$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft File: ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json) Hash identifier: p1REsds4wY66Cqm/yk1n6EmW/krIdKRWTrmyWA8i3FI= Subject key identifier: 29:1F:31:F5:40:BC:E5:34:34:24:12:65:92:02:19:F4:D3:3B:BA:8A Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Certificate serial: 0807 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft Manifest number: 0800 Signing time: Mon 30 Jun 2025 21:09:09 +0000 Manifest this update: Mon 30 Jun 2025 21:09:09 +0000 Manifest next update: Mon 07 Jul 2025 21:09:09 +0000 Files and hashes: 1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: n3MYF91Nci/n3e5Vl/PSZoIZwXE8EPcH9LtttlTrAR0=) 2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: fA68vPB23i/OAo2Tlmrq8T3cX2gqQgOTyj+Ul9pJg/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2055 (0x807) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Validity Not Before: Jun 30 21:09:09 2025 GMT Not After : Jul 7 21:09:09 2025 GMT Subject: CN=6862fcf5-456e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:f3:ba:d7:f2:0a:1e:51:3b:de:91:25:8c: b0:a8:fc:22:22:49:27:80:71:db:68:8b:36:bd:6a: b0:77:4f:05:74:bf:b5:b4:05:9a:3b:c9:78:7e:41: 24:70:1e:ff:df:a2:36:d0:7b:ec:65:d2:c6:df:31: f7:f2:4d:25:f2:74:51:b2:9c:07:c5:a5:4d:91:e6: 9b:5b:90:ea:4e:96:1f:83:44:0f:95:5a:51:59:e4: 35:89:ad:7a:f0:08:4f:d4:9a:9d:6b:52:d7:56:02: e3:e2:e2:8b:59:39:58:d0:18:62:65:c2:9b:4e:b8: 85:49:bb:ad:a7:ad:54:5f:ae:09:d0:ef:50:f5:ac: cf:88:21:55:1a:51:59:a4:3a:b1:41:b0:35:2c:8f: 43:e4:8c:ee:23:fb:91:16:3b:a1:4a:2d:0b:50:34: 9c:28:93:36:1c:52:b9:4f:c8:93:df:d4:ab:15:32: f1:ae:d8:f0:bc:5a:76:d1:8b:aa:32:62:39:44:e4: b7:2f:7e:63:48:fc:2c:d0:07:a0:fa:02:5b:c7:5a: d7:76:42:ba:f4:50:d5:de:56:1d:9b:fe:30:aa:72: 3e:55:c6:21:57:ac:3e:e3:6c:d1:4e:54:63:d9:6d: 8e:45:d3:de:ed:a2:22:46:7c:56:8b:15:68:e8:55: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1F:31:F5:40:BC:E5:34:34:24:12:65:92:02:19:F4:D3:3B:BA:8A X509v3 Authority Key Identifier: keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:fc:e4:6a:73:59:7f:ce:e1:10:b2:8e:ba:b0:ce:fa:4b:59: 5f:59:18:20:14:81:10:d2:e8:9f:83:dd:88:04:c9:2c:51:bf: ba:9b:02:c4:71:73:ef:6d:da:b5:27:ff:89:df:44:f0:dd:6b: 18:3f:af:f6:4e:a4:f8:13:fb:ab:c4:22:f4:8e:ab:8f:98:5f: e6:0c:ba:3b:14:fc:16:cc:14:98:3d:60:bc:92:7e:0c:89:1b: 6c:ce:1f:70:ec:b4:3c:81:36:2f:3f:32:05:f6:ea:14:7d:31: 37:8b:23:df:04:b1:c0:23:be:46:9b:6b:fe:e4:51:4f:0a:9e: ff:fc:f0:67:43:de:ea:c9:fb:a1:b4:8e:97:be:ae:4b:0a:3f: f6:20:4c:9d:e9:28:12:78:c2:11:a8:b1:02:54:33:19:c5:9c: d5:87:c0:23:be:7c:47:95:65:24:21:3f:29:45:d7:78:89:86: 56:1a:0e:2c:76:eb:24:6d:dd:b4:46:9c:4a:cf:af:2a:d2:d0: c4:3e:07:7e:2d:3e:8b:91:80:65:45:51:c2:6b:66:6c:e2:ac: 8d:dd:1a:f2:c4:95:ca:e8:d2:e2:f6:26:62:5e:4d:0a:4f:1e: 23:ef:38:93:80:36:4d:f9:b0:1c:d0:34:f3:46:12:28:f6:e8: aa:c3:25:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDZBMzJCRDEzREZDRDc3RUYxQjVDMDUyQkUzNkVEODlB RDIxMjcwREIwHhcNMjUwNjMwMjEwOTA5WhcNMjUwNzA3MjEwOTA5WjAYMRYwFAYD VQQDEw02ODYyZmNmNS00NTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs3zutfyCh5RO96RJYywqPwiIkkngHHbaIs2vWqwd08FdL+1tAWaO8l4fkEk cB7/36I20HvsZdLG3zH38k0l8nRRspwHxaVNkeabW5DqTpYfg0QPlVpRWeQ1ia16 8AhP1Jqda1LXVgLj4uKLWTlY0BhiZcKbTriFSbutp61UX64J0O9Q9azPiCFVGlFZ pDqxQbA1LI9D5IzuI/uRFjuhSi0LUDScKJM2HFK5T8iT39SrFTLxrtjwvFp20Yuq MmI5ROS3L35jSPws0Aeg+gJbx1rXdkK69FDV3lYdm/4wqnI+VcYhV6w+42zRTlRj 2W2ORdPe7aIiRnxWixVo6FVcHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkfMfVA vOU0NCQSZZICGfTTO7qKMB8GA1UdIwQYMBaAFGoyvRPfzXfvG1wFK+Nu2JrSEnDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi9CMjVFRjk5MEU5 MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQtOGJYQVVyNDI3WW10SVNj TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FqSzlFOV9OZC04YlhBVXI0MjdZbXRJU2NOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzgxMi9CMjVFRjk5MEU5MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQt OGJYQVVyNDI3WW10SVNjTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG/ORqc1l/zuEQso66sM76S1lfWRggFIEQ0uifg92IBMksUb+6mwLE cXPvbdq1J/+J30Tw3WsYP6/2TqT4E/urxCL0jquPmF/mDLo7FPwWzBSYPWC8kn4M iRtszh9w7LQ8gTYvPzIF9uoUfTE3iyPfBLHAI75Gm2v+5FFPCp7//PBnQ97qyfuh tI6Xvq5LCj/2IEyd6SgSeMIRqLECVDMZxZzVh8AjvnxHlWUkIT8pRdd4iYZWGg4s duskbd20RpxKz68q0tDEPgd+LT6LkYBlRVHCa2Zs4qyN3RryxJXK6NLi9iZiXk0K Tx4j7ziTgDZN+bAc0DTzRhIo9uiqwyWB -----END CERTIFICATE-----Generated at Wed Jul 2 21:06:05 2025 by rpki-client