$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json) Hash identifier: FCzQpLTeFCgWnbzfPE/XPrxG+QFw7f7RKaqQMprkBpU= Subject key identifier: C9:90:7F:A5:25:C0:37:07:06:55:34:95:0D:16:3A:64:33:55:85:98 Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft Manifest number: DA Signing time: Fri 13 Jun 2025 04:32:23 +0000 Manifest this update: Fri 13 Jun 2025 04:32:22 +0000 Manifest next update: Fri 20 Jun 2025 04:32:22 +0000 Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: V0n0VgHGJPIlCsgvpqshh3NLiUlTyxzv3wS+Tuo1Q0w=) 2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: /piRZvXAAsh1mpg66Okc/aC7aZTe1kUD5ojc4AIc6UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Validity Not Before: Jun 13 04:32:22 2025 GMT Not After : Jun 20 04:32:22 2025 GMT Subject: CN=684ba9d7-4545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:0c:94:ad:d1:c1:53:8b:7b:75:d1:5e:9c:ae: 8e:8b:aa:a2:51:12:4a:89:02:6d:e1:f9:c0:eb:17: d6:db:98:1d:9f:0b:3e:64:9e:59:b4:b2:1d:8b:db: c2:ba:95:98:ae:af:14:1b:7f:f1:3a:00:b2:b7:4c: d1:3d:dc:05:47:6c:5d:2b:c9:8f:7a:9d:28:ca:40: db:28:55:0e:77:ab:44:e2:48:a9:08:76:33:73:43: 31:31:ea:75:7b:a6:2e:41:2a:0f:ae:74:62:34:2f: 7f:bd:8c:1d:6a:ed:8a:39:c1:ea:63:a6:36:ea:34: b7:ba:b5:8c:4c:d0:87:ce:da:ae:34:96:b7:e2:f2: 25:d5:83:e8:0b:3e:cc:9f:ba:f9:16:85:36:de:f0: 6b:d8:58:6d:36:66:e8:96:13:7e:47:d0:6d:b5:d9: 06:cd:d3:d9:20:ff:fb:66:c3:74:4f:d0:55:ef:ed: 16:85:35:10:7e:48:e2:c0:d9:01:f1:df:80:15:ac: a2:ea:89:7f:65:9b:77:94:44:d8:74:1d:d5:cf:90: bd:2a:ef:c9:14:23:d0:25:8b:4a:43:de:13:8e:d4: 0b:18:c9:c1:a2:55:8c:31:d1:52:ae:3e:88:98:53: fc:31:ca:bf:42:c8:91:64:8a:08:4f:32:54:8f:6f: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:90:7F:A5:25:C0:37:07:06:55:34:95:0D:16:3A:64:33:55:85:98 X509v3 Authority Key Identifier: keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a3:c5:d7:91:da:a5:ae:44:71:92:85:5e:fe:93:7a:87:56: 92:25:73:b5:fb:24:52:8e:29:a3:40:f8:cf:22:fd:86:eb:1b: 62:b1:26:e9:29:77:7b:c2:ac:7a:a2:20:c5:c4:32:d0:19:ea: 2d:6b:04:af:0e:29:89:a6:21:59:6a:0e:e6:e2:09:ec:f5:a4: 2d:ac:57:f1:e3:fe:50:b5:aa:5a:80:87:dd:a1:26:a6:70:c2: e8:10:cd:76:ab:4c:fc:06:4c:06:c3:28:a1:bf:42:f4:da:af: 83:00:6e:a0:4a:21:1d:5c:49:1e:dc:07:f9:83:50:08:48:f4: fd:b9:46:a5:87:b2:1a:1f:40:87:c1:c6:19:9a:88:dd:37:0e: a2:d8:11:36:91:94:bb:08:88:c3:53:c9:7c:99:2a:62:16:be: 7e:98:90:c3:28:5f:12:2c:c5:93:4a:21:17:af:75:75:31:e6: c2:09:85:37:81:09:8e:c2:91:86:27:f3:51:6c:be:f1:94:92: 0f:fd:13:be:67:d9:56:fa:83:0d:db:cf:16:9a:1c:ff:a2:78: 31:6a:de:f4:87:3d:f2:69:eb:f7:3e:0b:fb:4e:74:12:cd:0b: 0f:28:f2:a0:05:cb:11:22:f1:98:09:de:14:b5:2a:e1:68:d6: 0e:c8:5a:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJBMzQ3QTFCOTZD NEEwRjk2OUMwHhcNMjUwNjEzMDQzMjIyWhcNMjUwNjIwMDQzMjIyWjAYMRYwFAYD VQQDEw02ODRiYTlkNy00NTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+QyUrdHBU4t7ddFenK6Oi6qiURJKiQJt4fnA6xfW25gdnws+ZJ5ZtLIdi9vC upWYrq8UG3/xOgCyt0zRPdwFR2xdK8mPep0oykDbKFUOd6tE4kipCHYzc0MxMep1 e6YuQSoPrnRiNC9/vYwdau2KOcHqY6Y26jS3urWMTNCHztquNJa34vIl1YPoCz7M n7r5FoU23vBr2FhtNmbolhN+R9BttdkGzdPZIP/7ZsN0T9BV7+0WhTUQfkjiwNkB 8d+AFayi6ol/ZZt3lETYdB3Vz5C9Ku/JFCPQJYtKQ94TjtQLGMnBolWMMdFSrj6I mFP8Mcq/QsiRZIoITzJUj2+PwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmQf6Ul wDcHBlU0lQ0WOmQzVYWYMB8GA1UdIwQYMBaAFAvbrBUiXxv5thSyo0ehuWxKD5ac MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80RjQ4MUFDOEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdfbTJGTEtqUjZHNWJFb1Bs cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5dXNGU0pmR19tMkZMS2pSNkc1YkVvUGxwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdf bTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWo8XXkdqlrkRxkoVe/pN6h1aSJXO1+yRSjimjQPjPIv2G6xtisSbp KXd7wqx6oiDFxDLQGeotawSvDimJpiFZag7m4gns9aQtrFfx4/5QtapagIfdoSam cMLoEM12q0z8BkwGwyihv0L02q+DAG6gSiEdXEke3Af5g1AISPT9uUalh7IaH0CH wcYZmojdNw6i2BE2kZS7CIjDU8l8mSpiFr5+mJDDKF8SLMWTSiEXr3V1MebCCYU3 gQmOwpGGJ/NRbL7xlJIP/RO+Z9lW+oMN288Wmhz/ongxat70hz3yaev3Pgv7TnQS zQsPKPKgBcsRIvGYCd4UtSrhaNYOyFr9 -----END CERTIFICATE-----Generated at Sat Jun 14 17:16:15 2025 by rpki-client