$ rpki-client -vvf rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft File: Mqch0wW1KTmxanDu43n7nIIQmhI.mft (raw, json) Hash identifier: TWDpRaRTZDyVjdihSHnEYDKAtEW1DwsNidiaqOh6i4Q= Subject key identifier: 98:74:D7:2B:5D:78:00:05:1F:44:EC:25:7C:93:6D:F1:20:5F:B7:29 Authority key identifier: 32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12 Certificate issuer: /CN=A912D71D/serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft Manifest number: 05 Signing time: Sat 31 May 2025 07:44:31 +0000 Manifest this update: Sat 31 May 2025 07:44:31 +0000 Manifest next update: Sat 07 Jun 2025 07:44:31 +0000 Files and hashes: 1: Mqch0wW1KTmxanDu43n7nIIQmhI.crl (hash: C4KN9WEEKCk9TGgOmDWxLBt8GV1XjTgcvmAUoMNiTLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D71D, serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12 Validity Not Before: May 31 07:44:31 2025 GMT Not After : Jun 7 07:44:31 2025 GMT Subject: CN=683ab35f-d063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:10:3c:55:61:70:b4:b3:ac:4d:1b:fa:f9: 95:b2:52:84:96:39:8b:f5:1d:08:70:f4:c4:82:fc: ad:97:f8:53:44:4a:14:97:ef:92:8c:84:f9:28:46: 07:3c:10:76:35:b5:9c:6d:ea:d9:b8:0d:f2:23:b3: 17:58:bb:6a:25:9a:2b:8b:3d:00:16:a9:8b:4f:a1: e1:80:04:ef:a8:62:e2:fa:ac:c1:d0:fb:da:37:df: 8e:d1:fe:c5:2c:69:e7:59:13:75:c3:2a:b9:8e:42: be:55:ff:db:8c:7c:ed:73:71:24:d5:92:e5:70:c0: 6e:05:c0:3f:17:ff:5a:a4:f5:69:c0:57:eb:db:cc: 0e:b9:48:66:01:73:b9:c4:24:11:ad:4c:bf:2d:70: 07:1f:95:aa:f1:d6:c4:92:74:e3:f7:f1:91:f5:9e: e3:bc:da:21:ca:2d:12:e1:dd:8f:74:54:8a:f1:a0: e0:c1:15:77:65:91:a6:ad:15:72:3f:6d:03:2a:93: d4:43:44:ae:aa:5b:0c:86:f5:8a:d9:36:26:02:d6: 6f:84:77:c0:54:07:00:8c:2c:e1:34:ad:90:09:e0: f7:8c:f5:8d:e1:c5:56:72:88:41:dd:eb:67:5c:c3: 02:b4:e2:74:d2:44:86:38:e5:87:9d:6e:4b:27:a0: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:74:D7:2B:5D:78:00:05:1F:44:EC:25:7C:93:6D:F1:20:5F:B7:29 X509v3 Authority Key Identifier: keyid:32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ea:55:7b:af:09:92:9d:f2:dc:b8:08:00:51:ba:c2:dd:f5: 0a:15:9d:ca:11:22:e1:2b:c2:18:ad:74:7d:21:9d:44:aa:d9: db:17:92:9b:2c:87:4a:4e:0a:b3:c0:29:94:b3:e9:5c:d5:49: c3:92:62:84:8b:c5:00:5e:b7:9c:f7:5c:ee:70:9f:79:d3:a4: c5:39:32:13:57:d7:ca:28:0b:01:2d:35:0c:7c:8b:e8:66:10: db:75:19:b8:04:84:03:67:98:b3:bb:ce:a2:6c:1b:ae:69:65: bd:98:80:5e:d5:e6:0b:ea:45:24:40:d5:2e:b6:a6:06:15:dc: 57:74:89:fb:dc:be:1f:76:1c:8b:1d:07:b3:45:f8:83:e7:7c: 1c:4b:da:ad:8e:09:25:ff:a4:06:39:c5:f7:81:58:3b:4f:fc: 27:8a:8d:a6:24:70:f4:f2:98:de:a8:aa:f9:42:5a:1e:e2:6e: a5:0c:26:9b:35:67:f3:98:ab:64:fc:c2:c4:5c:76:d8:ff:a7: c2:d2:23:ea:0f:c5:22:26:b3:57:48:7e:ef:3d:cd:50:c7:3e: 40:41:18:54:98:7b:be:09:d7:c0:d3:e5:b4:ec:98:43:d6:a7: 01:14:7c:d8:ac:f7:de:06:91:98:7f:1e:76:c9:34:f4:75:1b: bd:2c:3d:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RDcxRDExMC8GA1UEBRMoMzJBNzIxRDMwNUI1MjkzOUIxNkE3MEVFRTM3OUZCOUM4 MjEwOUExMjAeFw0yNTA1MzEwNzQ0MzFaFw0yNTA2MDcwNzQ0MzFaMBgxFjAUBgNV BAMTDTY4M2FiMzVmLWQwNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbDhA8VWFwtLOsTRv6+ZWyUoSWOYv1HQhw9MSC/K2X+FNEShSX75KMhPkoRgc8 EHY1tZxt6tm4DfIjsxdYu2olmiuLPQAWqYtPoeGABO+oYuL6rMHQ+9o3347R/sUs aedZE3XDKrmOQr5V/9uMfO1zcSTVkuVwwG4FwD8X/1qk9WnAV+vbzA65SGYBc7nE JBGtTL8tcAcflarx1sSSdOP38ZH1nuO82iHKLRLh3Y90VIrxoODBFXdlkaatFXI/ bQMqk9RDRK6qWwyG9YrZNiYC1m+Ed8BUBwCMLOE0rZAJ4PeM9Y3hxVZyiEHd62dc wwK04nTSRIY45YedbksnoG27AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmHTXK114 AAUfROwlfJNt8SBftykwHwYDVR0jBBgwFoAUMqch0wW1KTmxanDu43n7nIIQmhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJENzFELzI2MkM5QjAyMzZD RTExRjBBMkE2OUMxRkM0RjlBRTAyL01xY2gwd1cxS1RteGFuRHU0M243bklJUW1o SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTXFjaDB3VzFLVG14YW5EdTQzbjduSUlRbWhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE NzFELzI2MkM5QjAyMzZDRTExRjBBMkE2OUMxRkM0RjlBRTAyL01xY2gwd1cxS1Rt eGFuRHU0M243bklJUW1oSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE/qVXuvCZKd8ty4CABRusLd9QoVncoRIuErwhitdH0hnUSq2dsXkpss h0pOCrPAKZSz6VzVScOSYoSLxQBet5z3XO5wn3nTpMU5MhNX18ooCwEtNQx8i+hm ENt1GbgEhANnmLO7zqJsG65pZb2YgF7V5gvqRSRA1S62pgYV3Fd0ifvcvh92HIsd B7NF+IPnfBxL2q2OCSX/pAY5xfeBWDtP/CeKjaYkcPTymN6oqvlCWh7ibqUMJps1 Z/OYq2T8wsRcdtj/p8LSI+oPxSIms1dIfu89zVDHPkBBGFSYe74J18DT5bTsmEPW pwEUfNis994GkZh/HnbJNPR1G70sPbc= -----END CERTIFICATE-----Generated at Sat May 31 17:56:26 2025 by rpki-client