$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: Of1tPBMWzITOcYXUoIh9UMLYIroEPFM/Fr6pdTggTNI= Subject key identifier: F5:2A:B3:66:8C:D2:EC:3E:37:EF:77:B9:10:95:09:39:2D:CB:40:53 Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 162D Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 1624 Signing time: Fri 06 Jun 2025 16:46:24 +0000 Manifest this update: Fri 06 Jun 2025 16:46:23 +0000 Manifest next update: Fri 13 Jun 2025 16:46:23 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: qaBeijJmr//RGYh436MEoG0WiS2CFNwJjXJ9fux5/RY=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: mykXr6ve/cwvr+LfcirysCKrHVhRt9J9fVkHn/0QFbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 16:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5677 (0x162d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Jun 6 16:46:23 2025 GMT Not After : Jun 13 16:46:23 2025 GMT Subject: CN=68431b60-baa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c1:9f:98:3a:d8:74:41:51:ad:a9:fd:e5:f3: 8f:7c:77:19:1a:e8:27:1c:ce:34:7a:dc:1b:13:d3: b9:7f:03:fd:ce:eb:5f:b9:ad:75:d8:c4:7b:a2:fe: d1:c1:7e:57:d9:1a:70:00:26:11:e0:6b:cc:f7:26: b4:5b:92:b1:1b:f8:b0:0d:71:39:37:91:eb:af:5c: f8:1f:d2:a5:95:dd:db:c7:fb:d7:91:a4:95:ce:d6: 41:bd:94:41:08:f0:9e:50:a8:30:cb:00:36:73:36: ff:c5:36:30:5b:ad:3f:6e:cf:69:23:58:e2:14:f3: cb:3e:b6:65:f5:0c:f1:36:e4:4e:42:fd:c2:1e:41: cb:67:9b:c9:f8:38:12:34:35:39:b3:41:18:8c:f9: 9f:80:bc:e6:2f:ad:8b:6c:00:d5:5f:90:fd:26:4c: b0:2a:18:f3:5d:f7:53:b1:1a:0e:05:24:ba:59:0f: d7:9a:9d:df:ce:ad:94:ab:fc:6a:78:d1:8f:6b:55: a0:21:df:d5:1f:75:de:ed:e5:63:bc:b4:f5:c4:16: 60:a8:90:b8:cb:6f:88:63:9e:ee:1d:2e:55:2c:6f: 3c:86:5c:1c:b7:ab:85:2d:78:df:56:ba:f4:89:9a: 7f:00:85:b7:76:49:fa:dd:73:aa:20:c7:56:d4:8b: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2A:B3:66:8C:D2:EC:3E:37:EF:77:B9:10:95:09:39:2D:CB:40:53 X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:77:b0:26:b5:cb:00:30:0e:b5:40:73:a3:e4:a2:f0:02:9c: 28:48:fc:29:f0:d3:c4:6d:4f:6c:22:c2:f5:f6:54:fb:71:08: b4:1d:1e:c7:fb:8d:fc:bc:81:b8:46:83:d0:d6:65:5d:58:89: 39:fc:5f:75:8d:69:15:17:7b:61:93:52:5f:eb:66:e9:70:e2: 86:80:c5:ff:8b:b1:f9:a2:7a:3c:a8:a3:be:6b:65:88:eb:a4: 73:21:44:d5:1c:71:05:4b:61:f1:d0:7e:bb:dd:b5:82:e1:a2: 74:07:fa:57:c9:1f:1d:ab:49:03:39:ee:9f:c4:d0:2d:29:3f: 97:fd:75:c7:e2:4a:c8:b8:06:b1:3a:74:b7:95:d3:7f:22:c1: 91:9a:00:8e:99:41:20:63:a9:9e:fd:c7:dc:ae:94:a9:c0:e1: 63:67:a8:57:ab:b6:bb:d6:40:91:1f:4a:9c:1c:db:80:06:fe: f2:c3:f6:2a:51:07:3d:3e:eb:50:82:95:06:79:41:22:b5:aa: d2:ee:6d:3c:99:b8:f3:f5:a4:f3:a5:1d:c9:21:f6:4d:6e:c1: ce:eb:07:a0:a3:af:f6:6e:9d:0e:ef:04:bd:92:f7:35:a3:5f: a7:2b:86:80:da:85:38:6f:f8:97:b1:22:9e:07:4c:be:67:78: 9d:29:48:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUwNjA2MTY0NjIzWhcNMjUwNjEzMTY0NjIzWjAYMRYwFAYD VQQDEw02ODQzMWI2MC1iYWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MGfmDrYdEFRran95fOPfHcZGugnHM40etwbE9O5fwP9zutfua112MR7ov7R wX5X2RpwACYR4GvM9ya0W5KxG/iwDXE5N5Hrr1z4H9Klld3bx/vXkaSVztZBvZRB CPCeUKgwywA2czb/xTYwW60/bs9pI1jiFPPLPrZl9QzxNuROQv3CHkHLZ5vJ+DgS NDU5s0EYjPmfgLzmL62LbADVX5D9JkywKhjzXfdTsRoOBSS6WQ/Xmp3fzq2Uq/xq eNGPa1WgId/VH3Xe7eVjvLT1xBZgqJC4y2+IY57uHS5VLG88hlwct6uFLXjfVrr0 iZp/AIW3dkn63XOqIMdW1Iup+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUqs2aM 0uw+N+93uRCVCTkty0BTMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQd7AmtcsAMA61QHOj5KLwApwoSPwp8NPEbU9sIsL19lT7cQi0HR7H +438vIG4RoPQ1mVdWIk5/F91jWkVF3thk1Jf62bpcOKGgMX/i7H5ono8qKO+a2WI 66RzIUTVHHEFS2Hx0H673bWC4aJ0B/pXyR8dq0kDOe6fxNAtKT+X/XXH4krIuAax OnS3ldN/IsGRmgCOmUEgY6me/cfcrpSpwOFjZ6hXq7a71kCRH0qcHNuABv7yw/Yq UQc9PutQgpUGeUEitarS7m08mbjz9aTzpR3JIfZNbsHO6wego6/2bp0O7wS9kvc1 o1+nK4aA2oU4b/iXsSKeB0y+Z3idKUjU -----END CERTIFICATE-----Generated at Sat Jun 7 05:35:37 2025 by rpki-client