$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: 08mqxaQRWGOJA1urqZqsTPyIy/cbP+j6PdggiZ/18GQ= Subject key identifier: A0:7A:82:80:95:BE:39:AC:6A:68:55:AB:FB:EF:D8:A8:0B:B7:23:94 Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: 012A Signing time: Sat 31 May 2025 04:17:51 +0000 Manifest this update: Sat 31 May 2025 04:17:50 +0000 Manifest next update: Sat 07 Jun 2025 04:17:50 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: +sx0JLNV2prG2Ko9NZ2iMjaP8P2BhBGbOz3WRTLOcmA=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: SUwPdVpyD78LluiuQbCbX3WP+GiH5YDeeAZtixdrMe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: May 31 04:17:50 2025 GMT Not After : Jun 7 04:17:50 2025 GMT Subject: CN=683a82ee-5a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:c5:70:8b:5f:20:64:03:f4:5a:40:a1:bb: 88:61:aa:44:06:fe:09:55:4e:f3:46:5a:9a:f6:09: 06:88:79:6f:46:fb:04:44:50:24:99:65:46:b6:be: a7:d2:0e:47:43:63:81:a8:32:ab:84:ac:cf:54:a6: 6d:64:4d:b3:07:39:68:b7:c2:04:de:71:c5:bd:e1: 21:d2:5f:0d:88:4f:08:4f:6a:ba:ec:3b:5c:d5:1a: c0:b3:43:de:ab:1b:c2:ec:96:ec:f2:de:f1:49:2a: d9:18:8b:a6:87:59:1e:f0:6f:82:ea:f0:fd:a9:dd: 20:8f:e7:3d:10:0f:97:b4:b9:13:94:9d:66:11:ab: fa:2c:77:83:a4:f7:ea:95:9c:d2:0d:4b:f0:0c:0b: 7f:8a:e3:bb:22:6e:4b:13:59:a4:ac:fe:db:dc:6e: 02:ea:44:fc:e2:34:21:38:54:95:9e:07:10:d9:de: 5e:cb:8e:e4:6b:52:80:7a:fe:b3:69:39:51:9a:cf: b8:6c:42:22:b2:5f:5e:cf:34:d8:95:e1:5d:2e:eb: f6:81:b9:6a:f2:3e:49:4d:b3:c1:ee:43:b2:88:fc: 7a:43:98:e3:ba:e6:93:5b:00:05:17:92:9a:ae:e4: f2:41:0a:a1:95:d7:e0:4c:ca:d7:06:cd:4a:db:fd: f1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7A:82:80:95:BE:39:AC:6A:68:55:AB:FB:EF:D8:A8:0B:B7:23:94 X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:63:89:4a:9c:9f:f7:b7:60:76:fe:69:d8:43:53:6f:e6:74: 0c:44:d7:fc:5e:02:68:00:57:f9:d8:6f:f6:bd:6a:8d:a5:6e: 86:3c:c1:60:e9:37:cf:06:e8:6d:8b:ca:cb:4d:d4:1b:c6:06: d2:01:db:06:a0:a1:04:8c:95:ee:20:a0:2b:3f:1f:03:14:63: a7:5d:b6:9a:ce:13:85:d4:f7:4b:ed:3f:58:e0:90:af:0d:39: e0:e0:32:dc:5f:4b:17:3a:77:95:04:49:63:eb:85:a7:de:e0: 67:66:36:f7:1a:1d:93:7b:f0:9a:c5:4a:08:6d:fa:8b:7e:4c: 8f:a3:2d:79:00:23:21:2a:c5:a0:80:f8:ba:73:58:14:9a:8b: fa:0a:da:b6:42:d0:79:86:58:f6:09:42:ed:6a:b7:02:bb:8b: e9:07:88:64:2a:89:9f:65:16:f9:07:79:53:2b:21:90:95:eb: c7:e4:e0:99:47:14:c2:f2:60:de:9f:19:12:ed:96:8a:19:a2: a3:57:52:35:06:3f:ae:f9:3e:4f:0a:c9:65:94:dd:2a:34:1b: 6e:b8:c4:c9:de:9b:44:9b:c2:30:7d:a6:06:da:54:ef:5d:a0: 88:2e:01:e6:a1:50:8f:b6:4a:98:94:68:a9:d7:6c:6c:59:dc: 19:de:e1:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2 MUFFNjcxQzkwHhcNMjUwNTMxMDQxNzUwWhcNMjUwNjA3MDQxNzUwWjAYMRYwFAYD VQQDEw02ODNhODJlZS01YTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjbFcItfIGQD9FpAobuIYapEBv4JVU7zRlqa9gkGiHlvRvsERFAkmWVGtr6n 0g5HQ2OBqDKrhKzPVKZtZE2zBzlot8IE3nHFveEh0l8NiE8IT2q67Dtc1RrAs0Pe qxvC7Jbs8t7xSSrZGIumh1ke8G+C6vD9qd0gj+c9EA+XtLkTlJ1mEav6LHeDpPfq lZzSDUvwDAt/iuO7Im5LE1mkrP7b3G4C6kT84jQhOFSVngcQ2d5ey47ka1KAev6z aTlRms+4bEIisl9ezzTYleFdLuv2gblq8j5JTbPB7kOyiPx6Q5jjuuaTWwAFF5Ka ruTyQQqhldfgTMrXBs1K2/3xOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKB6goCV vjmsamhVq/vv2KgLtyOUMB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5 N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB eVRCRGRPNkI5ZUpocm1jY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbY4lKnJ/3t2B2/mnYQ1Nv5nQMRNf8XgJoAFf52G/2vWqNpW6GPMFg 6TfPBuhti8rLTdQbxgbSAdsGoKEEjJXuIKArPx8DFGOnXbaazhOF1PdL7T9Y4JCv DTng4DLcX0sXOneVBElj64Wn3uBnZjb3Gh2Te/CaxUoIbfqLfkyPoy15ACMhKsWg gPi6c1gUmov6Ctq2QtB5hlj2CULtarcCu4vpB4hkKomfZRb5B3lTKyGQlevH5OCZ RxTC8mDenxkS7ZaKGaKjV1I1Bj+u+T5PCslllN0qNBtuuMTJ3ptEm8IwfaYG2lTv XaCILgHmoVCPtkqYlGip12xsWdwZ3uHd -----END CERTIFICATE-----Generated at Sat May 31 17:26:21 2025 by rpki-client