$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft File: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft (raw, json) Hash identifier: xlBArlEdhRnGrIfjqE1Cd7xDhhPA5EtQL/A5aDsucuE= Subject key identifier: 30:AF:3D:3B:B5:45:DE:F4:AC:D6:9A:F1:BA:4C:2C:C4:5A:53:BF:E2 Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17 Certificate issuer: /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft Manifest number: 01CD Signing time: Sun 15 Jun 2025 02:21:49 +0000 Manifest this update: Sun 15 Jun 2025 02:21:49 +0000 Manifest next update: Sun 22 Jun 2025 02:21:49 +0000 Files and hashes: 1: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl (hash: ovKoFfhjKOQbmAD+5bR+rKx5xr3NjimxxTZk7V1lWic=) 2: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (hash: JxIG0aTCU82q7umurfAFtEVJNKacWC+8NM/ekdYlO24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BA97, serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517 Validity Not Before: Jun 15 02:21:49 2025 GMT Not After : Jun 22 02:21:49 2025 GMT Subject: CN=684e2e3d-b343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:43:be:06:ab:b1:e7:f8:06:7a:0b:49:28: a5:31:32:e9:99:4e:e6:73:53:c2:07:10:9f:9b:16: f8:d7:ad:b9:c0:92:b8:05:42:ca:c5:48:ec:fc:c3: ff:47:7a:9b:4d:37:06:a4:85:c0:ff:38:87:83:de: 78:0b:5d:97:44:85:e1:cf:dc:37:9f:13:54:8f:10: 46:01:e0:5a:e1:a0:00:96:5f:cd:59:d8:ad:88:f7: 2b:67:9c:d8:20:b0:18:bb:2a:3a:7a:03:0f:c9:5f: dd:77:a3:71:50:1d:1c:00:24:14:73:aa:aa:51:75: 7e:52:bc:7b:08:3b:2c:cb:df:4e:fe:ef:7c:ef:39: 38:11:36:e1:28:d0:66:3f:4f:22:a8:53:29:a2:49: 96:dc:d1:91:5f:90:56:fe:2e:40:0c:39:11:04:ca: e9:42:df:8b:ce:6e:06:6e:30:85:d7:16:e9:d3:8a: a7:a1:67:66:b9:76:61:49:06:7d:9d:ce:54:27:a1: c4:c9:83:19:4b:43:2d:89:a7:39:60:0e:22:80:d1: cc:2a:6e:29:72:3f:11:a1:cd:1c:c6:9b:11:3d:1f: dc:4c:e7:06:21:d4:25:08:a0:b0:48:9b:0c:07:95: a4:8a:d6:ce:d1:a1:d9:4e:1b:58:c9:fd:04:8f:2f: 81:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AF:3D:3B:B5:45:DE:F4:AC:D6:9A:F1:BA:4C:2C:C4:5A:53:BF:E2 X509v3 Authority Key Identifier: keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:d4:f0:89:dd:e9:09:55:c6:e4:10:aa:f0:10:f3:05:97:36: bb:cf:5e:df:9b:68:b1:85:e6:fa:8b:6d:2a:e6:18:91:d1:b3: cb:40:4f:39:9e:55:9e:23:9e:64:ab:c2:6c:c6:2c:ec:52:fb: e6:36:0d:ec:c9:4c:8e:3d:19:46:38:66:3e:b0:1c:f6:50:47: b6:aa:ea:fa:aa:63:c2:38:d3:d4:24:df:ab:e5:af:74:2a:e7: 09:d3:87:e9:2b:f5:99:89:b4:be:e7:09:b7:96:19:63:a4:0a: e8:4c:fd:63:e0:cb:f6:57:91:39:26:28:ea:2e:ec:d2:ba:fd: c2:4c:59:26:ce:27:52:66:20:2b:6f:32:60:b6:0b:5a:69:59: 94:5c:c4:fb:a1:f6:16:bb:a0:35:36:41:13:ec:41:55:c8:a8: b9:22:9a:86:ab:98:ad:f8:34:6f:79:47:06:ef:5e:10:eb:94: 18:65:f9:c4:b6:2b:5b:4d:e9:a0:37:8d:13:7f:d5:6e:3a:ce: ac:80:b5:52:8c:4c:e5:6b:50:76:96:f6:25:82:16:d1:c8:bf: 73:d2:5d:08:3d:66:60:98:9a:b5:78:65:07:c1:fc:28:f0:44: d9:cb:9f:d9:28:a8:8a:61:32:06:50:8a:df:74:9c:ca:1b:3a: 82:92:3d:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JBOTcxMTAvBgNVBAUTKEFGRDk0M0U0QjE0Mjc2MzY1OUUwOEY4REJGNkNFN0U2 RDgwQ0M1MTcwHhcNMjUwNjE1MDIyMTQ5WhcNMjUwNjIyMDIyMTQ5WjAYMRYwFAYD VQQDEw02ODRlMmUzZC1iMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iFDvgarsef4BnoLSSilMTLpmU7mc1PCBxCfmxb41625wJK4BULKxUjs/MP/ R3qbTTcGpIXA/ziHg954C12XRIXhz9w3nxNUjxBGAeBa4aAAll/NWditiPcrZ5zY ILAYuyo6egMPyV/dd6NxUB0cACQUc6qqUXV+Urx7CDssy99O/u987zk4ETbhKNBm P08iqFMpokmW3NGRX5BW/i5ADDkRBMrpQt+Lzm4GbjCF1xbp04qnoWdmuXZhSQZ9 nc5UJ6HEyYMZS0Mtiac5YA4igNHMKm4pcj8Roc0cxpsRPR/cTOcGIdQlCKCwSJsM B5WkitbO0aHZThtYyf0Ejy+BcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCvPTu1 Rd70rNaa8bpMLMRaU7/iMB8GA1UdIwQYMBaAFK/ZQ+SxQnY2WeCPjb9s5+bYDMUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkE5Ny9GMUZFQjFGRUFD NEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2RqWlo0SS1OdjJ6bjV0Z014 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5bEQ1TEZDZGpaWjRJLU52MnpuNXRnTXhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkE5Ny9GMUZFQjFGRUFDNEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2Rq Wlo0SS1OdjJ6bjV0Z014UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK1PCJ3ekJVcbkEKrwEPMFlza7z17fm2ixheb6i20q5hiR0bPLQE85 nlWeI55kq8JsxizsUvvmNg3syUyOPRlGOGY+sBz2UEe2qur6qmPCONPUJN+r5a90 KucJ04fpK/WZibS+5wm3lhljpAroTP1j4Mv2V5E5JijqLuzSuv3CTFkmzidSZiAr bzJgtgtaaVmUXMT7ofYWu6A1NkET7EFVyKi5IpqGq5it+DRveUcG714Q65QYZfnE titbTemgN40Tf9VuOs6sgLVSjEzla1B2lvYlghbRyL9z0l0IPWZgmJq1eGUHwfwo 8ETZy5/ZKKiKYTIGUIrfdJzKGzqCkj33 -----END CERTIFICATE-----Generated at Sun Jun 15 08:34:01 2025 by rpki-client