$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft File: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft (raw, json) Hash identifier: lZsDw/Fvr+J50fkyM6VgaHZsq+6RJ8Ua/hpVgJk/n54= Subject key identifier: 18:48:B8:F9:F3:CA:27:45:2A:BE:50:8A:B7:18:9F:6B:6D:57:49:3A Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 Certificate issuer: /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Certificate serial: 04D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft Manifest number: 04CB Signing time: Sat 14 Jun 2025 23:32:10 +0000 Manifest this update: Sat 14 Jun 2025 23:32:10 +0000 Manifest next update: Sat 21 Jun 2025 23:32:10 +0000 Files and hashes: 1: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl (hash: VNieZbmDJMUH2nc9sPcsiVj34sJXSQ9Z/OtNWVzRMbc=) 2: 1443F7BA200411EE84DAD06BC4F9AE02.roa (hash: zLQo77q+5IMP6DcnXVEpDBCRchvfQ2yuvBtuKyjQHYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192E6F, serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Validity Not Before: Jun 14 23:32:10 2025 GMT Not After : Jun 21 23:32:10 2025 GMT Subject: CN=684e067a-f965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:a4:22:21:c4:eb:8b:c8:35:7d:58:45:75: b7:4b:61:e4:b6:84:87:28:cd:39:07:b7:07:7f:24: 52:da:7c:94:d1:1e:8a:6d:4c:15:9d:7e:e0:e0:98: cc:c0:0d:f2:d2:4f:89:c2:53:fd:9a:d6:33:88:2d: 84:e3:e4:41:29:55:ad:77:90:da:87:ff:89:bc:14: 7d:f1:a9:71:47:8c:b5:ac:ee:df:37:23:ac:6a:ee: e0:72:d1:d7:c6:87:f7:9f:4c:38:dc:6f:0b:d8:0b: 87:65:45:e2:ad:98:21:e3:be:ba:00:81:a0:84:b1: 8d:83:d6:0e:5f:87:e5:1f:ec:a0:30:b8:a0:cb:3a: 5e:29:16:1c:48:ab:41:ae:5f:2d:56:a8:97:c4:8f: 91:3d:66:d0:ad:3e:4c:c9:a0:8e:2c:ab:a6:2b:9e: 6d:00:5a:e6:fb:ef:64:49:22:9e:b1:77:91:a2:42: 38:c9:8f:4a:e6:4c:8e:0c:37:21:d6:38:87:03:e9: 94:34:0a:48:ad:72:a6:c4:46:a8:37:a6:e0:2f:52: a5:01:8d:32:7a:a7:2a:91:24:c2:ba:05:c8:ef:f0: 46:08:1a:a1:96:1e:31:1b:34:d1:42:23:b8:45:94: c7:6c:33:c1:14:82:af:c0:4a:64:f2:96:13:3b:3c: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:48:B8:F9:F3:CA:27:45:2A:BE:50:8A:B7:18:9F:6B:6D:57:49:3A X509v3 Authority Key Identifier: keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:c7:8a:68:8c:ba:f3:6f:c2:dd:c4:cb:72:46:df:30:45:b3: e7:05:af:1a:4c:57:73:30:df:d7:be:23:f0:32:54:39:0a:13: 2f:d3:06:9a:9b:10:6d:56:da:ea:31:97:a2:d5:26:53:ee:3a: 2e:00:f8:9b:13:bf:7d:42:85:58:c9:10:85:d4:aa:33:1f:60: 64:b2:a6:98:8f:82:d0:26:f7:2d:46:1e:4d:f3:61:41:c1:be: fc:07:7b:12:30:3b:00:55:94:7a:fa:0d:dc:cd:c6:21:67:b5: 51:75:25:42:05:b3:b1:5d:fc:36:5f:de:15:7d:4f:cd:5e:9b: b4:ef:cc:db:81:04:10:01:8b:12:0f:2f:a0:25:f2:c0:e9:ac: 17:97:ab:fc:8c:81:9a:54:bb:9f:ab:69:a4:e5:46:72:be:ad: 6c:a3:bb:22:3c:24:07:dd:33:dc:ae:98:57:17:48:b8:78:a2: 50:81:30:31:7b:f9:ee:fb:0f:07:df:d5:41:7e:cd:52:cd:ee: 39:c8:0f:1a:16:04:11:f0:ca:4c:19:b3:71:06:9f:05:e5:d2: 71:52:77:03:78:20:8e:15:ff:5e:5e:ec:fb:8e:d5:8e:ab:00: 7b:e8:c6:7b:88:35:d0:a3:2b:fc:14:8f:2b:fe:95:d3:d6:22: 52:bf:c8:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFNkYxMTAvBgNVBAUTKDkzRjQ5REQzRURDOUQ1OTI3MUFGRTEzMTNDOTIxREU2 NkMyMjIwNjQwHhcNMjUwNjE0MjMzMjEwWhcNMjUwNjIxMjMzMjEwWjAYMRYwFAYD VQQDEw02ODRlMDY3YS1mOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcekIiHE64vINX1YRXW3S2HktoSHKM05B7cHfyRS2nyU0R6KbUwVnX7g4JjM wA3y0k+JwlP9mtYziC2E4+RBKVWtd5Dah/+JvBR98alxR4y1rO7fNyOsau7gctHX xof3n0w43G8L2AuHZUXirZgh4766AIGghLGNg9YOX4flH+ygMLigyzpeKRYcSKtB rl8tVqiXxI+RPWbQrT5MyaCOLKumK55tAFrm++9kSSKesXeRokI4yY9K5kyODDch 1jiHA+mUNApIrXKmxEaoN6bgL1KlAY0yeqcqkSTCugXI7/BGCBqhlh4xGzTRQiO4 RZTHbDPBFIKvwEpk8pYTOzzDiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhIuPnz yidFKr5QircYn2ttV0k6MB8GA1UdIwQYMBaAFJP0ndPtydWSca/hMTySHeZsIiBk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkU2Ri82MkVCMURGRTI2 QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFaSnhyLUV4UEpJZDVtd2lJ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tfU2QwLTNKMVpKeHItRXhQSklkNW13aUlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkU2Ri82MkVCMURGRTI2QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFa SnhyLUV4UEpJZDVtd2lJR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChx4pojLrzb8LdxMtyRt8wRbPnBa8aTFdzMN/XviPwMlQ5ChMv0waa mxBtVtrqMZei1SZT7jouAPibE799QoVYyRCF1KozH2BksqaYj4LQJvctRh5N82FB wb78B3sSMDsAVZR6+g3czcYhZ7VRdSVCBbOxXfw2X94VfU/NXpu078zbgQQQAYsS Dy+gJfLA6awXl6v8jIGaVLufq2mk5UZyvq1so7siPCQH3TPcrphXF0i4eKJQgTAx e/nu+w8H39VBfs1Sze45yA8aFgQR8MpMGbNxBp8F5dJxUncDeCCOFf9eXuz7jtWO qwB76MZ7iDXQoyv8FI8r/pXT1iJSv8gb -----END CERTIFICATE-----Generated at Sun Jun 15 05:12:49 2025 by rpki-client