$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: 91X+FGgD05pRQiTUsIEnKyfVzEHcNC/CKBfs0BN+sTs= Subject key identifier: 77:DB:A4:F7:34:B6:10:DF:F2:73:DF:ED:01:C7:55:62:D5:47:3D:1F Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 17 Signing time: Sat 31 May 2025 07:32:18 +0000 Manifest this update: Sat 31 May 2025 07:32:18 +0000 Manifest next update: Sat 07 Jun 2025 07:32:18 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: MvJWMChZBHNXiHJOdmXb885v8kttCbxeGhiAoMkSjwA=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: May 31 07:32:18 2025 GMT Not After : Jun 7 07:32:18 2025 GMT Subject: CN=683ab082-abeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a3:ac:47:ee:e0:9a:68:c4:87:2a:31:37:e2: df:f4:51:36:6f:90:ef:83:37:f0:8d:65:ad:a3:66: 0f:9b:0b:ab:ea:b4:dc:6e:b0:d5:49:31:e7:87:46: bd:68:e9:d8:0b:eb:e0:7d:f8:fb:8c:5f:fd:6b:a5: 51:0f:42:da:0d:e4:e3:00:c0:ed:3f:c5:35:50:e0: 8e:52:58:71:0f:50:b0:10:e3:96:c5:24:fe:d4:c6: b0:11:04:a9:f6:da:e5:c2:8e:d7:3b:58:26:c0:9c: a3:81:bf:ee:47:f0:d3:66:8f:9d:5e:43:e9:d0:32: bc:3b:5d:3d:3b:26:1b:f8:e4:85:67:9d:48:13:16: ed:05:7f:88:89:8e:f1:a0:16:de:4b:2d:a4:e0:21: b2:65:c9:8a:a3:78:4a:6b:0b:a0:bd:0f:7d:1b:bf: 95:e1:90:74:14:17:d4:a1:21:09:3e:3d:7e:cb:8e: 30:6c:42:d7:82:36:6c:d9:46:21:78:6e:b7:4a:7d: 8b:25:aa:49:6f:37:68:97:00:41:25:26:20:60:7b: 5f:a7:6e:46:6f:20:62:bc:5e:e7:83:60:e2:3e:7a: c5:e8:22:5a:d6:93:61:ab:1d:7f:24:1e:fe:4e:9b: 50:1c:16:9a:23:1f:01:fd:65:a8:ec:1f:1d:60:a8: ff:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DB:A4:F7:34:B6:10:DF:F2:73:DF:ED:01:C7:55:62:D5:47:3D:1F X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:e9:ea:39:5d:c2:5a:3b:be:f3:0f:b5:a3:22:73:e9:d5:48: 48:05:5a:4b:0e:c8:dc:cb:89:0e:40:e3:07:30:42:96:79:73: 38:e3:14:b5:ff:30:03:20:bd:56:9f:b0:e5:a8:d0:e4:02:db: 4f:a0:42:35:76:00:c7:91:bc:8e:78:e7:63:96:bf:7b:20:06: 61:df:e3:15:0c:70:25:02:82:8b:ec:11:1b:58:3c:50:78:dd: c7:f8:e3:11:4b:c4:b9:f3:bf:71:59:db:25:b8:1f:3d:cd:2d: 4e:fd:df:cf:9c:50:52:39:03:59:c7:6e:1b:1d:1d:35:bf:40: d8:34:e8:55:4c:14:92:50:5e:9f:f0:b2:09:d3:32:51:22:24: dd:80:67:ba:b2:dc:d8:82:21:4c:1a:23:17:65:b6:91:31:92: ec:9e:71:ae:da:d4:03:a6:d3:26:f2:2d:71:5a:8b:b6:ca:a5: 9d:1a:02:1a:76:c6:e6:ee:c3:df:b3:5f:f1:b7:d9:7f:35:66: 39:69:02:2d:d2:a4:a2:23:f8:db:33:55:bb:50:f0:41:bf:bf: 56:bb:e3:17:47:1c:cd:dc:7b:53:1f:eb:c8:37:da:e9:e4:66: b4:ac:a2:ef:d7:79:31:91:ee:8d:e7:3d:a5:f2:7d:06:55:78: 3a:cd:b0:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTA1MzEwNzMyMThaFw0yNTA2MDcwNzMyMThaMBgxFjAUBgNV BAMTDTY4M2FiMDgyLWFiZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDao6xH7uCaaMSHKjE34t/0UTZvkO+DN/CNZa2jZg+bC6vqtNxusNVJMeeHRr1o 6dgL6+B9+PuMX/1rpVEPQtoN5OMAwO0/xTVQ4I5SWHEPULAQ45bFJP7UxrARBKn2 2uXCjtc7WCbAnKOBv+5H8NNmj51eQ+nQMrw7XT07Jhv45IVnnUgTFu0Ff4iJjvGg Ft5LLaTgIbJlyYqjeEprC6C9D30bv5XhkHQUF9ShIQk+PX7LjjBsQteCNmzZRiF4 brdKfYslqklvN2iXAEElJiBge1+nbkZvIGK8XueDYOI+esXoIlrWk2GrHX8kHv5O m1AcFpojHwH9ZajsHx1gqP9nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd9uk9zS2 EN/yc9/tAcdVYtVHPR8wHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIjp6jldwlo7vvMPtaMic+nVSEgFWksOyNzLiQ5A4wcwQpZ5czjjFLX/ MAMgvVafsOWo0OQC20+gQjV2AMeRvI5452OWv3sgBmHf4xUMcCUCgovsERtYPFB4 3cf44xFLxLnzv3FZ2yW4Hz3NLU7938+cUFI5A1nHbhsdHTW/QNg06FVMFJJQXp/w sgnTMlEiJN2AZ7qy3NiCIUwaIxdltpExkuyeca7a1AOm0ybyLXFai7bKpZ0aAhp2 xubuw9+zX/G32X81ZjlpAi3SpKIj+NszVbtQ8EG/v1a74xdHHM3ce1Mf68g32unk ZrSsou/XeTGR7o3nPaXyfQZVeDrNsEM= -----END CERTIFICATE-----Generated at Sat May 31 16:47:43 2025 by rpki-client