$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json) Hash identifier: ShR+eSAS8ZFwaTthj/F4aIj13j83a5X4Ndp0LwtUP6c= Subject key identifier: 10:5A:FA:D5:A2:4F:C8:4F:20:43:08:B8:89:8A:16:9D:A1:19:65:7A Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Certificate serial: 0AAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft Manifest number: 0A98 Signing time: Fri 30 May 2025 19:46:09 +0000 Manifest this update: Fri 30 May 2025 19:46:09 +0000 Manifest next update: Fri 06 Jun 2025 19:46:09 +0000 Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: zbGOdjigCtvhxLj+L8gKrBKHsXLUYCbnz9yvTd0wOvI=) 2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: BMLck7ad8d48GKkf5hIYa+BMluvYHrRfqqVkHmYs2MI=) 3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: xk3hG5cT6tov5WpRqBgw1GYiI5TquI6c93azZDBwgS8=) 4: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YdPahH5dD4zuJY8bYiwVpnXjRlbDVfqoQdod66sRqWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2733 (0xaad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Validity Not Before: May 30 19:46:09 2025 GMT Not After : Jun 6 19:46:09 2025 GMT Subject: CN=683a0b01-d314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:bb:83:2a:8e:38:b5:f1:73:ca:60:10:2c: 36:70:f1:52:fd:70:99:68:bb:03:72:c1:da:62:5e: 1e:16:48:57:36:26:81:6f:93:86:53:56:f9:9e:ec: 5a:67:bd:4a:bf:16:c0:07:c1:d0:85:7e:24:49:7f: 90:9d:00:b1:47:8a:61:3f:0a:32:30:97:88:33:e4: 93:85:c4:c6:bb:8c:0b:cc:b0:a2:46:37:4c:11:25: 64:22:b7:bb:40:ad:fe:76:e0:25:db:8c:67:6f:57: 4c:43:6f:78:e6:b0:34:84:ca:39:a3:bb:32:d5:da: 30:eb:10:70:64:8b:46:03:06:c0:f2:a4:12:6d:53: 11:d6:f3:60:68:d4:ef:97:d4:e3:d4:65:bb:74:cb: 58:5b:1b:89:df:70:0c:84:73:23:85:12:35:91:46: 63:83:86:5f:df:1a:18:b0:69:4a:8d:7b:51:93:84: 84:4e:c1:19:49:6b:c3:29:0c:bd:0c:de:37:6a:c6: 75:21:c1:f3:b9:d6:0a:79:10:3b:b3:d0:71:eb:d2: 39:8f:e5:75:0d:31:ee:ff:a5:5e:c3:11:32:09:7e: 2b:13:cf:4f:a1:1b:b3:dd:f7:06:09:46:f2:7e:ce: 00:c7:96:5f:78:13:10:46:9a:a5:1e:8b:5f:cc:1b: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5A:FA:D5:A2:4F:C8:4F:20:43:08:B8:89:8A:16:9D:A1:19:65:7A X509v3 Authority Key Identifier: keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:f4:b6:7e:00:a4:bc:22:a5:39:6d:e3:48:a2:3e:ef:f5:e6: 54:b6:a2:6f:26:21:5f:c8:55:fc:90:0c:c7:d2:a1:f3:8c:4a: 62:e8:14:24:60:32:51:df:55:84:f3:fb:fc:87:ce:2e:3e:11: 47:ee:e8:c2:a1:46:6d:8d:d0:5b:ae:e3:e3:c3:28:5d:d2:15: 0a:b0:c4:c2:01:48:8f:af:26:86:bf:01:a8:00:36:93:77:95: bf:41:fb:cf:5e:f5:bf:1b:8c:91:a0:81:a6:07:4e:05:57:3a: 0e:5b:b9:78:5c:11:dd:81:00:b3:00:e4:0b:43:9f:22:e4:e2: 9b:eb:8f:ce:4c:12:51:d6:fd:53:3a:a2:8d:1b:29:3b:c8:3b: e1:57:b9:30:ef:e9:27:d3:ec:52:98:44:bf:c5:45:86:b3:7c: 08:9f:d6:60:6c:1d:52:3b:68:73:d5:4d:af:e6:07:a4:6e:88: 34:db:19:b5:ee:10:44:c1:75:7b:94:e2:66:ed:1d:c5:e3:c8: 60:13:ef:d4:62:b2:13:a4:a2:d2:e4:6c:db:6c:e6:b3:8d:b2: 2c:2d:3d:53:64:8a:6d:d8:29:dc:a9:b2:f4:fb:ba:7e:15:cf: 12:ee:71:25:12:72:dd:37:87:db:fb:22:31:22:fe:22:5c:3b: f5:37:c9:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw QUE0Q0NEOEUwHhcNMjUwNTMwMTk0NjA5WhcNMjUwNjA2MTk0NjA5WjAYMRYwFAYD VQQDEw02ODNhMGIwMS1kMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArB+7gyqOOLXxc8pgECw2cPFS/XCZaLsDcsHaYl4eFkhXNiaBb5OGU1b5nuxa Z71KvxbAB8HQhX4kSX+QnQCxR4phPwoyMJeIM+SThcTGu4wLzLCiRjdMESVkIre7 QK3+duAl24xnb1dMQ2945rA0hMo5o7sy1dow6xBwZItGAwbA8qQSbVMR1vNgaNTv l9Tj1GW7dMtYWxuJ33AMhHMjhRI1kUZjg4Zf3xoYsGlKjXtRk4SETsEZSWvDKQy9 DN43asZ1IcHzudYKeRA7s9Bx69I5j+V1DTHu/6VewxEyCX4rE89PoRuz3fcGCUby fs4Ax5ZfeBMQRpqlHotfzBuVnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBa+tWi T8hPIEMIuImKFp2hGWV6MB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5 MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16 WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEI3RS8zRjM1QzA4NDU5MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNP OXpwUjFMbFIxUG9LcE16WTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF9LZ+AKS8IqU5beNIoj7v9eZUtqJvJiFfyFX8kAzH0qHzjEpi6BQk YDJR31WE8/v8h84uPhFH7ujCoUZtjdBbruPjwyhd0hUKsMTCAUiPryaGvwGoADaT d5W/QfvPXvW/G4yRoIGmB04FVzoOW7l4XBHdgQCzAOQLQ58i5OKb64/OTBJR1v1T OqKNGyk7yDvhV7kw7+kn0+xSmES/xUWGs3wIn9ZgbB1SO2hz1U2v5gekbog02xm1 7hBEwXV7lOJm7R3F48hgE+/UYrITpKLS5GzbbOazjbIsLT1TZIpt2CncqbL0+7p+ Fc8S7nElEnLdN4fb+yIxIv4iXDv1N8mv -----END CERTIFICATE-----Generated at Sat May 31 17:02:16 2025 by rpki-client