$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: RJVUqmbZoqG0c3cFwJJyWH02djTGzbO09TgemXmxKCg= Subject key identifier: 18:8F:5D:4D:DA:E0:A9:41:EE:F6:FF:10:5A:55:F5:A9:40:D8:5D:DE Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 0F Signing time: Sun 11 May 2025 06:48:25 +0000 Manifest this update: Sun 11 May 2025 06:48:24 +0000 Manifest next update: Sun 18 May 2025 06:48:24 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: +Iq8uYZIzwrjlCuioLkwqQ9vES0yxugsxkHJSDiDcSk=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: May 11 06:48:24 2025 GMT Not After : May 18 06:48:24 2025 GMT Subject: CN=68204838-b0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:50:ab:7b:22:b5:e1:d1:97:7b:c1:65:14: ed:47:1d:78:a8:08:28:bd:29:64:f5:83:6e:cc:d7: 23:43:ff:ea:88:2d:75:f9:56:6c:d2:0f:0d:87:14: 1d:b5:ef:9b:96:61:84:6a:d5:53:14:a8:1f:86:b3: 24:b7:af:8d:81:ae:44:c1:95:e5:c4:a5:ec:42:c9: 24:b9:5f:85:0f:b7:3d:73:f6:30:87:a9:55:20:93: 0b:f3:14:bb:09:54:64:89:23:04:39:45:b8:e9:84: 50:b2:10:be:07:1e:9b:78:dd:29:b5:5f:9d:da:6e: 1a:2b:0e:52:dc:f6:2f:4d:e5:ec:2d:80:5e:eb:31: 44:c7:1d:da:26:8c:a4:1e:48:24:b2:59:dd:e2:87: 33:59:f7:f6:47:6e:b5:4d:7e:5b:9a:e2:34:3c:c9: 85:d2:10:47:29:23:a4:a5:18:db:0c:7d:5e:34:99: 17:b7:4f:c4:80:c0:c8:2c:98:75:74:fc:a5:68:d9: 6e:39:24:56:dc:5e:ed:92:4f:da:5c:07:67:45:81: 5d:9d:9d:87:ce:a5:5b:45:fb:83:ac:af:2b:e4:5d: ae:23:78:9f:9a:65:7e:ce:19:e3:e1:99:1e:bf:62: 17:a1:52:9a:71:e7:ba:8d:e4:ae:60:d7:b6:53:fc: bb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8F:5D:4D:DA:E0:A9:41:EE:F6:FF:10:5A:55:F5:A9:40:D8:5D:DE X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3a:76:41:1c:0b:b8:e2:f9:5d:37:88:be:94:95:f0:e3:7f: a4:9b:89:6c:e0:55:8d:58:4b:07:c2:95:bb:c6:7a:d1:1a:53: 0d:65:8d:2a:b1:c7:6d:8d:a7:7a:ae:0f:11:51:c1:e8:8d:6c: aa:58:ad:cf:e6:76:8f:40:80:3d:76:9b:99:2a:0f:b4:8f:5d: bc:19:4a:6c:bb:3e:27:fc:16:07:6d:e9:77:ad:8e:3f:24:66: d6:7d:ae:0a:00:d6:c0:a6:ad:e2:d5:c2:d0:48:a3:7e:fa:7a: a7:d1:ee:72:04:0e:b5:cb:13:86:bc:70:6d:a8:0a:b6:dd:d5: 9e:b0:8a:1b:46:79:ff:5d:cc:3c:c9:4b:ea:13:c1:54:60:8e: 94:84:66:5c:cb:c7:c2:4e:0f:08:49:f9:f4:b2:64:05:6d:d2: 4f:c8:1f:16:72:af:7f:dc:e4:fe:81:56:87:c2:74:58:d1:ae: 01:3c:cc:7a:f1:eb:93:d1:5c:85:25:7d:60:f3:c0:67:8b:50: 68:4c:c8:97:01:0c:f9:29:fd:9d:56:61:9e:8a:fd:2f:6c:98: fa:62:e2:54:54:be:8b:98:ea:73:99:69:e3:58:31:9c:05:0e: 3c:87:c3:fc:b5:5e:20:cb:99:76:6e:1f:f6:28:12:aa:47:6f: d4:9e:59:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTA1MTEwNjQ4MjRaFw0yNTA1MTgwNjQ4MjRaMBgxFjAUBgNV BAMTDTY4MjA0ODM4LWIwY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq41CreyK14dGXe8FlFO1HHXioCCi9KWT1g27M1yND/+qILXX5VmzSDw2HFB21 75uWYYRq1VMUqB+GsyS3r42BrkTBleXEpexCySS5X4UPtz1z9jCHqVUgkwvzFLsJ VGSJIwQ5RbjphFCyEL4HHpt43Sm1X53abhorDlLc9i9N5ewtgF7rMUTHHdomjKQe SCSyWd3ihzNZ9/ZHbrVNflua4jQ8yYXSEEcpI6SlGNsMfV40mRe3T8SAwMgsmHV0 /KVo2W45JFbcXu2ST9pcB2dFgV2dnYfOpVtF+4OsryvkXa4jeJ+aZX7OGePhmR6/ YhehUppx57qN5K5g17ZT/LuXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGI9dTdrg qUHu9v8QWlX1qUDYXd4wHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKk6dkEcC7ji+V03iL6UlfDjf6SbiWzgVY1YSwfClbvGetEaUw1ljSqx x22Np3quDxFRweiNbKpYrc/mdo9AgD12m5kqD7SPXbwZSmy7Pif8Fgdt6Xetjj8k ZtZ9rgoA1sCmreLVwtBIo376eqfR7nIEDrXLE4a8cG2oCrbd1Z6wihtGef9dzDzJ S+oTwVRgjpSEZlzLx8JODwhJ+fSyZAVt0k/IHxZyr3/c5P6BVofCdFjRrgE8zHrx 65PRXIUlfWDzwGeLUGhMyJcBDPkp/Z1WYZ6K/S9smPpi4lRUvouY6nOZaeNYMZwF DjyHw/y1XiDLmXZuH/YoEqpHb9SeWWw= -----END CERTIFICATE-----Generated at Sun May 11 22:59:45 2025 by rpki-client