$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: 8ThXhGIIK3FCkeWMDtdVjtcnCcImgxfCXyuInI46/J0= Subject key identifier: FE:26:46:A7:40:85:2F:97:3F:A4:17:7F:95:FD:5D:AC:FD:49:27:4B Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 01FB Signing time: Thu 03 Jul 2025 02:30:57 +0000 Manifest this update: Thu 03 Jul 2025 02:30:56 +0000 Manifest next update: Thu 10 Jul 2025 02:30:56 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: 1dF5ivtmc/5dVGXMzXFolPsdHst7O88N5H5WHz333Ek=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: uRdIMNdIglfdteGkf069/isP402avOmjbNb7y/lUw5k=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: N73Qn6fYVAUW9KUPlhOzNYAivlJPaPply2UAI5lOlWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Jul 3 02:30:56 2025 GMT Not After : Jul 10 02:30:56 2025 GMT Subject: CN=6865eb60-f8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:79:97:05:0b:7e:6d:e2:61:db:49:a1:54: fc:10:14:4f:ef:bd:a9:b0:03:f5:48:e1:6c:24:d8: cb:c0:be:c3:5b:f4:2f:0a:f3:7f:73:8d:88:fa:f1: d2:98:52:db:01:c8:6f:93:30:00:2f:06:6c:df:39: 63:fb:b8:6e:c6:3d:65:06:a2:05:ad:c3:0d:ca:5e: 1e:55:1c:a6:81:b1:de:d5:31:a2:d4:9e:ec:fd:54: 0c:db:1b:32:42:a6:93:80:64:09:2b:b7:8d:eb:8f: 49:2a:c3:48:14:90:e1:c0:66:ce:93:87:ca:6b:42: ef:99:a5:23:4f:5b:6c:fc:71:3c:7f:37:c0:a5:48: 4e:86:52:aa:2b:6a:c3:c9:22:1e:ed:bf:cd:1c:3a: 71:06:dc:7a:d7:69:a3:b3:fe:df:51:43:59:a5:bc: d5:e9:27:6f:b1:bf:af:ab:14:d2:9f:7d:6d:2e:34: 0e:d9:2a:71:47:89:65:5d:cb:dc:72:36:f6:b1:8b: 0a:78:f0:18:79:d6:03:f4:4c:00:b6:e6:3c:a8:ed: 0e:c9:d9:67:64:84:cf:db:94:56:a2:e2:2d:27:ff: 6d:5f:45:56:f3:6a:4e:2d:bb:73:74:e3:84:79:0c: 04:e1:d7:47:d0:80:b1:80:1f:77:d3:ef:80:46:d4: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:26:46:A7:40:85:2F:97:3F:A4:17:7F:95:FD:5D:AC:FD:49:27:4B X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ea:5a:03:81:d1:31:55:61:07:c6:c0:30:b6:91:b1:53:a2: e4:56:9b:63:4a:28:28:07:49:9b:4c:ac:12:4b:4f:be:72:77: 0b:71:d2:67:55:c4:2a:0f:75:36:1e:9a:71:8a:de:54:3a:af: 0e:25:b3:f0:35:c5:a1:f8:66:23:f3:65:ee:b7:42:b3:8d:48: 66:77:76:1d:ee:53:53:03:77:98:d9:49:6c:dd:2c:7d:0f:fb: 83:5c:c8:18:ed:8b:e5:1a:41:a3:ff:4d:d4:db:60:5e:48:0d: 00:90:e7:8f:ff:e0:ad:0a:53:76:20:1a:64:f1:39:dd:0a:4f: 46:de:3d:f5:36:0a:47:ca:a7:4a:82:97:cf:fa:9f:4b:a1:ba: ef:25:1b:e3:fd:1d:8e:e9:42:54:d0:5b:75:bc:4e:7a:20:e0: 8e:dd:c3:28:06:73:37:0c:bd:ca:6d:8b:fc:d9:d6:06:c6:ba: d4:86:f8:28:38:39:a7:35:4c:56:c8:62:44:fd:74:4e:ba:35: a7:86:40:73:36:94:c3:5f:d5:f6:74:e1:39:95:a7:2d:2b:68: e2:a4:3a:f1:9a:b6:1f:d2:8e:04:a9:5b:3c:ad:e1:f6:49:9f: b0:c4:45:f9:c4:bd:f2:57:77:98:59:b7:44:33:15:07:15:da: a4:8f:14:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjUwNzAzMDIzMDU2WhcNMjUwNzEwMDIzMDU2WjAYMRYwFAYD VQQDEw02ODY1ZWI2MC1mOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx555lwULfm3iYdtJoVT8EBRP772psAP1SOFsJNjLwL7DW/QvCvN/c42I+vHS mFLbAchvkzAALwZs3zlj+7huxj1lBqIFrcMNyl4eVRymgbHe1TGi1J7s/VQM2xsy QqaTgGQJK7eN649JKsNIFJDhwGbOk4fKa0LvmaUjT1ts/HE8fzfApUhOhlKqK2rD ySIe7b/NHDpxBtx612mjs/7fUUNZpbzV6Sdvsb+vqxTSn31tLjQO2SpxR4llXcvc cjb2sYsKePAYedYD9EwAtuY8qO0OydlnZITP25RWouItJ/9tX0VW82pOLbtzdOOE eQwE4ddH0ICxgB930++ARtQN6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4mRqdA hS+XP6QXf5X9Xaz9SSdLMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO6loDgdExVWEHxsAwtpGxU6LkVptjSigoB0mbTKwSS0++cncLcdJn VcQqD3U2Hppxit5UOq8OJbPwNcWh+GYj82Xut0KzjUhmd3Yd7lNTA3eY2Uls3Sx9 D/uDXMgY7YvlGkGj/03U22BeSA0AkOeP/+CtClN2IBpk8TndCk9G3j31NgpHyqdK gpfP+p9LobrvJRvj/R2O6UJU0Ft1vE56IOCO3cMoBnM3DL3KbYv82dYGxrrUhvgo ODmnNUxWyGJE/XROujWnhkBzNpTDX9X2dOE5lactK2jipDrxmrYf0o4EqVs8reH2 SZ+wxEX5xL3yV3eYWbdEMxUHFdqkjxQ/ -----END CERTIFICATE-----Generated at Fri Jul 4 17:43:51 2025 by rpki-client