$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: abIe5P+7BH/EErvKTjSN9KDTqyHk+WU5ioeNGIIbpHE= Subject key identifier: 4D:93:68:47:2F:11:44:53:25:2F:64:6E:9B:E6:B2:85:2D:93:26:46 Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 0432 Signing time: Sat 31 May 2025 00:32:44 +0000 Manifest this update: Sat 31 May 2025 00:32:44 +0000 Manifest next update: Sat 07 Jun 2025 00:32:44 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: Pd5CuCq+rnmzr7b8CXLndw6rjEgo+1F48Vmq2DZYioU=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: May 31 00:32:44 2025 GMT Not After : Jun 7 00:32:44 2025 GMT Subject: CN=683a4e2c-7f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:38:ed:73:0c:61:ec:26:3b:b6:47:89:5d: 99:34:b5:51:7d:3e:25:c4:44:ff:18:0a:3b:4a:c8: ed:5f:52:b2:8b:f7:5f:3f:bc:ed:28:70:4a:d5:cd: ec:52:19:8a:21:d8:37:09:a4:7f:f8:47:8a:da:dd: 7f:3e:0b:21:22:39:94:d5:88:6d:b0:c3:24:aa:9b: 90:93:bb:42:91:7c:d7:52:64:a9:15:c3:60:cb:cd: 34:a6:6f:5b:8a:68:01:f5:73:13:bb:71:7a:17:db: 21:66:78:23:e2:6c:fa:29:4c:0c:c5:cd:5e:e8:d4: 0d:2e:53:1b:f0:05:05:85:19:65:34:ed:e5:63:d4: 5b:2a:51:1d:b0:cd:d5:24:9c:03:64:23:7e:d1:03: 78:03:ac:09:a1:1e:e5:6e:6a:89:86:00:a8:47:b4: a1:19:c3:a4:1b:89:70:de:de:70:e1:3e:a3:4d:2f: 40:de:b4:1f:e5:ae:b8:2f:ae:9f:6b:f1:d9:20:13: 33:10:c9:cb:39:81:3d:a1:93:75:d5:ad:33:ea:72: f2:d5:94:89:c0:e8:1d:8c:d6:f1:76:d5:7d:be:7a: 5a:77:f1:be:20:51:11:6b:bb:58:e9:e1:ba:c9:8c: e5:f6:9e:36:bb:22:fd:b0:72:22:f9:60:05:04:e6: 88:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:93:68:47:2F:11:44:53:25:2F:64:6E:9B:E6:B2:85:2D:93:26:46 X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:1a:07:17:df:8a:2c:9b:bb:c2:67:be:e1:11:3b:eb:b4:69: 12:ae:85:49:d4:58:aa:9f:e4:0f:bc:76:61:7d:43:5d:bd:fb: d3:32:66:dd:ba:af:50:be:83:6b:cc:44:79:59:c0:6a:66:2b: 0e:21:4a:a1:0d:6e:ee:8a:c8:67:9d:b0:28:0f:ac:f4:48:63: d1:71:c1:ca:4d:67:09:c1:18:d9:72:55:4c:c5:f1:94:91:f3: a8:4a:24:c8:e7:a6:ae:69:d7:28:74:33:f2:91:1b:0e:f4:12: bb:de:ce:ce:9b:96:d8:62:75:0c:84:2c:bd:97:4c:4b:af:ed: aa:e5:22:fc:11:69:e1:e0:b0:ff:2b:a8:63:d5:dc:af:00:da: b8:ba:46:a5:8e:17:f7:f5:16:1f:df:85:6a:20:19:c1:45:c6: 84:22:f8:0a:7b:42:f3:1e:95:73:2f:b9:aa:fe:84:ec:8e:c2: ea:b0:69:42:08:dd:07:4d:e3:8e:d3:16:e8:51:9c:bb:d2:8a: da:19:c1:0a:64:95:67:25:11:dd:3e:fc:31:4c:e8:de:15:09: 37:47:9e:c0:4e:80:e6:a6:82:7a:8d:f4:42:c4:a5:23:ee:2b: 52:aa:0d:f6:30:a8:17:f8:e1:ca:ef:e9:2f:e1:aa:3f:96:cc: 62:4a:00:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjUwNTMxMDAzMjQ0WhcNMjUwNjA3MDAzMjQ0WjAYMRYwFAYD VQQDEw02ODNhNGUyYy03ZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+k47XMMYewmO7ZHiV2ZNLVRfT4lxET/GAo7SsjtX1Kyi/dfP7ztKHBK1c3s UhmKIdg3CaR/+EeK2t1/PgshIjmU1YhtsMMkqpuQk7tCkXzXUmSpFcNgy800pm9b imgB9XMTu3F6F9shZngj4mz6KUwMxc1e6NQNLlMb8AUFhRllNO3lY9RbKlEdsM3V JJwDZCN+0QN4A6wJoR7lbmqJhgCoR7ShGcOkG4lw3t5w4T6jTS9A3rQf5a64L66f a/HZIBMzEMnLOYE9oZN11a0z6nLy1ZSJwOgdjNbxdtV9vnpad/G+IFERa7tY6eG6 yYzl9p42uyL9sHIi+WAFBOaIBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2TaEcv EURTJS9kbpvmsoUtkyZGMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGGgcX34osm7vCZ77hETvrtGkSroVJ1Fiqn+QPvHZhfUNdvfvTMmbd uq9QvoNrzER5WcBqZisOIUqhDW7uishnnbAoD6z0SGPRccHKTWcJwRjZclVMxfGU kfOoSiTI56auadcodDPykRsO9BK73s7Om5bYYnUMhCy9l0xLr+2q5SL8EWnh4LD/ K6hj1dyvANq4ukaljhf39RYf34VqIBnBRcaEIvgKe0LzHpVzL7mq/oTsjsLqsGlC CN0HTeOO0xboUZy70oraGcEKZJVnJRHdPvwxTOjeFQk3R57AToDmpoJ6jfRCxKUj 7itSqg32MKgX+OHK7+kv4ao/lsxiSgAv -----END CERTIFICATE-----Generated at Sat May 31 17:17:25 2025 by rpki-client