$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json) Hash identifier: Xhlz7oCbqJU8+hBzs+/7hlfOz1bfrbV0zjmyHvkzIXc= Subject key identifier: 06:FC:C7:AE:30:8E:0C:83:21:0F:6A:7D:C1:AF:73:5D:DB:E9:60:7C Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft Manifest number: 0B24 Signing time: Sun 08 Jun 2025 19:00:09 +0000 Manifest this update: Sun 08 Jun 2025 19:00:08 +0000 Manifest next update: Sun 15 Jun 2025 19:00:08 +0000 Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: m8zOV3Z28Ch84fZcQb7reaS3shqcPo6cZY+EufknUTY=) 2: 3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa (hash: PAA4OxtlazOKwYLjk6aLytCy9NItnRL8j4f8o3mJBHg=) 3: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: a+Zi9iESugqvqoTYb4WkQmUuVNUV8p+uqNbSEtnaZ8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 19:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2865 (0xb31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: Jun 8 19:00:08 2025 GMT Not After : Jun 15 19:00:08 2025 GMT Subject: CN=6845ddb9-19f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:a1:d9:a2:fd:90:9b:ee:43:46:29:85:48: 08:12:8e:45:b0:5c:29:90:97:2e:a6:8d:a0:69:9e: ac:fa:4b:55:fb:99:dc:9e:c3:93:e3:11:b9:64:3d: 8a:63:16:a3:27:8c:29:b0:bf:a3:0d:14:17:b6:cd: 7b:a4:af:3e:4b:f5:be:a1:ee:d9:08:e5:f6:1c:97: 9e:c4:c0:27:df:e7:a3:97:70:18:33:55:d3:40:99: 4f:81:7b:ae:27:ea:2f:01:9b:93:02:2f:ac:c9:b5: 5e:c0:ea:c2:fe:41:f9:2b:66:72:23:d3:20:4c:95: 27:b7:89:4e:7b:3f:2c:f9:61:2b:05:e5:50:24:6e: ce:1f:86:94:f9:04:3b:c4:93:45:e2:68:28:eb:41: 51:5b:6a:34:09:f6:22:5d:53:21:c7:08:98:d1:60: ab:c7:da:e5:66:4d:bb:b0:84:f8:44:0c:13:cd:cf: f3:6d:09:f9:01:be:35:c3:7e:d0:01:3c:c2:e2:49: da:b6:50:91:1f:cc:8b:b6:ca:de:61:d2:80:d4:6b: 5c:b8:0e:fa:0e:8e:dc:00:b2:93:1c:37:e2:8c:bd: 1d:f2:91:7e:91:18:58:61:36:7e:e8:c6:0c:dc:bf: 38:a4:32:67:f2:06:92:42:a4:8c:50:96:eb:3f:9d: c3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FC:C7:AE:30:8E:0C:83:21:0F:6A:7D:C1:AF:73:5D:DB:E9:60:7C X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:fd:15:a3:5b:5b:d9:04:35:e6:32:8f:47:6f:b5:b2:e1:cf: 80:5b:b8:94:a1:d0:a3:74:c6:c3:df:69:ee:69:e9:c2:24:00: 2c:af:a0:31:e6:83:13:2c:8c:eb:cb:ba:d9:75:99:d7:29:99: fe:c2:d1:17:55:00:8f:12:d2:76:6a:24:a7:b7:2b:a6:6b:e7: a2:75:c5:64:2c:88:2b:6b:96:19:7e:e0:d5:91:2c:6f:df:34: 3a:89:ab:f8:10:b3:43:3f:1c:f1:b7:6f:3f:33:24:82:b9:4b: ec:40:f4:bf:33:cb:36:74:dd:b6:c9:43:fe:cd:83:af:77:b0: 61:74:b8:17:27:8b:3f:82:c2:55:35:86:e4:3b:17:2e:ee:75: 8c:c1:d4:9a:b0:6f:cf:ed:99:c0:9a:f4:4b:0a:4f:59:aa:00: b1:62:d2:72:79:45:0e:cb:db:fa:32:89:38:5e:c0:8d:0d:e7: f2:9f:26:24:8b:96:54:6b:04:95:1f:0e:c6:c5:d9:71:1f:60: 61:6d:ce:f9:2f:bf:e4:dd:83:ef:57:c7:46:10:35:a4:0f:43: 5b:71:e9:78:1c:a9:04:4e:71:48:77:8e:62:b5:c0:4e:9b:c7: 9a:0a:f6:7e:df:4e:fa:a1:b9:c9:aa:e4:2d:c6:b6:de:5d:35: 47:e1:9e:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjUwNjA4MTkwMDA4WhcNMjUwNjE1MTkwMDA4WjAYMRYwFAYD VQQDEw02ODQ1ZGRiOS0xOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Yih2aL9kJvuQ0YphUgIEo5FsFwpkJcupo2gaZ6s+ktV+5ncnsOT4xG5ZD2K YxajJ4wpsL+jDRQXts17pK8+S/W+oe7ZCOX2HJeexMAn3+ejl3AYM1XTQJlPgXuu J+ovAZuTAi+sybVewOrC/kH5K2ZyI9MgTJUnt4lOez8s+WErBeVQJG7OH4aU+QQ7 xJNF4mgo60FRW2o0CfYiXVMhxwiY0WCrx9rlZk27sIT4RAwTzc/zbQn5Ab41w37Q ATzC4knatlCRH8yLtsreYdKA1GtcuA76Do7cALKTHDfijL0d8pF+kRhYYTZ+6MYM 3L84pDJn8gaSQqSMUJbrP53DNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAb8x64w jgyDIQ9qfcGvc13b6WB8MB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDZGMi84QjhDNEREMjNGNDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dl MGxpZHRtVE9qdmFteGdERWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA/RWjW1vZBDXmMo9Hb7Wy4c+AW7iUodCjdMbD32nuaenCJAAsr6Ax 5oMTLIzry7rZdZnXKZn+wtEXVQCPEtJ2aiSntyuma+eidcVkLIgra5YZfuDVkSxv 3zQ6iav4ELNDPxzxt28/MySCuUvsQPS/M8s2dN22yUP+zYOvd7BhdLgXJ4s/gsJV NYbkOxcu7nWMwdSasG/P7ZnAmvRLCk9ZqgCxYtJyeUUOy9v6Mok4XsCNDefynyYk i5ZUawSVHw7GxdlxH2Bhbc75L7/k3YPvV8dGEDWkD0Nbcel4HKkETnFId45itcBO m8eaCvZ+3076obnJquQtxrbeXTVH4Z4r -----END CERTIFICATE-----Generated at Mon Jun 9 14:32:01 2025 by rpki-client