$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json) Hash identifier: yEOMXuLgcENYjL7VtE+RTmFx8wh5JlmYhdC0+VgxwGM= Subject key identifier: FD:BB:29:6C:8E:43:62:38:02:3E:3F:93:AC:45:CE:47:76:D7:78:AD Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft Manifest number: 01F3 Signing time: Thu 05 Jun 2025 01:53:32 +0000 Manifest this update: Thu 05 Jun 2025 01:53:31 +0000 Manifest next update: Thu 12 Jun 2025 01:53:31 +0000 Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: ulaHMfd628NjKcdPiXU3x9GHzgGrYWPTXapr22cwsT0=) 2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: us+hXVbT4+IxuDXf1t8Zy0IqvnZFy688N7EVgUtl4FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 01:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Validity Not Before: Jun 5 01:53:31 2025 GMT Not After : Jun 12 01:53:31 2025 GMT Subject: CN=6840f89b-5e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d1:e0:45:fd:27:67:43:42:17:75:19:d3:fc: b3:f1:1a:5b:28:40:7e:7e:56:69:08:af:e8:6c:58: 3a:5b:d4:a7:54:a7:33:6b:2f:36:11:cf:28:bb:07: d3:2f:a1:14:8b:20:f0:c3:70:e5:6c:55:5d:23:f8: 9b:f4:2c:fc:3d:09:f5:46:7a:69:c0:69:df:4e:87: d2:ca:4b:2b:12:25:e2:1c:22:0e:4e:60:47:ef:7a: ab:20:ea:66:7a:88:66:7b:58:cf:d1:7e:04:49:43: 5c:fb:20:b0:96:8e:c3:3a:42:b3:44:a6:4b:a1:85: f3:f4:95:07:15:ea:7b:ca:39:f6:62:b4:67:db:ce: 5e:33:b9:25:6d:13:ba:d8:f9:d8:16:0f:bf:06:77: 98:8b:73:a1:df:44:ae:83:5b:e5:9c:8d:33:3f:fd: fb:9a:96:da:35:2f:03:27:1c:1c:66:49:a9:b6:97: 8b:a3:cc:22:91:c7:5a:98:8a:df:d4:71:ee:97:d6: 8f:cd:c2:b2:4d:df:eb:87:c8:41:f1:fb:24:74:93: c4:da:67:a5:00:4e:59:f7:3c:d1:12:1c:dd:18:dd: 07:35:c9:cf:65:51:f5:54:67:9e:c6:bf:fd:65:a6: 07:6c:19:fd:8e:a2:06:08:00:22:06:ca:d2:fb:05: a1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BB:29:6C:8E:43:62:38:02:3E:3F:93:AC:45:CE:47:76:D7:78:AD X509v3 Authority Key Identifier: keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:5d:e3:57:2c:f3:4a:2c:39:00:aa:f2:f6:a7:37:a5:f0:ea: 77:f4:cf:a1:43:91:9d:c6:3d:5b:6c:94:21:4a:69:ee:08:1a: ee:94:18:89:12:28:bf:7b:cc:fa:48:0c:0d:15:1f:a5:2a:b4: 9c:b5:17:38:0e:c1:b9:3f:61:d5:af:a3:91:b3:24:7d:00:37: 79:99:99:ed:d9:c7:35:00:96:39:7a:e2:d5:f5:56:40:cd:b4: f7:7f:8f:37:c6:23:34:16:00:fb:48:3b:90:d6:c1:31:f0:28: d2:77:09:b2:37:29:a0:63:a2:9f:eb:4c:2d:cd:5d:e6:ff:ae: ab:85:ea:f5:e8:b2:0c:9e:22:e8:17:81:65:92:f0:f0:7e:87: 2c:e0:1a:09:07:e4:0c:59:95:12:04:dd:16:49:df:33:ce:a1: a9:77:aa:e7:e5:08:f2:94:85:a5:07:65:4c:4b:50:12:8e:03: 2a:58:ed:f4:ed:a9:3b:4d:c6:39:51:91:6c:96:34:db:a0:49: d4:5a:f7:05:5e:2f:9e:35:e6:aa:6b:5c:74:cb:2d:04:be:c6: f7:f6:86:ca:3d:c0:cc:7d:af:34:b8:c8:77:85:e6:9c:a4:0d: 5d:81:68:b3:1d:db:ce:5c:fe:cd:84:a4:da:df:a1:93:5e:60: 4b:8c:7e:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MTUxMTAvBgNVBAUTKEJDQjE2QTg4NzNCMUJFMTMyNkVCNUNEQjkwQjE4NjEx NURBNzRENjcwHhcNMjUwNjA1MDE1MzMxWhcNMjUwNjEyMDE1MzMxWjAYMRYwFAYD VQQDEw02ODQwZjg5Yi01ZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9HgRf0nZ0NCF3UZ0/yz8RpbKEB+flZpCK/obFg6W9SnVKczay82Ec8ouwfT L6EUiyDww3DlbFVdI/ib9Cz8PQn1RnppwGnfTofSyksrEiXiHCIOTmBH73qrIOpm eohme1jP0X4ESUNc+yCwlo7DOkKzRKZLoYXz9JUHFep7yjn2YrRn285eM7klbRO6 2PnYFg+/BneYi3Oh30Sug1vlnI0zP/37mpbaNS8DJxwcZkmptpeLo8wikcdamIrf 1HHul9aPzcKyTd/rh8hB8fskdJPE2melAE5Z9zzREhzdGN0HNcnPZVH1VGeexr/9 ZaYHbBn9jqIGCAAiBsrS+wWhEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP27KWyO Q2I4Aj4/k6xFzkd213itMB8GA1UdIwQYMBaAFLyxaohzsb4TJutc25CxhhFdp01n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcxNS82OThCOTYzQTQy OTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZoTW02MXpia0xHR0VWMm5U V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMRnFpSE94dmhNbTYxemJrTEdHRVYyblRXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcxNS82OThCOTYzQTQyOTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZo TW02MXpia0xHR0VWMm5UV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJXeNXLPNKLDkAqvL2pzel8Op39M+hQ5Gdxj1bbJQhSmnuCBrulBiJ Eii/e8z6SAwNFR+lKrSctRc4DsG5P2HVr6ORsyR9ADd5mZnt2cc1AJY5euLV9VZA zbT3f483xiM0FgD7SDuQ1sEx8CjSdwmyNymgY6Kf60wtzV3m/66rher16LIMniLo F4FlkvDwfocs4BoJB+QMWZUSBN0WSd8zzqGpd6rn5QjylIWlB2VMS1ASjgMqWO30 7ak7TcY5UZFsljTboEnUWvcFXi+eNeaqa1x0yy0Evsb39obKPcDMfa80uMh3heac pA1dgWizHdvOXP7NhKTa36GTXmBLjH4P -----END CERTIFICATE-----Generated at Thu Jun 5 19:54:48 2025 by rpki-client