$ rpki-client -vvf rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft File: vQyzxI8wwfOrPzAa7N5qzAIutV8.mft (raw, json) Hash identifier: mtsrjnCDVSVK4nbtYrDoWbYMz/ZSeXzg5SNcCaD2Di0= Subject key identifier: 79:4C:CB:72:6A:59:08:74:44:97:F6:B0:DC:58:E2:C2:04:FF:30:62 Authority key identifier: BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F Certificate issuer: /CN=A9131940/serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft Manifest number: 067B Signing time: Thu 12 Jun 2025 21:57:00 +0000 Manifest this update: Thu 12 Jun 2025 21:57:00 +0000 Manifest next update: Thu 19 Jun 2025 21:57:00 +0000 Files and hashes: 1: vQyzxI8wwfOrPzAa7N5qzAIutV8.crl (hash: YR2DKwlj1Rr1Wi2pUi1h6GoUW3uWkCHtP1ZWwxWcZGQ=) 2: B7E5ADEE7B2111EB89BB2347C4F9AE02.roa (hash: XhXh7/hc+7Rhp2pgMR497HY0tEko0qYz35OtmtH7m/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131940, serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Validity Not Before: Jun 12 21:57:00 2025 GMT Not After : Jun 19 21:57:00 2025 GMT Subject: CN=684b4d2c-f0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:48:d4:ac:22:59:22:ab:08:a3:dd:d1:50: 34:a9:62:46:a0:c0:01:72:65:d0:5e:cf:25:9f:d0: 66:60:0e:d2:ba:7e:48:5c:1f:f9:24:81:f0:48:10: 03:df:c6:36:9e:3b:2b:5c:32:5e:f8:73:fb:e0:e3: f0:7b:56:a3:ba:07:4b:d8:64:c9:b5:a6:64:90:31: ca:4c:f1:e5:f7:58:ce:39:f7:5a:d7:d0:9e:97:5d: ad:f0:b1:86:f4:d6:18:ec:d9:e3:e6:e3:1e:b0:58: b2:7b:7c:62:e2:63:77:3f:4f:c3:d6:1d:b6:a7:15: 3b:4c:50:55:28:2a:b7:d0:e9:94:b9:5c:95:c6:e7: 28:cc:1a:0f:c8:14:e1:ca:54:a4:28:cd:01:a0:d7: 77:e9:53:b7:26:42:23:85:f2:00:f9:16:c6:e3:67: 4b:3d:fd:27:72:57:d3:af:15:83:8d:78:8f:4f:26: ad:35:76:38:a0:f6:98:32:d5:25:a6:00:9c:41:88: 62:54:c9:6e:49:56:7f:e3:81:05:5b:f9:d7:b3:21: d5:af:cd:47:a3:bb:13:4f:7d:73:ab:55:02:75:89: 21:10:b3:e1:cf:93:18:dd:79:a9:36:cd:c5:06:c8: e2:a4:51:b6:0f:e2:67:1d:c7:87:82:96:00:83:e2: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4C:CB:72:6A:59:08:74:44:97:F6:B0:DC:58:E2:C2:04:FF:30:62 X509v3 Authority Key Identifier: keyid:BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:26:21:e9:3b:59:c1:f2:d7:0e:93:d3:2c:59:eb:95:16:6a: 27:20:9c:e6:af:3e:8f:7c:51:ed:33:8a:58:b6:c8:a0:ab:e5: 07:a2:da:03:c8:51:e6:d5:50:43:d4:c2:58:89:fd:09:9e:37: 62:f6:8a:d3:4d:3f:45:ad:15:b5:6a:67:50:ea:31:b3:bc:52: 08:63:6c:cb:12:50:e3:84:b5:92:ad:68:6a:ef:7c:87:8b:8e: c4:d9:d7:0b:bd:8c:3a:7e:58:ef:75:32:1f:0d:26:13:f3:23: a3:c9:68:d5:b4:db:cb:d4:69:1d:60:40:98:84:3a:2f:13:55: 18:2b:65:cd:ce:15:f6:64:1f:42:52:06:39:84:67:47:b4:90: 94:88:e9:d4:64:34:1d:68:8a:36:34:2c:c0:36:6a:0d:07:03: ed:43:77:6a:46:35:78:fe:73:c6:97:ea:13:96:7f:c6:50:d8: 6e:23:40:08:56:0d:e6:ac:a1:7e:32:b6:5e:7b:1a:6d:73:ca: 7a:01:77:06:d2:27:b1:26:3d:0e:50:28:2e:d2:e1:c3:f8:15: 1c:1a:45:ee:d5:99:d9:ef:6d:37:a1:07:10:64:1b:39:e1:f8: d8:e4:94:79:19:4e:dd:80:13:b0:c5:38:e1:e3:14:98:8e:4b: 13:5e:d3:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5NDAxMTAvBgNVBAUTKEJEMENCM0M0OEYzMEMxRjNBQjNGMzAxQUVDREU2QUND MDIyRUI1NUYwHhcNMjUwNjEyMjE1NzAwWhcNMjUwNjE5MjE1NzAwWjAYMRYwFAYD VQQDEw02ODRiNGQyYy1mMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnBI1KwiWSKrCKPd0VA0qWJGoMABcmXQXs8ln9BmYA7Sun5IXB/5JIHwSBAD 38Y2njsrXDJe+HP74OPwe1ajugdL2GTJtaZkkDHKTPHl91jOOfda19Cel12t8LGG 9NYY7Nnj5uMesFiye3xi4mN3P0/D1h22pxU7TFBVKCq30OmUuVyVxucozBoPyBTh ylSkKM0BoNd36VO3JkIjhfIA+RbG42dLPf0nclfTrxWDjXiPTyatNXY4oPaYMtUl pgCcQYhiVMluSVZ/44EFW/nXsyHVr81Ho7sTT31zq1UCdYkhELPhz5MY3XmpNs3F BsjipFG2D+JnHceHgpYAg+J+DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlMy3Jq WQh0RJf2sNxY4sIE/zBiMB8GA1UdIwQYMBaAFL0Ms8SPMMHzqz8wGuzeaswCLrVf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTk0MC85Q0Y2MEJCMDdC MjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dmT3JQekFhN041cXpBSXV0 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZReXp4STh3d2ZPclB6QWE3TjVxekFJdXRWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTk0MC85Q0Y2MEJCMDdCMjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dm T3JQekFhN041cXpBSXV0VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCJiHpO1nB8tcOk9MsWeuVFmonIJzmrz6PfFHtM4pYtsigq+UHotoD yFHm1VBD1MJYif0Jnjdi9orTTT9FrRW1amdQ6jGzvFIIY2zLElDjhLWSrWhq73yH i47E2dcLvYw6fljvdTIfDSYT8yOjyWjVtNvL1GkdYECYhDovE1UYK2XNzhX2ZB9C UgY5hGdHtJCUiOnUZDQdaIo2NCzANmoNBwPtQ3dqRjV4/nPGl+oTln/GUNhuI0AI Vg3mrKF+MrZeexptc8p6AXcG0iexJj0OUCgu0uHD+BUcGkXu1ZnZ7203oQcQZBs5 4fjY5JR5GU7dgBOwxTjh4xSYjksTXtM1 -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:38 2025 by rpki-client