$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json) Hash identifier: bD1KUFTjlHqh2ALxQj1ONWLng8qsoN1LAUS5C15vJa0= Subject key identifier: 3A:ED:1B:22:41:66:CB:3B:AE:D6:41:85:62:08:C5:0C:9C:82:28:F8 Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft Manifest number: 0292 Signing time: Thu 19 Jun 2025 01:27:37 +0000 Manifest this update: Thu 19 Jun 2025 01:27:37 +0000 Manifest next update: Thu 26 Jun 2025 01:27:37 +0000 Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: 7XCzuEwuaoeJHWcKiF1t7gJai42PYSy9I+Bk4pdh3KY=) 2: 941EE9A46BB911ED97343873C4F9AE02.roa (hash: fXr7QIQuwl7QzyFLTfd4eQUzsXhWZdcYU1jaS0SUF4Q=) 3: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: O/GWNs45gL+188aJUtcbIy1ffH2qMFXWGJpc2ELIi9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Validity Not Before: Jun 19 01:27:37 2025 GMT Not After : Jun 26 01:27:37 2025 GMT Subject: CN=68536789-ffbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:70:fa:cc:d8:61:9d:7e:27:5f:52:ad:fb: 02:ff:76:4d:5c:40:29:ec:25:fa:75:14:e8:0a:36: 59:6c:ce:c6:1a:f2:77:8d:dc:d0:8e:61:68:32:fe: fd:12:d0:ac:5c:52:9f:4f:27:cc:2c:4a:81:ec:27: 8e:50:28:d2:93:42:b5:b6:70:52:4a:b9:a0:cd:a0: 8d:cd:05:4a:83:83:cd:00:eb:19:ed:db:79:b2:8e: 0b:e1:64:94:79:76:2f:cb:d0:12:a3:dd:92:60:0c: e3:91:19:34:56:26:c5:fc:0f:0f:de:21:09:9b:32: 28:8a:31:90:77:84:0d:5c:27:01:26:4e:89:da:60: d7:72:3f:ac:c6:85:2b:1e:d4:8c:9f:14:cb:e7:8a: ff:e3:0a:76:d9:d0:2a:be:69:52:6b:fb:f0:e7:73: c9:8d:c4:d0:73:e1:b7:3f:e0:52:88:83:5e:43:9e: 0f:2f:84:4a:32:b6:81:23:55:0c:3d:f5:12:c0:a2: 67:3e:01:75:1f:10:8b:0a:5d:4a:d1:48:52:fa:c3: 46:83:66:9e:1f:a5:a0:a9:aa:77:f1:62:50:f6:ff: 64:c8:6a:b8:56:b6:cd:07:a5:36:a9:c1:dc:f3:bf: 3f:b4:00:84:fa:41:28:19:7a:d2:e8:32:19:00:cf: 4b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:ED:1B:22:41:66:CB:3B:AE:D6:41:85:62:08:C5:0C:9C:82:28:F8 X509v3 Authority Key Identifier: keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:e1:fb:6c:a7:79:33:01:07:69:bc:dc:0e:82:11:c5:b5:c2: fe:1c:71:b6:63:7a:36:ed:ba:db:8d:cf:47:78:a7:ce:07:e7: 70:9f:5e:23:29:84:6d:a1:c3:09:0d:a4:9a:ae:fa:50:96:53: b3:ba:08:18:6a:57:24:ef:25:49:17:d6:6e:21:54:05:fa:71: aa:60:e7:1d:44:b6:e5:32:cd:a0:cc:fc:98:82:16:e6:8c:5a: ae:04:4a:19:28:c8:28:52:45:0c:f3:08:bd:32:5b:c1:7e:48: bb:ee:69:6c:f7:f7:f0:70:5c:3e:ea:ec:7b:12:b3:55:19:5c: fc:12:1a:c3:1f:31:61:dc:f5:9b:70:08:f4:74:3d:58:1e:67: 09:9b:d4:85:98:0a:08:d9:96:08:bc:54:22:58:d5:ef:2e:99: bc:37:af:66:78:98:da:f9:a1:7a:f9:2a:57:34:38:d8:76:59: e4:e8:09:a8:a8:26:2b:b6:9e:d2:42:86:d9:bb:33:d2:78:d2: 5d:69:c9:25:3f:ce:a1:2f:69:15:05:96:12:9d:a3:4c:12:c5: 03:f7:80:63:21:a5:97:c9:25:5d:37:88:34:61:7a:38:67:50: bf:de:13:c9:5c:ad:ca:ee:87:71:75:66:4b:37:74:51:e3:68: 72:66:cd:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw RjdBOTc3ODkwHhcNMjUwNjE5MDEyNzM3WhcNMjUwNjI2MDEyNzM3WjAYMRYwFAYD VQQDEw02ODUzNjc4OS1mZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV5w+szYYZ1+J19SrfsC/3ZNXEAp7CX6dRToCjZZbM7GGvJ3jdzQjmFoMv79 EtCsXFKfTyfMLEqB7CeOUCjSk0K1tnBSSrmgzaCNzQVKg4PNAOsZ7dt5so4L4WSU eXYvy9ASo92SYAzjkRk0VibF/A8P3iEJmzIoijGQd4QNXCcBJk6J2mDXcj+sxoUr HtSMnxTL54r/4wp22dAqvmlSa/vw53PJjcTQc+G3P+BSiINeQ54PL4RKMraBI1UM PfUSwKJnPgF1HxCLCl1K0UhS+sNGg2aeH6Wgqap38WJQ9v9kyGq4VrbNB6U2qcHc 878/tACE+kEoGXrS6DIZAM9LWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrtGyJB Zss7rtZBhWIIxQycgij4MB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zMUI4MjYzQzA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9F ZzB6U3B2LUNHTlFQZXBkNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS4ftsp3kzAQdpvNwOghHFtcL+HHG2Y3o27brbjc9HeKfOB+dwn14j KYRtocMJDaSarvpQllOzuggYalck7yVJF9ZuIVQF+nGqYOcdRLblMs2gzPyYghbm jFquBEoZKMgoUkUM8wi9MlvBfki77mls9/fwcFw+6ux7ErNVGVz8EhrDHzFh3PWb cAj0dD1YHmcJm9SFmAoI2ZYIvFQiWNXvLpm8N69meJja+aF6+SpXNDjYdlnk6Amo qCYrtp7SQobZuzPSeNJdacklP86hL2kVBZYSnaNMEsUD94BjIaWXySVdN4g0YXo4 Z1C/3hPJXK3K7odxdWZLN3RR42hyZs2D -----END CERTIFICATE-----Generated at Thu Jun 19 19:48:14 2025 by rpki-client