$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json) Hash identifier: QpV/cHlXNSSoVzCvENQUVnxOATUabbQHWgrhlXWyJTc= Subject key identifier: DC:EA:2C:CF:BF:74:6F:D6:4E:E4:B4:CB:76:5C:DE:96:FD:D7:CC:9B Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Certificate serial: 0BB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft Manifest number: 0BB1 Signing time: Fri 30 May 2025 19:08:33 +0000 Manifest this update: Fri 30 May 2025 19:08:33 +0000 Manifest next update: Fri 06 Jun 2025 19:08:33 +0000 Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: T/dxRHvqxdT5coWdywgz1mAjZfnCknTTPZFfySl7gzc=) 2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: RvdTnjVHgMOyaT2D6NI7RBOs0ab70zz7muos4KwEa2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3000 (0xbb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014 Validity Not Before: May 30 19:08:33 2025 GMT Not After : Jun 6 19:08:33 2025 GMT Subject: CN=683a0231-e033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:35:b9:35:cb:4b:27:6a:b0:ad:cb:08:0d:75: 3a:10:4f:c4:81:86:ac:50:78:ff:60:87:72:5d:46: 71:ca:bc:0d:22:ad:6f:33:9a:48:32:b9:63:40:17: 20:16:09:9a:da:e4:1f:93:83:21:e0:27:dc:fd:3a: e8:75:a6:3c:93:28:29:48:1e:f5:d8:1d:16:26:5d: 20:19:d7:56:a0:32:34:5f:77:ad:f8:9c:0f:7a:af: 5f:ee:6e:80:5e:23:27:ee:2e:f6:7c:2a:3b:b2:62: b7:4f:b6:b7:35:f9:86:c6:f1:40:0b:10:2f:71:84: d0:5b:4e:00:29:6c:47:e4:c6:24:45:41:9b:0a:cf: 68:f3:bc:1a:6c:0c:f6:33:5e:a3:d9:39:8f:58:44: e2:67:41:f6:df:77:c4:64:93:f2:1e:3c:b8:37:19: 5d:c2:27:6c:61:cd:ec:ad:1f:84:78:aa:28:c5:fd: b3:80:76:29:15:13:7b:c0:2e:5c:53:95:42:ca:ab: dc:fa:58:45:af:d6:c6:69:5d:d5:e6:35:ca:e7:25: a8:48:19:38:2b:6b:94:fd:b4:d9:ed:60:fd:ce:cd: c7:d3:8a:90:40:49:87:07:48:68:bb:f7:a9:7d:fa: 0d:06:fc:d4:1c:7b:47:8a:83:02:50:f0:de:1d:2f: 46:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EA:2C:CF:BF:74:6F:D6:4E:E4:B4:CB:76:5C:DE:96:FD:D7:CC:9B X509v3 Authority Key Identifier: keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9c:8d:60:aa:85:90:95:74:50:d2:48:3d:48:96:d9:72:02: 35:d6:16:a7:c2:74:38:3c:06:9f:e0:59:e5:c1:e8:a7:6e:73: 66:2f:0f:3b:5d:39:3c:8f:7b:88:20:d6:84:5e:4c:00:6e:54: a7:38:2f:90:1f:20:bd:18:e5:fe:12:e2:5b:ec:9a:bc:21:21: 7f:f0:8f:9c:9f:5e:df:7f:37:42:b4:e1:f7:9a:d1:ff:04:38: 24:fe:04:2f:f8:b0:35:d3:75:7e:78:f6:cd:66:ea:8c:0c:ac: 6f:89:75:2f:cd:b2:95:e9:76:1f:5c:c1:64:6c:ad:13:01:56: f8:26:fc:2a:b2:27:32:e3:04:4f:ce:80:dc:ff:76:fa:fd:26: ac:af:92:0e:07:56:1b:45:43:df:b2:3d:c2:e3:d9:ce:0b:94: 4a:2a:67:29:73:21:7a:50:0d:d5:49:25:ce:0b:c1:aa:91:c2: 8d:fc:9b:1c:25:22:bf:fb:ed:08:27:00:64:a3:6d:a7:e0:3e: 4b:2c:f9:27:52:67:ab:d7:51:9c:d3:e0:1d:db:bb:db:01:90: ff:e9:cf:71:50:ca:68:40:a9:b3:f1:26:20:9d:cc:ee:c4:bc: c7:05:c6:ee:a2:af:d7:03:92:8c:7a:05:78:7f:24:b1:30:df: b0:0d:7b:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF NTUzNjUwMTQwHhcNMjUwNTMwMTkwODMzWhcNMjUwNjA2MTkwODMzWjAYMRYwFAYD VQQDEw02ODNhMDIzMS1lMDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9jW5NctLJ2qwrcsIDXU6EE/EgYasUHj/YIdyXUZxyrwNIq1vM5pIMrljQBcg Fgma2uQfk4Mh4Cfc/TrodaY8kygpSB712B0WJl0gGddWoDI0X3et+JwPeq9f7m6A XiMn7i72fCo7smK3T7a3NfmGxvFACxAvcYTQW04AKWxH5MYkRUGbCs9o87wabAz2 M16j2TmPWETiZ0H233fEZJPyHjy4NxldwidsYc3srR+EeKooxf2zgHYpFRN7wC5c U5VCyqvc+lhFr9bGaV3V5jXK5yWoSBk4K2uU/bTZ7WD9zs3H04qQQEmHB0hou/ep ffoNBvzUHHtHioMCUPDeHS9GjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzqLM+/ dG/WTuS0y3Zc3pb918ybMB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNGMy80QkRENTE4RTIxMzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlE a2dkNW8xTEZXQVRsVTJVQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqnI1gqoWQlXRQ0kg9SJbZcgI11hanwnQ4PAaf4FnlweinbnNmLw87 XTk8j3uIINaEXkwAblSnOC+QHyC9GOX+EuJb7Jq8ISF/8I+cn17ffzdCtOH3mtH/ BDgk/gQv+LA103V+ePbNZuqMDKxviXUvzbKV6XYfXMFkbK0TAVb4Jvwqsicy4wRP zoDc/3b6/Sasr5IOB1YbRUPfsj3C49nOC5RKKmcpcyF6UA3VSSXOC8GqkcKN/Jsc JSK/++0IJwBko22n4D5LLPknUmer11Gc0+Ad27vbAZD/6c9xUMpoQKmz8SYgnczu xLzHBcbuoq/XA5KMegV4fySxMN+wDXtI -----END CERTIFICATE-----Generated at Sat May 31 15:51:48 2025 by rpki-client