$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft File: m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json) Hash identifier: Zi4apRvpEUOhf8PvBvnHdlZQLn5Krpk/L5C6kp1IA+8= Subject key identifier: 6A:2B:BC:6E:68:47:2B:08:91:C8:90:A1:8D:38:33:77:77:82:43:E1 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft Manifest number: 07C0 Signing time: Sat 14 Jun 2025 20:54:51 +0000 Manifest this update: Sat 14 Jun 2025 20:54:51 +0000 Manifest next update: Sat 21 Jun 2025 20:54:51 +0000 Files and hashes: 1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: mheHxzoTvb8he/Glv58zrb5pe/EWE++pN/lKPf8X1yc=) 2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4=) 3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: QsOZtg7wgKPEMzZpQNjN0cwc1dkJJaHe5vPoUHzDi2E=) 4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: dfHP081F3AjgTxtk/Kol9IWl1ohuGadWFkcTnhyHleE=) 5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=) 6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o=) 7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: 3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=) 8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: lLU3brsFcJmxfza+HPsqiH2/FCfohQp/aB2RU3YA2bQ=) 9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: FAebLgMlFuIn+Jv3/Kno5dJ1sOWIko5p1IcZ8bmbDwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7, serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Jun 14 20:54:51 2025 GMT Not After : Jun 21 20:54:51 2025 GMT Subject: CN=684de19b-642c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:90:d9:7e:07:92:95:cd:19:b2:9a:f3:9f: 9e:a7:80:f0:f2:e9:06:f7:96:40:5d:c0:2a:2a:13: 29:9f:2f:30:84:c8:9e:86:89:fb:68:8c:86:7e:b5: 94:0c:20:54:48:fc:18:0f:8b:56:30:e3:ef:cf:6a: 59:31:9e:f5:f8:8d:4c:a0:bd:b7:e7:a1:5d:ed:d2: 54:a9:a9:9f:5c:0f:94:b0:76:41:06:22:c5:e7:35: c3:5d:77:33:83:ab:98:01:34:d4:b3:9b:fd:be:6d: 3d:7f:08:90:e0:a5:17:22:67:00:e0:a4:ed:76:b0: dc:4f:6e:9a:e9:79:05:25:8f:e7:81:c4:0c:ef:d9: 23:2a:45:16:67:1f:f1:de:29:5a:e3:09:cd:09:01: 3f:7c:37:30:f6:e3:19:69:76:f0:fc:15:d0:57:43: 35:03:ba:65:c1:36:75:74:60:57:0e:23:ed:80:61: 8c:fb:6e:d1:13:86:d1:40:12:6d:bd:e8:e5:f7:0f: 13:b3:b7:09:6c:9c:10:1b:74:e2:3d:8c:31:05:09: 32:93:d6:01:7b:5e:ed:fc:77:dd:60:ab:4f:33:d1: e7:eb:fc:1b:10:fc:eb:9b:75:89:b3:3a:69:4f:09: f5:ad:63:35:6a:24:1a:f9:bb:6e:a4:34:4a:14:40: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2B:BC:6E:68:47:2B:08:91:C8:90:A1:8D:38:33:77:77:82:43:E1 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:68:72:6c:2a:9f:62:bc:ba:e2:ba:f5:af:9f:ce:4c:9c:be: 71:3a:97:1f:e4:f8:98:3b:c1:9a:80:85:74:a2:ef:97:9c:54: e7:7b:bd:f1:14:f6:0c:93:06:42:68:d2:ce:e0:ce:ba:33:4d: a8:be:92:1c:8c:e2:03:fc:5e:88:57:d0:3b:bc:85:e6:75:5b: d9:ee:9c:f9:a3:95:c9:af:1a:b9:43:b5:c1:1f:c2:b2:9a:a2: 3f:11:5f:09:5d:d3:8b:bb:8d:6f:c2:2b:6e:cb:f9:b5:93:45: 77:01:0f:37:3e:4f:05:51:e5:87:3c:21:0c:4f:98:30:e4:67: df:31:db:24:8e:08:18:d9:fa:b9:59:99:3c:0e:5e:a5:5a:32: d8:b2:07:ea:a6:7a:b4:c5:5c:06:46:d0:24:2f:8b:73:10:25: c1:da:1f:5d:53:53:95:32:df:7d:e7:b0:97:46:b8:1f:7e:07: c1:25:a7:8c:55:6c:40:9e:ad:80:16:b0:3f:6e:a2:70:5d:e0: 49:f7:c5:bd:7b:d1:08:39:53:f2:a2:c4:07:5b:7d:c0:76:cd: 30:8d:8a:c1:c0:56:6c:68:74:06:31:63:5d:3e:4e:a4:e6:b6: 09:6d:88:c2:33:bf:d3:85:8e:32:c2:18:17:83:63:2d:00:8f: 5e:07:c4:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjUwNjE0MjA1NDUxWhcNMjUwNjIxMjA1NDUxWjAYMRYwFAYD VQQDEw02ODRkZTE5Yi02NDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKuQ2X4HkpXNGbKa85+ep4Dw8ukG95ZAXcAqKhMpny8whMiehon7aIyGfrWU DCBUSPwYD4tWMOPvz2pZMZ71+I1MoL2356Fd7dJUqamfXA+UsHZBBiLF5zXDXXcz g6uYATTUs5v9vm09fwiQ4KUXImcA4KTtdrDcT26a6XkFJY/ngcQM79kjKkUWZx/x 3ila4wnNCQE/fDcw9uMZaXbw/BXQV0M1A7plwTZ1dGBXDiPtgGGM+27RE4bRQBJt vejl9w8Ts7cJbJwQG3TiPYwxBQkyk9YBe17t/HfdYKtPM9Hn6/wbEPzrm3WJszpp Twn1rWM1aiQa+btupDRKFEDAdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGorvG5o RysIkciQoY04M3d3gkPhMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JGNy9BRDJBQzcyRUZCRUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3 ai1uamt6U29HMXBkMVpWaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnaHJsKp9ivLriuvWvn85MnL5xOpcf5PiYO8GagIV0ou+XnFTne73x FPYMkwZCaNLO4M66M02ovpIcjOID/F6IV9A7vIXmdVvZ7pz5o5XJrxq5Q7XBH8Ky mqI/EV8JXdOLu41vwituy/m1k0V3AQ83Pk8FUeWHPCEMT5gw5GffMdskjggY2fq5 WZk8Dl6lWjLYsgfqpnq0xVwGRtAkL4tzECXB2h9dU1OVMt9957CXRrgffgfBJaeM VWxAnq2AFrA/bqJwXeBJ98W9e9EIOVPyosQHW33Ads0wjYrBwFZsaHQGMWNdPk6k 5rYJbYjCM7/ThY4ywhgXg2MtAI9eB8Tp -----END CERTIFICATE-----Generated at Sun Jun 15 10:01:19 2025 by rpki-client