$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json) Hash identifier: 1Yd3CyykHv2eplNySF7xpO+PsX/I5RBak3nFPmSN64g= Subject key identifier: EC:00:FF:8F:3A:A2:E8:B0:49:A4:6C:5F:9D:AE:5E:01:72:8E:87:88 Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft Manifest number: FE Signing time: Fri 13 Jun 2025 04:06:19 +0000 Manifest this update: Fri 13 Jun 2025 04:06:18 +0000 Manifest next update: Fri 20 Jun 2025 04:06:18 +0000 Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: 3ulKWfJgjpKOAodfAd7hTD7JYmwVv+ThopNPePd/7C8=) 2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: Jun 13 04:06:18 2025 GMT Not After : Jun 20 04:06:18 2025 GMT Subject: CN=684ba3bb-a82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:43:4f:0c:74:2e:db:3f:7e:39:6f:a4:83: ea:83:2d:14:95:d3:a7:cb:eb:4d:70:dd:73:43:bc: 29:06:fc:47:dd:87:69:db:db:bd:26:9e:3c:5e:5c: dd:42:dd:3f:94:15:0e:84:4f:9a:68:f8:ad:72:31: 78:2f:05:1d:68:1b:7e:e9:39:ee:88:9c:79:47:b8: f4:78:65:72:bc:d3:4c:5d:31:8b:e6:0b:8d:f0:91: 57:53:f5:1a:59:d7:bf:47:90:8a:19:e0:a2:7f:72: d9:fc:d1:f5:3d:5d:8b:1d:f6:5c:ac:8f:4b:58:de: 91:d0:5e:42:ae:16:61:37:0e:95:2b:5e:27:ef:f8: 37:b0:6a:a9:62:a2:09:b0:05:44:c6:03:14:e0:9f: bc:2d:fb:3c:0e:9e:e7:f1:e0:f1:06:99:9d:57:6c: 4b:89:16:2c:0e:b8:40:20:8b:a3:1f:6b:93:72:28: 16:e8:cc:a9:54:7a:a8:8b:f7:ab:1e:38:4c:61:3a: d0:64:5e:97:3d:c7:65:2f:81:ba:0d:c6:09:7a:bf: e4:d4:a8:24:f4:d8:64:29:59:8d:6e:aa:4e:23:71: 06:8d:e2:46:73:58:23:bc:81:72:10:c4:53:5e:46: 7d:7d:5b:16:99:67:ac:8a:23:b5:43:09:8c:75:c0: 54:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:00:FF:8F:3A:A2:E8:B0:49:A4:6C:5F:9D:AE:5E:01:72:8E:87:88 X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9c:ef:7d:d8:d2:97:44:66:a3:7b:d6:13:63:8f:2e:b4:8d: 8c:b9:14:41:59:6e:53:5d:6c:05:c3:4c:39:b8:9e:d8:07:c4: 0f:d2:9c:74:b9:ad:14:d0:33:3b:6b:64:7d:26:fd:92:83:62: 44:da:35:1b:2c:95:41:3b:f4:37:58:bc:1f:31:cd:1d:b9:87: 22:d7:9c:3c:81:e1:0d:32:ad:f0:56:7e:f3:08:72:05:d8:09: 39:f4:83:4b:82:82:1d:46:37:39:0c:27:9a:c1:d6:30:ce:bf: 68:ac:5a:b7:1a:16:f7:aa:f4:87:56:da:6f:75:29:7a:dc:df: ca:14:dc:30:d7:42:76:19:b2:35:06:9f:e9:2b:15:78:5e:b1: 54:fd:55:4f:fb:22:a4:a1:6e:4b:c0:79:7f:69:3a:13:1c:0c: 28:ae:11:c6:2f:02:f9:b4:a0:23:ad:66:a0:cf:4a:74:db:66: 6c:54:70:66:2f:35:a1:f9:3f:11:45:d2:03:22:b0:8c:6d:62: 2a:87:e2:57:38:5a:dd:34:5b:b3:af:ab:d2:ac:23:a2:36:c9: 43:f4:f1:1e:71:e3:21:71:af:21:4a:10:03:5b:af:68:53:35: 4b:04:95:e2:7d:c6:48:e0:a1:0a:b9:96:ca:8b:42:49:2a:ae: 12:94:a4:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5 MjNBQTc1QzcwHhcNMjUwNjEzMDQwNjE4WhcNMjUwNjIwMDQwNjE4WjAYMRYwFAYD VQQDEw02ODRiYTNiYi1hODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWdDTwx0Lts/fjlvpIPqgy0UldOny+tNcN1zQ7wpBvxH3Ydp29u9Jp48Xlzd Qt0/lBUOhE+aaPitcjF4LwUdaBt+6TnuiJx5R7j0eGVyvNNMXTGL5guN8JFXU/Ua Wde/R5CKGeCif3LZ/NH1PV2LHfZcrI9LWN6R0F5CrhZhNw6VK14n7/g3sGqpYqIJ sAVExgMU4J+8Lfs8Dp7n8eDxBpmdV2xLiRYsDrhAIIujH2uTcigW6MypVHqoi/er HjhMYTrQZF6XPcdlL4G6DcYJer/k1Kgk9NhkKVmNbqpOI3EGjeJGc1gjvIFyEMRT XkZ9fVsWmWesiiO1QwmMdcBUJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwA/486 ouiwSaRsX52uXgFyjoeIMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1 NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6 ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbnO992NKXRGaje9YTY48utI2MuRRBWW5TXWwFw0w5uJ7YB8QP0px0 ua0U0DM7a2R9Jv2Sg2JE2jUbLJVBO/Q3WLwfMc0duYci15w8geENMq3wVn7zCHIF 2Ak59INLgoIdRjc5DCeawdYwzr9orFq3Ghb3qvSHVtpvdSl63N/KFNww10J2GbI1 Bp/pKxV4XrFU/VVP+yKkoW5LwHl/aToTHAworhHGLwL5tKAjrWagz0p022ZsVHBm LzWh+T8RRdIDIrCMbWIqh+JXOFrdNFuzr6vSrCOiNslD9PEeceMhca8hShADW69o UzVLBJXifcZI4KEKuZbKi0JJKq4SlKQj -----END CERTIFICATE-----Generated at Sat Jun 14 19:17:45 2025 by rpki-client