$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json) Hash identifier: Ayv3beKIa90GBg/E+PXGfno8n+gHm86KesKZcPw9xl4= Subject key identifier: 40:9C:EF:8E:79:D6:15:85:00:1C:9C:B1:19:89:C5:AA:C8:9F:8C:3B Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft Manifest number: 011B Signing time: Sat 07 Jun 2025 04:45:01 +0000 Manifest this update: Sat 07 Jun 2025 04:45:00 +0000 Manifest next update: Sat 14 Jun 2025 04:45:00 +0000 Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: +2M9NxNjmX1SbVzWxbptbVvW3uYoN9S4zVGq0r6L1dQ=) 2: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VGbwSs+xYuuT82QPTEDjBRASIfWEGELF9LE6WDBK6Cw=) 3: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: bw0f6KbJYjRey2+KDVpK9dBW3Yh7Jdgva8k4Bt7aCcM=) 4: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: LTeECQk5/azIOJTf8rGaT2gWz1Gmd2inlmhftO85Egc=) 5: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: FkwQRUxW28jIhJPhgvAtX7RxgLtIHLVcqsk+XhOm1NE=) 6: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: stQvqSgEe9eoYY5+iLzps6D0J/Yk9AXd8PNpZXOA3CY=) 7: BB17221E211611F08D31C34DC4F9AE02.roa (hash: fycljHXNnk59uPrb51pHFnfOpO9Hxutgas1w6IAJ3gA=) 8: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: Yun2AD2EJLYSRV9yxmCnTJUpxZFk9/O+PcxovQCtz2I=) 9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: xaEZeRSS7SPLQpFTKRrqHdI+Z44FtJElJm/n+VPX6m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 04:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Jun 7 04:45:00 2025 GMT Not After : Jun 14 04:45:00 2025 GMT Subject: CN=6843c3cd-6511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d8:d7:12:8b:9d:dc:23:db:0e:7e:ab:2a:1a: 6a:ce:f4:07:74:71:a0:6a:d3:c3:ce:74:38:17:b6: 4d:fa:b4:54:72:62:bf:4b:7c:24:5d:35:92:80:b3: 40:d3:9c:7f:2c:70:99:f5:2e:64:e3:9d:6b:c8:c5: fc:85:c8:9c:48:eb:d3:60:cd:a1:ea:65:75:1f:98: d5:4f:1e:49:d9:1a:76:60:78:29:6c:d5:0d:89:71: 50:e6:07:cf:42:b4:3d:7b:2b:c5:4a:42:7f:2a:a6: 2b:71:ce:80:4b:72:d5:d3:36:3d:88:26:78:8b:29: 68:72:15:4c:48:b8:53:e3:f9:4c:b1:90:86:3e:6c: 1c:30:09:99:cb:24:c9:a3:b8:28:b9:2f:4d:a6:56: 09:e3:8f:a4:7a:1c:ea:d1:12:de:87:d1:ff:56:d2: 65:34:17:eb:35:79:71:11:0a:7d:3a:81:83:fe:35: 14:62:6f:f5:d3:14:f4:e1:f4:31:0e:bc:03:75:7f: f7:f1:25:cd:55:5b:63:45:f6:f4:a4:d5:45:d7:ed: 41:cb:4e:08:c3:f4:d7:3a:e8:32:ba:30:70:75:92: 2b:90:7e:a8:43:3d:e4:1a:6d:76:62:25:8f:7c:89: 4f:19:b3:21:11:12:10:34:9c:b4:ad:66:62:73:9c: d0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:EF:8E:79:D6:15:85:00:1C:9C:B1:19:89:C5:AA:C8:9F:8C:3B X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:18:e1:8a:44:21:7f:be:26:33:8f:4c:f1:95:a1:73:d7:45: f2:ca:87:04:f5:1a:24:fb:86:46:ef:a9:7d:4d:0a:9b:a7:e2: 47:6c:18:5a:d1:fb:e4:c0:be:9c:d3:20:7d:44:25:0c:e2:8c: c7:c9:6c:08:a9:f0:41:03:b4:2c:fa:79:14:29:92:6c:b6:26: 34:99:ec:c0:f8:1f:e9:64:6b:58:e0:b6:30:15:72:c9:3a:4a: 83:85:1e:ea:90:e7:c8:c6:18:fe:d3:7e:86:4c:51:08:6b:1c: 1e:8d:6a:db:9c:fa:29:fd:7d:e2:b5:b0:82:f9:e5:b9:dc:68: 3e:2c:8a:d2:8a:f0:7d:cf:2a:e6:17:aa:35:02:98:4c:c8:a5: 45:77:69:40:ee:93:0d:5c:af:a8:f4:35:dc:7b:8b:2f:81:5f: 07:65:bc:d8:86:ed:3c:1c:d7:de:db:6b:21:5d:e6:29:3d:f9: 94:d8:53:52:75:d5:19:f7:ad:12:60:7b:46:ce:f0:3d:79:a1: 53:86:02:5d:c2:63:cd:16:b2:2e:e3:d5:b2:eb:00:06:b9:fb: f7:66:e9:c6:c7:e6:73:63:ef:6b:8b:7a:6d:8d:6b:c2:b5:40: 16:33:2c:f2:dd:c2:09:4e:ae:6d:1d:fc:e2:1b:f5:ed:15:c5: dd:82:a1:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwNjA3MDQ0NTAwWhcNMjUwNjE0MDQ0NTAwWjAYMRYwFAYD VQQDEw02ODQzYzNjZC02NTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotjXEoud3CPbDn6rKhpqzvQHdHGgatPDznQ4F7ZN+rRUcmK/S3wkXTWSgLNA 05x/LHCZ9S5k451ryMX8hcicSOvTYM2h6mV1H5jVTx5J2Rp2YHgpbNUNiXFQ5gfP QrQ9eyvFSkJ/KqYrcc6AS3LV0zY9iCZ4iylochVMSLhT4/lMsZCGPmwcMAmZyyTJ o7gouS9NplYJ44+kehzq0RLeh9H/VtJlNBfrNXlxEQp9OoGD/jUUYm/10xT04fQx DrwDdX/38SXNVVtjRfb0pNVF1+1By04Iw/TXOugyujBwdZIrkH6oQz3kGm12YiWP fIlPGbMhERIQNJy0rWZic5zQhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECc7455 1hWFABycsRmJxarIn4w7MB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta U0dvLVllalhpSkk1SXI5cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3GOGKRCF/viYzj0zxlaFz10XyyocE9Rok+4ZG76l9TQqbp+JHbBha 0fvkwL6c0yB9RCUM4ozHyWwIqfBBA7Qs+nkUKZJstiY0mezA+B/pZGtY4LYwFXLJ OkqDhR7qkOfIxhj+036GTFEIaxwejWrbnPop/X3itbCC+eW53Gg+LIrSivB9zyrm F6o1AphMyKVFd2lA7pMNXK+o9DXce4svgV8HZbzYhu08HNfe22shXeYpPfmU2FNS ddUZ960SYHtGzvA9eaFThgJdwmPNFrIu49Wy6wAGufv3ZunGx+ZzY+9ri3ptjWvC tUAWMyzy3cIJTq5tHfziG/XtFcXdgqHk -----END CERTIFICATE-----Generated at Sun Jun 8 18:04:40 2025 by rpki-client