$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json) Hash identifier: iM1xO1K4ldknQzsDkA6VX+QB33JbiiAnO3kdIuSDWdI= Subject key identifier: 2E:16:49:14:07:3C:8B:01:DB:41:8B:D2:75:6A:C3:84:5C:AB:32:6D Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft Manifest number: 01D9 Signing time: Sun 29 Jun 2025 01:56:54 +0000 Manifest this update: Sun 29 Jun 2025 01:56:53 +0000 Manifest next update: Sun 06 Jul 2025 01:56:53 +0000 Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: G4BW9JWMqDbmBhONP9WqzZBJiA2tcqHLuiz16H8DDyc=) 2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: VEixjX/Xe+G6aJHNRJCpYadqa0JmMvyZd3MR6Kj/fCY=) 3: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Validity Not Before: Jun 29 01:56:53 2025 GMT Not After : Jul 6 01:56:53 2025 GMT Subject: CN=68609d65-0c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:b2:35:5f:2e:f3:f0:fa:dd:46:ca:ee:fa: af:ad:1b:eb:7f:fb:0b:86:2d:ed:26:a3:cb:97:55: e0:b2:1f:29:6d:31:3b:2a:0d:38:2b:d4:74:e3:44: df:d2:fa:a2:be:7c:ae:f0:0f:f1:14:ad:91:f7:b9: 53:1f:0e:a9:b2:1c:bb:6e:36:50:86:e2:92:27:d9: 91:02:94:24:0f:b6:8a:4e:b5:70:db:98:f9:83:54: eb:d1:94:01:92:71:33:5c:67:d6:80:1d:05:a4:b5: 71:ae:f4:86:c0:27:c6:bd:01:f1:ae:34:85:c2:ea: 22:e3:83:36:b8:2d:c1:a7:82:1c:52:8d:92:66:19: e7:c2:8a:41:9d:ce:37:84:4b:29:e3:0b:8b:6a:7f: 8b:15:7a:0b:1a:9f:4f:fb:87:63:76:97:c5:0b:ed: 49:d1:0f:c7:b2:df:46:1b:4b:f1:25:5e:a1:3e:e7: 73:14:52:d6:63:ef:7e:8a:4f:78:c8:8e:d2:43:77: 9b:53:a7:4d:4c:24:68:c7:cd:9b:00:07:70:aa:32: 0d:78:50:58:73:c2:0c:d9:72:9c:bb:1f:43:b7:ee: 25:8e:4b:a5:9e:02:45:ae:60:97:2a:d5:6a:2a:42: 37:19:03:1e:07:0d:1c:3c:81:8c:bf:5c:27:ca:2e: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:16:49:14:07:3C:8B:01:DB:41:8B:D2:75:6A:C3:84:5C:AB:32:6D X509v3 Authority Key Identifier: keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:e3:18:ed:9b:44:0c:a7:2f:e5:7e:58:87:df:bd:ab:c6:e4: 09:aa:4b:91:b0:49:61:de:f4:aa:f2:5f:6a:9b:ea:3c:a4:41: 48:95:9b:5c:64:c3:b2:1e:ba:4d:02:6f:53:d3:19:a0:2b:43: 10:f9:2d:6a:61:fb:0b:e9:34:0d:19:34:24:1d:15:16:22:38: 3f:a3:39:ba:2d:2a:66:62:94:7a:2c:e7:a8:9c:bd:e3:f4:cb: f1:1c:2a:79:a6:c0:78:40:85:24:a1:26:a0:f9:0a:bc:b1:19: 98:90:a8:9b:10:a5:1c:2d:03:4a:09:76:aa:6a:9c:82:33:d7: b1:d5:ac:b6:22:54:4b:0a:e6:85:43:2c:22:6c:01:7d:e3:f4: 8e:98:32:5e:21:6f:65:16:76:a3:a2:e3:89:ee:51:72:bf:9d: 28:a7:f6:19:7a:dc:1e:62:28:0f:74:16:98:3a:33:ce:91:d9: 91:5b:6a:2f:3b:25:11:6e:ed:0b:82:1a:07:77:28:26:64:a6: 8d:37:23:7d:12:69:4c:21:b0:9f:8f:55:40:18:55:ba:9c:85: fc:12:d7:3e:bc:7a:6f:28:de:39:9d:0c:ba:39:74:42:8e:8f: 29:55:b0:ff:4c:59:d7:05:4d:3d:52:25:c0:9e:f7:e3:c9:2b: 72:10:85:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5 QzUxMjIyRTYwHhcNMjUwNjI5MDE1NjUzWhcNMjUwNzA2MDE1NjUzWjAYMRYwFAYD VQQDEw02ODYwOWQ2NS0wYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9+yNV8u8/D63UbK7vqvrRvrf/sLhi3tJqPLl1Xgsh8pbTE7Kg04K9R040Tf 0vqivnyu8A/xFK2R97lTHw6pshy7bjZQhuKSJ9mRApQkD7aKTrVw25j5g1Tr0ZQB knEzXGfWgB0FpLVxrvSGwCfGvQHxrjSFwuoi44M2uC3Bp4IcUo2SZhnnwopBnc43 hEsp4wuLan+LFXoLGp9P+4djdpfFC+1J0Q/Hst9GG0vxJV6hPudzFFLWY+9+ik94 yI7SQ3ebU6dNTCRox82bAAdwqjINeFBYc8IM2XKcux9Dt+4ljkulngJFrmCXKtVq KkI3GQMeBw0cPIGMv1wnyi5gTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4WSRQH PIsB20GL0nVqw4RcqzJtMB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI UnVhRU8yRW8zU0NjVVNJdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK4xjtm0QMpy/lfliH372rxuQJqkuRsElh3vSq8l9qm+o8pEFIlZtc ZMOyHrpNAm9T0xmgK0MQ+S1qYfsL6TQNGTQkHRUWIjg/ozm6LSpmYpR6LOeonL3j 9MvxHCp5psB4QIUkoSag+Qq8sRmYkKibEKUcLQNKCXaqapyCM9ex1ay2IlRLCuaF QywibAF94/SOmDJeIW9lFnajouOJ7lFyv50op/YZetweYigPdBaYOjPOkdmRW2ov OyURbu0LghoHdygmZKaNNyN9EmlMIbCfj1VAGFW6nIX8Etc+vHpvKN45nQy6OXRC jo8pVbD/TFnXBU09UiXAnvfjyStyEIWE -----END CERTIFICATE-----Generated at Sun Jun 29 17:22:55 2025 by rpki-client