$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft File: CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json) Hash identifier: 7zPDFbPpo5urSaAm97jtbuddT0P2LOeuYcT9ECGogN0= Subject key identifier: 8E:0D:1E:68:12:A6:3C:76:16:B4:D2:84:C2:F6:A3:B4:85:51:B9:F0 Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2 Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2 Certificate serial: 18D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft Manifest number: 18C0 Signing time: Fri 30 May 2025 16:39:36 +0000 Manifest this update: Fri 30 May 2025 16:39:36 +0000 Manifest next update: Fri 06 Jun 2025 16:39:36 +0000 Files and hashes: 1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: 3+A5a095jzeV8FXV+9B/9VeekLwonbUKn7AjBzLoyVs=) 2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: i+oJi6jpDEgYGCAfWO68s9CmpJ8yXleP5d3NPE288zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6353 (0x18d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2 Validity Not Before: May 30 16:39:36 2025 GMT Not After : Jun 6 16:39:36 2025 GMT Subject: CN=6839df48-5fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:44:59:b0:b3:92:37:92:92:e7:bb:9d:40: 07:37:ca:52:89:42:a1:2e:04:0e:3a:24:3c:70:85: 95:95:dd:6a:d5:34:e8:8c:71:8e:37:dc:22:88:74: 80:c9:4d:b9:00:eb:ea:74:2a:57:23:11:52:3b:69: 2e:8d:af:cc:6e:b8:c2:d8:ab:e0:1a:3a:e1:08:c5: 23:18:1d:33:68:94:11:b5:7b:4c:75:c7:51:73:af: e2:1a:17:3c:fb:8e:39:72:de:20:d6:4b:53:8d:27: a9:a5:79:98:da:36:ff:46:95:9e:d7:f3:c0:a7:ee: 53:db:61:06:ce:4c:67:6b:72:eb:83:c6:82:2c:96: 0c:f5:fe:35:1b:0d:3b:0f:5e:fe:17:7c:db:89:cf: 29:54:30:1e:52:cf:73:c1:70:84:23:48:d4:55:5f: 01:e8:ca:dc:ee:8c:a9:de:44:8d:75:3d:cd:a9:b3: 39:bc:d6:a6:12:80:a0:44:b8:7a:0b:6b:76:a8:b2: 41:59:54:f9:d7:ff:6d:01:f2:6d:0e:9a:58:79:ec: bd:51:46:94:a4:e3:8d:e7:2a:e9:fd:1d:0f:0f:6c: 18:48:56:e0:79:36:90:5f:da:47:d4:4e:1d:2d:ae: 76:00:62:1e:f8:f9:22:b5:e3:72:5c:77:f7:a8:5f: 2d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0D:1E:68:12:A6:3C:76:16:B4:D2:84:C2:F6:A3:B4:85:51:B9:F0 X509v3 Authority Key Identifier: keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3c:6a:ad:c8:c0:ed:31:d4:bf:fe:16:ce:68:92:e8:2a:35: 6f:d8:25:34:91:38:5d:e5:92:27:c3:0e:7e:3d:b5:66:78:cb: a9:5e:ed:24:ce:dc:b7:bb:80:db:fd:09:ef:11:85:f2:28:9b: ed:41:61:1c:9c:c5:6f:73:26:3d:6d:f5:68:64:af:70:3b:1e: 3b:ad:21:7e:be:91:43:b8:10:46:33:72:4a:9a:0c:69:4f:bd: 26:11:d0:85:ca:45:9c:5f:1e:88:e6:aa:0f:20:30:93:f6:b4: ad:99:bc:66:f0:f0:b6:91:d4:e5:fe:de:f5:29:08:26:c7:43: f2:03:f1:1f:52:66:51:15:f8:52:84:cf:99:3d:0d:a4:a3:78: e3:f6:14:a1:77:90:f1:45:5d:e3:55:83:7b:f2:3c:5e:c5:95: f4:4e:b4:f8:28:7d:c3:ae:56:b2:c6:fa:81:6f:b2:7d:a8:14: 7a:50:32:49:77:2e:b3:58:10:e8:ab:4a:2b:00:19:01:c7:5e: cb:fa:b1:78:25:f2:14:a7:9b:33:63:14:ad:63:08:cc:30:1a: 35:65:81:76:6e:42:9d:7c:dd:ef:53:84:01:3b:8f:44:d2:8c: 6e:cc:b6:83:80:0c:19:64:bd:7f:f2:cb:f9:53:c5:d3:21:8c: af:fe:94:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZBRkQxMTAvBgNVBAUTKDBBNDIyQTYzOTdEOEVCNkNCMzU3NzUyOTdDRUI1NUE1 RTE4RkUxRTIwHhcNMjUwNTMwMTYzOTM2WhcNMjUwNjA2MTYzOTM2WjAYMRYwFAYD VQQDEw02ODM5ZGY0OC01ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvNEWbCzkjeSkue7nUAHN8pSiUKhLgQOOiQ8cIWVld1q1TTojHGON9wiiHSA yU25AOvqdCpXIxFSO2kuja/MbrjC2KvgGjrhCMUjGB0zaJQRtXtMdcdRc6/iGhc8 +445ct4g1ktTjSeppXmY2jb/RpWe1/PAp+5T22EGzkxna3Lrg8aCLJYM9f41Gw07 D17+F3zbic8pVDAeUs9zwXCEI0jUVV8B6Mrc7oyp3kSNdT3NqbM5vNamEoCgRLh6 C2t2qLJBWVT51/9tAfJtDppYeey9UUaUpOON5yrp/R0PD2wYSFbgeTaQX9pH1E4d La52AGIe+PkiteNyXHf3qF8tYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4NHmgS pjx2FrTShML2o7SFUbnwMB8GA1UdIwQYMBaAFApCKmOX2Otss1d1KXzrVaXhj+Hi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkFGRC81QkIyMjMwQTky RjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYyeXpWM1VwZk90VnBlR1A0 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrSXFZNWZZNjJ5elYzVXBmT3RWcGVHUDRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkFGRC81QkIyMjMwQTkyRjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYy eXpWM1VwZk90VnBlR1A0ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7PGqtyMDtMdS//hbOaJLoKjVv2CU0kThd5ZInww5+PbVmeMupXu0k zty3u4Db/QnvEYXyKJvtQWEcnMVvcyY9bfVoZK9wOx47rSF+vpFDuBBGM3JKmgxp T70mEdCFykWcXx6I5qoPIDCT9rStmbxm8PC2kdTl/t71KQgmx0PyA/EfUmZRFfhS hM+ZPQ2ko3jj9hShd5DxRV3jVYN78jxexZX0TrT4KH3DrlayxvqBb7J9qBR6UDJJ dy6zWBDoq0orABkBx17L+rF4JfIUp5szYxStYwjMMBo1ZYF2bkKdfN3vU4QBO49E 0oxuzLaDgAwZZL1/8sv5U8XTIYyv/pS1 -----END CERTIFICATE-----Generated at Sat May 31 17:27:55 2025 by rpki-client