$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft File: S0w6zHYgyo0mn3fC-L5soNohdic.mft (raw, json) Hash identifier: f7aqY4YgDozjXw1DWIeeg9GkqncVeV+QRE8+9Ylqj+8= Subject key identifier: 63:6A:88:76:C8:1A:46:27:5E:CB:BC:E2:A5:CA:7A:53:95:8E:76:50 Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 Certificate issuer: /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft Manifest number: 0422 Signing time: Sun 15 Jun 2025 00:06:30 +0000 Manifest this update: Sun 15 Jun 2025 00:06:30 +0000 Manifest next update: Sun 22 Jun 2025 00:06:30 +0000 Files and hashes: 1: S0w6zHYgyo0mn3fC-L5soNohdic.crl (hash: tMWF6sew8lqrWn1dzA6XvMf8ObdWAbIEzZEn65qvfMc=) 2: AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (hash: Hj2ed/vfEs3kfitU1w0BAdoi0iJDtRaYFfE12UdPkyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CD5, serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Validity Not Before: Jun 15 00:06:30 2025 GMT Not After : Jun 22 00:06:30 2025 GMT Subject: CN=684e0e86-6fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d1:a1:21:55:7b:16:e9:98:3a:29:55:fa:a4: c7:a3:b5:24:a8:9d:23:90:95:bd:52:a8:18:56:b6: 37:ff:a1:ca:15:70:ad:fd:04:84:2f:c5:ef:56:26: e5:c5:30:9d:0a:0a:c2:a0:41:b7:1c:8a:a5:9d:6a: 19:cb:84:73:73:52:6c:64:22:b2:b0:7c:9b:9f:41: 44:56:51:be:07:94:3e:e8:f0:c4:0e:76:86:6f:d5: 8a:62:95:95:4d:e4:af:ca:f2:c4:a4:34:2b:43:33: 25:e8:34:3e:96:b2:43:2f:2d:7a:30:1d:6a:98:ca: 7f:0c:b6:6f:56:3d:55:86:bf:37:86:70:4a:8f:fd: b5:03:b3:42:af:de:5b:7a:69:1b:70:8c:0f:52:40: 12:db:ac:85:41:e3:48:c1:24:34:38:d2:be:ea:c3: 4e:5f:98:38:f6:1e:e4:f4:97:ff:0a:fb:52:e9:21: f2:cb:c7:27:fc:5b:cc:a2:1d:96:12:18:d6:fe:5a: 59:58:74:45:0b:2f:df:5f:c8:c6:c1:53:e5:ed:47: 8d:4d:4d:c8:f9:d6:5c:0c:23:9c:7f:16:73:58:e2: 32:0f:f4:b4:49:70:28:5f:22:02:b0:19:f9:77:f4: 59:e0:f4:22:cc:2e:d6:65:07:99:76:e0:4a:d5:58: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6A:88:76:C8:1A:46:27:5E:CB:BC:E2:A5:CA:7A:53:95:8E:76:50 X509v3 Authority Key Identifier: keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:61:b8:71:39:8d:57:d5:7b:20:c4:2f:0d:b4:67:fd:47:a8: 4a:1a:da:56:e6:34:87:08:6a:7d:a6:4c:b8:d1:76:04:44:c2: 0a:ef:19:15:e5:eb:6e:24:b8:0a:d4:76:eb:84:97:fb:de:44: f8:ce:74:bf:60:cf:f6:54:94:44:c7:25:e3:8b:3b:5a:9d:ed: eb:25:ef:1c:3c:9b:ff:0f:f6:41:b6:f6:1d:2d:e5:21:22:35: 6e:db:42:3c:b2:a5:db:7d:63:92:b8:de:aa:a4:17:29:30:57: 20:a6:36:dd:84:db:ac:d3:c8:a8:0f:ed:90:65:80:99:5f:b2: fb:31:50:0a:98:09:45:77:61:52:ef:e2:a4:9a:95:06:65:96: 61:73:1f:f2:7b:49:61:ea:a4:9a:ca:4c:9b:3c:f5:4c:a3:e1: b7:96:06:ab:54:95:76:9a:76:f8:90:16:46:e5:35:b9:56:09: b0:67:7f:36:b2:79:c0:46:1d:09:8e:64:66:02:37:bc:a8:e9: 2e:f4:b9:4e:86:e5:04:90:41:f6:f5:ac:d2:7b:af:c9:63:2b: 1d:65:d4:34:4b:f6:c4:6f:cb:e5:b8:e4:96:91:da:fd:e7:93: 89:c8:61:c1:4a:e5:e4:59:60:fe:d8:44:3e:f0:19:48:71:52: 67:ba:a7:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDRDUxMTAvBgNVBAUTKDRCNEMzQUNDNzYyMENBOEQyNjlGNzdDMkY4QkU2Q0Ew REEyMTc2MjcwHhcNMjUwNjE1MDAwNjMwWhcNMjUwNjIyMDAwNjMwWjAYMRYwFAYD VQQDEw02ODRlMGU4Ni02ZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtGhIVV7FumYOilV+qTHo7UkqJ0jkJW9UqgYVrY3/6HKFXCt/QSEL8XvVibl xTCdCgrCoEG3HIqlnWoZy4Rzc1JsZCKysHybn0FEVlG+B5Q+6PDEDnaGb9WKYpWV TeSvyvLEpDQrQzMl6DQ+lrJDLy16MB1qmMp/DLZvVj1Vhr83hnBKj/21A7NCr95b emkbcIwPUkAS26yFQeNIwSQ0ONK+6sNOX5g49h7k9Jf/CvtS6SHyy8cn/FvMoh2W EhjW/lpZWHRFCy/fX8jGwVPl7UeNTU3I+dZcDCOcfxZzWOIyD/S0SXAoXyICsBn5 d/RZ4PQizC7WZQeZduBK1Vg+swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNqiHbI GkYnXsu84qXKelOVjnZQMB8GA1UdIwQYMBaAFEtMOsx2IMqNJp93wvi+bKDaIXYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNENS84MDRCMUU5MjZB REExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lvMG1uM2ZDLUw1c29Ob2hk aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwdzZ6SFlneW8wbW4zZkMtTDVzb05vaGRpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNENS84MDRCMUU5MjZBREExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lv MG1uM2ZDLUw1c29Ob2hkaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEYbhxOY1X1XsgxC8NtGf9R6hKGtpW5jSHCGp9pky40XYERMIK7xkV 5etuJLgK1HbrhJf73kT4znS/YM/2VJRExyXjiztane3rJe8cPJv/D/ZBtvYdLeUh IjVu20I8sqXbfWOSuN6qpBcpMFcgpjbdhNus08ioD+2QZYCZX7L7MVAKmAlFd2FS 7+KkmpUGZZZhcx/ye0lh6qSaykybPPVMo+G3lgarVJV2mnb4kBZG5TW5VgmwZ382 snnARh0JjmRmAje8qOku9LlOhuUEkEH29azSe6/JYysdZdQ0S/bEb8vluOSWkdr9 55OJyGHBSuXkWWD+2EQ+8BlIcVJnuqe8 -----END CERTIFICATE-----Generated at Sun Jun 15 10:03:06 2025 by rpki-client