$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft File: vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft (raw, json) Hash identifier: yU8awPFC6q1XjiZnyYqk9+mv9hbuPBkhFa+alGnwpQ4= Subject key identifier: DD:38:54:D8:C1:C9:7B:05:96:60:F4:85:A1:0B:ED:89:B2:18:C8:E8 Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6 Certificate issuer: /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6 Certificate serial: 0C59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft Manifest number: 0C43 Signing time: Fri 30 May 2025 18:43:24 +0000 Manifest this update: Fri 30 May 2025 18:43:23 +0000 Manifest next update: Fri 06 Jun 2025 18:43:23 +0000 Files and hashes: 1: vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl (hash: qrmHzxEkaanmkZyeQ54VxIyYbeUFHwFknKuegx3o0lY=) 2: 9591475A4F6011EFAF26AF63C4F9AE02.roa (hash: d4nANGkii06xzWV6dpPGz0VvWqxPgVRXdrnJY6WmtmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3161 (0xc59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184569, serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6 Validity Not Before: May 30 18:43:23 2025 GMT Not After : Jun 6 18:43:23 2025 GMT Subject: CN=6839fc4c-a521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:cb:f7:b9:fe:6d:81:65:40:c6:b0:95:6b: 3b:c4:b2:7b:ca:c8:5a:68:0d:e7:b2:ea:f1:e7:fa: 43:fe:44:ab:8c:88:5d:40:bb:7d:22:73:67:d2:b4: 83:41:68:4b:60:b5:92:6f:a4:30:c3:ec:02:40:cc: 85:fa:04:56:f5:5d:26:19:fb:35:bf:0b:36:bd:75: a8:61:77:8f:a2:6a:e0:6b:80:2a:58:24:48:6c:bd: fc:a2:6f:2a:23:24:77:6d:94:f6:cd:ca:d0:32:12: 23:4a:b8:67:12:6e:fc:dc:66:ce:2c:a8:bf:f4:38: fb:55:8a:3c:d2:5d:c1:b9:82:75:57:3a:f8:01:45: a7:47:ce:90:a9:49:27:2d:10:73:43:d4:0f:26:a8: 16:55:05:5f:b6:be:30:2b:9e:c6:ce:d7:b8:93:1a: 90:49:76:0e:ce:02:49:19:07:30:96:4b:21:80:e2: e9:05:13:f0:22:38:97:dd:2b:da:d1:a6:31:10:47: 4a:5c:e6:3b:0a:08:6c:45:6b:2f:d9:f4:77:f5:5f: 9a:a1:72:9e:ed:9a:c7:77:30:f7:e0:1e:0b:43:7f: c8:9f:99:e1:df:dd:ca:fa:58:82:05:2a:5b:86:19: ac:f2:c4:4d:5a:5d:86:c0:13:26:21:ef:8c:e3:36: d2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:38:54:D8:C1:C9:7B:05:96:60:F4:85:A1:0B:ED:89:B2:18:C8:E8 X509v3 Authority Key Identifier: keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:54:1b:d6:cc:ac:3b:67:ab:db:a5:cc:e3:60:4a:d3:57:1e: 27:f6:a1:b5:a2:74:48:1b:a2:34:af:8f:9b:4e:e9:99:d5:a9: 1c:60:13:64:5f:f3:7a:5c:e4:cb:be:80:6e:7a:53:e8:97:20: cd:d7:ca:b3:d7:de:2c:6c:ca:a6:55:d5:e9:08:2e:08:30:a2: 05:0b:27:d6:06:bd:3f:5b:0b:2d:f4:c8:be:bf:d0:90:71:17: 32:7e:d2:c3:85:31:f7:8b:b0:79:f0:8d:ad:58:9d:eb:9d:d8: 1a:d1:80:36:db:d8:b6:f7:cd:ed:0c:b9:23:b3:38:80:88:1c: af:79:3c:93:20:5e:19:67:31:87:2e:75:97:64:02:41:2b:04: ce:1e:d1:5c:4a:60:6d:af:61:96:11:a9:de:8d:6b:de:12:b0: fe:bb:1c:d5:48:6f:e7:9d:ac:fe:49:38:2d:68:67:ff:2c:ae: 0b:69:53:cf:2c:72:23:4a:28:65:b2:18:83:5f:1a:7e:48:01: d5:1c:5d:fa:6f:4f:3b:1b:9d:f9:c4:bc:17:67:29:17:c5:0c: c6:d9:21:95:0d:43:87:22:64:6d:b5:71:62:66:17:2f:1b:5e: 94:00:28:49:2e:93:2b:7e:40:bb:0a:ad:54:f3:33:8d:e3:f7: 50:48:f1:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ1NjkxMTAvBgNVBAUTKEJDMzBCOEE0QkREMUNFMjhGN0IyRjk5OTM0MkY1MUNF MUZEQjg2RTYwHhcNMjUwNTMwMTg0MzIzWhcNMjUwNjA2MTg0MzIzWjAYMRYwFAYD VQQDEw02ODM5ZmM0Yy1hNTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX/L97n+bYFlQMawlWs7xLJ7yshaaA3nsurx5/pD/kSrjIhdQLt9InNn0rSD QWhLYLWSb6Qww+wCQMyF+gRW9V0mGfs1vws2vXWoYXePomrga4AqWCRIbL38om8q IyR3bZT2zcrQMhIjSrhnEm783GbOLKi/9Dj7VYo80l3BuYJ1Vzr4AUWnR86QqUkn LRBzQ9QPJqgWVQVftr4wK57Gzte4kxqQSXYOzgJJGQcwlkshgOLpBRPwIjiX3Sva 0aYxEEdKXOY7CghsRWsv2fR39V+aoXKe7ZrHdzD34B4LQ3/In5nh393K+liCBSpb hhms8sRNWl2GwBMmIe+M4zbSFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN04VNjB yXsFlmD0haEL7YmyGMjoMB8GA1UdIwQYMBaAFLwwuKS90c4o97L5mTQvUc4f24bm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU2OS9GRTg5OUQ1RTA4 NjQxMUVBQjdENEVDODJDNEY5QUUwMi92REM0cEwzUnppajNzdm1aTkM5UnpoX2Jo dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEQzRwTDNSemlqM3N2bVpOQzlSemhfYmh1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDU2OS9GRTg5OUQ1RTA4NjQxMUVBQjdENEVDODJDNEY5QUUwMi92REM0cEwzUnpp ajNzdm1aTkM5UnpoX2JodVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfVBvWzKw7Z6vbpczjYErTVx4n9qG1onRIG6I0r4+bTumZ1akcYBNk X/N6XOTLvoBuelPolyDN18qz194sbMqmVdXpCC4IMKIFCyfWBr0/Wwst9Mi+v9CQ cRcyftLDhTH3i7B58I2tWJ3rndga0YA229i2983tDLkjsziAiByveTyTIF4ZZzGH LnWXZAJBKwTOHtFcSmBtr2GWEanejWveErD+uxzVSG/nnaz+STgtaGf/LK4LaVPP LHIjSihlshiDXxp+SAHVHF36b087G535xLwXZykXxQzG2SGVDUOHImRttXFiZhcv G16UAChJLpMrfkC7Cq1U8zON4/dQSPEC -----END CERTIFICATE-----Generated at Sat May 31 16:27:44 2025 by rpki-client