$ rpki-client -vvf rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft File: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft (raw, json) Hash identifier: el584w6CR7tDWa49GEFWRSmrBGO8Yh9l7HEg5OqprGA= Subject key identifier: 99:B9:DC:E8:09:E2:3A:13:8A:CF:7D:88:8A:02:E9:5F:1B:F1:61:71 Authority key identifier: FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4 Certificate issuer: /CN=A9128F1E/serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft Manifest number: 32 Signing time: Thu 19 Jun 2025 07:01:55 +0000 Manifest this update: Thu 19 Jun 2025 07:01:55 +0000 Manifest next update: Thu 26 Jun 2025 07:01:55 +0000 Files and hashes: 1: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl (hash: sNtN4RPnCaJT0S9x0c/ERPAAaQSdrckIihnzKKebVXI=) 2: FC25E548019411F0A44E3285C4F9AE02.roa (hash: OOiuBnmO2r+s7R41Nu9crqcm0POtH9RoB3Tt79fatwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128F1E, serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4 Validity Not Before: Jun 19 07:01:55 2025 GMT Not After : Jun 26 07:01:55 2025 GMT Subject: CN=6853b5e3-6885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1f:79:f9:66:2f:e6:d5:d9:8f:00:4c:4a:40: b6:de:97:dc:0b:0a:d7:0b:f7:06:1d:4a:7c:26:ce: f5:86:23:e3:be:26:19:62:a6:6e:4a:9e:c2:38:93: ba:51:f5:d0:73:82:c7:80:e5:16:e7:b6:54:40:e2: 1e:15:ef:50:35:10:ba:c9:8a:7f:11:2d:65:63:ff: 49:8e:2f:47:8d:a8:40:23:bc:22:78:1a:d0:36:e7: 1f:50:b3:65:be:30:4f:5b:64:13:14:16:7f:18:17: fa:ba:91:44:1e:78:53:db:d9:98:9d:6e:ad:af:a4: 65:c1:c4:3d:39:f4:cb:66:ef:31:13:71:06:78:60: 46:9b:69:ec:88:4b:9f:62:5f:92:12:5e:ef:5e:ed: 98:3a:6f:1e:30:71:44:5e:7b:1a:fb:eb:5d:8d:6d: 3c:ba:51:72:ec:39:36:74:35:09:c6:41:f5:29:c8: 50:07:05:f4:27:19:0a:3f:6d:cb:aa:dc:4d:56:fd: 08:03:d0:d1:16:8f:1b:ba:c9:17:19:81:b0:79:54: bc:b0:6e:b5:a9:2f:b0:3c:30:19:c8:fc:c5:19:d2: d7:f4:a5:5e:7b:24:8a:2a:60:f8:9a:34:1a:57:58: 7d:f0:ef:a9:fe:cc:cc:4e:36:26:78:94:39:f5:43: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B9:DC:E8:09:E2:3A:13:8A:CF:7D:88:8A:02:E9:5F:1B:F1:61:71 X509v3 Authority Key Identifier: keyid:FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:20:e3:d2:76:20:f0:64:3e:96:73:ff:61:3f:12:2d:f6:4c: b2:3d:03:08:6a:ca:1e:8a:b2:fc:bf:f1:97:61:4d:67:dc:c2: 58:43:ef:43:8c:82:7b:ea:66:77:de:3b:10:f4:39:52:b2:14: 1b:02:ac:db:50:dc:46:0d:49:78:7a:db:cb:9e:e3:7c:9d:bd: 96:a0:bd:fe:5d:87:52:f9:fe:f7:bc:19:ca:ae:76:8e:da:13: b3:09:46:15:f0:bc:bb:74:2a:d8:b3:56:01:87:0b:e1:f2:1c: 73:d5:8d:f5:1f:0f:c1:2a:ae:fa:9f:0e:74:74:05:12:b3:e8: 1c:7a:17:72:36:b6:07:69:54:63:d5:c7:4c:3e:bf:14:a6:23: e5:b1:3f:9a:f0:66:b5:76:d9:ad:d7:33:57:a6:20:bc:0f:78: c8:0b:53:19:d8:60:07:33:ba:26:70:25:d9:62:f5:3b:09:ae: 07:cd:92:5e:9e:3c:c5:13:8c:c2:23:a8:85:03:33:11:87:ad: 11:c0:d4:c4:da:46:ce:bd:2e:46:ae:a7:cb:e9:04:3d:c3:32: cf:af:be:be:88:67:1e:c4:10:61:78:80:d2:a3:15:49:2e:e8: d9:82:38:83:bc:4f:2c:ed:68:08:9e:60:e8:25:a9:c3:7f:4e: 5a:04:ee:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OEYxRTExMC8GA1UEBRMoRkVFQjcyQjQ3RTBGQkQ5RUIyNjgzRTI1OUZBNjQzNkJB NTY1MjNENDAeFw0yNTA2MTkwNzAxNTVaFw0yNTA2MjYwNzAxNTVaMBgxFjAUBgNV BAMTDTY4NTNiNWUzLTY4ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtH3n5Zi/m1dmPAExKQLbel9wLCtcL9wYdSnwmzvWGI+O+Jhlipm5KnsI4k7pR 9dBzgseA5RbntlRA4h4V71A1ELrJin8RLWVj/0mOL0eNqEAjvCJ4GtA25x9Qs2W+ ME9bZBMUFn8YF/q6kUQeeFPb2Zidbq2vpGXBxD059Mtm7zETcQZ4YEabaeyIS59i X5ISXu9e7Zg6bx4wcUReexr7612NbTy6UXLsOTZ0NQnGQfUpyFAHBfQnGQo/bcuq 3E1W/QgD0NEWjxu6yRcZgbB5VLywbrWpL7A8MBnI/MUZ0tf0pV57JIoqYPiaNBpX WH3w76n+zMxONiZ4lDn1QxTHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmbnc6Ani OhOKz32IigLpXxvxYXEwHwYDVR0jBBgwFoAU/utytH4PvZ6yaD4ln6ZDa6VlI9Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4RjFFLzQ0QjgxQjIwMDE5 MzExRjA4OUQ0OTI4MkM0RjlBRTAyL191dHl0SDRQdlo2eWFENGxuNlpEYTZWbEk5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3V0eXRINFB2WjZ5YUQ0bG42WkRhNlZsSTlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 RjFFLzQ0QjgxQjIwMDE5MzExRjA4OUQ0OTI4MkM0RjlBRTAyL191dHl0SDRQdlo2 eWFENGxuNlpEYTZWbEk5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHsg49J2IPBkPpZz/2E/Ei32TLI9Awhqyh6Ksvy/8ZdhTWfcwlhD70OM gnvqZnfeOxD0OVKyFBsCrNtQ3EYNSXh628ue43ydvZagvf5dh1L5/ve8Gcqudo7a E7MJRhXwvLt0KtizVgGHC+HyHHPVjfUfD8EqrvqfDnR0BRKz6Bx6F3I2tgdpVGPV x0w+vxSmI+WxP5rwZrV22a3XM1emILwPeMgLUxnYYAczuiZwJdli9TsJrgfNkl6e PMUTjMIjqIUDMxGHrRHA1MTaRs69Lkaup8vpBD3DMs+vvr6IZx7EEGF4gNKjFUku 6NmCOIO8TyztaAieYOglqcN/TloE7nc= -----END CERTIFICATE-----Generated at Fri Jun 20 08:17:55 2025 by rpki-client