$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: ZdOY9HxU9MLS+PhAfko3RA3GRHMKW9yAJA5aUXXXVKg= Subject key identifier: 08:6B:0E:95:7C:92:01:81:36:3A:05:E9:FE:4F:FE:54:62:4B:E4:95 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0BED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0BDC Signing time: Fri 20 Jun 2025 18:47:10 +0000 Manifest this update: Fri 20 Jun 2025 18:47:10 +0000 Manifest next update: Fri 27 Jun 2025 18:47:10 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: TQfseTISU3akjW2UIkWUZ8yrjsa3sJnFUY6WOd6A2LQ=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: jHX60u9ArdYh7GwRrx6uREAMvSVK0+kOgD9fYQ7pbX8=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: vAnu7lUAwo4HH4C945cyzFyVOcsgKeAbmVZGK6iXYjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 18:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3053 (0xbed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Jun 20 18:47:10 2025 GMT Not After : Jun 27 18:47:10 2025 GMT Subject: CN=6855acae-89f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:67:dc:a6:ba:65:36:f1:f5:c8:41:e9:35:11: bc:6e:a5:57:93:22:7d:54:1f:27:47:4b:d4:7b:ed: 67:5b:ce:e8:fb:a5:b9:61:61:09:2c:60:fe:b7:d0: c1:40:27:f9:27:e6:da:40:8a:00:28:3a:53:82:9b: f6:39:9c:90:c6:5e:8b:65:f1:54:29:e4:92:8e:ba: 91:18:86:94:b6:3b:96:15:8d:b3:4d:20:af:3b:a1: 3b:df:bb:61:57:1e:6c:d1:6c:4b:2c:33:80:a6:ad: 38:91:f0:50:49:ac:aa:7a:dd:a0:27:55:7c:0f:f0: b5:3b:a2:ab:b9:86:42:94:ce:a6:7d:85:56:59:71: e1:a6:30:08:3a:50:c9:c3:39:1d:f4:e9:18:91:9c: 8e:c5:8c:d4:e1:14:1d:b1:8d:23:6c:4e:95:f6:e4: d8:be:34:e9:25:76:42:0a:51:51:1f:56:0c:e0:25: 49:28:37:77:67:b9:58:22:f4:f7:d5:cf:65:a4:86: d2:f2:14:c9:a6:89:e7:2f:f2:0d:53:db:7d:64:6b: 5d:fa:4a:7d:9f:ff:2b:43:ef:dd:70:a5:b6:16:b9: 11:bc:52:70:20:99:01:1b:2e:14:94:df:b4:ae:8d: 26:fa:b5:21:4c:3b:36:b0:7e:6f:21:3b:1e:8c:ca: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6B:0E:95:7C:92:01:81:36:3A:05:E9:FE:4F:FE:54:62:4B:E4:95 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:87:19:2e:cc:ed:1e:0d:cf:1e:67:e3:0d:e1:d5:2f:75:a8: 47:09:a0:96:e0:83:dd:c2:8f:a1:19:85:60:3a:9a:a4:34:1c: 61:81:59:04:08:81:46:71:df:db:d7:c2:e0:6c:ae:4d:88:fb: e2:df:f1:f3:fa:04:05:57:b8:3d:fc:c0:a1:fd:1b:67:a5:15: 72:d9:04:b1:e9:da:cb:e8:25:5c:52:43:47:2c:8f:72:1e:1b: 13:31:5d:5e:f8:6c:47:b8:06:33:54:06:08:20:6f:9d:1c:b5: 9e:10:9c:65:70:ea:69:ed:ba:9c:ee:ce:70:2d:6b:aa:54:3b: cf:55:ed:e6:c9:5b:69:55:0a:df:16:ee:dd:06:74:11:c2:7e: 66:e6:82:e3:2a:df:29:12:02:f6:00:f7:26:11:a5:3d:70:9d: e8:1d:3f:42:dd:24:fe:b9:db:1b:0c:8a:8f:5a:9c:74:3e:bd: 18:84:51:77:c4:29:57:0f:1d:a3:c6:32:2a:62:79:ef:c0:02: 87:6b:10:32:ec:fb:84:6d:63:f1:36:95:6c:c7:a3:20:61:3e: 14:8d:8b:38:66:60:f5:9e:f6:7f:40:58:89:02:94:8f:5b:32: 86:75:84:b5:1b:f4:e3:82:0a:d7:b4:0a:45:7b:4c:b6:32:fe: d8:05:c0:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwNjIwMTg0NzEwWhcNMjUwNjI3MTg0NzEwWjAYMRYwFAYD VQQDEw02ODU1YWNhZS04OWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/mfcprplNvH1yEHpNRG8bqVXkyJ9VB8nR0vUe+1nW87o+6W5YWEJLGD+t9DB QCf5J+baQIoAKDpTgpv2OZyQxl6LZfFUKeSSjrqRGIaUtjuWFY2zTSCvO6E737th Vx5s0WxLLDOApq04kfBQSayqet2gJ1V8D/C1O6KruYZClM6mfYVWWXHhpjAIOlDJ wzkd9OkYkZyOxYzU4RQdsY0jbE6V9uTYvjTpJXZCClFRH1YM4CVJKDd3Z7lYIvT3 1c9lpIbS8hTJponnL/INU9t9ZGtd+kp9n/8rQ+/dcKW2FrkRvFJwIJkBGy4UlN+0 ro0m+rUhTDs2sH5vITsejMqqVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhrDpV8 kgGBNjoF6f5P/lRiS+SVMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBshxkuzO0eDc8eZ+MN4dUvdahHCaCW4IPdwo+hGYVgOpqkNBxhgVkE CIFGcd/b18LgbK5NiPvi3/Hz+gQFV7g9/MCh/RtnpRVy2QSx6drL6CVcUkNHLI9y HhsTMV1e+GxHuAYzVAYIIG+dHLWeEJxlcOpp7bqc7s5wLWuqVDvPVe3myVtpVQrf Fu7dBnQRwn5m5oLjKt8pEgL2APcmEaU9cJ3oHT9C3ST+udsbDIqPWpx0Pr0YhFF3 xClXDx2jxjIqYnnvwAKHaxAy7PuEbWPxNpVsx6MgYT4UjYs4ZmD1nvZ/QFiJApSP WzKGdYS1G/TjggrXtApFe0y2Mv7YBcAu -----END CERTIFICATE-----Generated at Sun Jun 22 17:17:39 2025 by rpki-client