$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json) Hash identifier: dCs+D5TSLNth/WrL+/mF89+B6uCoBb1l0wFnZIiVY3o= Subject key identifier: 3C:40:4A:FC:00:F3:80:8A:A6:B8:DE:A6:CB:0F:58:58:C6:58:D4:13 Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft Manifest number: 0F Signing time: Sun 15 Jun 2025 07:08:08 +0000 Manifest this update: Sun 15 Jun 2025 07:08:08 +0000 Manifest next update: Sun 22 Jun 2025 07:08:08 +0000 Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: ZsmsfHpkEXddQdTaYntf772nHGcLDbNHn3F0cnVu5Aw=) 2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Validity Not Before: Jun 15 07:08:08 2025 GMT Not After : Jun 22 07:08:08 2025 GMT Subject: CN=684e7158-7e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:c0:b8:a9:9d:85:ea:47:21:95:a2:e9:72: eb:67:00:e2:71:90:17:7b:da:ba:fb:61:7f:e9:ea: 9c:65:dd:f6:51:0c:36:83:c5:57:ba:02:36:8e:a5: 52:75:52:8e:b1:57:83:01:3e:88:d1:8b:d0:19:11: 5e:7e:2b:ac:b2:f7:21:d9:55:bb:33:5a:dd:ad:d1: 44:c1:0d:40:a5:c9:c3:e6:ed:5f:f4:26:86:0b:b3: c0:d1:5b:23:df:bb:bb:24:47:6f:2e:2f:bc:57:6d: 8c:ca:c6:f8:a3:44:15:f9:7a:85:53:28:76:9f:28: f0:0e:03:b2:d2:1a:fa:06:c6:04:67:a6:44:2e:2e: 49:bc:20:99:07:c1:1e:4e:eb:1f:c1:4f:39:d5:a9: d3:89:fe:33:3d:39:61:82:a4:58:a7:c6:a9:6d:4c: b0:97:6d:5b:8b:49:95:f5:e4:f8:68:91:b9:cb:4b: 10:96:56:a8:83:3f:9b:9f:b2:6e:5e:ce:20:0f:dd: 68:be:f1:df:f9:cd:d8:ba:f9:7b:76:a6:36:8d:41: e0:8c:2c:81:2f:67:e8:94:70:99:0e:d4:01:35:be: 5a:27:df:cb:27:ca:5b:86:01:b6:71:e6:17:2f:b5: e9:43:01:f8:dc:76:ce:9c:13:3b:14:6b:30:77:97: 0a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:40:4A:FC:00:F3:80:8A:A6:B8:DE:A6:CB:0F:58:58:C6:58:D4:13 X509v3 Authority Key Identifier: keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:75:dc:6f:e7:6f:de:4e:f5:ac:12:ae:ba:3f:d1:be:5a:e1: f1:6c:1a:94:be:6d:96:0a:ea:92:05:87:dd:41:28:fa:da:b6: 42:91:7e:21:fb:3a:cf:4f:79:87:3f:56:7e:4c:38:e1:8a:6f: 73:5d:99:8d:ea:4a:e9:27:a8:5a:0c:00:97:fa:f7:aa:79:62: fe:c7:b5:1a:2c:23:0f:41:c3:ac:26:c0:d3:b2:d5:66:72:e1: 5a:0e:96:18:a5:8a:d2:5b:02:13:2c:80:92:6a:0f:9c:7d:e8: 68:4f:0f:44:a4:bb:5f:3d:dd:cb:53:21:cf:9b:fc:2a:ce:57: 0a:d6:3e:ce:aa:f4:eb:bf:cb:63:4f:63:dd:9c:4c:27:6b:a6: c1:ae:31:ed:1b:dd:64:e4:4b:31:61:b9:e7:f1:40:3f:35:8a: 17:2d:c8:15:72:07:cf:1f:c0:8f:e9:30:4f:26:cd:90:d6:ea: ab:68:45:9f:ef:5a:a8:b6:8d:83:12:0b:93:07:07:a5:e4:d6: 63:aa:ae:ca:16:26:94:79:ab:a9:5d:90:a5:fe:9c:ca:ff:9f: db:e0:0f:c2:17:85:cb:ad:cb:02:7f:d5:0b:47:ca:28:fb:c1: 62:b7:81:3c:22:ab:2d:df:72:7a:58:be:d6:44:b4:c1:db:3e: d7:a2:a4:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RUZGRDExMC8GA1UEBRMoRjZGMzg1REYxRkVBMjg1N0I2ODQzRjY2MzU2NTQzRkI3 NkJGMDhBNjAeFw0yNTA2MTUwNzA4MDhaFw0yNTA2MjIwNzA4MDhaMBgxFjAUBgNV BAMTDTY4NGU3MTU4LTdlMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFTcC4qZ2F6kchlaLpcutnAOJxkBd72rr7YX/p6pxl3fZRDDaDxVe6AjaOpVJ1 Uo6xV4MBPojRi9AZEV5+K6yy9yHZVbszWt2t0UTBDUClycPm7V/0JoYLs8DRWyPf u7skR28uL7xXbYzKxvijRBX5eoVTKHafKPAOA7LSGvoGxgRnpkQuLkm8IJkHwR5O 6x/BTznVqdOJ/jM9OWGCpFinxqltTLCXbVuLSZX15PhokbnLSxCWVqiDP5ufsm5e ziAP3Wi+8d/5zdi6+Xt2pjaNQeCMLIEvZ+iUcJkO1AE1vlon38snyluGAbZx5hcv telDAfjcds6cEzsUazB3lwp7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPEBK/ADz gIqmuN6myw9YWMZY1BMwHwYDVR0jBBgwFoAU9vOF3x/qKFe2hD9mNWVD+3a/CKYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFRkZEL0VBMTI5OTBFMzMy MjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0ZlMmhEOW1OV1ZELTNhX0NL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXZPRjN4X3FLRmUyaEQ5bU5XVkQtM2FfQ0tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF RkZEL0VBMTI5OTBFMzMyMjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0Zl MmhEOW1OV1ZELTNhX0NLWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAp13G/nb95O9awSrro/0b5a4fFsGpS+bZYK6pIFh91BKPratkKRfiH7 Os9PeYc/Vn5MOOGKb3NdmY3qSuknqFoMAJf696p5Yv7HtRosIw9Bw6wmwNOy1WZy 4VoOlhilitJbAhMsgJJqD5x96GhPD0Sku1893ctTIc+b/CrOVwrWPs6q9Ou/y2NP Y92cTCdrpsGuMe0b3WTkSzFhuefxQD81ihctyBVyB88fwI/pME8mzZDW6qtoRZ/v Wqi2jYMSC5MHB6Xk1mOqrsoWJpR5q6ldkKX+nMr/n9vgD8IXhcutywJ/1QtHyij7 wWK3gTwiqy3fcnpYvtZEtMHbPteipBc= -----END CERTIFICATE-----Generated at Sun Jun 15 10:04:05 2025 by rpki-client