$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft File: j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json) Hash identifier: 4bfhoPd/F9xXcgJGlYeWx+3mkB2mXGIzCMk3UGnAnPg= Subject key identifier: 8F:AE:17:43:C6:41:1F:07:81:4E:DF:C8:BE:16:E9:A7:E0:62:72:C5 Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 Certificate issuer: /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft Manifest number: 011C Signing time: Mon 09 Jun 2025 03:50:22 +0000 Manifest this update: Mon 09 Jun 2025 03:50:22 +0000 Manifest next update: Mon 16 Jun 2025 03:50:22 +0000 Files and hashes: 1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: 3yRu1vDNqsamgQ89mtWA9vSKLoc+skeG+kufi/edfr4=) 2: 756EDE70611611EF83B51C41C4F9AE02.roa (hash: fv6RLao5liFr7afB3PhUjumYqWdJXB/03IwWC/f2YMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 03:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C3B7, serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Validity Not Before: Jun 9 03:50:22 2025 GMT Not After : Jun 16 03:50:22 2025 GMT Subject: CN=684659fe-a810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:59:60:b1:99:ba:fe:ad:e1:b1:5f:b2:6a: ef:7c:21:8c:13:58:0d:29:ab:e6:a6:79:d3:4a:e4: d6:e6:7f:a8:a4:b5:dd:09:19:5d:e1:2c:ff:f9:33: d1:66:2d:21:98:32:ef:62:42:28:43:fb:cb:f8:28: 3b:3f:cf:ff:7d:54:17:75:02:ea:ab:4d:63:07:fc: 16:71:d1:11:86:6c:36:b8:ad:ef:4b:47:8f:28:31: ed:e0:5f:6e:e8:5c:d5:21:7d:f0:a6:09:17:21:fa: 43:6e:b6:d1:3c:31:95:67:6b:3e:d0:ee:57:c9:bf: e1:9c:c5:76:39:8f:3c:4c:5f:10:f7:db:f7:cb:49: 07:f0:26:61:f7:d6:27:99:e0:1e:ff:23:2f:ef:40: d6:c1:54:fa:ee:95:db:1c:f7:4b:8a:d2:bf:de:09: 2c:fb:77:4d:19:9a:aa:6f:1d:42:3e:10:96:30:e5: 8f:7a:ad:25:cc:2a:9f:5d:86:dd:45:bd:1b:c3:81: fd:0f:90:a8:23:5f:0a:5d:32:76:cc:b0:78:14:66: ab:52:08:39:9f:38:18:05:ff:81:15:a5:d1:15:05: 16:bf:4d:8a:d5:da:97:89:97:08:90:b4:03:9d:04: 70:ac:da:28:74:56:58:48:8c:b7:fb:a1:8a:46:aa: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AE:17:43:C6:41:1F:07:81:4E:DF:C8:BE:16:E9:A7:E0:62:72:C5 X509v3 Authority Key Identifier: keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8a:bf:ca:a4:8e:f3:29:ce:25:ee:7d:b5:ee:da:c3:9e:ef: ef:65:e2:a4:d8:d8:d4:ca:62:8c:59:aa:e3:04:59:df:09:05: 49:2f:f4:b4:dd:e0:39:69:8a:e5:4b:44:08:ae:cf:a0:40:1a: cc:3d:db:6c:04:40:8f:74:c0:70:88:3c:43:bb:08:86:ff:c3: 0d:45:ad:5c:e0:09:71:6e:68:f6:96:37:b8:3f:eb:05:c1:8c: 84:df:9f:11:51:89:ef:67:b2:3e:de:f1:b1:e3:05:07:d5:6f: e0:7f:3a:8c:66:76:ec:aa:a3:7f:92:96:55:dd:e2:c4:60:9c: ef:2e:81:f8:18:77:29:24:4f:60:6c:91:70:2d:5e:87:62:f6: e8:a5:42:e3:58:6a:89:23:52:f6:12:29:d5:75:05:f4:f4:35: 1c:31:0b:35:7b:3d:ae:03:7e:ce:d0:46:1f:52:23:b2:49:0b: 35:7b:bd:cf:d9:a4:a4:5d:14:6b:53:2d:fe:19:6c:fd:ce:fb: 20:90:e8:c6:ab:83:a5:56:8f:a0:af:9b:39:fb:d8:72:b9:4f: 76:94:60:dd:99:7e:89:23:ff:a4:0e:b4:1c:c8:e2:87:f8:b0: ee:d0:50:1a:92:5b:39:51:06:97:b2:6f:7e:92:09:12:f9:1b: ac:c6:5f:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMzQjcxMTAvBgNVBAUTKDhGQTY5ODY1MUM3QUMyNERCODI3RDIzOUQwRkM4QjJD OERBMzY2QjgwHhcNMjUwNjA5MDM1MDIyWhcNMjUwNjE2MDM1MDIyWjAYMRYwFAYD VQQDEw02ODQ2NTlmZS1hODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvu5ZYLGZuv6t4bFfsmrvfCGME1gNKavmpnnTSuTW5n+opLXdCRld4Sz/+TPR Zi0hmDLvYkIoQ/vL+Cg7P8//fVQXdQLqq01jB/wWcdERhmw2uK3vS0ePKDHt4F9u 6FzVIX3wpgkXIfpDbrbRPDGVZ2s+0O5Xyb/hnMV2OY88TF8Q99v3y0kH8CZh99Yn meAe/yMv70DWwVT67pXbHPdLitK/3gks+3dNGZqqbx1CPhCWMOWPeq0lzCqfXYbd Rb0bw4H9D5CoI18KXTJ2zLB4FGarUgg5nzgYBf+BFaXRFQUWv02K1dqXiZcIkLQD nQRwrNoodFZYSIy3+6GKRqoxfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+uF0PG QR8HgU7fyL4W6afgYnLFMB8GA1UdIwQYMBaAFI+mmGUcesJNuCfSOdD8iyyNo2a4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xRTY3NzdBQTkz MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4NndrMjRKOUk1MFB5TExJMmpa cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o2YVlaUng2d2syNEo5STUwUHlMTEkyalpyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzNCNy8xRTY3NzdBQTkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4Nndr MjRKOUk1MFB5TExJMmpacmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9ir/KpI7zKc4l7n217trDnu/vZeKk2NjUymKMWarjBFnfCQVJL/S0 3eA5aYrlS0QIrs+gQBrMPdtsBECPdMBwiDxDuwiG/8MNRa1c4Alxbmj2lje4P+sF wYyE358RUYnvZ7I+3vGx4wUH1W/gfzqMZnbsqqN/kpZV3eLEYJzvLoH4GHcpJE9g bJFwLV6HYvbopULjWGqJI1L2EinVdQX09DUcMQs1ez2uA37O0EYfUiOySQs1e73P 2aSkXRRrUy3+GWz9zvsgkOjGq4OlVo+gr5s5+9hyuU92lGDdmX6JI/+kDrQcyOKH +LDu0FAakls5UQaXsm9+kgkS+Rusxl86 -----END CERTIFICATE-----Generated at Tue Jun 10 15:03:24 2025 by rpki-client