$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft File: j6qb2dr2dE3JnQBbAkor2_EAdkE.mft (raw, json) Hash identifier: 9aN4gXQVnydLETpR5Fb7fZJbCTgR6aY0WXQ2zx5kpsQ= Subject key identifier: 47:DA:E6:81:01:0E:61:D5:94:06:E7:E3:51:EE:20:B9:2B:18:17:BD Authority key identifier: 8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41 Certificate issuer: /CN=A9113BB0/serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft Manifest number: 18 Signing time: Tue 01 Jul 2025 08:45:33 +0000 Manifest this update: Tue 01 Jul 2025 08:45:33 +0000 Manifest next update: Tue 08 Jul 2025 08:45:32 +0000 Files and hashes: 1: j6qb2dr2dE3JnQBbAkor2_EAdkE.crl (hash: +9jaCThFxuuqGr6TvQ/jp5w99JvPzfBk7311YEH/nhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641 Validity Not Before: Jul 1 08:45:33 2025 GMT Not After : Jul 8 08:45:32 2025 GMT Subject: CN=6863a02d-fea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:89:c3:0c:9f:87:c9:da:cf:90:d1:10:67: 1a:49:f4:d7:74:35:16:5c:7d:c8:46:5a:83:b1:bd: 65:0e:af:3b:c2:c2:97:88:81:cf:ec:4a:6f:7c:eb: 75:3b:0d:e2:c7:62:cf:1d:d7:4e:e4:8c:46:f1:a4: 2e:9d:4a:b1:3e:a4:83:f3:b1:2a:4a:93:0b:f4:f7: 2b:50:3b:c0:ce:99:6e:08:41:7e:e3:12:57:be:76: 43:c2:62:dc:4a:79:78:51:8c:5d:de:d6:7b:d2:90: d7:40:84:60:77:56:26:f3:7c:86:bf:ad:51:47:93: 4b:5d:67:5e:c3:a4:88:64:0e:db:75:0c:0a:0a:b2: 03:97:8c:89:5b:68:ec:cd:6a:d7:34:60:58:04:21: 2c:c8:33:26:8d:38:c3:22:ab:98:75:fe:5e:d8:1a: 79:74:23:fb:f5:14:c6:80:6f:42:ea:1c:ee:6a:39: 14:bc:7e:3d:54:a1:85:eb:9b:1d:5f:c6:67:57:a4: a6:95:24:e7:3a:d7:ff:ec:29:71:04:7d:05:08:30: ec:cc:d6:08:46:11:05:3d:5f:d8:bf:39:9a:91:b3: a1:42:af:a9:4d:cb:84:d6:41:6b:93:d2:ba:18:2f: af:b7:a9:98:db:b0:17:0e:c2:f8:e3:3c:20:05:f3: 39:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DA:E6:81:01:0E:61:D5:94:06:E7:E3:51:EE:20:B9:2B:18:17:BD X509v3 Authority Key Identifier: keyid:8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:73:c1:80:08:dc:a6:56:97:c6:d5:76:01:47:e4:74:7b:4e: 37:3d:64:6d:2a:26:03:50:4f:bc:03:0c:aa:79:09:64:17:2e: 57:1a:5a:d4:9b:b4:51:6f:ec:ef:49:a3:23:3f:d6:02:e9:ba: 3c:4f:40:12:90:e9:cc:9e:38:17:72:97:ba:46:c3:fa:b8:d6: 9e:60:07:93:72:ab:b9:95:19:03:31:8e:79:5f:ea:5e:4a:58: a9:b0:77:a0:1e:5a:b1:e9:ed:6b:a4:93:bf:3b:1c:3d:6b:6a: da:be:f0:47:30:9c:f1:b3:29:79:17:b8:1f:a8:81:0a:99:55: c2:6f:3a:b7:22:30:ea:74:80:89:2f:f6:30:be:2f:0c:54:20: 4b:2a:77:c7:6a:a5:57:6a:b4:0b:0c:53:db:bf:49:02:ec:92: 31:f7:b5:45:01:55:04:3f:d9:ef:0d:62:48:2a:73:42:4e:62: 49:77:6d:be:a0:54:22:22:b2:9a:0c:9a:10:15:2c:0a:a4:a5: 9f:be:18:10:1a:0d:88:7f:30:23:9b:31:14:d9:d7:42:18:3a: f5:5c:85:e5:f9:40:fc:eb:32:7c:29:d9:8a:34:43:50:62:b8: f9:e7:73:03:40:e7:7a:b2:63:39:0d:99:16:af:5b:d1:3f:0e: 64:86:a5:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoOEZBQTlCRDlEQUY2NzQ0REM5OUQwMDVCMDI0QTJCREJG MTAwNzY0MTAeFw0yNTA3MDEwODQ1MzNaFw0yNTA3MDgwODQ1MzJaMBgxFjAUBgNV BAMTDTY4NjNhMDJkLWZlYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8k4nDDJ+HydrPkNEQZxpJ9Nd0NRZcfchGWoOxvWUOrzvCwpeIgc/sSm9863U7 DeLHYs8d107kjEbxpC6dSrE+pIPzsSpKkwv09ytQO8DOmW4IQX7jEle+dkPCYtxK eXhRjF3e1nvSkNdAhGB3VibzfIa/rVFHk0tdZ17DpIhkDtt1DAoKsgOXjIlbaOzN atc0YFgEISzIMyaNOMMiq5h1/l7YGnl0I/v1FMaAb0LqHO5qORS8fj1UoYXrmx1f xmdXpKaVJOc61//sKXEEfQUIMOzM1ghGEQU9X9i/OZqRs6FCr6lNy4TWQWuT0roY L6+3qZjbsBcOwvjjPCAF8znnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR9rmgQEO YdWUBufjUe4guSsYF70wHwYDVR0jBBgwFoAUj6qb2dr2dE3JnQBbAkor2/EAdkEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwL0E4ODYxNUVFMzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL2o2cWIyZHIyZEUzSm5RQmJBa29yMl9FQWRr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvajZxYjJkcjJkRTNKblFCYkFrb3IyX0VBZGtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwL0E4ODYxNUVFMzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL2o2cWIyZHIyZEUz Sm5RQmJBa29yMl9FQWRrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHhzwYAI3KZWl8bVdgFH5HR7Tjc9ZG0qJgNQT7wDDKp5CWQXLlcaWtSb tFFv7O9JoyM/1gLpujxPQBKQ6cyeOBdyl7pGw/q41p5gB5Nyq7mVGQMxjnlf6l5K WKmwd6AeWrHp7Wukk787HD1ratq+8EcwnPGzKXkXuB+ogQqZVcJvOrciMOp0gIkv 9jC+LwxUIEsqd8dqpVdqtAsMU9u/SQLskjH3tUUBVQQ/2e8NYkgqc0JOYkl3bb6g VCIispoMmhAVLAqkpZ++GBAaDYh/MCObMRTZ10IYOvVcheX5QPzrMnwp2Yo0Q1Bi uPnncwNA53qyYzkNmRavW9E/DmSGpbk= -----END CERTIFICATE-----Generated at Wed Jul 2 21:49:33 2025 by rpki-client