$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft File: DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json) Hash identifier: oDxDc+5ajeJxSkQwiGAYsc13YEcmEtKpQjBJ9b9YiaA= Subject key identifier: 1A:63:E1:4F:0F:5E:BF:E8:3C:95:F9:CE:12:E7:B4:33:82:FD:2E:ED Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB Certificate issuer: /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Certificate serial: 054A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft Manifest number: 0546 Signing time: Sat 14 Jun 2025 23:09:08 +0000 Manifest this update: Sat 14 Jun 2025 23:09:08 +0000 Manifest next update: Sat 21 Jun 2025 23:09:08 +0000 Files and hashes: 1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: LDG4lDiTPoyidk6icOk29MduuUd1VZs9hJWvvr5hbCM=) 2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: 5ctxZQMCBBanRgJSVxk2lsTuco//bC5Osf3fvZWriiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C3E, serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Validity Not Before: Jun 14 23:09:08 2025 GMT Not After : Jun 21 23:09:08 2025 GMT Subject: CN=684e0114-cb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:cb:8d:56:36:8f:61:be:02:8c:24:7f:d3: 99:6c:66:f9:7b:e1:9e:7b:66:a7:ec:5d:83:65:06: df:a4:d1:db:85:42:b8:12:10:61:b3:20:19:a8:9a: 66:ef:dd:14:ee:7a:26:b8:32:ee:fa:02:53:b5:49: 8e:e1:3d:1f:dc:31:e2:60:82:47:51:fa:a7:ca:02: 3d:1b:52:83:b1:5e:f1:c0:5b:6d:c1:1b:6a:1e:69: ab:34:0c:11:20:14:ea:f5:eb:52:cb:03:20:9d:29: 2b:ac:1c:95:46:2e:28:1d:58:4a:63:f9:3e:90:e6: 2e:aa:a1:d5:c8:31:23:41:67:0d:94:33:c2:a7:2d: 8b:77:85:f3:03:f6:f0:e7:2e:9f:41:f4:1a:47:73: e3:1e:7c:3c:5f:5a:ec:2e:99:b5:77:35:2a:da:f6: 01:ea:3a:2f:01:d4:9b:9e:6b:7e:5c:ed:a6:a3:b6: 74:b6:3f:3d:64:8d:6e:54:90:0b:8f:2c:d3:90:e5: 5e:1b:6d:51:eb:ed:bf:16:6c:7d:43:a1:c3:4c:11: f7:a1:55:4f:75:79:c9:fb:b8:02:77:bb:6f:6e:ce: 4a:c8:98:d4:35:54:c9:5d:3b:81:04:cf:1c:9e:72: 8f:87:b7:74:19:fa:a9:1c:84:ff:aa:e2:ee:2c:8f: 70:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:63:E1:4F:0F:5E:BF:E8:3C:95:F9:CE:12:E7:B4:33:82:FD:2E:ED X509v3 Authority Key Identifier: keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ee:97:f9:b6:12:b7:06:5e:6e:9d:dc:4c:82:8e:3f:a7:b4: 7d:32:f6:a4:51:1b:1c:30:8d:4b:37:3a:ab:ea:89:7f:a2:f7: 0a:0d:7b:83:34:c3:98:d9:05:ca:84:ac:35:a4:2e:a1:21:0f: df:27:82:96:63:eb:e4:ff:44:26:3f:b4:2d:cb:07:c2:17:61: f8:f5:02:cb:9c:31:f8:75:b7:fe:af:42:f4:76:9b:43:e1:55: fd:f7:98:b4:82:bd:32:e5:f8:8d:15:53:17:65:b2:e5:fa:6b: 23:57:cf:7a:70:4a:86:1a:95:3e:2f:53:94:ef:4e:bc:c8:89: 5f:26:7d:55:35:ad:5e:88:1f:f2:c1:5b:8e:73:06:e9:50:5a: a1:1b:04:9d:b3:40:24:63:10:0c:52:dc:3d:30:8d:b8:37:44: 79:01:a5:7e:f5:4f:68:02:e8:a8:f6:b6:4f:f0:07:40:1e:0c: 97:95:0d:2f:05:aa:47:ce:89:07:8e:86:85:a2:89:e7:9a:b0: ff:0e:e8:a1:03:1b:b6:84:99:7e:1b:70:77:d3:37:0e:e2:45: 17:22:76:57:0a:aa:ee:f8:5b:01:5e:3e:2f:6a:63:8f:c2:8f: 81:32:b2:47:d4:67:96:b1:11:9f:34:0c:8b:01:40:ec:71:48: 7a:af:ae:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDM0UxMTAvBgNVBAUTKDBDMEIxREQ1RjZBQjY0NEM1NzA3ODFBNDI5RTQ0ODA1 MDIxOEU5RUIwHhcNMjUwNjE0MjMwOTA4WhcNMjUwNjIxMjMwOTA4WjAYMRYwFAYD VQQDEw02ODRlMDExNC1jYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4J/LjVY2j2G+Aowkf9OZbGb5e+Gee2an7F2DZQbfpNHbhUK4EhBhsyAZqJpm 790U7nomuDLu+gJTtUmO4T0f3DHiYIJHUfqnygI9G1KDsV7xwFttwRtqHmmrNAwR IBTq9etSywMgnSkrrByVRi4oHVhKY/k+kOYuqqHVyDEjQWcNlDPCpy2Ld4XzA/bw 5y6fQfQaR3PjHnw8X1rsLpm1dzUq2vYB6jovAdSbnmt+XO2mo7Z0tj89ZI1uVJAL jyzTkOVeG21R6+2/Fmx9Q6HDTBH3oVVPdXnJ+7gCd7tvbs5KyJjUNVTJXTuBBM8c nnKPh7d0GfqpHIT/quLuLI9wzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpj4U8P Xr/oPJX5zhLntDOC/S7tMB8GA1UdIwQYMBaAFAwLHdX2q2RMVweBpCnkSAUCGOnr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEMzRS9BODA3QzFDOEY0 MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpFeFhCNEdrS2VSSUJRSVk2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBc2QxZmFyWkV4WEI0R2tLZVJJQlFJWTZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEMzRS9BODA3QzFDOEY0MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpF eFhCNEdrS2VSSUJRSVk2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr7pf5thK3Bl5undxMgo4/p7R9MvakURscMI1LNzqr6ol/ovcKDXuD NMOY2QXKhKw1pC6hIQ/fJ4KWY+vk/0QmP7QtywfCF2H49QLLnDH4dbf+r0L0dptD 4VX995i0gr0y5fiNFVMXZbLl+msjV896cEqGGpU+L1OU7068yIlfJn1VNa1eiB/y wVuOcwbpUFqhGwSds0AkYxAMUtw9MI24N0R5AaV+9U9oAuio9rZP8AdAHgyXlQ0v BapHzokHjoaFoonnmrD/DuihAxu2hJl+G3B30zcO4kUXInZXCqru+FsBXj4vamOP wo+BMrJH1GeWsRGfNAyLAUDscUh6r64K -----END CERTIFICATE-----Generated at Sun Jun 15 07:21:30 2025 by rpki-client