$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: V3A6WjbANND9BLBgrP/GxZp47Yc1wJB1meqdBvNb/vk= Subject key identifier: D4:4B:39:F3:FC:28:75:1E:A1:DB:AC:31:4E:BD:12:07:D1:3F:7D:E1 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 01DA Signing time: Tue 17 Jun 2025 01:58:57 +0000 Manifest this update: Tue 17 Jun 2025 01:58:56 +0000 Manifest next update: Tue 24 Jun 2025 01:58:56 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: v37cx7eGpHrtQI3ku7LA5FB4VhSCmYymiSMsAECbHtM=) 2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=) 3: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=) 4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=) 5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Jun 17 01:58:56 2025 GMT Not After : Jun 24 01:58:56 2025 GMT Subject: CN=6850cbe0-5206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:a9:25:23:0b:37:ec:cb:48:4d:a7:ca:25: d1:02:be:98:c0:0b:a3:ab:7c:33:85:f1:b6:81:ee: d4:03:aa:d5:3c:48:4e:dd:6f:38:64:a4:5e:cf:99: 13:7a:9f:96:a2:d4:99:53:b2:42:0a:2a:54:2f:3c: bf:21:85:a2:ae:12:fd:f3:5e:63:fc:ee:4c:b3:1f: fc:e1:6d:41:d8:98:41:81:cb:f9:21:a7:3e:3e:57: 76:5b:f3:6d:5a:16:5a:22:21:7a:d7:85:83:a4:04: 12:2c:62:bc:a8:6e:9e:be:ef:e8:69:07:e1:ca:fe: 5e:c1:7f:39:0a:6d:57:52:a2:e0:6b:85:5d:ea:c0: 6e:50:38:9a:43:f3:11:2b:b8:e4:e3:63:90:0d:ab: 25:8e:db:cb:93:f9:b8:fb:9b:e8:97:b6:af:a4:4c: d0:8a:4d:bf:87:ba:72:be:df:dc:30:89:3a:8a:a8: 22:10:ec:50:a4:68:92:31:61:32:f3:b4:c3:37:57: f9:29:19:17:45:8c:c0:db:d0:12:fe:ed:5f:6e:a1: 20:b6:61:c8:79:8d:d5:b4:ce:c0:09:c7:38:a4:48: 15:32:20:4e:49:4b:19:6c:a7:b7:5b:c3:be:54:01: 3f:af:9a:89:03:50:c1:fd:08:7a:ec:a8:11:aa:d8: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4B:39:F3:FC:28:75:1E:A1:DB:AC:31:4E:BD:12:07:D1:3F:7D:E1 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c1:50:98:a9:2c:3d:61:1d:a0:4a:4f:6b:70:01:d8:2f:30: 63:c3:04:36:cb:3b:7f:f1:94:2a:2a:62:e4:12:1e:b0:1a:1b: 0c:c4:4f:7f:d3:7d:6c:33:4d:57:d4:74:25:75:2d:9b:16:11: 0c:7f:73:84:9c:32:a3:44:61:84:a6:65:38:64:81:47:62:10: 93:26:01:23:53:da:4b:67:86:c3:51:98:f7:11:24:ed:a0:75: 46:58:90:d5:b2:30:b5:db:a2:c4:11:82:62:09:5f:f2:12:16: 85:a6:74:26:8e:e8:76:62:1d:b9:6c:09:b2:d3:87:14:60:ab: 9b:a9:c6:1c:f1:50:c4:87:30:de:ba:48:ec:4e:7a:53:7d:0b: 28:d5:c3:db:19:04:74:8f:f6:1e:1b:31:5b:0b:d5:4b:61:59: 45:09:0c:c7:83:72:b0:4c:0e:21:9f:fd:48:ef:b6:12:f4:07: da:03:e4:8b:72:b5:23:e8:6f:ed:87:8a:b1:97:5c:da:c7:bc: 34:ff:7f:12:02:c2:60:10:fc:36:3b:28:2b:2f:ca:12:70:f7: 63:02:49:3c:7f:2e:c7:53:c3:2c:f4:7d:11:8f:a3:b6:88:5f: 40:42:d8:ad:80:51:fd:95:c8:6d:e5:f9:39:e3:b2:a9:46:ce: d7:c5:2b:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUwNjE3MDE1ODU2WhcNMjUwNjI0MDE1ODU2WjAYMRYwFAYD VQQDEw02ODUwY2JlMC01MjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUypJSMLN+zLSE2nyiXRAr6YwAujq3wzhfG2ge7UA6rVPEhO3W84ZKRez5kT ep+WotSZU7JCCipULzy/IYWirhL9815j/O5Msx/84W1B2JhBgcv5Iac+Pld2W/Nt WhZaIiF614WDpAQSLGK8qG6evu/oaQfhyv5ewX85Cm1XUqLga4Vd6sBuUDiaQ/MR K7jk42OQDasljtvLk/m4+5vol7avpEzQik2/h7pyvt/cMIk6iqgiEOxQpGiSMWEy 87TDN1f5KRkXRYzA29AS/u1fbqEgtmHIeY3VtM7ACcc4pEgVMiBOSUsZbKe3W8O+ VAE/r5qJA1DB/Qh67KgRqthiEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRLOfP8 KHUeodusMU69EgfRP33hMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4wVCYqSw9YR2gSk9rcAHYLzBjwwQ2yzt/8ZQqKmLkEh6wGhsMxE9/ 031sM01X1HQldS2bFhEMf3OEnDKjRGGEpmU4ZIFHYhCTJgEjU9pLZ4bDUZj3ESTt oHVGWJDVsjC126LEEYJiCV/yEhaFpnQmjuh2Yh25bAmy04cUYKubqcYc8VDEhzDe ukjsTnpTfQso1cPbGQR0j/YeGzFbC9VLYVlFCQzHg3KwTA4hn/1I77YS9AfaA+SL crUj6G/th4qxl1zax7w0/38SAsJgEPw2OygrL8oScPdjAkk8fy7HU8Ms9H0Rj6O2 iF9AQtitgFH9lcht5fk547KpRs7XxSum -----END CERTIFICATE-----Generated at Wed Jun 18 16:35:32 2025 by rpki-client