$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json) Hash identifier: /c61XK2nlv6fKiPmwproDVgs2HrJGd5Lg0evd1U+ri0= Subject key identifier: C4:15:A5:A1:30:8E:29:98:0D:C0:66:9D:1F:87:06:9C:AA:F5:BD:B1 Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft Manifest number: 0141 Signing time: Sat 31 May 2025 04:02:18 +0000 Manifest this update: Sat 31 May 2025 04:02:18 +0000 Manifest next update: Sat 07 Jun 2025 04:02:18 +0000 Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: 5eREjRmh6mQJR6OqVfrmjChMvSNXVxvIXCbJYc8fHn0=) 2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=) 3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=) 4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=) 5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=) 6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: May 31 04:02:18 2025 GMT Not After : Jun 7 04:02:18 2025 GMT Subject: CN=683a7f4a-fd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:85:08:05:35:3a:70:1d:50:8b:5f:05:d5:55: 25:58:d4:b2:95:5f:c1:f7:04:c8:c7:3b:ee:fd:eb: 79:7e:ef:b7:52:7a:48:23:77:28:82:6a:98:34:d6: bc:76:66:8f:3b:24:e5:62:be:8c:9e:05:a5:24:af: 1a:29:a1:68:98:63:c1:00:36:61:bc:26:98:ca:f4: 20:0f:6e:9d:1e:11:62:b1:0f:83:70:61:34:df:f2: 55:08:f3:94:4f:50:5f:0a:32:ee:53:9a:bb:37:39: ca:97:e4:6d:a3:fa:03:5c:b3:a5:90:d4:3b:7d:09: 58:1d:89:e6:87:7c:fd:8f:66:d8:1f:4f:7e:1a:52: af:56:6a:15:a1:6e:88:fd:2a:19:8e:03:e0:fc:c2: 24:57:ca:68:31:1c:ba:6d:5b:90:bf:52:35:88:53: 70:ad:39:0c:de:82:14:65:4b:1b:52:9d:e3:5a:56: 96:3d:b5:40:7a:6e:b3:cd:f5:26:09:49:4e:b0:63: db:1d:a9:ed:a3:f1:df:da:12:14:83:09:27:b6:bf: cc:6b:53:e2:af:57:3b:05:36:55:cf:c9:f6:dd:4a: 1b:09:80:59:79:5d:dd:5a:2f:2e:f5:5b:e9:95:ce: 60:b9:ed:3c:8f:c1:59:4b:9c:0d:f2:9c:82:4f:c0: 6f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:15:A5:A1:30:8E:29:98:0D:C0:66:9D:1F:87:06:9C:AA:F5:BD:B1 X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:97:3d:76:dc:12:f8:88:46:a1:93:0a:9a:cf:a8:1a:46:7f: eb:dc:9b:78:cf:d5:4a:77:69:ad:23:6c:61:67:fe:76:83:0b: f6:3d:ce:fe:62:56:f9:f1:a0:06:42:7e:35:f8:30:61:8a:48: df:6a:ff:3d:1d:0b:6b:a2:da:a6:33:fa:f1:f3:55:00:2e:37: 02:a4:f1:2d:11:e3:1c:7e:f2:f9:0f:5b:32:4b:b3:b9:2b:1e: 11:22:dd:ac:d0:98:46:c0:e2:46:f7:e0:67:61:b4:e0:92:db: a2:83:b7:18:da:45:e8:d3:8e:07:da:2e:a7:64:e6:4f:c9:9b: cf:91:06:4a:f0:7e:3a:fc:23:0a:84:0f:ee:87:b2:82:12:1b: 67:b9:4b:89:62:72:ac:5b:08:39:dd:39:b5:77:68:37:ae:ed: ba:f1:e8:38:44:c6:10:f3:1b:ec:2e:f7:ba:18:d2:89:ab:35: 42:50:40:b6:d6:5e:7d:70:0e:c1:b5:e5:c4:08:d9:7c:a5:08: 3e:d0:8a:45:2e:c5:2f:9c:1c:b7:57:e6:8e:72:d7:d4:95:80: c6:39:63:05:5d:4c:f8:55:eb:d9:0f:de:9d:c0:ed:51:3b:9e: b9:62:65:d1:14:e7:70:bf:58:bd:e1:2a:3b:89:e1:af:cf:9c: c0:bd:91:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUwNTMxMDQwMjE4WhcNMjUwNjA3MDQwMjE4WjAYMRYwFAYD VQQDEw02ODNhN2Y0YS1mZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IUIBTU6cB1Qi18F1VUlWNSylV/B9wTIxzvu/et5fu+3UnpII3cogmqYNNa8 dmaPOyTlYr6MngWlJK8aKaFomGPBADZhvCaYyvQgD26dHhFisQ+DcGE03/JVCPOU T1BfCjLuU5q7NznKl+Rto/oDXLOlkNQ7fQlYHYnmh3z9j2bYH09+GlKvVmoVoW6I /SoZjgPg/MIkV8poMRy6bVuQv1I1iFNwrTkM3oIUZUsbUp3jWlaWPbVAem6zzfUm CUlOsGPbHanto/Hf2hIUgwkntr/Ma1Pir1c7BTZVz8n23UobCYBZeV3dWi8u9Vvp lc5gue08j8FZS5wN8pyCT8Bv/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQVpaEw jimYDcBmnR+HBpyq9b2xMB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJDRS85MDA5OUM0MDU3REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1 U2QyQ3lDOS16ckNWdVFLaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYlz123BL4iEahkwqaz6gaRn/r3Jt4z9VKd2mtI2xhZ/52gwv2Pc7+ Ylb58aAGQn41+DBhikjfav89HQtrotqmM/rx81UALjcCpPEtEeMcfvL5D1syS7O5 Kx4RIt2s0JhGwOJG9+BnYbTgktuig7cY2kXo044H2i6nZOZPyZvPkQZK8H46/CMK hA/uh7KCEhtnuUuJYnKsWwg53Tm1d2g3ru268eg4RMYQ8xvsLve6GNKJqzVCUEC2 1l59cA7BteXECNl8pQg+0IpFLsUvnBy3V+aOctfUlYDGOWMFXUz4VevZD96dwO1R O565YmXRFOdwv1i94So7ieGvz5zAvZEI -----END CERTIFICATE-----Generated at Sat May 31 16:27:41 2025 by rpki-client