$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft File: Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json) Hash identifier: DTxZKnbJ8KhZpU0jYDDMk/D8cT5+jnjZELkFklWcvQM= Subject key identifier: 05:02:F8:10:BC:7E:AA:1C:0B:A8:01:99:8D:90:D6:08:7C:FB:68:3C Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft Manifest number: 05FD Signing time: Sat 14 Jun 2025 22:39:00 +0000 Manifest this update: Sat 14 Jun 2025 22:39:00 +0000 Manifest next update: Sat 21 Jun 2025 22:39:00 +0000 Files and hashes: 1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: JVosBCwBigKFJDpm7Hf7w1t1UaP8lQNrHVoS1bxXfKA=) 2: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: kdGlpoPLDFl4EFsEkQ3+koS5Zps0quso4evVDz2ybGs=) 3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: SrZKBZGz8OzOGhz2SHKRuiCBww7vVTb4bHz7dYOe5eA=) 4: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: y01Dpux3/iKwZXDRv92g3i91QNG9oOahiRukT+wPDl0=) 5: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: OSggIm+/p+MrL8wcnCaLfLB40YedacjWTkw8IkjnU3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Validity Not Before: Jun 14 22:39:00 2025 GMT Not After : Jun 21 22:39:00 2025 GMT Subject: CN=684dfa04-2fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:03:72:83:0a:e3:f2:65:83:d5:00:14:ca: 25:cf:de:6a:a1:40:a5:cf:7b:02:30:29:8a:0e:2e: 5e:3a:fa:7e:c6:83:6e:ea:07:5f:9a:b7:2e:07:fb: 67:36:2f:04:b5:5c:dc:49:4a:df:07:49:ab:e8:0a: 09:66:65:de:50:96:27:4e:8f:48:42:17:30:b8:f5: 34:6f:9a:2e:d9:26:e0:4c:4c:61:c7:43:f8:fa:6a: cd:16:ec:03:46:40:99:ac:9c:64:f5:f9:a2:62:84: 5c:c6:4e:a2:21:47:d7:0d:0e:d8:e3:65:b2:af:bf: e2:37:90:8e:f2:bd:b1:b9:9b:cc:61:41:d4:f0:2b: d4:ee:a5:ef:8e:e2:12:82:dc:af:c5:b3:32:da:41: 1d:9e:59:63:ec:8d:ac:4f:5e:f5:4e:b2:7b:14:b7: 59:87:fe:e4:d6:98:f6:f2:12:16:33:5c:6c:8e:58: be:24:ed:5d:83:14:06:08:d3:a3:84:39:70:5c:27: 91:75:3f:86:43:e8:70:75:86:83:75:8a:64:07:71: 3e:ac:70:37:da:b4:f3:f3:9f:3d:84:81:b4:fb:78: 0a:80:a0:b0:a6:91:9c:9d:16:90:0f:1c:91:a2:dd: ce:92:96:03:6a:56:0d:c7:65:5f:c7:d6:cf:8e:a6: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:02:F8:10:BC:7E:AA:1C:0B:A8:01:99:8D:90:D6:08:7C:FB:68:3C X509v3 Authority Key Identifier: keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:aa:b9:2e:cf:6d:56:97:68:03:7e:57:64:55:d5:75:cb:14: 11:e2:53:9f:39:f0:34:10:d1:6a:fd:0b:f4:77:04:a5:56:af: 55:64:19:40:59:dc:be:d7:35:6f:54:89:36:14:65:46:a3:03: 13:0f:72:36:83:91:e8:ad:0d:7b:ef:b3:f7:97:a1:0f:0e:61: a8:ba:10:0a:d6:b1:a1:bf:c7:97:1a:ee:33:3f:5d:ee:c1:6d: ea:02:33:10:b9:b9:80:64:58:66:91:c4:30:7a:29:72:c1:e7: d1:ec:90:6f:dd:92:5a:45:16:fd:a1:44:d9:92:a8:4e:cd:e1: 2e:39:45:93:03:18:2b:fe:e8:7f:94:5e:28:f4:0b:01:2c:d6: 27:ee:e5:cb:c5:7f:fc:ef:71:30:56:47:7e:9c:32:1d:74:5c: bc:8b:b2:b1:30:2b:ae:f4:93:f1:26:75:e6:e1:7e:a2:fa:c7: ce:31:8e:aa:8f:40:a7:41:ac:6b:90:09:ef:2f:ec:f1:8c:9a: 8d:7d:25:07:4b:da:fd:e1:9a:82:6b:5c:61:70:6c:60:19:1c: e6:60:18:4f:ce:be:2e:0f:fd:15:80:ed:14:6d:f9:b6:fc:f4: c8:1d:87:20:f0:64:62:96:00:b3:75:fe:18:06:b2:8d:bc:57: ed:a3:b4:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD OTk3MDlCMjIwHhcNMjUwNjE0MjIzOTAwWhcNMjUwNjIxMjIzOTAwWjAYMRYwFAYD VQQDEw02ODRkZmEwNC0yZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyx8DcoMK4/Jlg9UAFMolz95qoUClz3sCMCmKDi5eOvp+xoNu6gdfmrcuB/tn Ni8EtVzcSUrfB0mr6AoJZmXeUJYnTo9IQhcwuPU0b5ou2SbgTExhx0P4+mrNFuwD RkCZrJxk9fmiYoRcxk6iIUfXDQ7Y42Wyr7/iN5CO8r2xuZvMYUHU8CvU7qXvjuIS gtyvxbMy2kEdnllj7I2sT171TrJ7FLdZh/7k1pj28hIWM1xsjli+JO1dgxQGCNOj hDlwXCeRdT+GQ+hwdYaDdYpkB3E+rHA32rTz8589hIG0+3gKgKCwppGcnRaQDxyR ot3OkpYDalYNx2Vfx9bPjqakrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUC+BC8 fqocC6gBmY2Q1gh8+2g8MB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUI1MC9DNkMwNDlCMkFFRkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2Ukxw XzgwcUxnMlNDT3ZKbHdteUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtqrkuz21Wl2gDfldkVdV1yxQR4lOfOfA0ENFq/Qv0dwSlVq9VZBlA Wdy+1zVvVIk2FGVGowMTD3I2g5HorQ1777P3l6EPDmGouhAK1rGhv8eXGu4zP13u wW3qAjMQubmAZFhmkcQweilywefR7JBv3ZJaRRb9oUTZkqhOzeEuOUWTAxgr/uh/ lF4o9AsBLNYn7uXLxX/873EwVkd+nDIddFy8i7KxMCuu9JPxJnXm4X6i+sfOMY6q j0CnQaxrkAnvL+zxjJqNfSUHS9r94ZqCa1xhcGxgGRzmYBhPzr4uD/0VgO0Ubfm2 /PTIHYcg8GRilgCzdf4YBrKNvFfto7Q+ -----END CERTIFICATE-----Generated at Mon Jun 16 14:59:35 2025 by rpki-client