$ rpki-client -vvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft File: h1thdAzTcL1LSk9q6gqGCDiNuoo.mft (raw, json) Hash identifier: G4J7Qn/Q3sZ/sBYY85fNlBpH0ytBYTXAyDl3pEIXFTo= Subject key identifier: 65:F9:EC:A1:36:56:22:19:B0:22:3D:95:AD:A2:30:63:CB:69:A9:80 Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A Certificate issuer: /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft Manifest number: 18 Signing time: Sat 31 May 2025 07:32:33 +0000 Manifest this update: Sat 31 May 2025 07:32:32 +0000 Manifest next update: Sat 07 Jun 2025 07:32:32 +0000 Files and hashes: 1: h1thdAzTcL1LSk9q6gqGCDiNuoo.crl (hash: F/N3lYdkYUjV+HAHhxERJdhuXOpLJ279BXWdNAoOW3g=) 2: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (hash: sfbcZk8SAWuxMbwQPAGFt07XT5Nj4mSWLUAB6k9yQMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A Validity Not Before: May 31 07:32:32 2025 GMT Not After : Jun 7 07:32:32 2025 GMT Subject: CN=683ab090-8874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:1b:34:da:e2:3f:40:80:11:69:66:ba:00: 10:07:d1:26:b1:6a:37:20:ca:49:c8:dd:d1:02:16: d1:88:2c:14:10:18:e9:fa:08:56:ca:70:fe:dc:be: b4:ec:f1:b2:ef:29:1b:ff:c4:2d:a6:74:b4:2f:7c: 68:44:30:01:ad:3a:cd:a0:53:f6:71:f3:70:2d:a1: 28:7f:0e:45:d7:6a:1c:33:42:99:4d:69:c5:37:ec: 4a:aa:f2:02:64:03:4d:5f:22:d3:f4:c1:f0:e9:2e: 04:02:96:aa:c6:09:2b:3b:ba:0d:89:1b:f7:1f:54: 40:eb:d5:b9:21:86:cc:55:79:cb:52:f9:b9:23:3f: a1:c0:0d:76:95:e1:04:04:ac:6e:7e:58:1e:4e:2a: e7:0f:de:e9:6a:ff:b0:bc:13:3e:ab:33:eb:65:c8: de:14:14:7d:6f:c0:61:5a:41:60:16:0c:e3:36:14: 60:34:de:b3:07:c9:36:4e:35:6b:c3:54:b1:2f:af: 9c:53:c1:6b:1f:2b:dc:b2:e0:44:05:34:65:ee:8f: bc:72:77:8b:8f:7d:63:09:ad:a4:4f:f6:96:9a:e4: af:84:02:6c:34:a8:7c:25:36:36:f0:ba:32:3e:b2: 64:9f:83:b9:54:42:04:a3:a9:ee:37:dd:ed:06:44: 05:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F9:EC:A1:36:56:22:19:B0:22:3D:95:AD:A2:30:63:CB:69:A9:80 X509v3 Authority Key Identifier: keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:36:f5:9d:05:0c:06:94:aa:3c:0b:27:c1:35:d9:f8:db:35: 44:d8:d4:4a:07:8d:a8:13:31:c0:3c:c6:a1:b5:4b:1e:ec:8a: 12:58:c5:ea:df:b9:2f:b6:f8:2f:cc:4b:8d:00:bd:c1:4e:2e: ad:85:88:7e:35:12:db:38:d6:d0:49:bf:d1:ac:3b:d9:17:d9: 70:52:a9:6f:92:71:cd:3f:1e:b9:c8:3e:de:26:94:01:f5:13: db:99:64:da:da:94:66:a7:03:e2:4e:91:2c:ef:be:8a:26:68: 00:ce:02:f0:0b:ee:32:af:83:f9:fe:e0:1c:71:2d:85:41:08: d7:8d:08:07:41:fe:e5:3a:7b:f9:fd:21:97:bd:72:a5:10:3c: 53:6d:11:73:8a:19:8a:64:00:ea:dc:bb:8d:a9:20:81:37:a5: 33:f2:28:b8:93:66:5f:18:91:33:d2:3c:e5:f6:73:86:0b:e5: a3:64:63:6c:8e:ee:90:2a:21:1a:cf:95:2c:2a:15:ba:96:fc: cd:01:36:73:83:03:19:33:7c:d5:f1:8e:6e:51:cf:3a:50:13: 48:d2:d6:16:c9:81:42:1b:70:96:b7:e1:95:c4:96:09:aa:4e: 01:f8:91:31:66:74:7f:d1:df:95:67:50:f1:74:b4:ea:70:54: 1d:fc:27:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTg1MjExMC8GA1UEBRMoODc1QjYxNzQwQ0QzNzBCRDRCNEE0RjZBRUEwQTg2MDgz ODhEQkE4QTAeFw0yNTA1MzEwNzMyMzJaFw0yNTA2MDcwNzMyMzJaMBgxFjAUBgNV BAMTDTY4M2FiMDkwLTg4NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+2hs02uI/QIARaWa6ABAH0SaxajcgyknI3dECFtGILBQQGOn6CFbKcP7cvrTs 8bLvKRv/xC2mdLQvfGhEMAGtOs2gU/Zx83AtoSh/DkXXahwzQplNacU37Eqq8gJk A01fItP0wfDpLgQClqrGCSs7ug2JG/cfVEDr1bkhhsxVectS+bkjP6HADXaV4QQE rG5+WB5OKucP3ulq/7C8Ez6rM+tlyN4UFH1vwGFaQWAWDOM2FGA03rMHyTZONWvD VLEvr5xTwWsfK9yy4EQFNGXuj7xyd4uPfWMJraRP9paa5K+EAmw0qHwlNjbwujI+ smSfg7lUQgSjqe433e0GRAXZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZfnsoTZW IhmwIj2VraIwY8tpqYAwHwYDVR0jBBgwFoAUh1thdAzTcL1LSk9q6gqGCDiNuoow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1ODUyL0U5NTRGRDc4MUJB MjExRjA4QjI5RTkyQ0M0RjlBRTAyL2gxdGhkQXpUY0wxTFNrOXE2Z3FHQ0RpTnVv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDF0aGRBelRjTDFMU2s5cTZncUdDRGlOdW9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 ODUyL0U5NTRGRDc4MUJBMjExRjA4QjI5RTkyQ0M0RjlBRTAyL2gxdGhkQXpUY0wx TFNrOXE2Z3FHQ0RpTnVvby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHM29Z0FDAaUqjwLJ8E12fjbNUTY1EoHjagTMcA8xqG1Sx7sihJYxerf uS+2+C/MS40AvcFOLq2FiH41Ets41tBJv9GsO9kX2XBSqW+Scc0/HrnIPt4mlAH1 E9uZZNralGanA+JOkSzvvoomaADOAvAL7jKvg/n+4BxxLYVBCNeNCAdB/uU6e/n9 IZe9cqUQPFNtEXOKGYpkAOrcu42pIIE3pTPyKLiTZl8YkTPSPOX2c4YL5aNkY2yO 7pAqIRrPlSwqFbqW/M0BNnODAxkzfNXxjm5RzzpQE0jS1hbJgUIbcJa34ZXElgmq TgH4kTFmdH/R35VnUPF0tOpwVB38J5E= -----END CERTIFICATE-----Generated at Sat May 31 16:52:12 2025 by rpki-client