$ rpki-client -vvf rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft File: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft (raw, json) Hash identifier: Hg9+1s5/zmo6QCjE9iHFWlReo8IKiyIrdiv+D4JPtO8= Subject key identifier: 9E:29:39:BF:EB:DC:19:B8:66:A5:4E:18:34:A4:C5:85:13:27:8C:49 Authority key identifier: 45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6 Certificate issuer: /CN=A9178580/serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6 Certificate serial: 0633 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft Manifest number: 062E Signing time: Fri 30 May 2025 22:54:34 +0000 Manifest this update: Fri 30 May 2025 22:54:33 +0000 Manifest next update: Fri 06 Jun 2025 22:54:33 +0000 Files and hashes: 1: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl (hash: dk47Sz8lSdwRnf7o10VNal+XkW0cc23TEG8ozxxp9aU=) 2: EA266BB0965911EB9A717E21C4F9AE02.roa (hash: gli6G9isd7214k/XwPb4QWIehT/cx5I/c38k571CPVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178580, serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6 Validity Not Before: May 30 22:54:33 2025 GMT Not After : Jun 6 22:54:33 2025 GMT Subject: CN=683a372a-ea55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:58:73:b6:73:ba:cd:d6:86:cb:04:2e:e0: 45:60:d3:7b:fb:46:77:49:ea:19:49:8d:23:05:46: 82:f9:38:fd:3b:23:4e:6b:a0:5b:2f:bd:f0:ef:3b: d1:d9:b2:a8:fc:a0:ff:1e:5c:52:66:2c:ac:35:03: 3d:d5:49:05:56:af:37:06:75:84:34:e8:31:d6:4b: 9e:4f:68:b6:f6:36:cf:d3:90:b2:8a:13:4d:34:a2: 20:7a:5a:ae:b3:56:a9:93:63:53:d9:8f:c3:ec:f9: 9d:b5:4c:5d:e6:18:a1:ba:06:26:e0:2d:b1:a6:7b: 23:d5:04:9a:78:ef:d1:cd:99:f9:8e:7f:24:a4:40: e9:96:cf:d9:56:4d:e1:03:be:7a:62:77:05:46:2a: 29:75:b4:9b:9f:c5:73:54:0a:27:3a:64:05:08:ab: 05:33:3f:fb:d5:74:92:c6:91:99:bf:86:0e:c5:47: 12:74:32:2d:23:10:7d:33:64:e7:11:db:14:b3:28: c6:e3:5a:73:48:6d:3b:85:17:f9:1d:25:32:40:d6: 79:b2:d2:dc:42:9a:fa:79:99:db:23:91:da:5a:26: 7a:c6:4c:de:af:05:1c:80:b1:ec:30:56:da:b2:dd: dd:ad:3f:a8:f2:ff:31:21:13:80:66:6c:72:4c:4f: 98:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:29:39:BF:EB:DC:19:B8:66:A5:4E:18:34:A4:C5:85:13:27:8C:49 X509v3 Authority Key Identifier: keyid:45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a0:ec:92:4d:d2:67:ce:8a:38:13:e0:ec:a4:08:59:86:10: 0d:87:52:02:17:73:52:89:2b:34:ed:2c:78:45:3e:e4:5c:06: cc:a7:b1:af:0a:24:2a:fe:d9:df:c1:e8:7e:03:76:58:e0:59: f9:26:52:db:cd:14:c7:c2:ac:7a:09:3b:ef:4c:80:61:86:83: 94:eb:33:7c:68:b3:3b:55:28:fc:8f:e1:2d:77:3c:9b:7f:92: 28:ad:bf:81:12:10:1a:1a:d9:74:8d:47:15:82:d5:54:33:1b: c4:7d:ac:16:9d:f7:0a:30:0e:0d:cc:a1:02:3c:a3:55:ee:31: bb:1b:3e:43:51:1a:80:09:a1:b1:d8:d6:de:f3:9c:83:56:99: c4:38:f5:d9:d3:0d:e4:27:0f:80:83:2a:33:1b:ff:5a:b3:28: f1:8f:95:f0:42:79:1e:4b:17:0c:01:3a:b3:b7:7b:b8:ab:13: 3e:59:ef:7e:88:68:d3:d6:72:7c:ec:d3:35:ea:8c:7e:ad:73: 5b:fb:8e:49:c0:02:d8:4c:6e:5e:bb:b7:52:be:78:05:e3:a2: 4c:71:1e:6b:a7:a6:b7:cf:4f:fa:1d:cc:3a:47:a6:57:9b:43: bd:38:33:2d:57:89:e5:c1:fe:bb:a1:31:aa:e8:22:30:b1:71: 12:ba:34:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg1ODAxMTAvBgNVBAUTKDQ1QzlCOUJENDdEODIxODQ4NTk5QTY3RDdGMjI5NTZF MDkxM0M3RjYwHhcNMjUwNTMwMjI1NDMzWhcNMjUwNjA2MjI1NDMzWjAYMRYwFAYD VQQDEw02ODNhMzcyYS1lYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+BYc7Zzus3WhssELuBFYNN7+0Z3SeoZSY0jBUaC+Tj9OyNOa6BbL73w7zvR 2bKo/KD/HlxSZiysNQM91UkFVq83BnWENOgx1kueT2i29jbP05CyihNNNKIgelqu s1apk2NT2Y/D7PmdtUxd5hihugYm4C2xpnsj1QSaeO/RzZn5jn8kpEDpls/ZVk3h A756YncFRiopdbSbn8VzVAonOmQFCKsFMz/71XSSxpGZv4YOxUcSdDItIxB9M2Tn EdsUsyjG41pzSG07hRf5HSUyQNZ5stLcQpr6eZnbI5HaWiZ6xkzerwUcgLHsMFba st3drT+o8v8xIROAZmxyTE+Y+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4pOb/r 3Bm4ZqVOGDSkxYUTJ4xJMB8GA1UdIwQYMBaAFEXJub1H2CGEhZmmfX8ilW4JE8f2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODU4MC8zOUY5NjZGODk2 NTgxMUVCQURGNDY0MUZDNEY5QUUwMi9SY201dlVmWUlZU0ZtYVo5ZnlLVmJna1R4 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjbTV2VWZZSVlTRm1hWjlmeUtWYmdrVHhfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODU4MC8zOUY5NjZGODk2NTgxMUVCQURGNDY0MUZDNEY5QUUwMi9SY201dlVmWUlZ U0ZtYVo5ZnlLVmJna1R4X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+oOySTdJnzoo4E+DspAhZhhANh1ICF3NSiSs07Sx4RT7kXAbMp7Gv CiQq/tnfweh+A3ZY4Fn5JlLbzRTHwqx6CTvvTIBhhoOU6zN8aLM7VSj8j+Etdzyb f5Iorb+BEhAaGtl0jUcVgtVUMxvEfawWnfcKMA4NzKECPKNV7jG7Gz5DURqACaGx 2Nbe85yDVpnEOPXZ0w3kJw+AgyozG/9asyjxj5XwQnkeSxcMATqzt3u4qxM+We9+ iGjT1nJ87NM16ox+rXNb+45JwALYTG5eu7dSvngF46JMcR5rp6a3z0/6Hcw6R6ZX m0O9ODMtV4nlwf67oTGq6CIwsXESujSW -----END CERTIFICATE-----Generated at Sat May 31 17:32:59 2025 by rpki-client