$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft File: o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json) Hash identifier: Mrr5N+WO1QpQQt2mGtr8hhhnvhe7n6B6TIB9PTIPWYE= Subject key identifier: B8:C3:71:12:08:7D:C7:6B:7C:06:36:46:F0:F0:BC:08:C3:94:67:4C Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft Manifest number: 03A9 Signing time: Sat 31 May 2025 00:54:42 +0000 Manifest this update: Sat 31 May 2025 00:54:42 +0000 Manifest next update: Sat 07 Jun 2025 00:54:41 +0000 Files and hashes: 1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: VpLLgO1OyQBIvUp6yBMkZHvzoHC6qn1kEi0UcbCq3e8=) 2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: 82bmKccqbBzTdNqrTXoGpBcJx8ypp4VeLlhE4Yo0df8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Validity Not Before: May 31 00:54:42 2025 GMT Not After : Jun 7 00:54:41 2025 GMT Subject: CN=683a5352-bf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:d0:30:41:af:ba:de:92:80:06:90:b7:fd: 2c:3a:86:f1:bc:b1:31:d8:ac:89:37:90:77:d0:e1: 3a:41:dc:f7:25:f8:8d:07:88:7e:f3:98:ad:0c:85: cf:09:35:d3:62:9d:46:ba:70:9e:c3:75:64:a0:c1: 03:f9:9c:3e:a9:cd:cd:fd:94:0c:8f:bb:5a:9c:57: b0:e9:8d:1a:c8:e7:9d:8c:f7:53:b3:83:8d:f6:93: 83:4a:59:a6:12:0a:63:ec:17:68:2d:e3:3c:74:4f: 08:9e:fc:44:98:bc:dd:ff:b5:d1:cc:18:de:e9:8c: 45:45:a8:8d:00:79:07:76:5c:0f:f2:60:15:00:f6: ee:10:31:da:50:e8:ca:95:bc:59:0f:75:27:c1:83: 76:af:52:6d:65:20:45:0d:bb:94:67:8a:8c:16:50: 85:43:48:e4:c5:0d:61:78:55:ac:de:a4:1c:27:13: 1c:9d:b7:4b:26:76:cd:7c:f1:fb:c5:d7:22:6a:c2: 78:48:84:48:c0:fa:24:7d:00:3e:6f:6b:64:85:62: ea:8b:e9:3e:2d:06:51:74:aa:2c:62:36:a6:03:ed: a9:89:8b:0a:f5:72:b1:bd:3a:23:6d:0f:1a:43:1c: b6:e6:83:17:32:2c:4d:c4:03:f7:b7:cf:f5:cb:03: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C3:71:12:08:7D:C7:6B:7C:06:36:46:F0:F0:BC:08:C3:94:67:4C X509v3 Authority Key Identifier: keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:0e:42:d1:92:20:8c:0b:ca:48:e8:37:55:3c:84:43:46:5b: 2f:06:fa:9f:87:76:22:3b:2e:e1:65:f4:a5:53:48:d0:60:b6: 9f:54:cc:0a:2b:94:e8:a6:6e:a2:b1:dd:ae:82:54:00:b3:80: e8:20:05:d1:07:6b:b2:96:35:75:b2:33:36:41:1c:74:07:54: cb:64:c8:fe:f8:8e:9d:f6:d9:8d:d8:e2:04:6b:83:e6:13:62: b4:4a:f6:e5:a8:fe:d7:ef:77:56:42:f6:10:b5:cb:b8:59:25: bb:89:f5:36:15:10:4b:48:a9:0b:37:54:e1:4f:82:90:a6:ea: 33:13:1e:fd:f1:4d:f2:b0:00:fa:ea:72:64:07:e6:52:45:e9: 24:8f:60:b9:75:2e:37:9a:4b:eb:7c:6a:ce:a7:61:99:0d:87: c4:50:cf:ec:88:ce:ea:1e:3f:4e:e3:af:8e:c1:6f:18:e6:88: fb:21:3c:96:3b:d2:e0:ef:2d:73:a9:55:08:07:7f:6c:2f:37: 54:7b:c6:ac:6d:30:58:df:fe:e0:8b:c0:2f:70:f0:af:09:0f: 47:c6:a5:b5:f4:4d:c0:ed:5c:f2:4e:43:30:8f:41:95:37:ce: aa:34:e9:52:5b:6c:87:96:1b:fe:90:bc:8d:56:33:09:94:fa: d7:0a:88:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0QTExMTAvBgNVBAUTKEEzRDczQTRFOUYxMDQzREUzQUJGNEY1RUQxMDg2OEFG NkQzMzVCRjQwHhcNMjUwNTMxMDA1NDQyWhcNMjUwNjA3MDA1NDQxWjAYMRYwFAYD VQQDEw02ODNhNTM1Mi1iZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MvQMEGvut6SgAaQt/0sOobxvLEx2KyJN5B30OE6Qdz3JfiNB4h+85itDIXP CTXTYp1GunCew3VkoMED+Zw+qc3N/ZQMj7tanFew6Y0ayOedjPdTs4ON9pODSlmm Egpj7BdoLeM8dE8InvxEmLzd/7XRzBje6YxFRaiNAHkHdlwP8mAVAPbuEDHaUOjK lbxZD3UnwYN2r1JtZSBFDbuUZ4qMFlCFQ0jkxQ1heFWs3qQcJxMcnbdLJnbNfPH7 xdciasJ4SIRIwPokfQA+b2tkhWLqi+k+LQZRdKosYjamA+2piYsK9XKxvTojbQ8a Qxy25oMXMixNxAP3t8/1ywOVPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjDcRII fcdrfAY2RvDwvAjDlGdMMB8GA1UdIwQYMBaAFKPXOk6fEEPeOr9PXtEIaK9tM1v0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRBMS82OENFQzA5NDk1 NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5NDZ2MDllMFFob3IyMHpX X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285YzZUcDhRUTk0NnYwOWUwUWhvcjIweldfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTRBMS82OENFQzA5NDk1NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5 NDZ2MDllMFFob3IyMHpXX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJDkLRkiCMC8pI6DdVPIRDRlsvBvqfh3YiOy7hZfSlU0jQYLafVMwK K5Topm6isd2uglQAs4DoIAXRB2uyljV1sjM2QRx0B1TLZMj++I6d9tmN2OIEa4Pm E2K0SvblqP7X73dWQvYQtcu4WSW7ifU2FRBLSKkLN1ThT4KQpuozEx798U3ysAD6 6nJkB+ZSRekkj2C5dS43mkvrfGrOp2GZDYfEUM/siM7qHj9O46+OwW8Y5oj7ITyW O9Lg7y1zqVUIB39sLzdUe8asbTBY3/7gi8AvcPCvCQ9HxqW19E3A7VzyTkMwj0GV N86qNOlSW2yHlhv+kLyNVjMJlPrXCojG -----END CERTIFICATE-----Generated at Sat May 31 17:54:56 2025 by rpki-client