$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft File: S0w6zHYgyo0mn3fC-L5soNohdic.mft (raw, json) Hash identifier: /kN2ukyrwYMaW1tq6rxra620usrOgQ7+KG51MOv1b0I= Subject key identifier: 44:32:B7:4C:08:93:8A:EB:81:2F:89:CA:66:0B:83:26:8B:16:F8:C1 Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 Certificate issuer: /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Certificate serial: 0425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft Manifest number: 041F Signing time: Sun 08 Jun 2025 23:59:31 +0000 Manifest this update: Sun 08 Jun 2025 23:59:30 +0000 Manifest next update: Sun 15 Jun 2025 23:59:30 +0000 Files and hashes: 1: S0w6zHYgyo0mn3fC-L5soNohdic.crl (hash: ttRc7m0lW4VcgK5jRIHfkUM3v0MklItplf2d/7EIP2k=) 2: AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (hash: Hj2ed/vfEs3kfitU1w0BAdoi0iJDtRaYFfE12UdPkyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 23:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CD5, serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Validity Not Before: Jun 8 23:59:30 2025 GMT Not After : Jun 15 23:59:30 2025 GMT Subject: CN=684623e3-c124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5d:ce:6e:cd:e0:88:6b:56:fb:cf:d7:47:fb: 7e:14:4c:93:8b:16:25:95:0e:82:8e:cd:a0:88:af: ef:c2:75:70:ed:fd:83:86:8e:4c:20:69:38:77:29: da:1a:c3:68:89:0c:14:c1:9e:40:f9:9d:95:d7:86: a2:18:e5:8f:fc:0f:a8:9e:07:68:08:5c:54:80:b4: 3b:5d:23:c3:5c:85:e5:11:05:ba:7f:1b:35:76:2f: f6:a1:51:39:6d:2d:83:79:4b:c0:d6:e7:33:04:4a: 46:e1:30:fb:ce:28:06:54:8b:7a:85:76:73:3d:41: 81:60:80:a0:94:d7:01:20:5b:39:23:c5:d3:f5:47: f2:ca:3d:a6:e7:f4:a2:95:22:e6:fa:f5:e3:1d:82: 4a:d1:39:5e:58:ee:7d:ca:65:c4:56:74:46:5c:57: bb:42:be:8c:7f:5c:68:e0:c9:8a:90:d3:1a:43:55: 16:66:2e:8f:65:8d:4d:c7:7f:29:dd:3e:c2:79:1c: 82:91:18:8b:92:a4:28:5f:db:c9:ca:50:44:c4:47: 44:8c:b9:16:e6:ec:a3:1b:1a:7d:b5:ae:2f:7c:e6: 91:41:ad:2a:e6:76:9d:b8:40:bd:23:14:9e:88:f0: 2f:80:35:2d:8c:b8:c2:ef:6e:57:99:44:99:65:06: 3b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:32:B7:4C:08:93:8A:EB:81:2F:89:CA:66:0B:83:26:8B:16:F8:C1 X509v3 Authority Key Identifier: keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:be:f4:65:59:17:0d:a7:24:2f:08:eb:28:6b:d8:9f:06:7c: 17:17:41:64:d0:1a:f5:b5:2e:c6:c2:49:ae:db:06:0b:a2:04: 6c:d8:fb:6d:9a:d6:96:7f:42:da:2f:1e:f7:e0:bf:f5:a6:2c: 6a:3e:0f:7e:a1:ba:d5:59:d7:6f:84:61:e7:d1:8d:83:54:c1: 86:55:39:c4:95:fc:45:2b:99:de:c4:2f:27:14:d9:7f:89:58: 7d:1e:0f:35:68:b1:8c:24:62:14:79:94:b4:66:fc:e1:d2:aa: e6:86:0f:8c:b0:fa:65:cf:38:aa:f2:6e:cc:42:6f:a4:09:30: bd:b5:f1:d2:36:05:1a:e3:f6:ce:53:2c:2f:b2:72:4b:6b:bb: 61:6e:38:64:72:54:8e:79:52:73:ee:25:5f:25:77:70:10:73: a4:2f:e0:9f:c3:ca:f2:5c:12:f5:87:fb:63:46:f9:8a:32:00: 51:cb:41:9a:25:b5:4e:41:a3:45:d8:58:6c:e2:b1:cc:c0:11: 97:ef:bb:c4:af:34:6d:2d:af:2d:cc:e1:35:fb:30:e5:23:46: a4:1d:dc:d3:97:42:8c:ee:3c:47:26:22:2d:6a:7f:d3:da:4a: 53:9e:1e:7f:7b:6d:c1:db:05:f3:e1:77:f8:f3:17:93:82:1c: 2a:90:f1:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDRDUxMTAvBgNVBAUTKDRCNEMzQUNDNzYyMENBOEQyNjlGNzdDMkY4QkU2Q0Ew REEyMTc2MjcwHhcNMjUwNjA4MjM1OTMwWhcNMjUwNjE1MjM1OTMwWjAYMRYwFAYD VQQDEw02ODQ2MjNlMy1jMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6F3Obs3giGtW+8/XR/t+FEyTixYllQ6Cjs2giK/vwnVw7f2Dho5MIGk4dyna GsNoiQwUwZ5A+Z2V14aiGOWP/A+ongdoCFxUgLQ7XSPDXIXlEQW6fxs1di/2oVE5 bS2DeUvA1uczBEpG4TD7zigGVIt6hXZzPUGBYICglNcBIFs5I8XT9Ufyyj2m5/Si lSLm+vXjHYJK0TleWO59ymXEVnRGXFe7Qr6Mf1xo4MmKkNMaQ1UWZi6PZY1Nx38p 3T7CeRyCkRiLkqQoX9vJylBExEdEjLkW5uyjGxp9ta4vfOaRQa0q5naduEC9IxSe iPAvgDUtjLjC725XmUSZZQY73QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQyt0wI k4rrgS+JymYLgyaLFvjBMB8GA1UdIwQYMBaAFEtMOsx2IMqNJp93wvi+bKDaIXYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNENS84MDRCMUU5MjZB REExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lvMG1uM2ZDLUw1c29Ob2hk aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwdzZ6SFlneW8wbW4zZkMtTDVzb05vaGRpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNENS84MDRCMUU5MjZBREExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lv MG1uM2ZDLUw1c29Ob2hkaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAevvRlWRcNpyQvCOsoa9ifBnwXF0Fk0Br1tS7Gwkmu2wYLogRs2Ptt mtaWf0LaLx734L/1pixqPg9+obrVWddvhGHn0Y2DVMGGVTnElfxFK5nexC8nFNl/ iVh9Hg81aLGMJGIUeZS0Zvzh0qrmhg+MsPplzziq8m7MQm+kCTC9tfHSNgUa4/bO UywvsnJLa7thbjhkclSOeVJz7iVfJXdwEHOkL+Cfw8ryXBL1h/tjRvmKMgBRy0Ga JbVOQaNF2Fhs4rHMwBGX77vErzRtLa8tzOE1+zDlI0akHdzTl0KM7jxHJiItan/T 2kpTnh5/e23B2wXz4Xf48xeTghwqkPF9 -----END CERTIFICATE-----Generated at Tue Jun 10 00:22:18 2025 by rpki-client