$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json) Hash identifier: ErGtLyVJS3/a8ApHXiRalaw7Ym2SJcxasFitcVvuCSE= Subject key identifier: 46:7A:B1:D2:3D:47:89:46:E7:63:A7:4E:5E:D4:33:3B:F2:B3:52:2D Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Certificate serial: 0AA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft Manifest number: 0A90 Signing time: Mon 12 May 2025 19:26:12 +0000 Manifest this update: Mon 12 May 2025 19:26:12 +0000 Manifest next update: Mon 19 May 2025 19:26:12 +0000 Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: G684K6xLimiMNhHztrHkv3qsLeCXeJL4FxsRwfXqRI4=) 2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: BMLck7ad8d48GKkf5hIYa+BMluvYHrRfqqVkHmYs2MI=) 3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: xk3hG5cT6tov5WpRqBgw1GYiI5TquI6c93azZDBwgS8=) 4: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YdPahH5dD4zuJY8bYiwVpnXjRlbDVfqoQdod66sRqWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2725 (0xaa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Validity Not Before: May 12 19:26:12 2025 GMT Not After : May 19 19:26:12 2025 GMT Subject: CN=68224b54-deb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e2:df:18:39:c7:14:29:79:96:77:70:5e:e1: 45:e8:c4:91:a0:07:7c:84:cf:78:3f:e1:73:6b:81: 15:5e:9d:5d:3a:e8:2f:7c:c1:c5:b8:c6:cc:b4:0a: 3b:f9:b0:a1:e6:37:b9:86:21:92:12:19:8c:6f:ab: 1d:8c:97:c0:b6:c8:99:5e:a4:3f:8b:24:b0:21:8b: f9:e3:fc:2c:8f:58:b6:1c:a4:72:01:77:39:b2:72: df:80:a5:41:9b:7a:01:f3:7f:d7:3c:95:99:37:23: df:5f:26:83:3d:09:4c:1b:81:b2:11:e3:9c:27:ba: ba:83:fc:71:19:6a:26:38:c6:e1:bc:13:c4:16:46: c4:b5:86:f0:a8:f1:8b:e2:c7:70:1d:06:2f:2b:19: 4b:cc:df:d6:25:bf:5e:f3:3e:0a:d2:7c:86:94:41: 15:04:df:df:77:82:24:16:6e:30:09:fe:cb:54:ca: 38:89:5d:38:9d:1e:a2:08:81:e0:de:e4:1c:af:40: 84:86:f0:cc:ac:fa:e4:12:b9:89:e2:0e:29:d6:90: 38:9f:22:74:e8:51:d0:e7:c7:12:43:50:d0:da:1f: e8:22:22:02:42:5f:1e:78:6f:5b:5a:d0:e1:28:7f: 30:80:7e:da:e2:02:a5:95:f4:68:3a:8a:84:a3:62: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7A:B1:D2:3D:47:89:46:E7:63:A7:4E:5E:D4:33:3B:F2:B3:52:2D X509v3 Authority Key Identifier: keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b3:60:6f:ae:f2:91:4a:fc:64:2a:ff:d3:51:1a:e5:d0:91: fb:80:9f:8b:ba:a8:e5:38:c9:79:31:2f:b6:87:a5:70:ff:4a: e0:46:a8:63:dc:f5:8f:bd:1f:1d:65:67:03:a4:71:21:1f:a3: 98:f7:0d:c9:35:d0:bd:b4:29:b2:d2:be:09:69:3f:59:b2:84: d3:c4:83:e1:d7:3f:22:6b:08:1c:ac:32:d0:9d:c7:38:a4:c4: aa:dd:1a:db:a8:fe:39:1a:c6:0d:f1:61:23:72:83:98:a8:32: 45:ba:ee:a0:9e:d3:2d:e8:f6:72:05:45:59:38:cb:dd:e8:b5: 1b:27:5f:62:e6:17:41:08:bc:63:df:4f:ef:02:9b:56:e1:8e: 4a:68:27:c0:43:45:75:e0:cf:20:46:7b:4b:cd:d5:ba:93:8c: e7:31:61:98:ed:80:53:57:40:c2:0c:a7:b6:70:8d:f2:f0:0f: 72:5d:8e:64:d7:fc:3f:e3:5f:4c:16:57:49:59:51:77:b4:1c: 3a:49:c2:62:75:9a:3e:70:f5:cd:b5:bc:94:c9:93:69:28:d3: e0:e1:60:a1:0a:f6:0f:4e:37:8d:20:b9:b5:db:35:13:63:42: 89:26:8c:0d:c1:9e:6b:66:f1:7c:e8:44:32:5c:7a:02:d4:33: c1:2b:70:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw QUE0Q0NEOEUwHhcNMjUwNTEyMTkyNjEyWhcNMjUwNTE5MTkyNjEyWjAYMRYwFAYD VQQDEw02ODIyNGI1NC1kZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uLfGDnHFCl5lndwXuFF6MSRoAd8hM94P+Fza4EVXp1dOugvfMHFuMbMtAo7 +bCh5je5hiGSEhmMb6sdjJfAtsiZXqQ/iySwIYv54/wsj1i2HKRyAXc5snLfgKVB m3oB83/XPJWZNyPfXyaDPQlMG4GyEeOcJ7q6g/xxGWomOMbhvBPEFkbEtYbwqPGL 4sdwHQYvKxlLzN/WJb9e8z4K0nyGlEEVBN/fd4IkFm4wCf7LVMo4iV04nR6iCIHg 3uQcr0CEhvDMrPrkErmJ4g4p1pA4nyJ06FHQ58cSQ1DQ2h/oIiICQl8eeG9bWtDh KH8wgH7a4gKllfRoOoqEo2Js+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZ6sdI9 R4lG52OnTl7UMzvys1ItMB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5 MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16 WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEI3RS8zRjM1QzA4NDU5MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNP OXpwUjFMbFIxUG9LcE16WTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRs2BvrvKRSvxkKv/TURrl0JH7gJ+LuqjlOMl5MS+2h6Vw/0rgRqhj 3PWPvR8dZWcDpHEhH6OY9w3JNdC9tCmy0r4JaT9ZsoTTxIPh1z8iawgcrDLQncc4 pMSq3RrbqP45GsYN8WEjcoOYqDJFuu6gntMt6PZyBUVZOMvd6LUbJ19i5hdBCLxj 30/vAptW4Y5KaCfAQ0V14M8gRntLzdW6k4znMWGY7YBTV0DCDKe2cI3y8A9yXY5k 1/w/419MFldJWVF3tBw6ScJidZo+cPXNtbyUyZNpKNPg4WChCvYPTjeNILm12zUT Y0KJJowNwZ5rZvF86EQyXHoC1DPBK3DU -----END CERTIFICATE-----Generated at Tue May 13 02:43:59 2025 by rpki-client