$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: nn+zenSFH5nXG9rDRncvhUCUdfdesabqSSZ9aXDNsKM= Subject key identifier: 33:8D:00:67:B5:75:ED:A7:AF:6C:FA:F2:92:83:DC:DA:2B:32:53:28 Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 01F1 Signing time: Fri 13 Jun 2025 01:37:41 +0000 Manifest this update: Fri 13 Jun 2025 01:37:41 +0000 Manifest next update: Fri 20 Jun 2025 01:37:40 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: leEh2bzMQ0ZEVPurc6mU7PEQ1YjqvCZJUYeCIbmuam4=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: uRdIMNdIglfdteGkf069/isP402avOmjbNb7y/lUw5k=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: N73Qn6fYVAUW9KUPlhOzNYAivlJPaPply2UAI5lOlWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Jun 13 01:37:41 2025 GMT Not After : Jun 20 01:37:40 2025 GMT Subject: CN=684b80e5-c9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:cb:19:f8:00:94:e7:c3:47:ff:29:ff:75: f6:ef:0f:70:65:8c:d6:63:b4:8a:fa:be:5b:1e:e3: bd:5c:a2:28:c3:7a:5a:23:3a:f8:17:0b:77:eb:e1: 9e:b2:65:45:1d:c6:5d:e3:fe:01:14:41:cc:c0:f5: c6:3c:5a:e2:d7:25:9f:94:6f:c4:df:37:01:36:0f: 0c:80:b4:70:ee:ac:2a:72:48:1a:f9:19:be:33:24: fd:19:2d:91:ff:2d:d9:2d:cd:1a:be:a0:ea:ba:6a: fd:6e:3f:f3:28:9b:15:ca:50:1d:49:85:fe:1a:72: e0:8e:c7:e0:1b:cc:40:c6:0a:d1:32:42:96:52:fa: 75:10:47:ff:4f:9b:0d:e8:82:1a:b5:ce:35:d7:08: c3:95:8a:38:8c:97:d2:e1:a1:70:29:59:50:ca:df: 6a:da:42:a5:a0:f8:01:20:6d:2f:93:5a:69:c1:c5: 37:76:14:e8:ff:fe:cd:59:90:c1:38:dc:a1:b1:54: 1b:72:ed:22:e3:1d:40:a4:8d:60:2b:3f:4c:6e:d8: bc:b1:5c:13:d3:5c:3a:51:46:5e:31:00:23:27:e6: b5:0c:81:a0:a0:2a:72:13:d3:45:b9:a6:10:3d:7c: ad:1f:5b:6f:e3:39:15:9b:34:33:b8:6b:87:8c:72: 9b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:00:67:B5:75:ED:A7:AF:6C:FA:F2:92:83:DC:DA:2B:32:53:28 X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:c7:1d:9c:68:f1:62:6d:4f:45:62:da:2a:29:88:a5:6f:73: 1f:81:6e:c0:ab:71:17:3a:84:64:c0:1d:7d:fb:dd:5a:c1:0a: 4b:e7:2d:bb:fe:ea:00:60:20:c1:35:94:19:20:e7:16:9b:82: ff:13:47:42:ba:bc:12:e2:bb:e8:57:ec:27:1d:40:05:86:44: f5:68:a4:91:e8:b1:12:66:8c:86:16:2c:3c:1f:8a:2f:46:6f: f0:d9:33:b1:8c:6d:03:0a:84:5b:d9:fd:9c:b2:d0:72:7b:11: 3b:0f:3f:90:38:e4:05:b9:b6:e5:3d:40:a3:cb:6b:d4:b5:d8: b3:6f:fa:0f:a3:15:a2:3a:30:c6:29:63:e7:60:3a:7b:50:cd: 00:2d:3f:ee:d3:0c:37:17:a3:47:30:ba:cf:76:25:71:b3:7d: e2:94:13:85:56:bd:77:d1:42:4b:18:d2:b2:a2:fe:ab:39:4c: a8:da:3c:f7:e8:b9:b3:20:38:6c:fd:37:93:c1:e2:76:de:e1: 41:ca:28:fd:ef:e5:2f:86:b6:9e:a6:1f:a2:d8:df:2c:a8:a2: 81:44:b5:05:f3:91:06:13:dc:27:f3:ea:dd:4a:89:bf:4a:84: d1:8b:f5:c0:93:e6:be:6c:f5:da:f1:e6:51:b1:e9:84:de:b1: cf:8c:8f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjUwNjEzMDEzNzQxWhcNMjUwNjIwMDEzNzQwWjAYMRYwFAYD VQQDEw02ODRiODBlNS1jOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xrLGfgAlOfDR/8p/3X27w9wZYzWY7SK+r5bHuO9XKIow3paIzr4Fwt36+Ge smVFHcZd4/4BFEHMwPXGPFri1yWflG/E3zcBNg8MgLRw7qwqckga+Rm+MyT9GS2R /y3ZLc0avqDqumr9bj/zKJsVylAdSYX+GnLgjsfgG8xAxgrRMkKWUvp1EEf/T5sN 6IIatc411wjDlYo4jJfS4aFwKVlQyt9q2kKloPgBIG0vk1ppwcU3dhTo//7NWZDB ONyhsVQbcu0i4x1ApI1gKz9Mbti8sVwT01w6UUZeMQAjJ+a1DIGgoCpyE9NFuaYQ PXytH1tv4zkVmzQzuGuHjHKbKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDONAGe1 de2nr2z68pKD3NorMlMoMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2xx2caPFibU9FYtoqKYilb3MfgW7Aq3EXOoRkwB19+91awQpL5y27 /uoAYCDBNZQZIOcWm4L/E0dCurwS4rvoV+wnHUAFhkT1aKSR6LESZoyGFiw8H4ov Rm/w2TOxjG0DCoRb2f2cstByexE7Dz+QOOQFubblPUCjy2vUtdizb/oPoxWiOjDG KWPnYDp7UM0ALT/u0ww3F6NHMLrPdiVxs33ilBOFVr130UJLGNKyov6rOUyo2jz3 6LmzIDhs/TeTweJ23uFByij97+Uvhraeph+i2N8sqKKBRLUF85EGE9wn8+rdSom/ SoTRi/XAk+a+bPXa8eZRsemE3rHPjI/0 -----END CERTIFICATE-----Generated at Sat Jun 14 18:59:55 2025 by rpki-client