$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft File: bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft (raw, json) Hash identifier: u4QDq+L2/3i1GXcA9SL79mXK9/j8neKJ7033g+uvHeg= Subject key identifier: 8A:E9:43:4B:6B:51:46:06:1E:A0:41:52:85:B0:29:0E:BE:97:E2:B6 Authority key identifier: 6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 Certificate issuer: /CN=A913DF8A/serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft Manifest number: D6 Signing time: Sat 31 May 2025 05:11:29 +0000 Manifest this update: Sat 31 May 2025 05:11:29 +0000 Manifest next update: Sat 07 Jun 2025 05:11:29 +0000 Files and hashes: 1: bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl (hash: YBmAGt1d9fhLKMyu7nspUOiT7ftLE01X0WUggrsoCiw=) 2: EC873B66F37911EEA9FCAF6BC4F9AE02.roa (hash: rsabR21jqtcvoz4XthX1FqvEg0esDGA7DmhhfFQxiEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF8A, serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Validity Not Before: May 31 05:11:29 2025 GMT Not After : Jun 7 05:11:29 2025 GMT Subject: CN=683a8f81-6270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:d7:40:68:62:74:31:63:da:20:fc:d1:09: ac:ef:0b:98:50:27:26:46:5c:b6:7a:35:19:fb:a1: 68:ab:b0:8a:bb:e8:e3:97:05:f7:41:e6:68:f1:2f: b7:3e:ce:16:79:74:91:15:21:6f:ac:d8:0a:2b:1d: b2:99:2e:e1:22:7a:32:6d:c4:9c:68:77:a6:7c:58: 01:7f:6c:3c:aa:bc:1d:9d:74:29:e7:27:c8:a0:a7: c6:dd:14:f2:20:77:0e:de:6a:4c:ba:d7:b0:c3:9e: da:eb:c8:eb:0e:00:42:25:48:ff:1f:38:8b:8a:81: 6e:df:f0:22:cc:a5:90:58:8d:12:74:42:14:96:02: b7:cc:ec:16:2c:69:fe:f5:30:4f:d3:2f:0c:04:b9: c8:87:72:dc:9f:94:cf:2b:d5:1b:a5:1f:1b:61:cf: 01:a7:83:16:a8:0e:73:d6:54:ea:b6:02:db:75:9f: fe:e1:8e:77:f7:63:dd:e7:7c:bf:fd:0b:38:87:f4: 16:11:3a:d6:f3:25:76:35:c9:a3:ac:51:69:a9:b5: 5e:cd:d2:c0:48:86:69:07:74:09:b2:be:d4:ca:4d: 97:a2:58:6a:04:53:6f:d2:b3:fe:14:10:f3:e8:c5: b1:4c:14:79:53:be:27:ad:8a:ef:b6:c2:86:57:c9: 9f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E9:43:4B:6B:51:46:06:1E:A0:41:52:85:B0:29:0E:BE:97:E2:B6 X509v3 Authority Key Identifier: keyid:6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:98:29:8e:2b:cc:fb:fa:25:e0:47:c8:98:35:5d:43:78:4e: f4:86:a4:52:25:b0:d6:69:84:b2:7d:4d:36:f5:a1:43:6d:63: 18:69:9c:49:89:9c:19:c6:31:7f:ff:61:9f:91:41:b9:48:5c: d5:91:d7:74:8b:0a:65:2a:e5:35:bb:37:4d:6e:a3:d1:c8:21: 10:94:a2:26:5c:38:57:f1:45:47:a7:03:65:35:37:73:80:00: ef:3e:d5:c1:1f:ef:d2:95:fc:24:e1:d7:e8:c4:55:02:30:7d: f5:5a:e8:43:4d:3a:8b:42:b6:20:11:06:ab:da:fe:cb:e5:4a: cd:6b:17:f3:e0:5e:fb:b0:a2:73:80:53:3b:8a:e4:e4:f7:ef: c9:72:da:e8:22:47:fe:25:dd:25:d4:c2:a2:38:c6:3f:0e:31: 6c:82:7d:8e:34:db:ba:0a:d6:a9:2d:b0:8a:32:4e:a8:ee:82: 1e:1f:a1:61:af:bf:87:bb:84:bf:b7:62:63:b5:f5:18:52:60: af:93:fb:56:02:d1:bf:c5:f2:c5:3c:d0:8f:9f:5d:3b:3c:20: 94:a1:5e:b1:ff:ed:56:96:eb:54:7f:70:6b:0f:81:db:84:2a: a2:ca:d0:cb:00:97:ae:f3:25:55:eb:d2:83:80:52:0e:d9:67: fb:4f:d1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGOEExMTAvBgNVBAUTKDZDOERGQTA0M0MyMkI4QTI3RUFCNjA0NzBBRjQwNjYw MjRBNjg0NDAwHhcNMjUwNTMxMDUxMTI5WhcNMjUwNjA3MDUxMTI5WjAYMRYwFAYD VQQDEw02ODNhOGY4MS02MjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt03XQGhidDFj2iD80Qms7wuYUCcmRly2ejUZ+6Foq7CKu+jjlwX3QeZo8S+3 Ps4WeXSRFSFvrNgKKx2ymS7hInoybcScaHemfFgBf2w8qrwdnXQp5yfIoKfG3RTy IHcO3mpMuteww57a68jrDgBCJUj/HziLioFu3/AizKWQWI0SdEIUlgK3zOwWLGn+ 9TBP0y8MBLnIh3Lcn5TPK9UbpR8bYc8Bp4MWqA5z1lTqtgLbdZ/+4Y5392Pd53y/ /Qs4h/QWETrW8yV2NcmjrFFpqbVezdLASIZpB3QJsr7Uyk2XolhqBFNv0rP+FBDz 6MWxTBR5U74nrYrvtsKGV8mfowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrpQ0tr UUYGHqBBUoWwKQ6+l+K2MB8GA1UdIwQYMBaAFGyN+gQ8IriifqtgRwr0BmAkpoRA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREY4QS84RjAxMUM2RUYz NzkxMUVFQjdFOURDNkFDNEY5QUUwMi9iSTM2QkR3aXVLSi1xMkJIQ3ZRR1lDU21o RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JJMzZCRHdpdUtKLXEyQkhDdlFHWUNTbWhFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REY4QS84RjAxMUM2RUYzNzkxMUVFQjdFOURDNkFDNEY5QUUwMi9iSTM2QkR3aXVL Si1xMkJIQ3ZRR1lDU21oRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmmCmOK8z7+iXgR8iYNV1DeE70hqRSJbDWaYSyfU029aFDbWMYaZxJ iZwZxjF//2GfkUG5SFzVkdd0iwplKuU1uzdNbqPRyCEQlKImXDhX8UVHpwNlNTdz gADvPtXBH+/Slfwk4dfoxFUCMH31WuhDTTqLQrYgEQar2v7L5UrNaxfz4F77sKJz gFM7iuTk9+/JctroIkf+Jd0l1MKiOMY/DjFsgn2ONNu6CtapLbCKMk6o7oIeH6Fh r7+Hu4S/t2JjtfUYUmCvk/tWAtG/xfLFPNCPn107PCCUoV6x/+1WlutUf3BrD4Hb hCqiytDLAJeu8yVV69KDgFIO2Wf7T9HS -----END CERTIFICATE-----Generated at Sat May 31 16:49:04 2025 by rpki-client