$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft File: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json) Hash identifier: BpTdY4cnwqG5LeSYroet4QrqoO9jUFahJg38izCHxGc= Subject key identifier: F0:BD:FA:D4:F0:6F:66:68:BE:F8:2D:1C:4C:69:F5:92:E8:D1:46:CD Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Certificate serial: 0C48 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft Manifest number: 0C3A Signing time: Fri 06 Jun 2025 18:36:10 +0000 Manifest this update: Fri 06 Jun 2025 18:36:09 +0000 Manifest next update: Fri 13 Jun 2025 18:36:09 +0000 Files and hashes: 1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: /cyJiMaA2zWSup4QuTRPlOhHCqzxmzdtNklaXLlgJiw=) 2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: IIl+hrMnm94EE997te9hu/Nd32AVZAIsxiVc91AGezY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 18:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Validity Not Before: Jun 6 18:36:09 2025 GMT Not After : Jun 13 18:36:09 2025 GMT Subject: CN=6843351a-637e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:eb:6d:ab:01:f0:a7:fe:7a:c5:3c:e2:67:d9: 0b:5c:57:5d:09:06:f5:8f:e0:81:2f:12:2b:89:ed: 82:eb:08:0d:ba:91:29:2c:16:dc:03:fb:69:43:2b: 5c:ff:74:2d:4d:1b:44:a2:2b:5e:93:47:8f:af:3f: 37:cc:40:cf:ad:ed:f3:80:56:6b:93:dc:89:f3:74: 36:da:59:bb:23:07:d5:47:b8:f5:f3:c1:3e:de:08: d7:e2:16:04:46:f8:a7:32:83:73:e3:87:65:88:d4: 73:38:d7:bb:a9:e8:0f:02:49:89:5e:0a:ef:73:1c: d2:30:ca:aa:4d:3b:c6:c8:c8:4f:14:f9:63:5e:35: 4f:a1:43:0c:9c:cd:e9:bf:b4:1b:49:05:16:ea:f1: 87:ee:85:ff:1b:ed:40:f8:da:25:6e:d7:e2:9a:27: 26:8e:07:d2:94:df:20:c5:f9:91:70:46:71:9d:ce: 02:8c:c9:c8:4b:24:fa:90:be:a1:d7:2f:4e:be:04: 70:2d:06:b5:7e:ef:e0:b9:80:e3:44:c6:60:4e:a6: 5a:7e:20:14:43:6d:23:f3:78:d0:6d:5b:1c:61:e9: 3f:27:9a:ce:e4:57:64:4e:fb:ce:e4:e8:f8:34:c3: 2d:0d:a1:c3:a6:8e:d8:8a:2c:06:c0:77:b4:75:5c: 2a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BD:FA:D4:F0:6F:66:68:BE:F8:2D:1C:4C:69:F5:92:E8:D1:46:CD X509v3 Authority Key Identifier: keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:39:40:67:c8:51:ee:da:83:4e:9b:c5:be:ef:b3:5d:62:7c: 9f:ed:a0:1f:98:73:13:e5:6e:14:80:b4:0d:e1:f4:2e:b1:06: 78:ac:53:53:9b:83:0b:c9:1e:e2:32:8a:2b:bf:8d:dd:f5:64: 72:9f:96:87:d6:47:58:33:1d:97:8f:1d:77:ed:84:de:50:f4: 39:39:27:e9:b7:f8:76:6c:3c:79:1f:f2:9b:73:93:b6:d2:aa: 53:b3:fd:89:54:27:6b:09:3c:0f:a5:d4:c9:64:d8:99:96:8e: 35:29:c0:4f:f1:c4:c4:0a:e3:0e:16:cf:56:86:d9:8b:ae:dd: b3:29:46:0e:0a:02:65:96:08:29:84:67:26:8b:4e:d3:d5:b5: a9:0b:a2:45:60:f5:0a:af:cc:5f:6d:1d:d6:ce:e5:e2:8d:d2: 6b:d9:d3:4f:4e:7b:67:8c:ee:ee:d3:7b:37:31:85:86:81:24: dc:27:76:23:0f:27:50:60:7b:39:da:ae:cc:9c:1a:75:9c:66: d0:47:80:85:82:2c:d3:9d:51:9d:2d:ef:97:91:dc:81:af:e9: 0e:95:6d:c1:c9:0f:59:79:ac:e2:1c:ea:3d:dd:87:45:e0:01: d2:47:b4:f5:7e:e7:c7:26:e8:33:85:1f:0f:52:2d:0d:25:6d: 6d:dd:9e:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKEY1Mzk4M0I3QUI4Mzg2QzY5OTU4Nzg0RkZBRjBFNjk3 MjYyNDU3QTcwHhcNMjUwNjA2MTgzNjA5WhcNMjUwNjEzMTgzNjA5WjAYMRYwFAYD VQQDEw02ODQzMzUxYS02MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ettqwHwp/56xTziZ9kLXFddCQb1j+CBLxIrie2C6wgNupEpLBbcA/tpQytc /3QtTRtEoitek0ePrz83zEDPre3zgFZrk9yJ83Q22lm7IwfVR7j188E+3gjX4hYE RvinMoNz44dliNRzONe7qegPAkmJXgrvcxzSMMqqTTvGyMhPFPljXjVPoUMMnM3p v7QbSQUW6vGH7oX/G+1A+NolbtfimicmjgfSlN8gxfmRcEZxnc4CjMnISyT6kL6h 1y9OvgRwLQa1fu/guYDjRMZgTqZafiAUQ20j83jQbVscYek/J5rO5FdkTvvO5Oj4 NMMtDaHDpo7YiiwGwHe0dVwq3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPC9+tTw b2ZovvgtHExp9ZLo0UbNMB8GA1UdIwQYMBaAFPU5g7erg4bGmVh4T/rw5pcmJFen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC84N0MzMTY4ODA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhzYVpXSGhQLXZEbWx5WWtW NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlUbUR0NnVEaHNhWldIaFAtdkRtbHlZa1Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC84N0MzMTY4ODA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhz YVpXSGhQLXZEbWx5WWtWNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYOUBnyFHu2oNOm8W+77NdYnyf7aAfmHMT5W4UgLQN4fQusQZ4rFNT m4MLyR7iMoorv43d9WRyn5aH1kdYMx2Xjx137YTeUPQ5OSfpt/h2bDx5H/Kbc5O2 0qpTs/2JVCdrCTwPpdTJZNiZlo41KcBP8cTECuMOFs9WhtmLrt2zKUYOCgJllggp hGcmi07T1bWpC6JFYPUKr8xfbR3WzuXijdJr2dNPTntnjO7u03s3MYWGgSTcJ3Yj DydQYHs52q7MnBp1nGbQR4CFgizTnVGdLe+XkdyBr+kOlW3ByQ9ZeaziHOo93YdF 4AHSR7T1fufHJugzhR8PUi0NJW1t3Z4n -----END CERTIFICATE-----Generated at Sat Jun 7 13:06:24 2025 by rpki-client