$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft File: R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json) Hash identifier: zDpFe9DH92TyN0ha0NQqucDDHVumSM0n00WbRlTPdVQ= Subject key identifier: 0C:8C:78:59:E5:42:D5:53:44:8B:21:31:26:B7:7E:04:31:93:50:CD Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Certificate serial: 0673 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft Manifest number: 065A Signing time: Sat 14 Jun 2025 22:41:28 +0000 Manifest this update: Sat 14 Jun 2025 22:41:28 +0000 Manifest next update: Sat 21 Jun 2025 22:41:28 +0000 Files and hashes: 1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: I7/C4NN+RxGKYTlsVXHAYtxxMueme6uZLmuIVy+pLS8=) 2: A6556900C0DF11EE9BA7B27AC4F9AE02.roa (hash: 7GVgrXEYxEaDjdpBVuH7XCTs4tFbULYhuD4DnoFUT20=) 3: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: UrlgPQXsb4gQDscf1nttcVc31km04Zvk2KGgC6tLDaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Validity Not Before: Jun 14 22:41:28 2025 GMT Not After : Jun 21 22:41:28 2025 GMT Subject: CN=684dfa98-7086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3a:30:3e:29:b8:21:11:dd:72:3e:81:2d:39: a5:0b:e8:9f:ab:1b:44:60:24:0e:61:0d:f7:ba:77: c9:4e:de:b4:e1:d0:78:20:c9:77:3a:03:d0:c9:99: d4:5c:ee:5a:e3:18:7c:7f:72:18:b6:ad:f0:6b:2e: eb:4f:16:73:5f:70:e2:8a:b5:a2:0f:dc:ff:c3:52: 3f:38:de:60:72:1a:89:12:fc:ac:3b:af:6e:8b:7a: 23:1a:47:c5:84:4b:40:ab:d7:98:81:32:0e:12:6b: c5:d9:8e:39:99:d8:a8:26:38:dc:2c:91:2c:c4:16: 46:fc:e0:ba:06:c5:c0:b6:83:5d:04:4d:d8:a3:73: 3b:43:83:62:8e:33:12:ef:aa:d4:f8:02:27:76:a5: bf:3f:a8:76:e2:53:fa:b9:e4:98:b9:15:aa:9f:23: 20:94:07:2e:f2:b4:c4:f2:7e:cf:13:1a:b1:01:40: 2c:f7:03:cb:7e:be:ad:ae:2d:5e:93:4e:22:b1:26: 41:91:68:ae:e4:da:b7:5a:e1:08:9f:93:ad:b7:a5: 12:41:ba:af:59:95:8e:59:da:a0:b2:f4:d1:1e:55: ea:eb:70:63:2b:ee:56:ed:62:4b:35:7d:cc:4c:fb: bc:17:01:2f:f8:ab:06:e9:78:11:f3:31:e5:98:5d: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8C:78:59:E5:42:D5:53:44:8B:21:31:26:B7:7E:04:31:93:50:CD X509v3 Authority Key Identifier: keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:8b:d5:c3:56:5b:47:48:c6:4d:9f:d5:a0:f1:57:65:5f:4a: 8a:38:88:c1:3b:03:65:1a:64:8d:ee:b2:a4:90:3c:ad:59:dd: 04:0b:29:5f:af:bf:cc:ef:15:62:08:2a:17:2f:36:16:5a:91: 4e:7b:9e:ca:cf:b3:50:75:7e:6c:df:13:09:d1:2c:fd:d6:ce: d6:48:b0:2a:05:48:5d:b2:04:97:95:12:10:95:ba:07:58:5d: 48:56:ab:81:f0:52:e9:60:0b:9d:01:5a:81:cf:e1:c5:c6:b0: 9e:b9:30:23:cd:00:d5:47:ae:68:13:d5:5b:86:3e:f3:34:18: 07:bf:cb:67:43:36:d0:61:a9:12:53:7e:fd:3a:ae:1a:2f:39: 3d:7a:3b:94:c3:03:ff:94:b9:01:d0:d7:d8:85:30:77:df:65: 04:84:f8:4c:91:4f:05:de:30:b1:2a:a5:b0:e2:6b:82:e3:a3: 35:1f:89:98:1e:bd:c4:04:37:9b:b0:a4:7c:00:de:d8:8e:37: 9d:a1:9b:21:41:86:15:68:d8:f5:bb:95:06:14:14:c8:64:de: de:56:da:18:2c:36:9c:39:7e:d7:10:05:4c:b0:c5:e4:0a:6a: 5a:78:d8:23:4c:bc:f0:e3:b0:e2:b0:73:75:0d:a0:92:b7:0e: b3:75:7a:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEQjUxMTAvBgNVBAUTKDQ3RUM1M0JGREQzNTEzMjBFODlCMkM1NDFCQUNERDRE OEQ1MkEwQjMwHhcNMjUwNjE0MjI0MTI4WhcNMjUwNjIxMjI0MTI4WjAYMRYwFAYD VQQDEw02ODRkZmE5OC03MDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jowPim4IRHdcj6BLTmlC+ifqxtEYCQOYQ33unfJTt604dB4IMl3OgPQyZnU XO5a4xh8f3IYtq3way7rTxZzX3DiirWiD9z/w1I/ON5gchqJEvysO69ui3ojGkfF hEtAq9eYgTIOEmvF2Y45mdioJjjcLJEsxBZG/OC6BsXAtoNdBE3Yo3M7Q4NijjMS 76rU+AIndqW/P6h24lP6ueSYuRWqnyMglAcu8rTE8n7PExqxAUAs9wPLfr6tri1e k04isSZBkWiu5Nq3WuEIn5Ott6USQbqvWZWOWdqgsvTRHlXq63BjK+5W7WJLNX3M TPu8FwEv+KsG6XgR8zHlmF3eLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyMeFnl QtVTRIshMSa3fgQxk1DNMB8GA1UdIwQYMBaAFEfsU7/dNRMg6JssVBus3U2NUqCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0RCNS8wQzk5OUVDMDhG QTExMUVCQTIyMDY2MUVDNEY5QUUwMi9SLXhUdjkwMUV5RG9teXhVRzZ6ZFRZMVNv TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IteFR2OTAxRXlEb215eFVHNnpkVFkxU29MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0RCNS8wQzk5OUVDMDhGQTExMUVCQTIyMDY2MUVDNEY5QUUwMi9SLXhUdjkwMUV5 RG9teXhVRzZ6ZFRZMVNvTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUi9XDVltHSMZNn9Wg8VdlX0qKOIjBOwNlGmSN7rKkkDytWd0ECylf r7/M7xViCCoXLzYWWpFOe57Kz7NQdX5s3xMJ0Sz91s7WSLAqBUhdsgSXlRIQlboH WF1IVquB8FLpYAudAVqBz+HFxrCeuTAjzQDVR65oE9Vbhj7zNBgHv8tnQzbQYakS U379Oq4aLzk9ejuUwwP/lLkB0NfYhTB332UEhPhMkU8F3jCxKqWw4muC46M1H4mY Hr3EBDebsKR8AN7YjjedoZshQYYVaNj1u5UGFBTIZN7eVtoYLDacOX7XEAVMsMXk CmpaeNgjTLzw47DisHN1DaCStw6zdXqJ -----END CERTIFICATE-----Generated at Sun Jun 15 08:20:07 2025 by rpki-client