$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: Xk3+xL6rZh7VEcrQFbJQ+G6+56t0RFkZkL/ufq/YHW4= Subject key identifier: 79:DA:17:4C:A8:87:D6:C5:98:4D:2A:4B:2F:F0:E2:4B:B0:FA:E1:00 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 017A Signing time: Tue 03 Jun 2025 03:27:51 +0000 Manifest this update: Tue 03 Jun 2025 03:27:50 +0000 Manifest next update: Tue 10 Jun 2025 03:27:50 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: Lfd3rSVR/hpCt+EmMBlvddZow32bJkGzX84ADe7CjUQ=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: vdvXxO6hOVkfy87PEKE+BccPO1owcMEO3zlcdidAXcY=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XPJpmrYNcSNbm9TnuwsF2hc9Dluf13QgHRh9YOFG7n8=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: JXeJqxRjv6XY1o3PZOsZQUdvlF7VbU2rS+ppRqunUIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Jun 3 03:27:50 2025 GMT Not After : Jun 10 03:27:50 2025 GMT Subject: CN=683e6bb6-ea2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:52:b9:07:f4:3a:d1:82:d5:f8:3b:3d:e4:43: 53:88:14:58:76:d2:f3:32:da:0a:4b:a9:5b:d3:f9: 8e:ae:9e:1a:32:c4:9a:4d:a3:d8:a4:52:d0:70:c8: dc:99:ae:39:bd:0d:b1:7d:a7:3c:31:5e:57:33:a8: ae:77:c7:2b:7a:69:6e:fb:1c:13:63:fe:15:a4:6e: ca:4b:45:9a:62:c2:5b:11:32:fe:d2:ea:97:42:48: d9:9d:1f:d0:14:79:aa:13:0e:ba:80:63:b4:fe:d2: a1:18:9f:cb:d7:39:56:36:3e:88:15:d3:8e:0f:d2: e7:66:13:83:3d:01:f5:8a:b9:84:9f:cd:96:0e:f7: e0:0d:15:7f:d5:6a:9f:75:67:e6:08:0d:ee:66:66: 9b:f7:7d:1d:38:0d:3b:ed:f6:c5:90:d9:b6:22:ee: ec:df:b1:11:b6:fd:41:b0:37:96:37:ec:00:9b:76: a9:3c:d6:82:f0:66:36:c3:5e:46:e8:ee:e8:ed:2a: c9:c3:88:29:f9:36:f3:61:5f:ab:16:8a:c3:b4:c7: 41:ed:8c:20:b4:81:eb:56:58:8d:07:5f:d3:5a:34: 59:88:ee:9a:a7:07:23:3d:90:ba:f7:ff:37:b7:ae: 7a:70:ee:73:64:d9:fa:71:3d:d9:a9:73:77:88:53: 18:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DA:17:4C:A8:87:D6:C5:98:4D:2A:4B:2F:F0:E2:4B:B0:FA:E1:00 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:80:b1:a2:42:60:be:58:c1:cf:c9:ca:88:a5:39:b0:76:25: 6b:82:59:c7:22:af:b6:3a:47:00:0d:33:c6:03:2b:af:e5:db: 5c:df:03:f2:54:68:50:a8:d8:bb:08:d7:d8:5f:60:6e:98:02: 25:d8:33:19:8b:30:ac:e7:dc:c9:75:bd:a9:ec:7a:70:72:4b: 80:e4:91:9a:aa:8f:14:9b:df:e3:8d:e2:86:f8:fb:52:68:9e: f3:d3:95:23:77:5d:f0:c9:6f:f8:a9:89:f2:07:fb:47:e4:05: e5:2e:97:d3:06:b3:99:99:89:6a:e8:6d:28:9f:e1:24:00:89: 8b:84:87:0d:ee:7c:a7:96:86:f7:bf:0d:ce:3b:9d:46:8b:78: 7f:41:2e:de:f3:65:1d:0e:fc:47:f1:11:8a:0f:9f:27:9d:55: 71:b2:49:56:57:87:4f:06:1d:8e:7d:41:f4:47:3a:3f:3f:78: 9e:83:13:b8:c5:b2:37:c8:97:0f:1e:bf:4c:cf:b6:3a:91:62: 92:72:74:b5:4d:5e:cd:1e:1b:f0:43:4a:5b:65:95:ff:7b:f9: 8b:0d:fb:ff:c4:80:26:cd:d4:c2:36:be:fd:78:e3:b3:68:90: 83:35:d3:dd:87:d0:fd:f9:09:d6:d3:e4:ce:56:32:55:b4:a2: 19:84:44:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUwNjAzMDMyNzUwWhcNMjUwNjEwMDMyNzUwWjAYMRYwFAYD VQQDEw02ODNlNmJiNi1lYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01K5B/Q60YLV+Ds95ENTiBRYdtLzMtoKS6lb0/mOrp4aMsSaTaPYpFLQcMjc ma45vQ2xfac8MV5XM6iud8cremlu+xwTY/4VpG7KS0WaYsJbETL+0uqXQkjZnR/Q FHmqEw66gGO0/tKhGJ/L1zlWNj6IFdOOD9LnZhODPQH1irmEn82WDvfgDRV/1Wqf dWfmCA3uZmab930dOA077fbFkNm2Iu7s37ERtv1BsDeWN+wAm3apPNaC8GY2w15G 6O7o7SrJw4gp+TbzYV+rForDtMdB7YwgtIHrVliNB1/TWjRZiO6apwcjPZC69/83 t656cO5zZNn6cT3ZqXN3iFMYHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnaF0yo h9bFmE0qSy/w4kuw+uEAMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjgLGiQmC+WMHPycqIpTmwdiVrglnHIq+2OkcADTPGAyuv5dtc3wPy VGhQqNi7CNfYX2BumAIl2DMZizCs59zJdb2p7HpwckuA5JGaqo8Um9/jjeKG+PtS aJ7z05Ujd13wyW/4qYnyB/tH5AXlLpfTBrOZmYlq6G0on+EkAImLhIcN7nynlob3 vw3OO51Gi3h/QS7e82UdDvxH8RGKD58nnVVxsklWV4dPBh2OfUH0Rzo/P3iegxO4 xbI3yJcPHr9Mz7Y6kWKScnS1TV7NHhvwQ0pbZZX/e/mLDfv/xIAmzdTCNr79eOOz aJCDNdPdh9D9+QnW0+TOVjJVtKIZhERK -----END CERTIFICATE-----Generated at Wed Jun 4 00:18:59 2025 by rpki-client