$ rpki-client -vvf rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft File: doh0adZBC-RoB3WHhH7qoIC0InI.mft (raw, json) Hash identifier: ySh1FX41MJTB7QIsY46pgyYHF5GYKTe5WkVn0qgcz5w= Subject key identifier: 42:2A:72:CC:7D:85:8A:D5:CF:17:BD:A9:19:E4:46:A6:E7:5A:7B:71 Authority key identifier: 76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 Certificate issuer: /CN=A9114382/serialNumber=76887469D6410BE468077587847EEAA080B42272 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft Manifest number: 22 Signing time: Sat 31 May 2025 07:25:38 +0000 Manifest this update: Sat 31 May 2025 07:25:37 +0000 Manifest next update: Sat 07 Jun 2025 07:25:37 +0000 Files and hashes: 1: doh0adZBC-RoB3WHhH7qoIC0InI.crl (hash: 97BMLbC2DQ3+QWwMIIMR4Utt1x04M3rBuHVEqthTwtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114382, serialNumber=76887469D6410BE468077587847EEAA080B42272 Validity Not Before: May 31 07:25:37 2025 GMT Not After : Jun 7 07:25:37 2025 GMT Subject: CN=683aaef1-22bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:1f:23:5e:fc:7d:e0:69:f6:2e:a2:33:49: 65:02:f1:ce:e4:a1:bd:a3:9f:21:84:f5:d2:d1:d5: ae:6f:b9:c9:17:aa:30:24:1d:73:5d:24:99:75:9b: 2a:a2:5f:94:4d:a3:7e:71:ab:b3:a5:6c:da:08:db: f1:8d:ec:47:e8:6f:76:a5:7e:a6:70:cb:ed:55:f6: 9a:09:38:15:aa:79:69:e7:71:f6:ab:11:6c:69:46: 6c:0a:58:c1:27:56:5c:1f:dd:cb:2a:31:1e:b1:03: 2a:40:de:56:f4:62:a3:84:91:5a:28:0e:27:7a:54: 18:9e:f6:8d:93:76:d7:44:2e:b4:97:34:03:1e:0b: 7c:a0:8e:e6:9c:7e:e8:43:34:d6:b0:c7:01:25:62: 79:7d:6f:ae:c1:f5:fc:04:df:7e:3b:d5:0b:06:06: 70:b2:bd:83:78:df:70:07:f6:63:31:46:98:67:97: ab:dc:aa:81:fd:6f:78:49:50:37:97:fe:0e:61:13: b5:64:4b:75:39:10:f7:fd:66:bc:48:cf:7f:fe:d1: 75:aa:82:b0:60:e2:6b:53:a6:93:88:86:d8:8d:ce: 25:dd:f5:ca:9f:70:af:a3:47:e7:d1:69:80:20:0b: 0d:a7:77:30:3a:cf:f0:3b:35:f4:04:b1:f3:23:bc: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2A:72:CC:7D:85:8A:D5:CF:17:BD:A9:19:E4:46:A6:E7:5A:7B:71 X509v3 Authority Key Identifier: keyid:76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:1a:41:36:27:b9:cd:c3:26:0d:de:6b:6f:e3:46:e6:f0:2e: 76:8b:72:7e:32:d2:d8:77:d5:f6:98:06:80:89:05:31:23:21: 29:e0:1c:00:79:2e:5c:03:66:80:bf:3d:24:46:bc:57:6a:d8: ee:dd:98:ae:07:9c:27:5f:b3:25:7e:5c:1e:96:97:bb:f0:b1: af:75:89:24:b8:79:5f:26:fc:6a:a4:3e:d8:7b:49:25:83:0c: 56:32:ba:96:fe:64:28:fe:50:75:a7:f3:bd:e1:fa:e5:bd:d5: 02:1e:e4:68:85:49:fb:76:cd:75:b4:26:ff:ff:67:6c:11:ba: 2a:fb:a7:d2:1f:dd:86:13:75:b4:91:60:bd:09:bd:5a:da:f7: 12:a3:70:f5:ff:ad:99:78:92:1d:45:3f:ff:4d:74:31:be:b2: 5f:9b:a9:a8:df:29:ac:80:59:34:f7:4d:42:f3:48:f5:af:98: fd:34:7c:1f:6f:84:87:5f:07:1f:dd:8c:9b:a4:3b:7f:5e:ba: 78:ff:c4:89:68:fd:1c:8f:e2:3e:37:70:d9:c2:d5:a9:69:5c: 77:a9:ea:66:cf:8b:65:47:51:ce:d6:15:f3:9c:a4:d1:3d:54: 27:69:86:a7:f8:7f:4e:b0:3c:09:20:82:8e:d5:19:c3:5a:64: c9:c2:5a:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDM4MjExMC8GA1UEBRMoNzY4ODc0NjlENjQxMEJFNDY4MDc3NTg3ODQ3RUVBQTA4 MEI0MjI3MjAeFw0yNTA1MzEwNzI1MzdaFw0yNTA2MDcwNzI1MzdaMBgxFjAUBgNV BAMTDTY4M2FhZWYxLTIyYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwax8jXvx94Gn2LqIzSWUC8c7kob2jnyGE9dLR1a5vuckXqjAkHXNdJJl1myqi X5RNo35xq7OlbNoI2/GN7Efob3alfqZwy+1V9poJOBWqeWnncfarEWxpRmwKWMEn Vlwf3csqMR6xAypA3lb0YqOEkVooDid6VBie9o2TdtdELrSXNAMeC3ygjuacfuhD NNawxwElYnl9b67B9fwE33471QsGBnCyvYN433AH9mMxRphnl6vcqoH9b3hJUDeX /g5hE7VkS3U5EPf9ZrxIz3/+0XWqgrBg4mtTppOIhtiNziXd9cqfcK+jR+fRaYAg Cw2ndzA6z/A7NfQEsfMjvAzvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQipyzH2F itXPF72pGeRGpudae3EwHwYDVR0jBBgwFoAUdoh0adZBC+RoB3WHhH7qoIC0InIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0MzgyLzQ0QjVGQTFDMEFD MDExRjBCNThGODI0N0M0RjlBRTAyL2RvaDBhZFpCQy1Sb0IzV0hoSDdxb0lDMElu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZG9oMGFkWkJDLVJvQjNXSGhIN3FvSUMwSW5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 MzgyLzQ0QjVGQTFDMEFDMDExRjBCNThGODI0N0M0RjlBRTAyL2RvaDBhZFpCQy1S b0IzV0hoSDdxb0lDMEluSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIIaQTYnuc3DJg3ea2/jRubwLnaLcn4y0th31faYBoCJBTEjISngHAB5 LlwDZoC/PSRGvFdq2O7dmK4HnCdfsyV+XB6Wl7vwsa91iSS4eV8m/GqkPth7SSWD DFYyupb+ZCj+UHWn873h+uW91QIe5GiFSft2zXW0Jv//Z2wRuir7p9If3YYTdbSR YL0JvVra9xKjcPX/rZl4kh1FP/9NdDG+sl+bqajfKayAWTT3TULzSPWvmP00fB9v hIdfBx/djJukO39eunj/xIlo/RyP4j43cNnC1alpXHep6mbPi2VHUc7WFfOcpNE9 VCdphqf4f06wPAkggo7VGcNaZMnCWqY= -----END CERTIFICATE-----Generated at Sat May 31 17:45:06 2025 by rpki-client