$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json) Hash identifier: z3BLpw0CCjt5DNMg4v71s/dN7YgKYjIt5Q2iXZo/kgM= Subject key identifier: 1C:17:49:7C:8C:D7:86:2C:5D:F2:AD:8D:E5:41:E7:49:32:FA:96:DF Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft Manifest number: 01E8 Signing time: Fri 13 Jun 2025 01:41:21 +0000 Manifest this update: Fri 13 Jun 2025 01:41:20 +0000 Manifest next update: Fri 20 Jun 2025 01:41:20 +0000 Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: oIZVyWsMVDZNohJWv3jNZHmZTIIAlsCMPs6qwlH0H1U=) 2: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: BISS5CmxNxvmt9rFH6DiKF6LgvgQpzJ1qyGwOCZsmrY=) 3: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: gXomgC3UWF4hRBWpPOIJ1KbjovqaJl+GP7rjTy7IiYk=) 4: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: /sVqx8q3knVsrGKYvA1MUovYNq+EQPYvWXQlJdzVZFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Validity Not Before: Jun 13 01:41:20 2025 GMT Not After : Jun 20 01:41:20 2025 GMT Subject: CN=684b81c0-9031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:98:22:3e:92:00:95:88:b4:c3:c3:43:d8: 8e:53:08:80:71:06:8b:dc:5c:68:df:dc:f4:f1:52: 18:ca:23:7a:43:0d:19:36:70:d0:89:6f:3c:ff:2c: 23:ad:e3:d4:69:15:27:ab:d8:8f:23:26:3b:f0:7a: 5f:fc:95:e2:f6:ea:9f:f3:87:a3:b8:d1:fb:f6:12: b1:6e:d6:a6:fe:c0:eb:e4:cd:06:7c:78:7e:e4:79: e9:30:f5:ab:47:15:8a:23:74:4a:ea:66:3e:bb:8d: 16:4d:e2:d6:89:84:a7:58:d5:e9:5d:cd:9a:6d:e9: 43:46:68:4c:57:b3:f7:76:89:16:d0:ed:94:c6:ea: 80:5a:76:5a:aa:bc:99:11:c3:f4:1b:f5:e4:2f:11: ac:5c:f1:90:90:02:a8:13:5f:f7:58:d5:c6:dc:72: c2:db:1f:23:de:43:66:80:f1:7a:53:f7:c1:8b:a0: 67:3e:a1:d5:44:9b:d0:3a:1d:0f:fa:4e:3f:70:e8: fb:69:f0:d4:7a:38:08:cb:9e:4f:42:de:46:b6:5c: 9d:b3:b3:9c:34:39:9f:9a:16:3b:2c:b7:d9:24:95: be:0c:13:9e:74:11:9c:c0:bd:70:ed:52:7e:6e:97: 2d:6c:cd:30:b7:e7:17:d7:a6:8a:c5:a9:50:ce:ba: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:17:49:7C:8C:D7:86:2C:5D:F2:AD:8D:E5:41:E7:49:32:FA:96:DF X509v3 Authority Key Identifier: keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:22:f2:e0:e0:b4:af:85:f0:3f:73:0d:30:3b:08:d4:9a:9f: fb:ae:0c:51:f1:66:3e:a1:05:77:1c:f0:3b:f4:14:26:27:92: 5a:fc:80:d6:62:bc:77:c1:3c:60:94:7c:6f:f5:59:f9:25:49: 6d:58:1d:ba:fa:c9:11:de:5d:e5:65:24:5c:5c:c2:96:cb:93: a9:65:de:f9:93:04:1d:53:3f:62:cd:6e:82:9b:76:38:4d:56: 0d:c2:68:bd:35:e7:aa:ed:ee:54:3a:fa:9c:a9:79:25:d0:bb: 62:7e:55:88:34:64:5d:48:2e:cd:1f:65:f9:c9:1e:8e:7b:e4: 58:73:eb:1b:a5:ef:d4:2d:db:0e:f7:e9:08:cc:51:ee:1d:fa: 42:51:db:89:4f:54:20:6b:97:08:99:c8:db:00:5a:da:a4:09: 38:9b:f2:56:9b:4c:c2:01:41:6d:5d:cf:6e:6a:a4:84:d9:7a: ef:23:a3:33:19:5b:46:f5:ea:ce:e3:0e:0d:06:9e:8d:56:c4: df:84:de:fe:37:fe:e5:ee:89:76:bb:5f:7a:6f:78:61:93:44: 35:99:5d:6b:e7:79:7a:2c:cc:56:4e:90:e0:96:ac:a2:9a:5d: 02:46:c1:55:c9:54:cf:1b:5e:ec:ac:42:4e:bf:ab:87:74:0e: 5d:e2:6d:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4 RDlCMzg0ODYwHhcNMjUwNjEzMDE0MTIwWhcNMjUwNjIwMDE0MTIwWjAYMRYwFAYD VQQDEw02ODRiODFjMC05MDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HuYIj6SAJWItMPDQ9iOUwiAcQaL3Fxo39z08VIYyiN6Qw0ZNnDQiW88/ywj rePUaRUnq9iPIyY78Hpf/JXi9uqf84ejuNH79hKxbtam/sDr5M0GfHh+5HnpMPWr RxWKI3RK6mY+u40WTeLWiYSnWNXpXc2abelDRmhMV7P3dokW0O2UxuqAWnZaqryZ EcP0G/XkLxGsXPGQkAKoE1/3WNXG3HLC2x8j3kNmgPF6U/fBi6BnPqHVRJvQOh0P +k4/cOj7afDUejgIy55PQt5Gtlyds7OcNDmfmhY7LLfZJJW+DBOedBGcwL1w7VJ+ bpctbM0wt+cX16aKxalQzrraeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwXSXyM 14YsXfKtjeVB50ky+pbfMB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ2MS8yOTVFNEM3NjYwMUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6 NG9xRmVGeDVHMHFObXpoSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARIvLg4LSvhfA/cw0wOwjUmp/7rgxR8WY+oQV3HPA79BQmJ5Ja/IDW Yrx3wTxglHxv9Vn5JUltWB26+skR3l3lZSRcXMKWy5OpZd75kwQdUz9izW6Cm3Y4 TVYNwmi9Neeq7e5UOvqcqXkl0LtiflWINGRdSC7NH2X5yR6Oe+RYc+sbpe/ULdsO 9+kIzFHuHfpCUduJT1Qga5cImcjbAFrapAk4m/JWm0zCAUFtXc9uaqSE2XrvI6Mz GVtG9erO4w4NBp6NVsTfhN7+N/7l7ol2u196b3hhk0Q1mV1r53l6LMxWTpDglqyi ml0CRsFVyVTPG17srEJOv6uHdA5d4m0Q -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:59 2025 by rpki-client