$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json) Hash identifier: iz8IR8VKvmnAOHjRRcBjQjyqczi8S+n2gR41uUMcfCk= Subject key identifier: 59:6C:AA:E1:CB:E4:90:B2:EF:0D:FB:29:50:04:8A:A6:2D:1C:8F:96 Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft Manifest number: B6 Signing time: Tue 17 Jun 2025 04:55:39 +0000 Manifest this update: Tue 17 Jun 2025 04:55:38 +0000 Manifest next update: Tue 24 Jun 2025 04:55:38 +0000 Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: tmpHgVSQ0VcjTiNgKzRILPfk1J6meyJrU5/NTJ912s4=) 2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Validity Not Before: Jun 17 04:55:38 2025 GMT Not After : Jun 24 04:55:38 2025 GMT Subject: CN=6850f54a-9491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:e2:22:9a:af:01:0a:92:fb:5a:a4:22:8b: 4e:f5:f5:99:65:f0:81:99:1c:a8:70:13:7e:b1:03: 5b:b2:24:35:b2:b2:65:16:d8:94:50:d5:51:84:b0: 5a:bc:af:cf:84:aa:63:74:54:b8:4a:1f:79:c9:03: ac:6d:8a:17:8d:b1:eb:08:6c:ff:32:e7:63:62:05: cf:d9:2e:ad:1d:88:f4:1e:b8:4c:70:18:e6:aa:ba: 7b:56:f8:14:6f:f6:ff:44:36:04:ed:64:ec:4f:1e: 28:9b:04:26:36:87:d5:b6:8e:ca:99:6f:15:2f:57: 80:1c:23:da:fa:24:47:01:d6:e9:1a:9b:20:58:3b: 27:0a:fe:fc:4b:7b:16:1a:3e:1c:31:27:78:68:df: 8b:ac:f6:8e:f8:cc:81:1f:86:d3:61:58:14:49:ff: f8:da:2b:c1:98:ae:98:bd:83:ee:47:3f:dd:65:22: c6:33:39:d8:08:04:cc:41:59:ab:03:2b:38:7a:92: 83:76:2f:1a:00:4d:25:af:a8:ff:81:fb:a8:dc:0d: 4a:94:91:ae:6c:a9:3c:40:e9:ff:a4:71:49:06:79: 5f:92:1f:73:0a:c7:e8:d2:36:e2:51:22:a0:81:4c: b6:48:46:6d:a8:a9:16:87:31:c5:4f:4b:2b:2a:b9: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6C:AA:E1:CB:E4:90:B2:EF:0D:FB:29:50:04:8A:A6:2D:1C:8F:96 X509v3 Authority Key Identifier: keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a9:93:d9:2e:19:aa:e9:75:69:c3:fe:dd:74:88:a4:2c:35: 46:d6:4f:1c:f7:e3:0c:80:3c:51:ad:32:1c:8f:fe:ae:e3:dc: 62:50:37:8d:fa:62:86:02:48:59:05:30:21:d7:c5:88:e8:88: 6e:19:f1:e6:1d:81:e3:c1:d6:76:39:b5:6a:b6:18:8a:86:2a: f6:9b:c4:d9:7c:5f:f5:9b:f0:4a:0c:95:b2:62:f5:99:9d:fd: 4b:73:89:a2:50:81:2a:d8:70:de:1b:21:e6:9e:10:1a:97:03: a6:66:a2:9a:54:34:29:ae:83:2f:d7:f3:f2:d4:ce:c7:a2:03: ce:c0:a4:09:42:6c:42:1e:91:c8:18:b8:e3:9b:6c:03:c9:45: c7:af:5b:7e:c0:41:6a:08:82:b7:92:1d:ad:c4:cf:c5:2c:6e: 6f:de:28:9f:e9:2e:7a:0e:6f:6d:fa:cf:68:9e:05:88:3c:d1: 3f:13:a3:bf:81:8c:f7:82:08:d6:50:aa:d8:b2:7a:ab:9a:f0: d8:99:2f:5e:c6:93:84:7d:45:8d:83:7a:9b:0d:39:68:d9:a6: be:9d:19:0c:80:d7:bb:53:12:b7:32:78:a0:ca:c1:b3:a4:4f: 22:55:58:10:63:6a:23:fc:78:67:a5:84:ef:83:9a:82:5c:51: 1a:18:a2:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDc0QTExNjY5QzQzRTUzQjBGMjFENEI0MTNGOTJEOUVB OTEzMTU1MDMwHhcNMjUwNjE3MDQ1NTM4WhcNMjUwNjI0MDQ1NTM4WjAYMRYwFAYD VQQDEw02ODUwZjU0YS05NDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZbiIpqvAQqS+1qkIotO9fWZZfCBmRyocBN+sQNbsiQ1srJlFtiUUNVRhLBa vK/PhKpjdFS4Sh95yQOsbYoXjbHrCGz/MudjYgXP2S6tHYj0HrhMcBjmqrp7VvgU b/b/RDYE7WTsTx4omwQmNofVto7KmW8VL1eAHCPa+iRHAdbpGpsgWDsnCv78S3sW Gj4cMSd4aN+LrPaO+MyBH4bTYVgUSf/42ivBmK6YvYPuRz/dZSLGMznYCATMQVmr Ays4epKDdi8aAE0lr6j/gfuo3A1KlJGubKk8QOn/pHFJBnlfkh9zCsfo0jbiUSKg gUy2SEZtqKkWhzHFT0srKrl5PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlsquHL 5JCy7w37KVAEiqYtHI+WMB8GA1UdIwQYMBaAFHShFmnEPlOw8h1LQT+S2eqRMVUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC83OTNFQTZEQTM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3RHlIVXRCUDVMWjZwRXhW UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RLRVdhY1EtVTdEeUhVdEJQNUxaNnBFeFZRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC83OTNFQTZEQTM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3 RHlIVXRCUDVMWjZwRXhWUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMqZPZLhmq6XVpw/7ddIikLDVG1k8c9+MMgDxRrTIcj/6u49xiUDeN +mKGAkhZBTAh18WI6IhuGfHmHYHjwdZ2ObVqthiKhir2m8TZfF/1m/BKDJWyYvWZ nf1Lc4miUIEq2HDeGyHmnhAalwOmZqKaVDQproMv1/Py1M7HogPOwKQJQmxCHpHI GLjjm2wDyUXHr1t+wEFqCIK3kh2txM/FLG5v3iif6S56Dm9t+s9ongWIPNE/E6O/ gYz3ggjWUKrYsnqrmvDYmS9expOEfUWNg3qbDTlo2aa+nRkMgNe7UxK3MnigysGz pE8iVVgQY2oj/HhnpYTvg5qCXFEaGKKd -----END CERTIFICATE-----Generated at Wed Jun 18 03:01:44 2025 by rpki-client