$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: 66bqM1+z3q5Sy7qLxc910RgKg09kOE9fItCZcfZ4knQ= Subject key identifier: 0A:28:37:0F:31:D2:A5:D8:06:3A:0C:E2:DF:32:B9:2A:0F:FA:15:FE Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 01CC Signing time: Sun 15 Jun 2025 02:17:11 +0000 Manifest this update: Sun 15 Jun 2025 02:17:10 +0000 Manifest next update: Sun 22 Jun 2025 02:17:10 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: Ul1Q9c+bvUPbLpC9woe2zxsLa9fDrUo/rqlMQC2edw0=) 2: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: V96z6p8lv3v3DbzjaaBJkTxNIi5ZsjxmKx2jknu2pAQ=) 3: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: SvTUBZIdDCre/uFlRBRgrIMaL1ITzuHCA8WYxGN/4tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: Jun 15 02:17:10 2025 GMT Not After : Jun 22 02:17:10 2025 GMT Subject: CN=684e2d27-0806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:ff:3c:2f:d8:05:3b:70:f8:5a:1c:8e:e4: b2:28:25:95:23:78:c4:2a:bc:35:73:5e:bd:1e:b6: ea:9e:2f:df:3b:46:4c:e6:07:75:ab:7e:de:2c:4d: 7a:17:02:c0:81:69:7f:2a:17:e0:ac:ca:a1:f2:72: ec:90:64:f3:f8:07:1b:12:31:a1:b1:3d:4d:12:9b: 99:d4:d4:bd:5a:21:1d:76:9c:b1:a9:bc:09:9c:fe: 6f:9e:53:a2:40:25:a3:fd:3f:29:3d:33:78:ea:73: e8:0e:62:c1:14:48:1e:73:62:92:f6:43:a1:76:11: cf:ea:83:25:7d:69:ab:8d:29:13:07:b0:4f:ca:e0: 13:02:e6:c8:91:04:77:b7:4d:44:0d:5b:ae:f1:3d: 29:0b:d7:a0:07:f8:89:f1:59:51:54:93:3f:fe:fa: 51:10:05:9a:9e:72:4f:98:7f:24:5f:9a:89:7a:73: 40:6c:69:49:b4:7c:9e:65:8f:36:28:8c:ae:52:54: a9:41:0f:dc:dd:5b:cf:fe:a1:87:39:59:b4:19:ab: 04:3c:8a:84:33:d6:b8:11:06:13:74:4d:e5:c0:5f: 6b:32:84:69:f8:65:2a:07:58:67:86:3b:de:09:0d: 82:e6:7a:e3:be:9c:65:23:88:2c:2a:91:ed:32:4d: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:28:37:0F:31:D2:A5:D8:06:3A:0C:E2:DF:32:B9:2A:0F:FA:15:FE X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:51:11:30:82:42:61:a9:c5:24:78:d7:63:57:6a:d2:72:22: 9c:7c:05:74:41:ff:fc:6d:66:03:6c:24:b1:1e:f3:b2:98:bd: 62:93:5c:0d:b1:63:e3:ec:40:c3:82:3a:72:2f:76:20:38:26: 67:29:64:a9:ee:3d:1b:32:a4:8c:de:ec:5d:99:7a:ab:2b:bc: 49:bb:ac:55:9b:f2:69:2b:25:4d:51:9c:6b:36:c5:9c:72:ec: 48:84:4c:ee:9f:cc:4d:05:73:b5:96:55:f3:60:9d:df:38:71: e6:4e:53:49:76:33:b7:23:47:cb:f1:93:22:54:12:09:cc:10: 22:1a:cf:90:b3:01:d0:b5:43:5e:0a:9b:16:4f:a0:9f:fc:11: e9:b7:29:e6:d5:7b:9f:23:33:b1:53:9e:41:4c:6c:40:65:03: d0:22:e4:6f:7d:f5:55:6c:31:fc:91:25:d6:9c:35:50:59:9b: 46:d4:0b:72:74:9f:e7:ce:2d:e2:ac:60:d3:be:14:28:75:8a: 09:6f:46:2e:22:2f:91:6b:d2:79:04:1e:55:7e:11:4b:e0:64: 43:cf:c4:ba:9a:62:e7:c0:a9:c0:aa:5d:6e:1f:25:9c:5f:c5: 64:e7:98:d6:5d:ed:c4:0f:cf:d7:e7:3e:33:55:1b:5a:a3:19: a0:96:f1:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUwNjE1MDIxNzEwWhcNMjUwNjIyMDIxNzEwWjAYMRYwFAYD VQQDEw02ODRlMmQyNy0wODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZn/PC/YBTtw+FocjuSyKCWVI3jEKrw1c169Hrbqni/fO0ZM5gd1q37eLE16 FwLAgWl/KhfgrMqh8nLskGTz+AcbEjGhsT1NEpuZ1NS9WiEddpyxqbwJnP5vnlOi QCWj/T8pPTN46nPoDmLBFEgec2KS9kOhdhHP6oMlfWmrjSkTB7BPyuATAubIkQR3 t01EDVuu8T0pC9egB/iJ8VlRVJM//vpREAWannJPmH8kX5qJenNAbGlJtHyeZY82 KIyuUlSpQQ/c3VvP/qGHOVm0GasEPIqEM9a4EQYTdE3lwF9rMoRp+GUqB1hnhjve CQ2C5nrjvpxlI4gsKpHtMk2DuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAooNw8x 0qXYBjoM4t8yuSoP+hX+MB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUUREwgkJhqcUkeNdjV2rSciKcfAV0Qf/8bWYDbCSxHvOymL1ik1wN sWPj7EDDgjpyL3YgOCZnKWSp7j0bMqSM3uxdmXqrK7xJu6xVm/JpKyVNUZxrNsWc cuxIhEzun8xNBXO1llXzYJ3fOHHmTlNJdjO3I0fL8ZMiVBIJzBAiGs+QswHQtUNe CpsWT6Cf/BHptynm1XufIzOxU55BTGxAZQPQIuRvffVVbDH8kSXWnDVQWZtG1Aty dJ/nzi3irGDTvhQodYoJb0YuIi+Ra9J5BB5VfhFL4GRDz8S6mmLnwKnAql1uHyWc X8Vk55jWXe3ED8/X5z4zVRtaoxmglvHK -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:13 2025 by rpki-client