$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: 9Q4i8mjT83b2Bzmegva1qqORankJz5iE991pi33g7MQ= Subject key identifier: 1D:33:73:D7:6A:1C:D6:35:23:4B:3B:37:01:98:4C:A7:7F:98:4F:ED Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 019F Signing time: Mon 09 Jun 2025 02:29:39 +0000 Manifest this update: Mon 09 Jun 2025 02:29:39 +0000 Manifest next update: Mon 16 Jun 2025 02:29:39 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: 3yrrLi87SlxSOJjvwtA+zmeVREgGMotJZKDkOKieHc4=) 2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: b8ZzvlKgDQGk0f2Mf7aPG61cEDCQRJBc44944Geb3Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 02:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Jun 9 02:29:39 2025 GMT Not After : Jun 16 02:29:39 2025 GMT Subject: CN=68464713-8eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:80:4d:27:f7:73:2b:05:a3:1c:a2:80:53:87: 86:5d:7b:68:be:cd:ba:3f:08:14:d3:f8:86:e0:e4: 27:21:5c:0a:64:c3:54:9c:d5:8e:dd:6d:26:0b:17: e0:40:f2:6e:55:bd:38:d4:fb:91:6b:75:27:fc:00: 52:52:a4:53:4f:a7:f9:5a:4c:ce:62:3d:b1:2e:ce: e6:57:e3:4f:2e:b1:56:1a:14:34:4e:58:2f:59:d3: 02:9e:c4:74:76:0b:48:4d:10:19:e4:93:2e:55:50: a9:84:37:cf:fb:cf:36:72:65:20:7c:01:3f:e2:44: 0a:6c:4e:28:a1:d3:b4:08:09:a6:d4:1c:08:13:79: dc:70:1e:80:47:c5:a4:70:03:2a:90:c7:09:3e:dd: 1b:21:8d:4f:0a:7a:c5:bc:07:e8:a1:cf:9b:17:6b: 25:06:fe:91:7f:d6:3d:8c:7b:46:15:29:ab:ac:6b: b4:98:6b:be:91:fe:ad:74:de:50:71:5c:58:d2:30: ed:72:41:dc:cc:d4:01:c1:73:f2:48:d1:80:a3:7c: c3:86:fc:c1:9f:56:51:c8:64:ce:c0:21:0d:f0:27: a9:e0:2b:9d:c9:bf:e2:8e:52:26:54:49:6f:51:5f: 89:8f:cf:a9:42:26:13:59:30:37:76:3d:dd:18:06: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:33:73:D7:6A:1C:D6:35:23:4B:3B:37:01:98:4C:A7:7F:98:4F:ED X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:01:22:0f:ae:06:37:01:f9:2e:8a:19:7b:1a:ef:9d:f9:42: 4a:c7:9d:da:3a:14:75:b1:4e:fe:32:0d:0c:da:f2:81:1c:86: c5:8a:1b:59:02:c2:48:52:33:be:bb:5a:f0:28:b9:8f:c5:14: 13:db:96:27:4a:10:e4:34:f6:9e:b7:2b:1e:a7:fd:c1:b8:f8: ad:d7:f4:de:94:1e:85:a6:e0:c0:3f:36:c4:ed:3b:be:bf:17: 62:7d:4d:3f:6e:0b:67:e5:65:a0:bf:24:60:9a:c8:d9:8a:85: a9:14:ed:e8:26:4d:bb:f7:cc:d2:48:9f:6e:7d:1f:b6:4b:c6: 5c:0c:4f:6f:27:4c:14:5a:0f:b0:c5:57:e8:f5:a9:50:1d:f8: d0:80:7a:d5:55:7c:db:5b:4e:a1:ce:58:b2:10:00:88:1b:30: 9b:9f:73:91:7f:a0:72:df:47:8d:af:d6:d7:82:d1:31:de:50: 6c:77:4b:f1:64:4c:1c:55:87:03:a7:b8:a4:5a:6b:7f:2c:f7: 9d:46:3f:dd:e0:e7:8b:aa:63:7b:cf:6f:3f:f5:a6:87:18:26: 7d:e0:f7:98:9d:b3:35:59:50:30:30:06:e0:09:fe:a9:7c:ad: ad:15:84:ff:42:16:1f:24:c5:9e:bc:2f:e7:95:91:21:f5:2a: e2:51:33:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjUwNjA5MDIyOTM5WhcNMjUwNjE2MDIyOTM5WjAYMRYwFAYD VQQDEw02ODQ2NDcxMy04ZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YBNJ/dzKwWjHKKAU4eGXXtovs26PwgU0/iG4OQnIVwKZMNUnNWO3W0mCxfg QPJuVb041PuRa3Un/ABSUqRTT6f5WkzOYj2xLs7mV+NPLrFWGhQ0TlgvWdMCnsR0 dgtITRAZ5JMuVVCphDfP+882cmUgfAE/4kQKbE4oodO0CAmm1BwIE3nccB6AR8Wk cAMqkMcJPt0bIY1PCnrFvAfooc+bF2slBv6Rf9Y9jHtGFSmrrGu0mGu+kf6tdN5Q cVxY0jDtckHczNQBwXPySNGAo3zDhvzBn1ZRyGTOwCEN8Cep4Cudyb/ijlImVElv UV+Jj8+pQiYTWTA3dj3dGAZVVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0zc9dq HNY1I0s7NwGYTKd/mE/tMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpASIPrgY3Afkuihl7Gu+d+UJKx53aOhR1sU7+Mg0M2vKBHIbFihtZ AsJIUjO+u1rwKLmPxRQT25YnShDkNPaetysep/3BuPit1/TelB6FpuDAPzbE7Tu+ vxdifU0/bgtn5WWgvyRgmsjZioWpFO3oJk2798zSSJ9ufR+2S8ZcDE9vJ0wUWg+w xVfo9alQHfjQgHrVVXzbW06hzliyEACIGzCbn3ORf6By30eNr9bXgtEx3lBsd0vx ZEwcVYcDp7ikWmt/LPedRj/d4OeLqmN7z28/9aaHGCZ94PeYnbM1WVAwMAbgCf6p fK2tFYT/QhYfJMWevC/nlZEh9SriUTOk -----END CERTIFICATE-----Generated at Wed Jun 11 00:21:30 2025 by rpki-client