$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: vVi6epC5HQbsBt1oc62UpNl7oXX4g3fZyWWTmrbtXYs= Subject key identifier: C4:76:77:0A:16:B6:B6:02:0F:A4:00:03:DE:1B:F4:C2:B2:E9:8D:07 Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: 7B Signing time: Sat 31 May 2025 06:19:39 +0000 Manifest this update: Sat 31 May 2025 06:19:38 +0000 Manifest next update: Sat 07 Jun 2025 06:19:38 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: ERFaX+neiZWcPQhNP9GX5aUev1pWDJLx2CH8O9zN9F4=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: May 31 06:19:38 2025 GMT Not After : Jun 7 06:19:38 2025 GMT Subject: CN=683a9f7a-78ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d1:c7:55:9c:50:43:86:48:5c:01:a0:8b:5b: 72:f9:f3:11:3f:85:ee:6c:55:b9:fe:bc:94:de:8e: d7:3e:2f:02:0f:19:a7:c1:51:f7:fc:4d:8b:fb:6d: 45:29:dd:89:9f:74:bc:99:d9:54:72:a3:23:37:2b: 44:77:0d:b0:bb:d5:dc:0f:b0:ef:20:72:70:85:99: a6:5f:84:37:63:0a:4c:04:41:74:37:45:96:ad:b9: cf:89:82:c3:f3:17:31:b1:fd:a1:00:89:8d:b2:19: b0:82:f5:b9:9d:a3:48:ae:c8:40:b6:c4:96:e2:6f: b0:1b:42:de:ef:26:91:8e:1d:58:51:12:22:07:49: 63:41:68:36:ab:dc:65:92:25:0a:31:f2:d9:3d:8f: ce:a6:f4:1a:0e:3e:ee:ae:b7:3c:e9:97:fa:ce:02: 37:cd:17:6a:9e:15:14:97:15:28:05:e6:1e:bc:e6: fa:60:1e:2c:2d:b3:3f:5b:b0:3c:92:4e:7a:6c:42: d6:d5:50:6f:1a:cd:6d:c8:00:80:8a:4e:89:88:f6: 5a:6d:bc:11:51:e0:40:15:a7:79:42:b6:16:9f:c3: 56:eb:8c:3a:cd:2c:f8:cc:b6:3d:4e:8b:7c:f6:37: f6:8d:7b:4f:57:21:1d:86:65:cb:42:ba:88:66:b5: 4b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:76:77:0A:16:B6:B6:02:0F:A4:00:03:DE:1B:F4:C2:B2:E9:8D:07 X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:de:d1:3c:c7:a3:27:4a:71:bc:80:42:b1:7e:6e:6e:8b:62: 86:02:f0:14:39:75:fc:f5:5a:d6:fd:ff:82:20:a2:15:24:85: 06:f9:4a:8f:4b:3a:d5:ab:2c:6e:81:58:de:72:f9:15:2e:4a: 25:2b:4c:b1:c9:51:b4:e3:ea:67:a7:8c:4f:e1:3b:15:46:a2: 87:bf:98:ad:61:e8:f3:a7:7d:b6:ae:5c:85:da:92:29:ce:7c: 40:4c:b7:c5:a5:f3:30:2a:77:71:40:b8:f6:9b:03:6b:eb:be: 72:8c:38:8c:78:a6:d3:8a:c0:5c:b3:4a:e3:6a:c5:2b:ae:5e: b3:bb:45:2d:e7:e0:43:c5:3c:3f:13:5c:ac:84:92:a4:90:da: b5:9d:78:49:bb:4a:1d:e1:e1:24:af:ea:b9:56:12:b2:2c:7e: 14:9a:76:8f:cd:0e:7f:13:22:10:3f:75:b8:e9:7a:75:39:f1: dd:6b:1a:b3:88:e8:60:a7:0c:c8:d6:b3:38:30:47:1b:3e:85: 39:89:2e:33:a9:7c:9c:61:0a:54:8b:fd:fe:b5:c8:6e:fc:3d: a3:ba:2a:86:5e:03:b8:17:d5:3a:ab:76:9e:7a:60:f9:e2:09: dd:85:8e:0e:8e:65:37:e9:46:6d:cf:ea:16:bf:27:f4:d8:12: 3f:31:f0:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTIwQTExMC8GA1UEBRMoODlENzc5QzUwRjE0RUQxMUZDNUFEQjg0MDM3ODkyQjI2 MEI5OTVFNjAeFw0yNTA1MzEwNjE5MzhaFw0yNTA2MDcwNjE5MzhaMBgxFjAUBgNV BAMTDTY4M2E5ZjdhLTc4YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDl0cdVnFBDhkhcAaCLW3L58xE/he5sVbn+vJTejtc+LwIPGafBUff8TYv7bUUp 3YmfdLyZ2VRyoyM3K0R3DbC71dwPsO8gcnCFmaZfhDdjCkwEQXQ3RZatuc+JgsPz FzGx/aEAiY2yGbCC9bmdo0iuyEC2xJbib7AbQt7vJpGOHVhREiIHSWNBaDar3GWS JQox8tk9j86m9BoOPu6utzzpl/rOAjfNF2qeFRSXFSgF5h685vpgHiwtsz9bsDyS TnpsQtbVUG8azW3IAICKTomI9lptvBFR4EAVp3lCthafw1brjDrNLPjMtj1Oi3z2 N/aNe09XIR2GZctCuohmtUu7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxHZ3Cha2 tgIPpAAD3hv0wrLpjQcwHwYDVR0jBBgwFoAUidd5xQ8U7RH8WtuEA3iSsmC5leYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMjBBLzgyOUE3NEE4ODZG MzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxl WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWRkNXhROFU3Ukg4V3R1RUEzaVNzbUM1bGVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MjBBLzgyOUE3NEE4ODZGMzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JI OFd0dUVBM2lTc21DNWxlWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJje0TzHoydKcbyAQrF+bm6LYoYC8BQ5dfz1Wtb9/4IgohUkhQb5So9L OtWrLG6BWN5y+RUuSiUrTLHJUbTj6menjE/hOxVGooe/mK1h6POnfbauXIXakinO fEBMt8Wl8zAqd3FAuPabA2vrvnKMOIx4ptOKwFyzSuNqxSuuXrO7RS3n4EPFPD8T XKyEkqSQ2rWdeEm7Sh3h4SSv6rlWErIsfhSado/NDn8TIhA/dbjpenU58d1rGrOI 6GCnDMjWszgwRxs+hTmJLjOpfJxhClSL/f61yG78PaO6KoZeA7gX1Tqrdp56YPni Cd2Fjg6OZTfpRm3P6ha/J/TYEj8x8IY= -----END CERTIFICATE-----Generated at Sat May 31 17:49:35 2025 by rpki-client