$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft File: AtoTJ_UsQCOjghrIeFDJF9joNSc.mft (raw, json) Hash identifier: Up9x5Hicq7iAUA77Mw5tpEaor3Kwl/Jsp6aTFbBqKgw= Subject key identifier: 06:0F:DF:99:9B:E1:21:36:8E:4B:9D:2B:49:78:94:9D:1A:35:6F:A6 Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27 Certificate issuer: /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft Manifest number: 9E Signing time: Tue 01 Jul 2025 06:59:59 +0000 Manifest this update: Tue 01 Jul 2025 06:59:59 +0000 Manifest next update: Tue 08 Jul 2025 06:59:59 +0000 Files and hashes: 1: AtoTJ_UsQCOjghrIeFDJF9joNSc.crl (hash: gbm8WHsQAFnIeIHTgbIfBrXdl3xpe4TedJpDGc2CNgM=) 2: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (hash: TL1SnZ/gVu4gXR6fktiVjS67hjGfn2PQM4oWEdnN0mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB7E, serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527 Validity Not Before: Jul 1 06:59:59 2025 GMT Not After : Jul 8 06:59:59 2025 GMT Subject: CN=6863876f-9586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e2:3e:a5:24:6d:11:46:02:da:3c:cd:51:63: e6:24:21:b6:a2:39:90:2d:15:17:81:c1:c7:5a:0c: b8:54:b5:d9:36:eb:6d:7f:c5:a8:c8:e1:02:9b:09: 6f:ec:05:de:76:f0:eb:d6:2e:70:65:49:f4:70:9d: fd:67:5a:bd:e4:cd:8f:d3:35:a8:23:01:86:6d:02: fa:c6:71:db:58:78:cb:d5:4e:47:2f:7b:21:51:f4: 7f:42:37:1a:9e:89:a5:60:7e:8b:8f:65:3c:b0:53: 31:17:41:8f:9d:9a:42:7b:00:33:de:b4:41:9b:4d: cc:32:20:38:4f:73:3b:3f:8c:14:99:c3:ff:27:44: c1:eb:7b:78:e5:90:90:f3:f7:ce:b1:81:c6:1e:0f: 6b:48:96:41:5a:c3:4c:4e:af:83:3f:67:08:94:28: b0:45:14:17:10:a8:cb:be:f1:fc:f4:3c:d4:ee:b7: b2:99:9f:4e:92:b6:ad:65:6e:f7:11:3f:5e:42:55: 6b:3c:87:09:7f:1f:20:d9:e1:c6:fc:a4:8a:df:d7: fb:7f:e3:83:62:bd:17:a0:0c:d7:aa:43:ad:e3:7c: 80:bc:97:17:64:74:02:ad:1c:da:cb:65:6d:a9:64: 27:ff:3f:1b:ff:77:a0:b4:95:2f:a7:40:3c:23:c0: 3c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0F:DF:99:9B:E1:21:36:8E:4B:9D:2B:49:78:94:9D:1A:35:6F:A6 X509v3 Authority Key Identifier: keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d5:15:7d:a3:02:ab:d8:cb:c5:7b:af:bd:11:a5:96:ef:7b: 01:b8:ca:1b:a3:d2:b8:f2:85:a5:44:88:01:73:44:73:f3:79: 8f:15:68:88:51:96:9b:87:56:35:dc:54:99:e0:17:45:07:cc: 10:14:17:b7:6e:a6:3b:ab:2a:f1:e3:0e:1c:52:03:8a:24:92: 81:0f:7a:3a:e5:62:ac:68:84:71:88:0a:9e:50:a8:da:35:20: e4:14:b4:b9:9e:ac:5a:8b:00:a2:8f:73:a9:d1:9f:67:81:63: 02:4a:2f:be:7a:e8:8e:dc:fc:4d:72:7c:06:b4:c1:b5:3d:cb: 4c:54:1a:dc:fb:55:f7:98:5b:aa:a9:9b:56:e5:b6:fa:f6:a8: 66:cc:0d:95:76:d6:1d:9b:b6:06:d4:3c:b9:30:1b:8e:0b:19: 29:66:55:40:35:ca:14:45:77:99:10:58:06:19:7c:61:26:a4: 31:da:12:c4:88:0c:05:43:d6:30:22:3c:49:fb:52:3d:63:18: 2d:1f:63:e9:68:b8:91:d8:36:e2:cb:88:44:f6:ed:d8:88:85: 83:ea:6d:80:0b:03:58:54:48:8c:82:8e:0d:d7:91:a8:21:e4: ba:da:bc:ea:4c:c9:59:c0:36:05:92:a7:6a:b8:7b:a6:8a:85: c9:2f:da:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCN0UxMTAvBgNVBAUTKDAyREExMzI3RjUyQzQwMjNBMzgyMUFDODc4NTBDOTE3 RDhFODM1MjcwHhcNMjUwNzAxMDY1OTU5WhcNMjUwNzA4MDY1OTU5WjAYMRYwFAYD VQQDEw02ODYzODc2Zi05NTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+I+pSRtEUYC2jzNUWPmJCG2ojmQLRUXgcHHWgy4VLXZNuttf8WoyOECmwlv 7AXedvDr1i5wZUn0cJ39Z1q95M2P0zWoIwGGbQL6xnHbWHjL1U5HL3shUfR/Qjca nomlYH6Lj2U8sFMxF0GPnZpCewAz3rRBm03MMiA4T3M7P4wUmcP/J0TB63t45ZCQ 8/fOsYHGHg9rSJZBWsNMTq+DP2cIlCiwRRQXEKjLvvH89DzU7reymZ9OkratZW73 ET9eQlVrPIcJfx8g2eHG/KSK39f7f+ODYr0XoAzXqkOt43yAvJcXZHQCrRzay2Vt qWQn/z8b/3egtJUvp0A8I8A8NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYP35mb 4SE2jkudK0l4lJ0aNW+mMB8GA1UdIwQYMBaAFALaEyf1LEAjo4IayHhQyRfY6DUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI3RS85QzNGRUNEQzY0 REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FDT2pnaHJJZUZESkY5am9O U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F0b1RKX1VzUUNPamdockllRkRKRjlqb05TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI3RS85QzNGRUNEQzY0REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FD T2pnaHJJZUZESkY5am9OU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB11RV9owKr2MvFe6+9EaWW73sBuMobo9K48oWlRIgBc0Rz83mPFWiI UZabh1Y13FSZ4BdFB8wQFBe3bqY7qyrx4w4cUgOKJJKBD3o65WKsaIRxiAqeUKja NSDkFLS5nqxaiwCij3Op0Z9ngWMCSi++euiO3PxNcnwGtMG1PctMVBrc+1X3mFuq qZtW5bb69qhmzA2VdtYdm7YG1Dy5MBuOCxkpZlVANcoURXeZEFgGGXxhJqQx2hLE iAwFQ9YwIjxJ+1I9YxgtH2PpaLiR2Dbiy4hE9u3YiIWD6m2ACwNYVEiMgo4N15Go IeS62rzqTMlZwDYFkqdquHumioXJL9ov -----END CERTIFICATE-----Generated at Wed Jul 2 21:18:02 2025 by rpki-client