$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: pP+xjY12E9OywtAkwxCabLTosQWKPz96Eg1kwPnMF5U= Subject key identifier: AD:EA:70:DC:45:D7:9F:38:A1:83:D3:A7:48:41:6E:42:30:6A:29:87 Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 0845 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 0833 Signing time: Sat 14 Jun 2025 20:34:08 +0000 Manifest this update: Sat 14 Jun 2025 20:34:08 +0000 Manifest next update: Sat 21 Jun 2025 20:34:08 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: Uo9la74taslfULoItMplFandGfJmT6gTk72mE/fbgpc=) 2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: p0dIujYYWiasSIWvw6oLscevhcZ90zAQp0NU1grDjpM=) 3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: p+z2UT/W5OYfrXw3co6VYs+yj2ELqUUcJwCs0uSGYiM=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 44y5fkFaBcGQTsnME/P81706WXBnFbq6HjZsUti9jmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Jun 14 20:34:08 2025 GMT Not After : Jun 21 20:34:08 2025 GMT Subject: CN=684ddcc0-df7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ec:a7:b3:c5:b1:5d:86:44:c1:96:c8:98:d4: 7e:3a:78:c2:74:49:a6:74:84:e4:f8:2e:cf:aa:09: 43:fd:57:d5:46:ac:44:2f:8b:a1:cc:67:e7:10:0b: 14:1c:f5:8e:30:07:f3:08:47:50:17:f5:c4:f9:c6: 1d:aa:6c:66:6a:3d:4f:90:cb:53:c6:5b:0c:0b:46: bc:88:f3:49:6c:21:43:4a:78:b0:d9:fc:29:96:65: 80:06:c6:11:ce:fa:f1:97:4e:4a:a2:b9:ca:eb:bb: 6d:10:19:d5:40:74:47:8b:3e:a5:fd:70:10:d9:5e: 22:18:e8:af:24:e0:a0:75:86:d3:4f:8d:48:b4:ff: 91:4d:68:c5:16:64:14:f3:8c:c6:ab:33:4a:c3:2c: b8:34:38:e8:cb:97:b5:61:14:9f:b8:f2:d8:92:5a: a9:8f:4b:4e:4e:6b:0b:b4:07:c7:74:81:92:cc:dc: bd:9f:b5:7a:71:b5:63:2d:25:97:a3:0f:03:5f:96: e2:b7:1a:55:f2:7a:4b:c8:72:a0:13:a3:b2:cf:ad: 49:08:75:cf:f1:f9:6d:be:20:0c:cd:3e:20:56:b9: 6d:14:14:6a:41:85:3e:60:c2:ff:e6:bd:cf:4b:28: e2:9d:5e:05:22:94:b8:45:b1:67:80:8a:ed:b4:80: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EA:70:DC:45:D7:9F:38:A1:83:D3:A7:48:41:6E:42:30:6A:29:87 X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c7:e2:82:9f:c6:28:82:1c:c9:65:0d:d3:ec:aa:c1:9f:c2: 53:e2:f1:ed:58:83:de:2b:af:af:55:9c:8d:63:99:02:ae:8a: 0f:ed:a9:10:f1:4d:7b:7a:91:f5:d8:2a:2f:35:14:ed:e8:b4: 99:0b:34:a8:b0:0b:dc:3a:b9:c9:78:bc:df:7d:3a:1a:87:59: 17:ca:b1:e6:50:92:66:08:07:5b:d8:e5:36:4e:64:24:5e:ea: 99:53:c2:a9:2d:d1:2c:67:a9:a2:50:b1:c5:40:75:f6:8e:4f: 97:1f:57:59:6c:5e:41:79:0d:cb:15:a3:cd:74:61:39:9e:2d: f8:e4:fe:1f:13:1b:37:21:f5:c2:b8:49:f4:e0:28:fb:44:0e: 97:10:9b:46:48:9b:63:9c:b5:4a:99:de:9f:5c:4e:80:85:75: 3d:10:de:b5:77:a3:5a:93:2d:ab:64:45:62:0b:64:94:d6:d8: 3a:19:64:6a:81:66:d6:ee:64:1b:10:a2:a4:f7:2c:bc:9e:12: 6c:0c:31:1e:08:1e:3e:1b:92:ec:c0:0f:e0:70:65:a7:19:ed: e7:fd:53:a2:67:c5:92:8d:51:85:0f:9a:3f:fe:9c:43:a4:10: d4:1f:ea:10:13:34:72:3c:6b:e6:06:b7:92:8f:1b:17:8c:41: e9:a3:c3:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjUwNjE0MjAzNDA4WhcNMjUwNjIxMjAzNDA4WjAYMRYwFAYD VQQDEw02ODRkZGNjMC1kZjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7eyns8WxXYZEwZbImNR+OnjCdEmmdITk+C7PqglD/VfVRqxEL4uhzGfnEAsU HPWOMAfzCEdQF/XE+cYdqmxmaj1PkMtTxlsMC0a8iPNJbCFDSniw2fwplmWABsYR zvrxl05KornK67ttEBnVQHRHiz6l/XAQ2V4iGOivJOCgdYbTT41ItP+RTWjFFmQU 84zGqzNKwyy4NDjoy5e1YRSfuPLYklqpj0tOTmsLtAfHdIGSzNy9n7V6cbVjLSWX ow8DX5bitxpV8npLyHKgE6Oyz61JCHXP8fltviAMzT4gVrltFBRqQYU+YML/5r3P SyjinV4FIpS4RbFngIrttID1lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3qcNxF 1584oYPTp0hBbkIwaimHMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGx+KCn8YoghzJZQ3T7KrBn8JT4vHtWIPeK6+vVZyNY5kCrooP7akQ 8U17epH12CovNRTt6LSZCzSosAvcOrnJeLzffToah1kXyrHmUJJmCAdb2OU2TmQk XuqZU8KpLdEsZ6miULHFQHX2jk+XH1dZbF5BeQ3LFaPNdGE5ni345P4fExs3IfXC uEn04Cj7RA6XEJtGSJtjnLVKmd6fXE6AhXU9EN61d6Naky2rZEViC2SU1tg6GWRq gWbW7mQbEKKk9yy8nhJsDDEeCB4+G5LswA/gcGWnGe3n/VOiZ8WSjVGFD5o//pxD pBDUH+oQEzRyPGvmBreSjxsXjEHpo8Nb -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:06 2025 by rpki-client