$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft File: g--P6e5IafC5SpX3RvWJS6H7MPA.mft (raw, json) Hash identifier: 0b0jI48o48zckF1ibnoNLaUWGA5R04jAxrlHTJ4AyBU= Subject key identifier: 55:63:AB:D0:58:F2:CE:F2:CA:18:D9:61:17:AA:6C:98:8F:34:9E:11 Authority key identifier: 83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 Certificate issuer: /CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft Manifest number: B9 Signing time: Sat 31 May 2025 05:31:04 +0000 Manifest this update: Sat 31 May 2025 05:31:04 +0000 Manifest next update: Sat 07 Jun 2025 05:31:04 +0000 Files and hashes: 1: g--P6e5IafC5SpX3RvWJS6H7MPA.crl (hash: 3DQ/QGvtglWTaq6VP2Ym6gpUVLTy42XMqB6vkNeEBqU=) 2: A368B23623C411EFB7164123C4F9AE02.roa (hash: xksJk5Cwcy8+0Thge3EVjB2r6Pp+L19aLaysM6rp0MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Validity Not Before: May 31 05:31:04 2025 GMT Not After : Jun 7 05:31:04 2025 GMT Subject: CN=683a9418-9f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:15:18:96:b5:69:22:db:9f:1c:ac:d5:7e: 4b:f3:bf:42:45:a4:53:0f:e9:63:38:1c:0c:1b:8d: 3c:d1:dc:86:6f:cd:94:0e:23:7b:6f:58:28:b8:0c: 06:40:1f:52:0c:06:26:22:39:07:43:a9:c8:e0:69: 23:49:d6:94:2d:86:b9:20:26:8d:95:84:7f:2d:4f: 7b:d3:e0:4a:a1:8f:14:bd:71:a4:4c:98:cb:26:af: 4d:3b:81:79:21:90:2d:f3:88:3f:0b:36:f9:53:93: 06:3c:d3:e9:71:68:35:92:0c:c0:fd:55:17:49:54: 25:40:59:26:f3:3d:c1:5d:ec:2a:e7:d9:25:c8:ef: ad:d1:b3:3a:5f:55:a5:b9:ec:28:a0:96:4e:63:4c: 7e:c2:be:37:9e:d6:bd:37:67:d9:62:62:95:b6:92: 16:09:c3:7a:9c:df:af:1e:af:d9:e0:c0:9d:08:f2: db:7d:1e:da:05:53:a8:aa:5e:da:ba:13:cb:70:ca: 2b:eb:25:9e:f0:e1:40:23:40:ff:5f:a0:7a:4c:6f: f4:d2:3a:68:3c:98:21:47:a2:90:64:70:fe:79:ad: e5:a8:0a:98:80:d7:c6:2e:b6:c2:f6:93:a7:b0:6e: 8d:eb:9f:d6:e1:41:c7:27:6e:67:41:dc:20:8b:2f: bc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:63:AB:D0:58:F2:CE:F2:CA:18:D9:61:17:AA:6C:98:8F:34:9E:11 X509v3 Authority Key Identifier: keyid:83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:1d:2a:2a:2c:e5:a7:d6:4f:1f:1c:b7:1e:d9:77:9a:bc:ab: a4:d4:50:26:4b:d3:6e:3a:4c:58:e9:11:d4:a7:5b:d8:67:e0: 66:ec:da:cd:c6:a7:03:2f:98:e6:aa:64:ea:70:b4:36:8d:eb: a6:a3:87:f0:d7:81:db:3a:11:fc:1e:2a:70:0f:4d:71:6c:7e: 7a:4d:8f:53:1f:18:6d:51:f4:f7:01:80:ef:94:f9:d6:98:e7: d2:e7:27:f9:4b:32:cd:61:21:24:01:ef:17:61:3c:71:0a:2c: d4:74:43:39:77:4c:51:d3:8e:06:1a:ac:06:cf:83:2e:f3:57: d0:38:8a:6d:3f:dc:a3:22:95:31:35:c4:f8:94:aa:ff:56:aa: 59:23:d9:bf:74:db:e7:18:f8:ca:18:7d:91:82:6e:2b:88:75: 12:c7:97:97:ac:98:19:97:96:22:d0:dc:8c:d5:71:f9:6f:26: 5e:62:a5:1d:ff:24:15:59:d4:90:ee:d0:57:ec:ea:fd:e8:42: b1:c9:be:1b:50:4a:73:5b:63:0a:56:9a:70:ff:f5:c3:51:d5: 0d:f1:04:50:68:a8:4b:ee:5d:b9:b6:76:19:08:e3:df:86:2c: b2:b3:f1:12:e5:b3:84:8f:af:be:99:15:33:98:0b:52:27:a8: b7:ea:56:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKDgzRUY4RkU5RUU0ODY5RjBCOTRBOTVGNzQ2RjU4OTRC QTFGQjMwRjAwHhcNMjUwNTMxMDUzMTA0WhcNMjUwNjA3MDUzMTA0WjAYMRYwFAYD VQQDEw02ODNhOTQxOC05Zjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhwVGJa1aSLbnxys1X5L879CRaRTD+ljOBwMG4080dyGb82UDiN7b1gouAwG QB9SDAYmIjkHQ6nI4GkjSdaULYa5ICaNlYR/LU970+BKoY8UvXGkTJjLJq9NO4F5 IZAt84g/Czb5U5MGPNPpcWg1kgzA/VUXSVQlQFkm8z3BXewq59klyO+t0bM6X1Wl uewooJZOY0x+wr43nta9N2fZYmKVtpIWCcN6nN+vHq/Z4MCdCPLbfR7aBVOoql7a uhPLcMor6yWe8OFAI0D/X6B6TG/00jpoPJghR6KQZHD+ea3lqAqYgNfGLrbC9pOn sG6N65/W4UHHJ25nQdwgiy+8pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVjq9BY 8s7yyhjZYReqbJiPNJ4RMB8GA1UdIwQYMBaAFIPvj+nuSGnwuUqV90b1iUuh+zDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9FNEE2NUVERTIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFmQzVTcFgzUnZXSlM2SDdN UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctLVA2ZTVJYWZDNVNwWDNSdldKUzZIN01QQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9FNEE2NUVERTIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFm QzVTcFgzUnZXSlM2SDdNUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAHSoqLOWn1k8fHLce2XeavKuk1FAmS9NuOkxY6RHUp1vYZ+Bm7NrN xqcDL5jmqmTqcLQ2jeumo4fw14HbOhH8HipwD01xbH56TY9THxhtUfT3AYDvlPnW mOfS5yf5SzLNYSEkAe8XYTxxCizUdEM5d0xR044GGqwGz4Mu81fQOIptP9yjIpUx NcT4lKr/VqpZI9m/dNvnGPjKGH2Rgm4riHUSx5eXrJgZl5Yi0NyM1XH5byZeYqUd /yQVWdSQ7tBX7Or96EKxyb4bUEpzW2MKVppw//XDUdUN8QRQaKhL7l25tnYZCOPf hiyys/ES5bOEj6++mRUzmAtSJ6i36lb2 -----END CERTIFICATE-----Generated at Sat May 31 14:39:50 2025 by rpki-client