$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft File: k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json) Hash identifier: Xv+CwQ+L7DD19LdCqAKBzvCM6Ef5o5WXpnljdpmrxjA= Subject key identifier: 44:5D:3D:56:E9:BB:48:68:8A:3D:D2:2B:D4:61:D1:65:64:70:F7:C6 Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD Certificate issuer: /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Certificate serial: 047B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft Manifest number: 0477 Signing time: Sat 14 Jun 2025 23:48:54 +0000 Manifest this update: Sat 14 Jun 2025 23:48:53 +0000 Manifest next update: Sat 21 Jun 2025 23:48:53 +0000 Files and hashes: 1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: +iJxMYG7QC/DQWvbr0hE/C8aKHuLbv+7ggjJapryILE=) 2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: MtaWbSK5JAjEiEpHTj/1X7DdZqPg3BZxUlQCHg85KTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147 (0x47b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Validity Not Before: Jun 14 23:48:53 2025 GMT Not After : Jun 21 23:48:53 2025 GMT Subject: CN=684e0a65-c57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:a2:19:7b:4c:cb:1f:22:c0:91:d7:ce:8e: b6:cd:20:65:1f:54:fa:40:dd:af:25:2b:e3:4c:4b: 48:a3:ed:08:aa:0d:3e:4f:5f:6e:79:0a:35:6f:c8: 82:2e:98:41:a1:41:df:51:c2:3d:b3:86:66:44:53: 99:24:72:62:c8:22:ba:79:4c:3a:ec:9d:46:74:1f: bd:b1:bb:6f:8b:10:13:07:9f:d9:d8:ed:75:a4:29: 91:79:48:2a:d6:42:67:13:cc:81:b0:bf:fe:e4:ec: 77:46:eb:17:ad:a6:e1:ae:6f:d6:7a:0c:ba:51:d5: 88:7f:de:79:41:77:6b:8c:57:d1:eb:0c:7f:f1:40: 37:0f:10:88:77:6d:50:59:9f:7d:ca:c8:57:49:d9: fa:12:8f:de:8e:0a:b7:82:31:a3:cd:32:73:f6:1c: e1:16:67:c5:97:65:2f:7d:b4:7e:9a:9f:99:08:90: d4:9c:95:f7:53:df:70:00:74:05:1e:11:8e:04:cf: c3:0c:62:62:5a:64:e7:08:c8:74:10:49:36:03:67: 6f:6f:6f:c4:79:a4:99:4d:2e:ae:e1:f9:4c:c5:27: ec:07:2c:98:79:2c:be:bd:78:6f:70:df:1d:36:88: 5e:dd:e7:2c:8a:93:b6:71:cb:92:f0:50:44:45:a9: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5D:3D:56:E9:BB:48:68:8A:3D:D2:2B:D4:61:D1:65:64:70:F7:C6 X509v3 Authority Key Identifier: keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:49:ad:c3:a0:b3:66:c9:b3:27:53:87:8f:d8:0e:76:ea:4e: 63:59:a5:ba:41:a8:5e:42:ae:92:f0:aa:4d:ec:79:d1:f8:22: ac:a5:63:bb:b8:fc:ff:c5:73:ed:71:c3:b6:70:a1:2a:ed:f2: 3d:aa:56:4e:08:5f:6d:4f:0e:d6:3a:94:e0:9f:53:37:ee:82: 54:d7:b4:95:29:0b:fe:78:7b:46:02:86:57:f6:05:cd:06:cf: 09:49:f1:ec:c0:26:d7:b9:12:1c:2c:56:85:49:41:28:95:1f: c5:d3:02:48:b1:85:53:d5:62:9d:39:20:6c:1c:c6:46:f3:20: e1:d6:6d:89:aa:f4:7c:71:ca:38:6e:b9:f7:4b:67:ff:c8:ce: eb:72:c0:95:82:e4:93:0e:d1:6c:41:4a:ea:75:30:c7:88:3f: 8d:98:a3:31:30:7c:2f:1f:23:b1:a6:ad:dd:3b:19:48:e7:01: 03:6b:f9:d4:e8:ae:df:e3:f1:29:ab:a0:02:8c:cf:03:7b:92: 01:af:e2:18:a9:66:e1:ff:1a:76:41:d8:63:4f:ab:03:31:72: de:9b:49:f7:25:ac:1d:c3:bf:bd:90:2e:ca:dc:51:75:e8:2d: 1c:a1:99:21:6f:a9:17:37:69:02:a0:37:6f:3f:85:9e:43:d6: 86:f0:c2:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM5MkIxMTAvBgNVBAUTKDkzNEZGMjNCMzhFQzZENThBNkNBQUI3MDdCNzk1NTUx Qzg5QzMxRkQwHhcNMjUwNjE0MjM0ODUzWhcNMjUwNjIxMjM0ODUzWjAYMRYwFAYD VQQDEw02ODRlMGE2NS1jNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R+iGXtMyx8iwJHXzo62zSBlH1T6QN2vJSvjTEtIo+0Iqg0+T19ueQo1b8iC LphBoUHfUcI9s4ZmRFOZJHJiyCK6eUw67J1GdB+9sbtvixATB5/Z2O11pCmReUgq 1kJnE8yBsL/+5Ox3RusXrabhrm/Wegy6UdWIf955QXdrjFfR6wx/8UA3DxCId21Q WZ99yshXSdn6Eo/ejgq3gjGjzTJz9hzhFmfFl2UvfbR+mp+ZCJDUnJX3U99wAHQF HhGOBM/DDGJiWmTnCMh0EEk2A2dvb2/EeaSZTS6u4flMxSfsByyYeSy+vXhvcN8d Nohe3ecsipO2ccuS8FBERanoeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERdPVbp u0hoij3SK9Rh0WVkcPfGMB8GA1UdIwQYMBaAFJNP8js47G1YpsqrcHt5VVHInDH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzkyQi9CMjBEQUQ2NjQ4 MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JWaW15cXR3ZTNsVlVjaWNN ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swX3lPempzYlZpbXlxdHdlM2xWVWNpY01mMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzkyQi9CMjBEQUQ2NjQ4MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JW aW15cXR3ZTNsVlVjaWNNZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Sa3DoLNmybMnU4eP2A526k5jWaW6QaheQq6S8KpN7HnR+CKspWO7 uPz/xXPtccO2cKEq7fI9qlZOCF9tTw7WOpTgn1M37oJU17SVKQv+eHtGAoZX9gXN Bs8JSfHswCbXuRIcLFaFSUEolR/F0wJIsYVT1WKdOSBsHMZG8yDh1m2JqvR8cco4 brn3S2f/yM7rcsCVguSTDtFsQUrqdTDHiD+NmKMxMHwvHyOxpq3dOxlI5wEDa/nU 6K7f4/Epq6ACjM8De5IBr+IYqWbh/xp2QdhjT6sDMXLem0n3Jawdw7+9kC7K3FF1 6C0coZkhb6kXN2kCoDdvP4WeQ9aG8MKd -----END CERTIFICATE-----Generated at Sun Jun 15 09:45:09 2025 by rpki-client