$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json) Hash identifier: HS1beBUy3qSF9s+0+SaAi0qDmxBGx44FRgTyGw+glJw= Subject key identifier: 67:E9:47:3B:14:E4:4E:FE:01:42:64:C0:64:C7:52:B0:17:64:F0:2A Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft Manifest number: F7 Signing time: Sat 31 May 2025 04:51:01 +0000 Manifest this update: Sat 31 May 2025 04:51:01 +0000 Manifest next update: Sat 07 Jun 2025 04:51:00 +0000 Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: nMIKj89KIOGMU1lI9Yn3NPJcYPROAfxsfFPyV6zjQ+U=) 2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: May 31 04:51:01 2025 GMT Not After : Jun 7 04:51:00 2025 GMT Subject: CN=683a8ab5-72d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:f9:86:65:21:95:05:7d:84:69:30:29:aa: 51:0e:55:c3:3f:13:49:a6:cd:90:8e:0d:50:5f:d7: 3c:a6:fb:b0:9b:d6:a0:0f:a0:2c:bf:fe:aa:5e:dc: 98:33:b2:24:7c:05:84:9e:ac:3d:66:c9:ea:28:1d: 40:52:32:8c:22:00:fe:8b:b7:38:4f:ef:05:4e:eb: 0d:85:2c:17:23:df:59:56:3a:ab:63:57:7e:f9:c9: c6:6a:51:37:1f:1c:96:af:0e:78:11:38:61:25:0a: 70:3c:22:31:80:33:c9:f3:bb:2d:a4:0a:a3:11:71: 77:5a:57:f7:2d:38:52:2b:d8:61:48:89:15:3e:94: a4:3e:fc:93:6f:bb:9c:13:8a:6f:0b:6c:19:da:e9: 95:6c:75:05:75:e5:e6:e1:24:25:fc:6c:d2:b6:47: 0c:bc:e6:0d:c3:eb:0a:12:ce:7e:20:62:82:8a:36: 40:dc:cd:ce:ac:72:cf:eb:f0:5d:04:b9:2b:46:7c: 86:09:ee:1f:90:4b:9f:09:18:7e:fd:64:af:74:1d: f3:e8:2c:84:03:18:eb:47:48:fd:d8:1d:25:11:58: 47:34:73:0a:75:96:ed:ac:3d:27:7f:ad:ee:d4:fc: d1:6a:90:7d:2a:ef:0b:c4:e3:2a:28:66:32:aa:df: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E9:47:3B:14:E4:4E:FE:01:42:64:C0:64:C7:52:B0:17:64:F0:2A X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8f:34:ad:5c:06:22:44:03:bc:6f:30:35:a9:6c:ea:a3:b7: 76:5a:1e:b4:56:34:04:f9:59:c4:53:58:3b:5f:b0:b4:20:58: 95:a3:15:cc:f5:cc:3d:ed:7d:5f:69:f0:26:86:3b:59:7e:06: 3f:c5:24:78:32:1f:c9:10:94:77:77:2c:86:52:31:74:7f:6d: 6e:37:c0:5c:6a:69:e9:2f:c2:91:43:c9:08:a7:03:0f:e6:31: 9f:db:f3:19:51:4f:9a:ac:d5:8f:e5:64:82:c4:24:8b:9f:63: a7:00:9f:0d:7e:d2:ef:6e:c5:16:dd:16:f3:b7:a7:89:83:b2: 86:76:bd:71:b0:42:1f:c8:78:61:41:fa:e7:35:c7:4f:4b:df: 21:25:ac:1d:1d:59:1b:87:4c:da:2b:8f:b6:23:f7:ad:27:1f: ce:70:ae:3f:95:cd:bb:ed:a8:33:95:14:56:17:2b:ef:e1:ce: 9e:50:05:ab:63:36:9e:0b:28:93:70:f6:80:d7:9a:8c:f6:11: b9:d3:12:f8:ae:2c:96:09:55:20:07:6d:d3:5e:6d:a2:d6:10: 58:02:f3:d3:16:8d:2a:e9:55:8c:fe:62:b2:c2:61:1b:9f:a7: 1d:46:c8:66:86:8a:66:09:3b:35:ca:c3:30:69:45:68:d1:be: d9:30:cb:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5 MjNBQTc1QzcwHhcNMjUwNTMxMDQ1MTAxWhcNMjUwNjA3MDQ1MTAwWjAYMRYwFAYD VQQDEw02ODNhOGFiNS03MmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfv5hmUhlQV9hGkwKapRDlXDPxNJps2Qjg1QX9c8pvuwm9agD6Asv/6qXtyY M7IkfAWEnqw9ZsnqKB1AUjKMIgD+i7c4T+8FTusNhSwXI99ZVjqrY1d++cnGalE3 HxyWrw54EThhJQpwPCIxgDPJ87stpAqjEXF3Wlf3LThSK9hhSIkVPpSkPvyTb7uc E4pvC2wZ2umVbHUFdeXm4SQl/GzStkcMvOYNw+sKEs5+IGKCijZA3M3OrHLP6/Bd BLkrRnyGCe4fkEufCRh+/WSvdB3z6CyEAxjrR0j92B0lEVhHNHMKdZbtrD0nf63u 1PzRapB9Ku8LxOMqKGYyqt8WBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfpRzsU 5E7+AUJkwGTHUrAXZPAqMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1 NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6 ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcjzStXAYiRAO8bzA1qWzqo7d2Wh60VjQE+VnEU1g7X7C0IFiVoxXM 9cw97X1fafAmhjtZfgY/xSR4Mh/JEJR3dyyGUjF0f21uN8BcamnpL8KRQ8kIpwMP 5jGf2/MZUU+arNWP5WSCxCSLn2OnAJ8NftLvbsUW3Rbzt6eJg7KGdr1xsEIfyHhh QfrnNcdPS98hJawdHVkbh0zaK4+2I/etJx/OcK4/lc277agzlRRWFyvv4c6eUAWr YzaeCyiTcPaA15qM9hG50xL4riyWCVUgB23TXm2i1hBYAvPTFo0q6VWM/mKywmEb n6cdRshmhopmCTs1ysMwaUVo0b7ZMMvA -----END CERTIFICATE-----Generated at Sat May 31 17:14:38 2025 by rpki-client