$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft File: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json) Hash identifier: kYzqR6rh1mny16U9ZKPP7cqpslA7AzHaKe7bee6IWjM= Subject key identifier: 72:34:D0:AA:75:0A:C9:67:57:91:BC:69:6D:3C:5A:3D:B7:9B:8C:3D Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B Certificate issuer: /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Certificate serial: 02FE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft Manifest number: 02FA Signing time: Tue 03 Jun 2025 01:10:42 +0000 Manifest this update: Tue 03 Jun 2025 01:10:42 +0000 Manifest next update: Tue 10 Jun 2025 01:10:42 +0000 Files and hashes: 1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: Euvr/sGNBPSUV9JfNBFOsWLnAQrn2h1iz55rK3st+cU=) 2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: X05nJ1j9oFxXKovC7MyWIX4IdW9s4NwJbF0XevapeM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 766 (0x2fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Validity Not Before: Jun 3 01:10:42 2025 GMT Not After : Jun 10 01:10:42 2025 GMT Subject: CN=683e4b92-5295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:9d:67:40:9b:76:45:6b:95:ca:97:3d:e3: 55:28:20:cc:c4:59:35:35:09:c2:5d:75:3d:a0:1e: 6f:0e:f5:02:6e:14:d1:67:8a:a2:da:c9:8e:9f:b7: d4:7a:14:f2:2b:2b:2a:21:86:70:28:60:de:9a:a7: 6b:60:85:e1:03:3b:fa:26:e8:0b:f0:1b:e0:76:3e: be:39:2c:a1:a5:dc:fc:70:d9:1a:19:8d:57:e7:c0: eb:de:71:3e:da:8c:77:67:78:b1:59:3e:9a:02:22: e2:89:d7:fb:f5:43:52:38:3c:36:39:a5:3b:6c:6a: 48:15:71:0c:18:93:a9:7f:70:fb:1a:ec:da:61:aa: 06:18:06:e7:3a:3b:ef:30:0f:d9:e8:0d:64:0b:a1: 9b:01:c1:0b:8b:10:8d:dd:67:0e:a1:dc:04:5e:f5: 1f:f3:90:56:51:ac:6e:6c:48:c0:e8:0d:76:ea:89: ab:1d:c5:1d:0c:27:23:a6:fb:20:6a:f6:3f:ab:48: 58:67:b5:ed:9b:c0:94:5e:57:f6:d3:d9:57:00:82: 8c:54:50:e0:2c:a7:85:7f:7a:00:76:9d:29:16:f9: e6:77:b3:06:5b:2e:ef:64:ad:7d:13:22:1e:cf:06: d5:28:88:54:6f:54:46:2e:2e:5e:4f:46:ed:6e:78: de:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:34:D0:AA:75:0A:C9:67:57:91:BC:69:6D:3C:5A:3D:B7:9B:8C:3D X509v3 Authority Key Identifier: keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:8c:da:07:33:b1:8a:b6:1a:9a:4e:5f:ce:d3:b6:1b:36:d8: b6:b6:4a:ee:1c:5c:66:87:e8:05:32:9a:e1:64:2f:96:c5:f7: 52:00:b8:a6:35:61:be:19:7b:8d:43:6e:2c:39:7c:10:a5:69: 64:a8:82:e5:34:df:24:e3:0b:9d:70:89:72:ba:23:d2:76:ad: 4a:63:60:98:b8:a9:b8:1c:8f:ca:b3:a0:d3:54:d8:7c:ea:5a: 16:fd:b6:19:c9:61:a7:7c:38:38:76:ff:bf:a6:29:ac:6b:d0: e5:34:80:f2:f3:a4:c2:33:77:6d:6f:6c:70:2a:13:d9:d5:f5: 94:60:96:56:9a:53:aa:3e:41:c6:70:3c:e4:6e:28:96:73:51: 4e:16:b1:f0:65:97:1e:a9:bb:f4:42:b2:01:c2:1a:94:66:bb: e4:7a:fc:96:fb:cc:e6:09:81:9b:08:b8:cb:1e:f7:24:97:33: da:a4:a4:32:01:f9:51:28:7b:37:78:6a:c7:7f:94:87:bc:83: 28:49:65:a5:2a:e6:2f:ca:f5:6e:17:73:3c:3b:92:e3:94:36: d2:95:5a:e1:3b:99:2f:28:d9:40:25:59:e5:88:41:e3:49:f9: 6d:ec:11:df:1a:95:90:db:b3:c8:6d:10:35:82:aa:1e:6e:b1: 4f:86:41:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEY2NTUzMjU2QjI5N0YyODMzMTlDQjk4OUU2QjhDNzgz NkY4NzE5MEIwHhcNMjUwNjAzMDExMDQyWhcNMjUwNjEwMDExMDQyWjAYMRYwFAYD VQQDEw02ODNlNGI5Mi01Mjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIOdZ0CbdkVrlcqXPeNVKCDMxFk1NQnCXXU9oB5vDvUCbhTRZ4qi2smOn7fU ehTyKysqIYZwKGDemqdrYIXhAzv6JugL8Bvgdj6+OSyhpdz8cNkaGY1X58Dr3nE+ 2ox3Z3ixWT6aAiLiidf79UNSODw2OaU7bGpIFXEMGJOpf3D7GuzaYaoGGAbnOjvv MA/Z6A1kC6GbAcELixCN3WcOodwEXvUf85BWUaxubEjA6A126omrHcUdDCcjpvsg avY/q0hYZ7Xtm8CUXlf209lXAIKMVFDgLKeFf3oAdp0pFvnmd7MGWy7vZK19EyIe zwbVKIhUb1RGLi5eT0btbnjecwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHI00Kp1 CslnV5G8aW08Wj23m4w9MB8GA1UdIwQYMBaAFPZVMlayl/KDMZy5iea4x4NvhxkL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC8zRUU5NDdBQURD QUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhvTXhuTG1KNXJqSGcyLUhH UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsVXlWcktYOG9NeG5MbUo1cmpIZzItSEdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC8zRUU5NDdBQURDQUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhv TXhuTG1KNXJqSGcyLUhHUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCljNoHM7GKthqaTl/O07YbNti2tkruHFxmh+gFMprhZC+WxfdSALim NWG+GXuNQ24sOXwQpWlkqILlNN8k4wudcIlyuiPSdq1KY2CYuKm4HI/Ks6DTVNh8 6loW/bYZyWGnfDg4dv+/pimsa9DlNIDy86TCM3dtb2xwKhPZ1fWUYJZWmlOqPkHG cDzkbiiWc1FOFrHwZZceqbv0QrIBwhqUZrvkevyW+8zmCYGbCLjLHvcklzPapKQy AflRKHs3eGrHf5SHvIMoSWWlKuYvyvVuF3M8O5LjlDbSlVrhO5kvKNlAJVnliEHj Sflt7BHfGpWQ27PIbRA1gqoebrFPhkHP -----END CERTIFICATE-----Generated at Wed Jun 4 00:11:06 2025 by rpki-client