$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft File: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json) Hash identifier: jWxzD0t38dsTNnRKxbE7vPJgK/E5z1qkpZfsVRU7wxc= Subject key identifier: 64:2B:02:51:5C:E0:65:EC:95:B1:43:08:2B:9F:0A:8E:A6:70:14:02 Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 Certificate issuer: /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft Manifest number: 6B Signing time: Sat 31 May 2025 06:35:08 +0000 Manifest this update: Sat 31 May 2025 06:35:07 +0000 Manifest next update: Sat 07 Jun 2025 06:35:07 +0000 Files and hashes: 1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: HA3PzrKrIxjbYWFKHSwabqehPQdpcjn5fJVUi50XxWE=) 2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Validity Not Before: May 31 06:35:07 2025 GMT Not After : Jun 7 06:35:07 2025 GMT Subject: CN=683aa31b-6cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a1:0b:18:62:41:25:98:a4:a4:bc:1e:e1:61: 3f:df:78:4e:f2:d2:db:ec:14:ce:00:6c:db:62:4d: bc:2a:2b:87:67:97:83:8b:b2:51:d2:38:46:86:e1: f2:99:83:29:69:1b:89:f3:1c:e7:09:81:a1:c6:fb: 9a:4c:35:85:3e:d5:ba:f0:e2:75:59:d0:83:2e:e0: 78:57:7a:9f:62:4b:e9:c7:01:b2:29:95:15:e3:c4: cd:35:f3:7c:9a:43:78:1e:b2:ba:14:cf:f7:5f:54: 6b:32:d6:71:2a:f6:8e:67:95:86:60:ae:01:c2:17: 8e:c2:19:d6:91:50:8a:f5:2a:21:81:e1:96:b4:f4: 34:6d:59:b3:16:3d:ad:ab:8b:78:93:e0:72:c8:42: 63:cc:bc:f7:9a:3e:a4:ee:6c:c8:6d:a3:e6:d0:17: e4:db:02:29:10:51:8f:d7:a5:07:4b:39:0e:21:4b: 96:4e:59:2f:1a:74:88:2b:9c:d3:6d:6f:67:1a:a7: 82:28:82:2e:96:5c:62:1b:45:eb:0e:f5:f0:6b:cc: 8a:bf:3b:5b:d0:87:ec:de:c7:51:fa:d4:b6:0d:a6: 6e:b8:fd:11:b2:ae:3b:69:db:40:76:c9:97:ba:f2: 52:9d:1b:ba:48:f0:98:ff:c2:74:0c:28:52:d9:aa: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2B:02:51:5C:E0:65:EC:95:B1:43:08:2B:9F:0A:8E:A6:70:14:02 X509v3 Authority Key Identifier: keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ac:1f:da:03:91:d0:2c:75:0b:f3:bf:58:3c:41:9d:5f:28: 49:bd:19:b5:42:2b:28:f1:56:fa:e8:1b:41:74:64:02:a5:6b: b8:00:1a:9c:4a:2c:0e:c3:60:2e:79:4e:68:5d:9b:07:7f:f4: 06:33:d3:3c:01:41:26:b0:a5:02:eb:e4:f7:56:dc:7b:a4:33: 1e:3a:57:1b:6b:88:e6:42:8e:b9:58:7e:5e:ce:13:0f:63:14: 49:2f:c9:90:db:fe:d3:76:f6:81:ea:59:97:4d:44:1d:78:62: 26:e9:45:91:39:0c:25:a4:4d:e2:7c:ed:27:6b:04:47:fd:26: d8:30:0b:e8:00:5d:99:a4:24:86:13:fc:fd:ae:a1:0f:f6:35: 44:04:0c:0a:ab:99:1d:9a:ba:11:62:11:7b:71:9b:ea:46:8b: fc:9a:03:a5:a4:4f:83:68:4d:9d:ce:af:a9:b9:7f:ae:9a:66: 59:e0:e7:f7:c9:dd:d8:80:12:90:56:94:62:12:e3:05:29:9f: 36:23:b0:e7:87:0f:03:77:d0:dc:7e:de:a2:1b:dd:d3:45:78: 5e:dd:31:f8:58:b0:7a:97:8f:d2:f8:a7:1b:f2:33:3e:4e:2c: 87:ae:80:78:59:07:5f:f4:f9:d4:28:8e:3b:0e:13:2c:a4:d0: c1:11:56:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODI1RDExMC8GA1UEBRMoQjg4QkQ1RDVCOUI4NjQ2RDhFNDNFNjRDMTI3Qjg0ODFB NDE4QzYzNjAeFw0yNTA1MzEwNjM1MDdaFw0yNTA2MDcwNjM1MDdaMBgxFjAUBgNV BAMTDTY4M2FhMzFiLTZjZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvoQsYYkElmKSkvB7hYT/feE7y0tvsFM4AbNtiTbwqK4dnl4OLslHSOEaG4fKZ gylpG4nzHOcJgaHG+5pMNYU+1brw4nVZ0IMu4HhXep9iS+nHAbIplRXjxM0183ya Q3gesroUz/dfVGsy1nEq9o5nlYZgrgHCF47CGdaRUIr1KiGB4Za09DRtWbMWPa2r i3iT4HLIQmPMvPeaPqTubMhto+bQF+TbAikQUY/XpQdLOQ4hS5ZOWS8adIgrnNNt b2cap4Iogi6WXGIbResO9fBrzIq/O1vQh+zex1H61LYNpm64/RGyrjtp20B2yZe6 8lKdG7pI8Jj/wnQMKFLZqgStAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZCsCUVzg ZeyVsUMIK58KjqZwFAIwHwYDVR0jBBgwFoAUuIvV1bm4ZG2OQ+ZMEnuEgaQYxjYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MjVEL0U1OEIyMjY4QTQ0 NjExRUY4RDU4QTYyNEM0RjlBRTAyL3VJdlYxYm00WkcyT1EtWk1FbnVFZ2FRWXhq WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdUl2VjFibTRaRzJPUS1aTUVudUVnYVFZeGpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MjVEL0U1OEIyMjY4QTQ0NjExRUY4RDU4QTYyNEM0RjlBRTAyL3VJdlYxYm00Wkcy T1EtWk1FbnVFZ2FRWXhqWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADesH9oDkdAsdQvzv1g8QZ1fKEm9GbVCKyjxVvroG0F0ZAKla7gAGpxK LA7DYC55Tmhdmwd/9AYz0zwBQSawpQLr5PdW3HukMx46VxtriOZCjrlYfl7OEw9j FEkvyZDb/tN29oHqWZdNRB14YibpRZE5DCWkTeJ87SdrBEf9JtgwC+gAXZmkJIYT /P2uoQ/2NUQEDAqrmR2auhFiEXtxm+pGi/yaA6WkT4NoTZ3Or6m5f66aZlng5/fJ 3diAEpBWlGIS4wUpnzYjsOeHDwN30Nx+3qIb3dNFeF7dMfhYsHqXj9L4pxvyMz5O LIeugHhZB1/0+dQojjsOEyyk0MERVmQ= -----END CERTIFICATE-----Generated at Sat May 31 17:58:47 2025 by rpki-client