$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft File: nJp0feAK9FuI94QRKOidsT0jFyk.mft (raw, json) Hash identifier: OXeAlzRJ64A/Q/tb4SwOVptzPiYfQ05AKdRLAUKCgd4= Subject key identifier: E9:46:35:66:10:1C:0D:B7:65:B8:3E:E3:E1:B0:D6:63:F8:DB:1F:2B Authority key identifier: 9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29 Certificate issuer: /CN=A9131AC1/serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729 Certificate serial: 05D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft Manifest number: 05D7 Signing time: Sun 08 Jun 2025 22:36:45 +0000 Manifest this update: Sun 08 Jun 2025 22:36:44 +0000 Manifest next update: Sun 15 Jun 2025 22:36:44 +0000 Files and hashes: 1: nJp0feAK9FuI94QRKOidsT0jFyk.crl (hash: h91nGqVypvJku5Ddr7MXUyI1OE1kkAZtTQ7BRdTnBtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1497 (0x5d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131AC1, serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729 Validity Not Before: Jun 8 22:36:44 2025 GMT Not After : Jun 15 22:36:44 2025 GMT Subject: CN=6846107d-6ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:b2:23:b8:15:e0:71:ec:7d:5f:ff:91:45: 12:85:22:06:f3:04:50:1f:22:56:09:5c:c3:68:21: cb:aa:b0:2f:4d:a3:17:d3:5d:57:4a:e5:c1:c7:e9: 26:b8:cb:4f:44:92:c9:23:f5:0e:aa:c6:38:09:95: 6d:c8:65:03:c3:20:79:f5:8a:59:32:f2:bb:fa:7e: a6:60:9f:44:27:c6:73:2c:d3:e4:df:c0:73:6f:0c: e2:61:24:2a:9c:3a:59:6e:35:bd:e1:9e:0b:e6:c5: 43:86:60:c9:3c:44:4d:f9:ab:f9:37:0e:97:a1:63: d8:80:1b:12:4b:89:fa:6e:e3:fc:b5:ec:88:7f:12: e5:f3:48:b1:4f:9a:bc:bf:ae:4e:24:43:be:1b:e2: 69:ed:1a:46:81:3e:00:10:0f:d6:0d:90:f1:a5:9f: 7a:a9:78:2a:74:01:f5:fa:19:bd:7a:72:56:42:a2: eb:74:3a:1c:68:9f:dd:1a:e8:70:dd:c4:64:22:a6: 09:8e:58:4f:7b:bd:0e:34:d5:7c:28:be:1c:be:c4: 8b:6a:b2:fd:11:70:d3:48:c4:39:2a:bc:0b:a7:58: a4:fd:67:30:f4:de:96:7b:8d:f6:f2:26:8d:c0:99: f0:0a:d9:6e:c0:01:19:5a:a4:e6:5a:07:2d:27:5f: e8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:46:35:66:10:1C:0D:B7:65:B8:3E:E3:E1:B0:D6:63:F8:DB:1F:2B X509v3 Authority Key Identifier: keyid:9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:ed:46:d4:e4:b4:80:38:ac:46:e0:2c:96:a7:91:7c:33:ec: de:b9:28:df:3a:88:81:12:ae:c3:15:bb:aa:79:62:f3:f4:12: 3e:80:7f:19:09:51:12:17:8e:45:8c:96:4b:3d:a3:7a:51:86: f8:b6:8b:e3:ef:d7:9a:33:ff:13:e1:a8:d3:7b:4a:3c:46:ea: d3:8d:45:ee:5a:61:0a:0b:78:89:a3:1d:5a:76:ae:95:d1:ed: ad:d4:b5:b5:6d:f8:c8:52:0c:28:45:35:df:14:c9:95:2d:6a: 12:5e:45:b4:47:f6:39:46:61:89:ad:e8:c3:b6:60:98:b1:19: bd:ad:b8:7c:02:bb:17:9b:05:e0:1e:4e:c3:35:9d:81:71:95: b1:08:85:ca:6d:30:0c:2a:64:f7:2e:16:dd:8e:62:ba:bd:0b: da:2e:52:80:84:9e:bb:93:81:d6:0d:5b:3a:fb:db:ac:1c:95: b8:8e:f7:4a:c0:14:58:b0:fd:7e:7e:61:19:b5:62:84:69:1f: 51:a2:af:d7:be:09:2e:35:f0:d4:89:30:8b:84:43:62:d0:c6: 10:4e:8d:56:ba:e4:6d:50:f1:89:a4:54:08:fb:97:ec:97:f8: 27:08:cb:66:46:c6:26:d5:3a:4c:89:e1:4d:99:1f:45:ce:96: 78:52:1a:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQzExMTAvBgNVBAUTKDlDOUE3NDdERTAwQUY0NUI4OEY3ODQxMTI4RTg5REIx M0QyMzE3MjkwHhcNMjUwNjA4MjIzNjQ0WhcNMjUwNjE1MjIzNjQ0WjAYMRYwFAYD VQQDEw02ODQ2MTA3ZC02ZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGGyI7gV4HHsfV//kUUShSIG8wRQHyJWCVzDaCHLqrAvTaMX011XSuXBx+km uMtPRJLJI/UOqsY4CZVtyGUDwyB59YpZMvK7+n6mYJ9EJ8ZzLNPk38BzbwziYSQq nDpZbjW94Z4L5sVDhmDJPERN+av5Nw6XoWPYgBsSS4n6buP8teyIfxLl80ixT5q8 v65OJEO+G+Jp7RpGgT4AEA/WDZDxpZ96qXgqdAH1+hm9enJWQqLrdDocaJ/dGuhw 3cRkIqYJjlhPe70ONNV8KL4cvsSLarL9EXDTSMQ5KrwLp1ik/Wcw9N6We4328iaN wJnwCtluwAEZWqTmWgctJ1/olQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlGNWYQ HA23Zbg+4+Gw1mP42x8rMB8GA1UdIwQYMBaAFJyadH3gCvRbiPeEESjonbE9Ixcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFDMS9GRTY4RDNDNEI5 OTAxMUVCOUFCRTdFNEVDNEY5QUUwMi9uSnAwZmVBSzlGdUk5NFFSS09pZHNUMGpG eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KcDBmZUFLOUZ1STk0UVJLT2lkc1QwakZ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFDMS9GRTY4RDNDNEI5OTAxMUVCOUFCRTdFNEVDNEY5QUUwMi9uSnAwZmVBSzlG dUk5NFFSS09pZHNUMGpGeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDM7UbU5LSAOKxG4CyWp5F8M+zeuSjfOoiBEq7DFbuqeWLz9BI+gH8Z CVESF45FjJZLPaN6UYb4tovj79eaM/8T4ajTe0o8RurTjUXuWmEKC3iJox1adq6V 0e2t1LW1bfjIUgwoRTXfFMmVLWoSXkW0R/Y5RmGJrejDtmCYsRm9rbh8ArsXmwXg Hk7DNZ2BcZWxCIXKbTAMKmT3LhbdjmK6vQvaLlKAhJ67k4HWDVs6+9usHJW4jvdK wBRYsP1+fmEZtWKEaR9Roq/XvgkuNfDUiTCLhENi0MYQTo1WuuRtUPGJpFQI+5fs l/gnCMtmRsYm1TpMieFNmR9FzpZ4UhqX -----END CERTIFICATE-----Generated at Mon Jun 9 00:57:05 2025 by rpki-client