$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: 3BkgSOb1miKdzqoOCrscBdo7JKgi1v+WSDLMnmwbqNo= Subject key identifier: 6D:0A:D8:51:47:13:63:50:F2:10:CC:AE:74:77:4E:1F:78:0C:7B:EF Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 0176 Signing time: Sun 15 Jun 2025 02:58:12 +0000 Manifest this update: Sun 15 Jun 2025 02:58:11 +0000 Manifest next update: Sun 22 Jun 2025 02:58:11 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: XVeNDlpGFgQjoqkpo4uWsm/+HbWw6SAtDQ6pIQo5Dac=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /g02epL+NyCJaEeLF1U/HHteqWgxtq7I5NLpXCZSdQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: Jun 15 02:58:11 2025 GMT Not After : Jun 22 02:58:11 2025 GMT Subject: CN=684e36c3-d572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:1d:c1:b8:d2:6e:f6:d7:d9:1b:b1:66:96: 3f:32:f3:31:fb:21:a4:91:6c:e8:06:ed:ea:75:34: 50:38:36:29:7a:7f:09:3a:81:76:23:bd:3b:d4:c3: 4b:25:5c:30:3a:c3:db:9d:9d:ec:ec:df:e5:2c:5a: 70:e7:76:21:82:5c:f3:3c:c4:79:c1:5b:a0:1e:e0: c4:98:fb:94:c7:a4:a6:f5:ba:4a:1f:e1:d6:a4:ef: f0:ce:f1:dc:5d:f7:4c:d2:79:fd:e6:09:dd:eb:87: 43:d8:9c:d5:17:4a:88:51:c3:94:9c:ba:12:15:f5: 46:15:ec:39:07:a6:6e:ab:05:75:7b:3b:62:e3:eb: e5:72:79:9b:db:93:c0:82:88:60:d1:4b:05:d8:3d: b4:6c:eb:c9:32:26:9d:d6:d6:4e:0d:a2:9a:86:67: da:9a:b3:5c:cf:f9:51:ab:7b:db:0a:31:8f:16:6d: 20:c9:d9:43:2c:a5:d7:9e:ab:46:93:9d:09:02:6c: 3f:2e:4a:db:93:ea:59:fd:48:90:49:d5:9d:09:f1: 4f:6a:e0:b6:15:13:0a:71:0a:65:8b:f2:32:71:1c: 16:79:d7:01:49:66:f8:0f:bf:2a:4a:6e:83:b1:d0: c0:fb:7e:d9:d2:9a:ed:90:28:7e:00:d8:f5:2b:5b: 9c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0A:D8:51:47:13:63:50:F2:10:CC:AE:74:77:4E:1F:78:0C:7B:EF X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:09:ab:08:24:0d:a4:c2:d9:98:5f:eb:19:9f:ca:3c:d6:83: 81:de:f1:cb:10:55:ea:68:76:67:42:8f:09:de:8c:6f:31:60: a7:02:6b:73:f9:aa:83:1d:e8:29:65:97:5c:40:aa:3f:89:d3: 99:31:4e:34:ab:2c:4c:a7:48:85:be:a9:22:58:57:16:52:b2: 5f:3a:f1:6b:df:00:db:9c:6e:ea:39:df:9d:b1:ab:ae:a4:68: 72:58:52:58:26:f6:7a:b9:6b:0d:82:3a:a0:01:35:42:49:2e: 37:36:36:cb:bd:69:c4:b4:d5:cb:c3:4a:53:b8:f4:9e:87:12: 63:a5:03:dc:8a:a0:42:27:00:99:1f:c2:a4:6a:42:49:a3:f4: 2f:80:93:b5:9f:52:78:85:0e:63:93:0c:b1:57:99:c2:08:7c: 18:0a:0a:15:1c:a3:c6:76:7c:14:1b:96:9e:4c:46:6a:51:82: 2a:b9:91:cf:f7:80:14:fd:d9:fc:3f:81:c6:3f:35:b3:9a:4a: d0:27:9e:ba:6b:21:d4:9a:76:41:17:33:31:89:65:2c:a7:c0: eb:c3:a2:1c:92:24:63:d3:5c:73:cd:da:d4:b9:8d:ed:f0:54: e7:09:2b:f4:fb:55:84:f3:97:56:19:7f:f8:0c:16:a6:72:81: 68:0d:70:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjUwNjE1MDI1ODExWhcNMjUwNjIyMDI1ODExWjAYMRYwFAYD VQQDEw02ODRlMzZjMy1kNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngYdwbjSbvbX2RuxZpY/MvMx+yGkkWzoBu3qdTRQODYpen8JOoF2I7071MNL JVwwOsPbnZ3s7N/lLFpw53YhglzzPMR5wVugHuDEmPuUx6Sm9bpKH+HWpO/wzvHc XfdM0nn95gnd64dD2JzVF0qIUcOUnLoSFfVGFew5B6ZuqwV1ezti4+vlcnmb25PA gohg0UsF2D20bOvJMiad1tZODaKahmfamrNcz/lRq3vbCjGPFm0gydlDLKXXnqtG k50JAmw/Lkrbk+pZ/UiQSdWdCfFPauC2FRMKcQpli/IycRwWedcBSWb4D78qSm6D sdDA+37Z0prtkCh+ANj1K1uc7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0K2FFH E2NQ8hDMrnR3Th94DHvvMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANCasIJA2kwtmYX+sZn8o81oOB3vHLEFXqaHZnQo8J3oxvMWCnAmtz +aqDHegpZZdcQKo/idOZMU40qyxMp0iFvqkiWFcWUrJfOvFr3wDbnG7qOd+dsauu pGhyWFJYJvZ6uWsNgjqgATVCSS43NjbLvWnEtNXLw0pTuPSehxJjpQPciqBCJwCZ H8KkakJJo/QvgJO1n1J4hQ5jkwyxV5nCCHwYCgoVHKPGdnwUG5aeTEZqUYIquZHP 94AU/dn8P4HGPzWzmkrQJ566ayHUmnZBFzMxiWUsp8Drw6IckiRj01xzzdrUuY3t 8FTnCSv0+1WE85dWGX/4DBamcoFoDXA3 -----END CERTIFICATE-----Generated at Sun Jun 15 08:11:03 2025 by rpki-client