifier: gs95ZnmZn1dKwS5EjrKj92yMjIRaGIOGEzrUxAvFaD0= Subject key identifier: 64:E2:B9:5B:43:7C:8C:48:FD:66:04:CF:F1:1C:B8:4E:6E:DD:0B:B2 Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1 Certificate issuer: /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft Manifest number: 01D8 Signing time: Sun 01 Jun 2025 02:29:52 +0000 Manifest this update: Sun 01 Jun 2025 02:29:52 +0000 Manifest next update: Sun 08 Jun 2025 02:29:52 +0000 Files and hashes: 1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: 0003k5DJkWk1iEq5O0ievDG3mmjeH1F9NUwXtLiB6W4=) 2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: Cbvoa7LrgmapG4r7FY0TXw9PoDEC05XNI+g2GTtN22E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 02:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1 Validity Not Before: Jun 1 02:29:52 2025 GMT Not After : Jun 8 02:29:52 2025 GMT Subject: CN=683bbb20-9ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:ed:7b:40:30:f7:c1:3c:0e:88:71:bb:0e: 79:80:43:e5:73:b5:62:a2:8a:5d:44:25:e4:32:1b: c6:f8:0e:4d:07:0f:64:24:45:55:93:63:2f:6c:66: 9e:15:f4:f5:1f:7e:17:d8:d8:6f:4b:91:b1:b9:06: 06:5e:bd:89:09:41:95:51:bb:06:3a:f6:c6:dc:57: c3:05:24:f8:0f:7e:22:ea:ca:5a:69:17:10:a3:09: d5:73:fd:ef:93:26:76:20:34:79:50:e6:a1:fe:d8: de:b8:6a:53:03:f1:a3:54:1d:26:cb:94:48:e3:3c: ba:f5:8e:ef:53:fe:71:b4:7c:63:26:18:ed:23:9d: 5b:4f:47:28:7a:b9:3e:cf:8a:4c:58:e1:7b:20:4e: ee:29:20:48:40:7c:fb:6f:4c:9e:3c:be:f3:85:97: fb:68:c7:eb:2e:2a:13:31:53:3c:b5:4b:3b:21:9f: a4:dc:fe:17:ac:be:f5:b3:cb:86:14:e6:6a:b7:c7: 17:e5:f8:cc:9c:69:78:44:81:16:9f:d0:fc:6a:a0: 6c:ae:30:94:6c:5a:f3:10:5a:21:b9:2c:9a:49:af: b7:00:e3:b0:1e:47:66:ad:68:0d:08:6a:2f:57:65: bc:41:0c:7a:5d:80:bc:dc:22:fe:49:af:58:e7:92: e0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E2:B9:5B:43:7C:8C:48:FD:66:04:CF:F1:1C:B8:4E:6E:DD:0B:B2 X509v3 Authority Key Identifier: keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:41:54:be:c2:5e:80:7d:92:70:83:6c:73:5b:ac:d8:ac:5a: b6:5a:fb:76:5a:e4:9b:d1:07:7a:c5:59:49:76:3c:03:0a:d8: 72:59:82:39:79:ec:f8:8e:dc:57:e4:b3:d8:99:86:3a:97:24: 5d:7f:fd:19:41:94:d3:b5:0b:5c:d5:cb:62:69:ef:06:b3:a0: f1:e5:1f:7a:94:a3:1b:65:29:aa:66:24:c2:17:82:31:96:1c: 55:0a:f2:ce:20:35:48:92:74:3e:e7:ce:09:85:57:7d:13:ca: e4:f3:b6:bf:9a:7e:1c:bd:83:5b:65:44:a7:90:ef:60:23:82: 41:6b:c1:aa:a6:69:dc:b5:e2:54:0c:13:e3:76:4b:61:f5:c9: cb:f5:79:d4:bf:43:33:bd:90:25:47:fa:d5:05:2b:28:08:05: 89:71:a2:9e:f4:04:38:45:23:37:90:9e:b6:3d:7e:df:d8:47: 3f:b1:0b:7f:97:96:5b:d2:ea:e0:5d:c3:13:6d:91:62:da:aa: bd:47:a2:ea:ba:70:a5:5e:95:18:fa:8e:0b:5e:29:a9:b9:70: 29:cb:dd:3f:46:3a:13:c9:e1:66:fa:31:ee:ca:60:78:ef:73: be:b1:d6:44:c0:a8:38:01:07:44:0c:28:e8:4a:49:9e:59:ea: 0a:cb:39:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEzNTkxMTAvBgNVBAUTKEU5NTc2RDMyQ0RBMTlCQjg2RjNDMTYyRUM5RkQzNkQz RkQyNUI5QzEwHhcNMjUwNjAxMDIyOTUyWhcNMjUwNjA4MDIyOTUyWjAYMRYwFAYD VQQDEw02ODNiYmIyMC05ZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0Dte0Aw98E8Dohxuw55gEPlc7VioopdRCXkMhvG+A5NBw9kJEVVk2MvbGae FfT1H34X2NhvS5GxuQYGXr2JCUGVUbsGOvbG3FfDBST4D34i6spaaRcQownVc/3v kyZ2IDR5UOah/tjeuGpTA/GjVB0my5RI4zy69Y7vU/5xtHxjJhjtI51bT0coerk+ z4pMWOF7IE7uKSBIQHz7b0yePL7zhZf7aMfrLioTMVM8tUs7IZ+k3P4XrL71s8uG FOZqt8cX5fjMnGl4RIEWn9D8aqBsrjCUbFrzEFohuSyaSa+3AOOwHkdmrWgNCGov V2W8QQx6XYC83CL+Sa9Y55LgrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTiuVtD fIxI/WYEz/EcuE5u3QuyMB8GA1UdIwQYMBaAFOlXbTLNoZu4bzwWLsn9NtP9JbnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTM1OS9DQTlBMzRCNjY2 MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03aHZQQll1eWYwMjBfMGx1 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZWZHRNczJobTdodlBCWXV5ZjAyMF8wbHVjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTM1OS9DQTlBMzRCNjY2MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03 aHZQQll1eWYwMjBfMGx1Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTQVS+wl6AfZJwg2xzW6zYrFq2Wvt2WuSb0Qd6xVlJdjwDCthyWYI5 eez4jtxX5LPYmYY6lyRdf/0ZQZTTtQtc1ctiae8Gs6Dx5R96lKMbZSmqZiTCF4Ix lhxVCvLOIDVIknQ+584JhVd9E8rk87a/mn4cvYNbZUSnkO9gI4JBa8GqpmncteJU DBPjdkth9cnL9XnUv0MzvZAlR/rVBSsoCAWJcaKe9AQ4RSM3kJ62PX7f2Ec/sQt/ l5Zb0urgXcMTbZFi2qq9R6LqunClXpUY+o4LXimpuXApy90/RjoTyeFm+jHuymB4 73O+sdZEwKg4AQdEDCjoSkmeWeoKyzne -----END CERTIFICATE-----Generated at Mon Jun 2 20:53:38 2025 by rpki-client