$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json) Hash identifier: H90loVz+1LsPPNdhIikZVlAZJFp9GWp7XABVsKmKeDE= Subject key identifier: 31:6A:6F:9F:D6:2E:ED:DA:EE:3B:C2:8B:5D:0A:54:10:44:4C:BC:75 Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft Manifest number: FD Signing time: Fri 13 Jun 2025 04:07:43 +0000 Manifest this update: Fri 13 Jun 2025 04:07:43 +0000 Manifest next update: Fri 20 Jun 2025 04:07:43 +0000 Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: fiAWt9iB+vYnacrM4HfWW4F1BE0BwluhZ67HKn3CTJg=) 2: ADCDA1F83A0F11EFAB312630C4F9AE02.roa (hash: 8SYA3R8gtlu3Yfmt/OFb7lvOOBmgG2rmJfQokI/04ZM=) 3: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: XDvJ7OAZIZH9Y1m5zAYI1aNVQygP0iZogi7EtsDf/ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Validity Not Before: Jun 13 04:07:43 2025 GMT Not After : Jun 20 04:07:43 2025 GMT Subject: CN=684ba40f-6bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:c6:92:09:24:cc:89:26:ad:88:21:4a:7a: 1a:6f:63:ab:c8:ff:17:94:94:88:db:e0:f3:a9:3e: b4:39:9f:e1:39:2d:6e:ba:f8:f1:91:5d:b1:5c:3b: bf:d0:75:83:16:80:be:a4:59:ec:39:15:b7:ba:97: b6:07:1d:e0:a5:1f:65:f0:a0:4d:a5:0e:68:73:05: 50:6e:a7:3a:37:f7:57:fb:24:8e:43:fb:c9:b9:4b: 7e:35:11:c3:70:0e:6a:65:67:c5:be:ed:22:8b:ba: 3b:aa:b1:e3:ad:fa:2a:a9:8a:3b:14:2f:28:15:56: e5:ec:8c:b9:df:5f:b3:8d:ed:53:89:a4:d8:2f:8e: 83:71:60:dc:f2:9a:00:0e:0a:4f:41:99:18:7b:80: cc:13:67:1d:03:20:2e:45:3b:ae:1e:80:28:ce:7f: da:23:c6:40:38:80:62:50:2a:3a:22:86:4b:b8:7a: f3:57:f9:02:e7:e2:4b:56:bb:c6:98:05:e0:8e:a5: 54:d8:bd:c8:8f:15:65:32:9b:8a:74:52:93:82:8e: fc:23:7b:21:a3:1a:98:59:c6:a9:21:b2:9a:d5:61: 1d:9e:08:15:0e:d3:53:81:d6:d4:a8:92:5d:4a:53: 1a:42:8c:d8:54:60:04:83:e9:dd:fd:3a:e6:0e:1e: c2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6A:6F:9F:D6:2E:ED:DA:EE:3B:C2:8B:5D:0A:54:10:44:4C:BC:75 X509v3 Authority Key Identifier: keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:33:d3:7b:52:e9:1f:b5:ed:84:2c:ed:5f:57:d4:65:a6:3c: e3:20:b6:80:44:e8:72:95:1c:b8:67:58:11:f3:c4:c2:81:96: d5:52:bb:35:64:8b:41:64:d4:63:66:0e:3e:29:c9:18:e8:2a: 4f:e2:97:33:7e:b7:03:69:00:05:18:3c:f3:3c:be:90:0c:d8: e7:bd:fd:95:f0:82:58:6f:64:a8:f6:16:80:fa:81:68:cd:f7: 8a:5a:c7:f8:ae:72:4a:8b:9f:db:89:3d:e6:c5:de:0c:b9:d3: 02:cb:56:4e:7b:68:3f:8f:12:ea:dc:51:a5:19:fa:cc:68:31: 2f:33:cb:04:5f:6e:43:72:6c:75:2d:a5:97:ed:b4:e2:1d:5c: d0:0b:6d:6a:94:3b:a8:01:12:e7:12:dd:5f:15:7f:95:bd:03: be:51:98:b6:ea:52:f1:a9:26:65:9b:bb:33:a0:11:59:7f:6a: 66:8f:30:bf:98:a3:69:a1:15:a8:d9:90:9e:c6:5a:00:eb:40: 6f:df:96:1c:48:ab:5e:8a:d2:47:14:ad:15:af:6b:7b:6b:e6: 1b:27:03:19:98:f7:9d:f7:93:1b:be:74:f4:c7:68:bb:07:4d: 1d:14:9e:45:ac:d8:7c:81:fe:3b:8d:75:b7:d6:4d:20:62:44: 18:6d:43:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBREIxMTAvBgNVBAUTKDQ0MzEzNjM4MTVCQzVEMEJCN0E0MkI2MUQ5MjMwQjRE QUUyMkM1M0MwHhcNMjUwNjEzMDQwNzQzWhcNMjUwNjIwMDQwNzQzWjAYMRYwFAYD VQQDEw02ODRiYTQwZi02YmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuebGkgkkzIkmrYghSnoab2OryP8XlJSI2+DzqT60OZ/hOS1uuvjxkV2xXDu/ 0HWDFoC+pFnsORW3upe2Bx3gpR9l8KBNpQ5ocwVQbqc6N/dX+ySOQ/vJuUt+NRHD cA5qZWfFvu0ii7o7qrHjrfoqqYo7FC8oFVbl7Iy531+zje1TiaTYL46DcWDc8poA DgpPQZkYe4DME2cdAyAuRTuuHoAozn/aI8ZAOIBiUCo6IoZLuHrzV/kC5+JLVrvG mAXgjqVU2L3IjxVlMpuKdFKTgo78I3shoxqYWcapIbKa1WEdnggVDtNTgdbUqJJd SlMaQozYVGAEg+nd/TrmDh7CywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFqb5/W Lu3a7jvCi10KVBBETLx1MB8GA1UdIwQYMBaAFEQxNjgVvF0Lt6QrYdkjC02uIsU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUFEQi84MUYzODg4NkM3 OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhRdTNwQ3RoMlNNTFRhNGl4 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFEQi84MUYzODg4NkM3OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhR dTNwQ3RoMlNNTFRhNGl4VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaM9N7Uukfte2ELO1fV9RlpjzjILaAROhylRy4Z1gR88TCgZbVUrs1 ZItBZNRjZg4+KckY6CpP4pczfrcDaQAFGDzzPL6QDNjnvf2V8IJYb2So9haA+oFo zfeKWsf4rnJKi5/biT3mxd4MudMCy1ZOe2g/jxLq3FGlGfrMaDEvM8sEX25Dcmx1 LaWX7bTiHVzQC21qlDuoARLnEt1fFX+VvQO+UZi26lLxqSZlm7szoBFZf2pmjzC/ mKNpoRWo2ZCexloA60Bv35YcSKteitJHFK0Vr2t7a+YbJwMZmPed95MbvnT0x2i7 B00dFJ5FrNh8gf47jXW31k0gYkQYbUOC -----END CERTIFICATE-----Generated at Sat Jun 14 17:20:02 2025 by rpki-client