$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json) Hash identifier: XGwp2Vj+b78vQQ4ZLis9ZlK21L+ry96BlgUpKeUU53I= Subject key identifier: 76:7A:78:DC:DB:A5:24:AC:A9:59:EA:C3:E3:2E:F4:3A:7B:86:93:31 Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft Manifest number: 0A Signing time: Tue 03 Jun 2025 07:59:33 +0000 Manifest this update: Tue 03 Jun 2025 07:59:32 +0000 Manifest next update: Tue 10 Jun 2025 07:59:32 +0000 Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: OMpccrw5VYDbmtPgunbQdNN1qnTr27VsZo7YJBb/K58=) 2: 9A014CF430D811F0A444B26EC4F9AE02.roa (hash: C8ptyGvwWlQzeSGOofAg4DZdLAMRxqC9y9f9rO1gP40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Validity Not Before: Jun 3 07:59:32 2025 GMT Not After : Jun 10 07:59:32 2025 GMT Subject: CN=683eab64-5ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:91:73:74:f9:fc:83:c4:4d:86:66:d1:d5: 70:e0:a7:e1:1f:f0:ed:da:67:88:1c:fd:e1:ab:38: 0f:2e:a2:2e:7a:2c:d8:3a:23:2a:9c:69:f9:61:c6: 1a:c9:c9:10:8b:10:c5:f1:d9:8c:8d:2b:d3:3b:7d: ec:9e:0c:b1:88:4a:ee:8f:ec:f6:8b:8c:56:96:0e: ce:f2:73:d0:c9:94:47:3f:41:84:a0:68:fb:1f:c8: 00:ca:84:f9:f1:a1:f8:64:48:9a:14:ff:88:a6:0f: 62:d9:53:be:9c:9b:f4:d2:27:bd:f2:25:a4:6b:02: db:b5:20:67:7c:2a:26:07:cf:3e:dd:d4:cc:87:a6: ee:3b:83:1c:92:03:98:1a:db:15:f2:f6:24:c1:9f: f6:57:e5:9d:ba:6e:e6:89:b7:ba:93:1b:c5:cb:45: 45:32:82:5b:fd:4d:9a:b0:31:c2:9d:29:11:b6:a2: 32:5c:e3:4a:5d:1c:2c:fc:42:ba:41:e4:16:45:b8: d4:8e:ab:92:f2:04:8d:b7:1e:a3:9f:03:77:21:57: 27:b7:2d:e3:7a:57:2f:ae:51:ae:55:12:e3:77:27: 9c:12:46:c4:f4:1e:ce:06:68:eb:cd:e5:9f:83:e2: 26:b7:36:82:85:ef:2d:63:1f:16:ea:51:c8:09:83: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7A:78:DC:DB:A5:24:AC:A9:59:EA:C3:E3:2E:F4:3A:7B:86:93:31 X509v3 Authority Key Identifier: keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:59:a6:5e:a5:70:1e:8d:0e:d2:29:a1:df:e2:76:b6:a3:f6: 7e:91:d1:7f:03:12:49:c8:55:24:b0:b0:f4:16:3b:7a:eb:fd: af:d6:91:8b:44:e3:c4:f1:cb:da:fe:2b:23:24:ef:81:36:02: 2a:fe:11:55:22:ea:19:25:93:35:ba:1f:25:b6:34:ad:e8:df: 2f:d4:06:96:37:d6:19:d3:4d:90:df:0b:33:15:a1:39:66:8e: 7c:77:08:18:c5:3b:b8:bb:8a:10:93:17:2d:40:75:7b:9e:62: 3a:10:39:59:95:87:64:92:35:65:14:95:34:d0:50:0e:c1:92: d8:44:b0:4b:a3:26:1e:d4:4d:cb:3b:2b:d9:86:da:92:c8:89: 9f:1c:9c:6d:85:f7:03:13:56:d6:0e:c3:34:b1:f2:70:26:57: b5:01:2d:d7:5a:e8:42:1a:a8:24:93:a2:e3:09:30:49:56:fc: c9:ef:ce:f6:49:4d:87:03:f3:af:22:ad:8a:f6:41:0d:e9:ae: a3:9f:04:06:2a:cd:2c:18:12:71:6f:15:cd:e0:1c:99:29:32: b5:bb:1b:83:01:d2:cb:0c:c1:aa:b9:d8:f3:e8:51:65:65:bd: a0:33:2d:38:44:67:ea:4c:9c:f0:fd:67:aa:d0:00:00:26:19: 7d:31:14:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoNTRERTk5OTUwQjdGQzk1ODFGRThBQzk2MUYzN0I3ODk4 RjM1Q0RDMzAeFw0yNTA2MDMwNzU5MzJaFw0yNTA2MTAwNzU5MzJaMBgxFjAUBgNV BAMTDTY4M2VhYjY0LTVlYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5DpFzdPn8g8RNhmbR1XDgp+Ef8O3aZ4gc/eGrOA8uoi56LNg6IyqcaflhxhrJ yRCLEMXx2YyNK9M7feyeDLGISu6P7PaLjFaWDs7yc9DJlEc/QYSgaPsfyADKhPnx ofhkSJoU/4imD2LZU76cm/TSJ73yJaRrAtu1IGd8KiYHzz7d1MyHpu47gxySA5ga 2xXy9iTBn/ZX5Z26buaJt7qTG8XLRUUyglv9TZqwMcKdKRG2ojJc40pdHCz8QrpB 5BZFuNSOq5LyBI23HqOfA3chVye3LeN6Vy+uUa5VEuN3J5wSRsT0Hs4GaOvN5Z+D 4ia3NoKF7y1jHxbqUcgJgw9vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdnp43Nul JKypWerD4y70OnuGkzEwHwYDVR0jBBgwFoAUVN6ZlQt/yVgf6KyWHze3iY81zcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzFFQzcyRjIyMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVk42WmxRdF95VmdmNkt5V0h6ZTNpWTgxemNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzFFQzcyRjIyMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZn ZjZLeVdIemUzaVk4MXpjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALdZpl6lcB6NDtIpod/idraj9n6R0X8DEknIVSSwsPQWO3rr/a/WkYtE 48Txy9r+KyMk74E2Air+EVUi6hklkzW6HyW2NK3o3y/UBpY31hnTTZDfCzMVoTlm jnx3CBjFO7i7ihCTFy1AdXueYjoQOVmVh2SSNWUUlTTQUA7BkthEsEujJh7UTcs7 K9mG2pLIiZ8cnG2F9wMTVtYOwzSx8nAmV7UBLdda6EIaqCSTouMJMElW/MnvzvZJ TYcD868irYr2QQ3prqOfBAYqzSwYEnFvFc3gHJkpMrW7G4MB0ssMwaq52PPoUWVl vaAzLThEZ+pMnPD9Z6rQAAAmGX0xFIA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:59:12 2025 by rpki-client