$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft File: 6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json) Hash identifier: RXwg5YqaE8foOfopinuBps0DoAekOCRYTd6mPGj7eJE= Subject key identifier: 17:0B:FE:47:43:03:5A:7E:05:80:E3:C7:61:A1:FA:0E:32:56:57:53 Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1 Certificate issuer: /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft Manifest number: 01E1 Signing time: Thu 19 Jun 2025 02:04:22 +0000 Manifest this update: Thu 19 Jun 2025 02:04:21 +0000 Manifest next update: Thu 26 Jun 2025 02:04:21 +0000 Files and hashes: 1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: dMzYIOiZgeWn/dZfLt/bglgDSBDUaA4wgfc8GnYnInE=) 2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: Cbvoa7LrgmapG4r7FY0TXw9PoDEC05XNI+g2GTtN22E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1 Validity Not Before: Jun 19 02:04:21 2025 GMT Not After : Jun 26 02:04:21 2025 GMT Subject: CN=68537025-f043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:c2:b8:b6:4e:1e:7f:79:84:cf:22:25:46: ac:03:1f:82:3f:8a:4a:22:66:6d:62:04:d2:dd:f4: 7d:50:71:8f:a4:62:a1:b0:35:1a:50:d9:d4:e8:dc: ac:56:56:a0:bc:b3:63:ba:c3:da:4b:ca:e3:89:2a: 74:ba:e8:cc:67:69:8b:ed:3f:06:0b:fa:a6:63:84: eb:58:59:07:51:ad:23:83:8c:40:81:cf:f9:59:ac: 99:1a:87:f5:52:65:69:15:7f:d9:dc:37:f3:23:fd: 7a:93:de:ee:6b:66:db:70:e7:04:aa:ff:58:e4:f3: a6:af:6e:f1:c0:f4:6d:65:30:35:b3:c8:2c:df:af: 52:77:2e:34:c8:66:5d:56:28:1f:44:11:d7:90:b3: 5e:d0:ac:57:2d:9c:38:5e:51:03:d4:40:24:1c:52: c8:a6:74:e7:f0:2a:87:8f:8c:a8:46:16:88:18:73: 17:3e:f9:44:02:22:59:3e:28:b2:d8:36:31:3e:79: 7b:a4:9b:e2:9b:91:4a:3a:f6:3a:0c:37:ab:17:1b: 46:a5:15:2f:43:0e:66:24:68:a0:9c:38:92:c0:78: ed:22:79:b6:1e:2e:41:e9:82:71:4a:0d:ff:90:d3: 96:0c:3c:f2:db:d0:64:3f:ea:7d:ce:0e:77:2e:e2: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0B:FE:47:43:03:5A:7E:05:80:E3:C7:61:A1:FA:0E:32:56:57:53 X509v3 Authority Key Identifier: keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:f4:8e:6a:41:bc:1d:94:17:74:fb:d9:60:32:ad:2c:03:17: 18:dc:52:e2:bc:fc:b9:af:d5:3e:1e:46:40:3a:b8:27:a8:99: c8:a8:d5:ed:63:fa:a3:34:dc:03:29:e9:e0:c9:a9:47:ff:93: 1c:b7:f5:ba:cb:bf:30:b1:54:9a:7f:d1:80:ca:ec:28:3b:65: 44:43:4d:3f:b9:46:e3:8f:0d:29:2a:2b:a4:a2:04:7b:64:5c: a8:d2:b6:79:4c:99:f9:69:59:a1:97:a2:e2:da:3b:70:e2:57: f9:19:35:56:b2:33:a2:65:e5:07:91:e1:af:c5:05:f8:80:ec: 16:3f:d4:e3:5a:3b:f8:02:86:40:5f:fd:27:06:ed:7f:48:c6: a3:ef:aa:0e:4e:4e:5e:52:11:d7:a5:a2:1c:ff:45:33:dc:49: 64:2d:38:13:29:e0:47:46:eb:6e:5c:a9:b9:c2:82:13:63:6b: 34:bd:e3:b3:43:48:eb:d1:47:56:e8:3e:43:4c:87:b7:4a:df: a1:1b:ef:33:fb:8e:46:71:68:36:48:d7:9d:4d:45:12:da:be: ba:bf:7c:87:da:8a:30:2d:93:73:4f:50:b3:46:84:12:54:54: 95:ac:35:c9:c2:45:b9:0a:76:9a:ed:07:48:f8:e1:de:66:8a: 54:15:dd:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEzNTkxMTAvBgNVBAUTKEU5NTc2RDMyQ0RBMTlCQjg2RjNDMTYyRUM5RkQzNkQz RkQyNUI5QzEwHhcNMjUwNjE5MDIwNDIxWhcNMjUwNjI2MDIwNDIxWjAYMRYwFAYD VQQDEw02ODUzNzAyNS1mMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBzCuLZOHn95hM8iJUasAx+CP4pKImZtYgTS3fR9UHGPpGKhsDUaUNnU6Nys VlagvLNjusPaS8rjiSp0uujMZ2mL7T8GC/qmY4TrWFkHUa0jg4xAgc/5WayZGof1 UmVpFX/Z3DfzI/16k97ua2bbcOcEqv9Y5POmr27xwPRtZTA1s8gs369Sdy40yGZd VigfRBHXkLNe0KxXLZw4XlED1EAkHFLIpnTn8CqHj4yoRhaIGHMXPvlEAiJZPiiy 2DYxPnl7pJvim5FKOvY6DDerFxtGpRUvQw5mJGignDiSwHjtInm2Hi5B6YJxSg3/ kNOWDDzy29BkP+p9zg53LuLlbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcL/kdD A1p+BYDjx2Gh+g4yVldTMB8GA1UdIwQYMBaAFOlXbTLNoZu4bzwWLsn9NtP9JbnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTM1OS9DQTlBMzRCNjY2 MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03aHZQQll1eWYwMjBfMGx1 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZWZHRNczJobTdodlBCWXV5ZjAyMF8wbHVjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTM1OS9DQTlBMzRCNjY2MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03 aHZQQll1eWYwMjBfMGx1Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW9I5qQbwdlBd0+9lgMq0sAxcY3FLivPy5r9U+HkZAOrgnqJnIqNXt Y/qjNNwDKengyalH/5Mct/W6y78wsVSaf9GAyuwoO2VEQ00/uUbjjw0pKiukogR7 ZFyo0rZ5TJn5aVmhl6Li2jtw4lf5GTVWsjOiZeUHkeGvxQX4gOwWP9TjWjv4AoZA X/0nBu1/SMaj76oOTk5eUhHXpaIc/0Uz3ElkLTgTKeBHRutuXKm5woITY2s0veOz Q0jr0UdW6D5DTIe3St+hG+8z+45GcWg2SNedTUUS2r66v3yH2oowLZNzT1CzRoQS VFSVrDXJwkW5Cnaa7QdI+OHeZopUFd3Z -----END CERTIFICATE-----Generated at Fri Jun 20 11:54:00 2025 by rpki-client