$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: w/tDmLIpCpnV/D3pczdIol2LmbLViUaRX2Pw/m17OzU= Subject key identifier: 88:FD:86:15:86:5E:B2:6F:EE:62:92:23:F9:83:D4:1E:DF:79:DA:28 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 01CF Signing time: Sat 31 May 2025 02:41:35 +0000 Manifest this update: Sat 31 May 2025 02:41:35 +0000 Manifest next update: Sat 07 Jun 2025 02:41:35 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: LaKKKPJqXWdkjBSHGBfrJNr6BZ6IjbFHDgv0/bqVW5Y=) 2: 778B9FACE86411EEA020E37AC4F9AE02.roa (hash: sFaQ2/BL/qL12qBhQN+3Nfl2luiS5IBqsoZ9GwMFuM8=) 3: 2E03458EA14211EDA566785DC4F9AE02.roa (hash: AE4DzloRLES1eyiSVKRPczEde5NI5otitKzMMhyhGoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: May 31 02:41:35 2025 GMT Not After : Jun 7 02:41:35 2025 GMT Subject: CN=683a6c5f-bd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:2d:e8:2e:4a:d2:d0:6a:e9:52:54:53:b2: 6d:de:20:5d:99:e3:23:37:7b:9c:0e:61:ac:a9:94: e0:25:f6:20:be:20:c0:ed:e6:df:d8:43:e0:94:fe: 1b:5e:15:d7:0b:49:2a:1f:df:29:40:91:9d:7c:27: c2:36:a0:50:38:d2:83:33:f2:3c:97:32:d1:3c:59: 4a:a4:0b:a5:26:24:f9:23:0b:e7:53:87:1f:a1:30: 27:ad:5d:42:4e:4b:82:3b:25:c8:14:ed:ae:03:01: 81:d5:75:12:9a:e7:a2:26:20:af:94:96:a4:ce:2a: 36:a8:94:5b:20:7e:d6:5e:8e:9c:fb:20:89:33:a1: bb:02:36:9f:98:9c:cb:ff:81:24:fb:43:b8:fa:47: 3f:b3:a0:a5:12:46:31:0c:01:60:19:b6:fd:bb:34: b5:a1:ed:6a:6e:48:fd:19:07:ae:f0:fc:ed:d8:8b: 82:70:3e:4a:d6:4e:fd:52:5d:b0:35:4b:b7:80:fd: 60:3e:aa:4a:f9:b9:4c:cd:03:3e:50:38:10:81:c9: 29:ba:83:51:f8:5e:4f:ff:f8:6d:cd:5f:45:96:ce: 1c:8c:bf:b7:f8:91:88:b6:b3:2b:b7:b0:82:12:26: 56:e6:ff:ad:ff:a1:5c:71:6b:af:7b:55:fd:12:3c: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FD:86:15:86:5E:B2:6F:EE:62:92:23:F9:83:D4:1E:DF:79:DA:28 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c9:f6:2b:73:35:ce:13:d7:fe:71:af:8b:41:ff:fd:ab:de: 08:3c:05:4c:6c:6c:1a:1d:4f:36:95:a8:48:ba:31:b9:19:03: 63:74:17:0e:d3:0c:e0:91:9f:df:d3:79:3f:2f:dd:ff:7a:b2: 15:97:26:7d:5c:c2:9c:14:bf:b2:0a:e7:cd:e3:c4:b8:28:3f: 6b:1e:ce:87:53:ee:48:4d:0c:7e:b6:e8:f9:5e:0b:85:24:68: bb:7c:19:6e:6a:b8:fa:8b:bd:9d:5a:94:d1:f8:87:36:cc:73: 0b:66:5b:37:d8:ab:a4:a5:07:f0:ce:b2:05:1a:ca:65:c2:78: 1c:8f:06:56:c8:f9:7d:fb:7b:62:24:0f:64:75:d2:dc:0c:b8: 09:29:c6:00:6e:e7:1a:a0:f3:ec:82:10:28:3e:a4:88:dc:e1: 82:50:46:8e:a8:4f:85:42:22:ec:8f:cb:1a:20:08:d4:a6:20: 98:4f:44:aa:c3:db:2c:43:5e:c0:d1:8e:1e:3e:b3:43:e4:fe: de:54:c5:d0:61:01:e8:b3:77:75:23:45:8a:53:6f:99:37:97: d3:36:19:67:dc:11:3d:42:e6:96:87:52:d5:30:ad:b6:a7:dd: 72:f6:c3:b5:99:a4:d8:57:a0:4b:75:f9:6e:eb:ac:ce:bc:2b: 5e:84:13:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjUwNTMxMDI0MTM1WhcNMjUwNjA3MDI0MTM1WjAYMRYwFAYD VQQDEw02ODNhNmM1Zi1iZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF4t6C5K0tBq6VJUU7Jt3iBdmeMjN3ucDmGsqZTgJfYgviDA7ebf2EPglP4b XhXXC0kqH98pQJGdfCfCNqBQONKDM/I8lzLRPFlKpAulJiT5IwvnU4cfoTAnrV1C TkuCOyXIFO2uAwGB1XUSmueiJiCvlJakzio2qJRbIH7WXo6c+yCJM6G7AjafmJzL /4Ek+0O4+kc/s6ClEkYxDAFgGbb9uzS1oe1qbkj9GQeu8Pzt2IuCcD5K1k79Ul2w NUu3gP1gPqpK+blMzQM+UDgQgckpuoNR+F5P//htzV9Fls4cjL+3+JGItrMrt7CC EiZW5v+t/6FccWuve1X9EjwySwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIj9hhWG XrJv7mKSI/mD1B7fedooMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+yfYrczXOE9f+ca+LQf/9q94IPAVMbGwaHU82lahIujG5GQNjdBcO 0wzgkZ/f03k/L93/erIVlyZ9XMKcFL+yCufN48S4KD9rHs6HU+5ITQx+tuj5XguF JGi7fBluarj6i72dWpTR+Ic2zHMLZls32KukpQfwzrIFGsplwngcjwZWyPl9+3ti JA9kddLcDLgJKcYAbucaoPPsghAoPqSI3OGCUEaOqE+FQiLsj8saIAjUpiCYT0Sq w9ssQ17A0Y4ePrND5P7eVMXQYQHos3d1I0WKU2+ZN5fTNhln3BE9QuaWh1LVMK22 p91y9sO1maTYV6BLdflu66zOvCtehBMF -----END CERTIFICATE-----Generated at Sat May 31 15:21:30 2025 by rpki-client