$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft File: r0YdV6kKM1svp3p6rsFnNJVJI7E.mft (raw, json) Hash identifier: TcAtExVd0hegRvTRwE7EAtraLP6jZT8UdKE8E6Leu6g= Subject key identifier: 5C:9E:BA:6D:CA:F3:3F:AE:45:05:2F:71:2B:C0:1C:A5:42:34:77:2F Authority key identifier: AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 Certificate issuer: /CN=A9114EF6/serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft Manifest number: 4C Signing time: Tue 13 May 2025 06:40:54 +0000 Manifest this update: Tue 13 May 2025 06:40:53 +0000 Manifest next update: Tue 20 May 2025 06:40:53 +0000 Files and hashes: 1: r0YdV6kKM1svp3p6rsFnNJVJI7E.crl (hash: QpzfWlNX6Dl0Mn87TIzppHXQShxy37orMJgCOEWiQ3Q=) 2: 7EF2846AD16911EF9ECCE01FC4F9AE02.roa (hash: rKGqZf7K9QKHRBXlpgZth78K2mjkrDt+mwCvAfFIYLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Validity Not Before: May 13 06:40:53 2025 GMT Not After : May 20 06:40:53 2025 GMT Subject: CN=6822e976-f91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:e7:8c:a6:32:30:7a:ce:f5:5c:52:57:83: 73:9e:dd:89:30:dd:bb:0f:47:95:e9:4d:22:48:40: b8:14:7e:69:d6:98:30:39:0c:03:f3:7b:0d:60:60: b1:2d:8b:01:64:63:23:d8:23:d9:ba:91:0a:9f:64: d2:ff:38:c5:58:96:5a:de:72:f5:da:75:e7:a5:31: 96:f7:07:52:24:aa:e7:e6:d8:87:d1:76:29:40:a1: 7f:5d:cc:68:68:f8:ee:51:15:d7:a2:b7:77:7b:90: ea:87:10:ba:63:65:44:3e:59:f4:8b:2a:dc:fa:c3: 84:6c:52:41:4f:c8:bb:5a:fe:6a:79:74:0a:e2:36: 07:0c:37:c5:16:df:06:3c:34:f4:e1:e8:35:5c:f9: 2b:43:f8:a7:2d:27:25:81:97:c0:5d:27:78:03:14: 2e:e6:dc:6b:6a:a9:4a:2b:1b:e2:9b:11:73:b1:da: 0e:ee:67:95:14:05:6e:2a:9f:f5:3f:d4:88:81:27: b8:bd:07:fe:5d:d2:48:ed:c6:2e:d7:d7:98:0e:3e: b9:c9:e7:42:26:8d:9d:ea:c5:2e:dc:fd:f0:87:50: ed:8c:6a:38:c5:82:e1:f9:6c:81:ae:5c:46:70:de: e0:96:88:88:30:71:f3:87:ab:82:ed:95:2d:38:5b: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9E:BA:6D:CA:F3:3F:AE:45:05:2F:71:2B:C0:1C:A5:42:34:77:2F X509v3 Authority Key Identifier: keyid:AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:46:32:2a:62:7f:f2:5b:49:8f:94:a7:91:6d:22:83:3f:fc: 69:cd:8a:d6:e7:6e:22:64:ae:b6:6e:61:66:c9:ce:ad:a4:52: 8f:6f:2c:4b:ee:f5:4b:12:76:6e:ab:33:93:66:c5:7c:1d:ab: 72:b1:a0:aa:81:98:eb:72:0a:eb:bd:13:d6:a6:e0:24:97:7d: dd:e5:23:32:34:91:b9:8a:aa:3b:bf:4f:3c:06:3d:af:03:41: 4b:9d:43:6c:0c:16:d4:a1:95:f3:26:f1:9d:4f:1e:3e:c9:a3: f5:a7:13:8b:2d:67:22:cd:40:a4:35:ce:6f:f3:ad:b5:c1:e4: 19:ad:48:89:f6:20:da:58:36:08:c2:72:0c:5a:7a:86:39:cc: 6f:b0:c9:a2:a1:d7:51:53:95:e2:fa:8f:2a:e8:7e:24:87:a4: 13:c8:a8:46:44:28:c4:2c:e6:ae:3f:5e:2e:f3:fd:d2:5d:bd: db:ff:df:d0:46:dc:7d:5b:7b:08:de:50:d9:2a:99:d1:a1:9a: 53:13:84:fd:b2:b6:bd:d2:16:17:b9:50:1a:56:a5:53:a8:b4: 2c:7e:4a:a0:a0:5a:5b:6b:94:b0:96:01:8f:17:b9:14:3c:30: b6:bc:44:fc:a1:e8:47:ce:d4:68:59:2f:74:33:74:2d:c1:4d: 85:9e:c2:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoQUY0NjFENTdBOTBBMzM1QjJGQTc3QTdBQUVDMTY3MzQ5 NTQ5MjNCMTAeFw0yNTA1MTMwNjQwNTNaFw0yNTA1MjAwNjQwNTNaMBgxFjAUBgNV BAMTDTY4MjJlOTc2LWY5MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4m+eMpjIwes71XFJXg3Oe3Ykw3bsPR5XpTSJIQLgUfmnWmDA5DAPzew1gYLEt iwFkYyPYI9m6kQqfZNL/OMVYllrecvXadeelMZb3B1Ikqufm2IfRdilAoX9dzGho +O5RFdeit3d7kOqHELpjZUQ+WfSLKtz6w4RsUkFPyLta/mp5dAriNgcMN8UW3wY8 NPTh6DVc+StD+KctJyWBl8BdJ3gDFC7m3GtqqUorG+KbEXOx2g7uZ5UUBW4qn/U/ 1IiBJ7i9B/5d0kjtxi7X15gOPrnJ50ImjZ3qxS7c/fCHUO2MajjFguH5bIGuXEZw 3uCWiIgwcfOHq4LtlS04W2vBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXJ66bcrz P65FBS9xK8AcpUI0dy8wHwYDVR0jBBgwFoAUr0YdV6kKM1svp3p6rsFnNJVJI7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2LzhEQUUwNUEwRDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFzdnAzcDZyc0ZuTkpWSkk3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcjBZZFY2a0tNMXN2cDNwNnJzRm5OSlZKSTdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2LzhEQUUwNUEwRDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFz dnAzcDZyc0ZuTkpWSkk3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJFGMipif/JbSY+Up5FtIoM//GnNitbnbiJkrrZuYWbJzq2kUo9vLEvu 9UsSdm6rM5NmxXwdq3KxoKqBmOtyCuu9E9am4CSXfd3lIzI0kbmKqju/TzwGPa8D QUudQ2wMFtShlfMm8Z1PHj7Jo/WnE4stZyLNQKQ1zm/zrbXB5BmtSIn2INpYNgjC cgxaeoY5zG+wyaKh11FTleL6jyrofiSHpBPIqEZEKMQs5q4/Xi7z/dJdvdv/39BG 3H1bewjeUNkqmdGhmlMThP2ytr3SFhe5UBpWpVOotCx+SqCgWltrlLCWAY8XuRQ8 MLa8RPyh6EfO1GhZL3QzdC3BTYWewt4= -----END CERTIFICATE-----Generated at Wed May 14 05:08:22 2025 by rpki-client