$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: RXzx0jpttzd1lpz0EkupOHn3HpmWSDT2owW60G+8khk= Subject key identifier: 3D:40:1C:A1:85:19:A7:28:19:97:E9:4F:15:46:99:0A:3D:F8:6F:AC Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0AD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0AC2 Signing time: Fri 30 May 2025 19:39:54 +0000 Manifest this update: Fri 30 May 2025 19:39:53 +0000 Manifest next update: Fri 06 Jun 2025 19:39:53 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: J2ail0/Hhtywe7h8RC6gJ0Jhud4dt2dqSzWqNjkzoEI=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: yJ71VBH0x6Cizy3pLk3TQDQEwieJvCbqnha729ASJmU=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: SeaNTqd0MT2Mb0YJWYURazfx/oLk37QwRX3zpyKaSjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2770 (0xad2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: May 30 19:39:53 2025 GMT Not After : Jun 6 19:39:53 2025 GMT Subject: CN=683a0989-43ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:10:57:e0:28:ea:7c:8a:01:68:ef:b9:ff: 6c:b6:a5:a1:a2:48:4c:1a:86:9a:b0:63:a1:7f:de: 30:c1:7e:31:8c:ae:8b:d3:94:68:ad:41:7d:15:80: 8b:6d:f6:3d:3d:a7:f9:74:b5:ee:58:87:8f:5b:0b: 7b:e0:a4:2a:18:90:27:b2:22:67:51:51:5f:91:a5: 09:74:07:e9:a0:23:92:16:c1:3f:88:29:d7:43:9f: 9d:c2:46:3c:aa:69:dc:f3:83:40:4c:98:b0:31:10: 4b:a2:47:27:34:f8:9e:6c:f4:f6:d2:64:34:88:df: e8:f8:c7:0b:6a:6a:61:da:e6:2d:2e:3e:c0:bc:97: c4:d5:34:3e:be:e6:47:3d:a7:3c:70:28:7e:85:9d: b2:ff:13:d0:c6:c6:c0:7d:97:8f:14:e7:e6:ff:3e: 3d:97:af:bc:a8:2f:e4:f6:7c:38:c8:e2:f9:e4:14: 7f:35:66:1e:72:b5:e9:b1:2c:ae:23:b9:88:92:c9: f7:17:62:00:f8:ae:cb:3c:00:5a:cd:f2:d6:f7:1c: 11:e8:fb:16:10:a3:2e:8d:3e:1d:5c:a7:55:6c:c9: 71:02:bf:d3:ea:dd:fc:07:83:f6:5c:f4:6c:c6:2d: ed:78:f5:19:50:1b:28:13:e2:d6:6c:be:87:b2:39: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:40:1C:A1:85:19:A7:28:19:97:E9:4F:15:46:99:0A:3D:F8:6F:AC X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:de:c1:79:b8:27:ea:8a:5f:78:10:11:c7:6c:51:20:04:d1: 39:80:bf:89:26:f8:ae:0a:fe:53:87:e9:f8:fb:1e:4b:1f:2a: 0e:16:63:83:c6:dd:6b:1f:18:e2:1b:36:c4:8f:6f:63:14:9d: f5:78:9a:b0:d8:bc:51:98:64:54:bd:15:86:07:2f:d7:9c:5d: 34:7f:22:79:17:0b:a3:61:d0:00:cc:9e:76:ab:58:eb:5c:f8: 8d:68:49:51:fa:92:93:8f:c3:2d:6b:e9:79:47:2a:ab:9b:61: ff:30:6b:b5:38:d1:fe:37:d0:3e:5a:5d:41:95:06:6f:ec:28: 0b:3e:dc:59:a0:b1:fb:cb:ff:6b:d5:7a:c4:ce:5a:1c:52:2b: 10:77:28:67:81:9d:e8:c8:1b:6d:be:ce:43:09:c6:eb:48:58: 86:44:d2:fb:fc:6e:04:51:da:45:93:9c:a6:5a:56:bf:58:5e: 84:82:09:42:f1:2c:f2:36:07:c2:56:63:28:05:ce:fd:ae:9f: 4c:f3:42:d9:b3:11:d0:9a:3f:12:07:b3:de:39:cb:ef:85:ba: fc:8c:b1:2f:93:f8:ad:ed:13:70:0b:0d:12:8f:ca:6d:4c:97: 64:15:d1:80:71:15:34:88:cd:0e:05:18:a1:83:9b:dc:10:88: d8:04:71:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjUwNTMwMTkzOTUzWhcNMjUwNjA2MTkzOTUzWjAYMRYwFAYD VQQDEw02ODNhMDk4OS00M2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lgQV+Ao6nyKAWjvuf9stqWhokhMGoaasGOhf94wwX4xjK6L05RorUF9FYCL bfY9Paf5dLXuWIePWwt74KQqGJAnsiJnUVFfkaUJdAfpoCOSFsE/iCnXQ5+dwkY8 qmnc84NATJiwMRBLokcnNPiebPT20mQ0iN/o+McLamph2uYtLj7AvJfE1TQ+vuZH Pac8cCh+hZ2y/xPQxsbAfZePFOfm/z49l6+8qC/k9nw4yOL55BR/NWYecrXpsSyu I7mIksn3F2IA+K7LPABazfLW9xwR6PsWEKMujT4dXKdVbMlxAr/T6t38B4P2XPRs xi3tePUZUBsoE+LWbL6HsjmpHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1AHKGF GacoGZfpTxVGmQo9+G+sMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc3sF5uCfqil94EBHHbFEgBNE5gL+JJviuCv5Th+n4+x5LHyoOFmOD xt1rHxjiGzbEj29jFJ31eJqw2LxRmGRUvRWGBy/XnF00fyJ5FwujYdAAzJ52q1jr XPiNaElR+pKTj8Mta+l5Ryqrm2H/MGu1ONH+N9A+Wl1BlQZv7CgLPtxZoLH7y/9r 1XrEzlocUisQdyhngZ3oyBttvs5DCcbrSFiGRNL7/G4EUdpFk5ymWla/WF6EgglC 8SzyNgfCVmMoBc79rp9M80LZsxHQmj8SB7PeOcvvhbr8jLEvk/it7RNwCw0Sj8pt TJdkFdGAcRU0iM0OBRihg5vcEIjYBHGj -----END CERTIFICATE-----Generated at Sat May 31 17:49:40 2025 by rpki-client