$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: km7RGgM+TC22VR5XqTAujvGweOQm+eWPsNaZ4OtkzIc= Subject key identifier: C2:F1:F3:EB:43:F3:CE:F7:F6:8D:07:DF:C1:76:81:C3:44:71:C7:04 Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 081A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 0811 Signing time: Fri 30 May 2025 21:06:38 +0000 Manifest this update: Fri 30 May 2025 21:06:37 +0000 Manifest next update: Fri 06 Jun 2025 21:06:37 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: R8fj6XbRlyEqewOccH7BFjepGQgNk6wCV+JckUG6jUk=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: pjchJ6cFRSOrYYA+BU/yT4PSr0ftFhi06QMViMdoOGo=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: QHVhADIvelk+RcB2dDEApwkg1zDr9XWT50JUlNL3d6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2074 (0x81a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: May 30 21:06:37 2025 GMT Not After : Jun 6 21:06:37 2025 GMT Subject: CN=683a1dde-d106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:40:89:a0:85:27:bf:0b:69:64:ba:0a:de: da:e4:98:7e:4b:fc:50:d6:8a:1a:53:c7:2e:ea:c6: 6f:14:c8:ed:85:a2:da:76:11:b7:b6:f6:2b:3d:b0: 80:b9:b4:0f:1a:12:74:9b:14:88:f2:43:80:3b:3b: 28:72:93:1b:1b:a3:56:bf:57:b9:df:20:ed:ec:e9: 33:5a:a3:94:c0:9f:44:d7:20:e5:ea:10:59:46:7a: c1:53:25:26:a9:6e:ae:29:e2:4e:7b:77:36:3e:28: ff:e1:02:2b:7b:0e:43:ad:fd:4d:1e:95:70:e4:da: 4c:26:34:3f:e0:36:34:df:32:de:c7:b9:66:eb:53: 76:9d:42:ff:c5:8f:98:d6:cf:85:0d:df:9f:55:fd: de:0b:84:7d:d7:1c:3d:48:d8:11:62:7b:7e:f9:73: e8:7a:a6:76:0e:b6:92:d3:90:81:04:03:c5:66:f5: 6b:d2:b1:92:78:2d:23:f7:06:47:9d:96:2e:07:3c: 53:b4:75:8a:51:5c:e7:8a:55:fe:a0:8d:f0:79:f2: c9:2a:b7:98:6d:01:50:07:9f:e8:b3:d2:86:53:41: 6c:f6:dd:1c:d9:4a:19:50:2f:c3:82:fe:ad:4b:43: 20:47:20:21:32:1a:ba:c4:9f:3f:21:7a:57:8b:21: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F1:F3:EB:43:F3:CE:F7:F6:8D:07:DF:C1:76:81:C3:44:71:C7:04 X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:13:74:b8:89:5f:13:d0:f2:0d:e6:fd:94:be:55:0f:d1:4b: 63:37:aa:e0:12:1a:52:5a:3c:b7:ce:86:25:2f:21:05:14:d8: 7d:79:9f:a4:90:68:56:dc:72:41:d6:0a:29:fd:2e:e0:b7:e9: 2a:ff:b6:ad:f0:d2:25:da:89:7b:7d:28:c8:27:7b:a0:31:9f: 47:93:e7:6e:73:5e:29:7d:f2:81:52:b4:07:61:b9:11:1d:ee: 8c:19:6c:a6:ee:c6:e4:34:b4:2d:df:6f:d2:f9:bc:8c:90:e8: fe:75:62:ee:7e:f4:aa:92:90:f3:a6:e3:13:f4:85:b9:93:b0: 2a:95:20:ab:bd:c0:cd:bc:7c:0f:8d:76:bf:28:6d:c9:8a:b7: 9e:ce:55:56:21:a8:ab:5d:74:d9:fe:85:5e:f0:25:79:7a:e1: 89:6a:69:7c:5b:19:06:77:d5:0e:9d:33:c0:9e:b0:a3:ce:af: 3b:43:51:55:e7:3c:f5:56:7c:70:d0:0f:30:6d:cb:f3:55:b4: b8:ba:85:05:1d:c4:60:89:22:f5:f9:af:f4:56:0e:ba:04:0a: cf:11:7c:33:ac:69:2a:75:a2:a5:90:bd:fe:31:99:40:f9:e7: 81:da:10:3d:39:b2:ad:b7:60:3c:ab:6c:88:07:42:de:b0:b7: 58:d8:fa:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjUwNTMwMjEwNjM3WhcNMjUwNjA2MjEwNjM3WjAYMRYwFAYD VQQDEw02ODNhMWRkZS1kMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApl5AiaCFJ78LaWS6Ct7a5Jh+S/xQ1ooaU8cu6sZvFMjthaLadhG3tvYrPbCA ubQPGhJ0mxSI8kOAOzsocpMbG6NWv1e53yDt7OkzWqOUwJ9E1yDl6hBZRnrBUyUm qW6uKeJOe3c2Pij/4QIrew5Drf1NHpVw5NpMJjQ/4DY03zLex7lm61N2nUL/xY+Y 1s+FDd+fVf3eC4R91xw9SNgRYnt++XPoeqZ2DraS05CBBAPFZvVr0rGSeC0j9wZH nZYuBzxTtHWKUVznilX+oI3wefLJKreYbQFQB5/os9KGU0Fs9t0c2UoZUC/Dgv6t S0MgRyAhMhq6xJ8/IXpXiyFJzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLx8+tD 88739o0H38F2gcNEcccEMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZE3S4iV8T0PIN5v2UvlUP0UtjN6rgEhpSWjy3zoYlLyEFFNh9eZ+k kGhW3HJB1gop/S7gt+kq/7at8NIl2ol7fSjIJ3ugMZ9Hk+duc14pffKBUrQHYbkR He6MGWym7sbkNLQt32/S+byMkOj+dWLufvSqkpDzpuMT9IW5k7AqlSCrvcDNvHwP jXa/KG3JireezlVWIairXXTZ/oVe8CV5euGJaml8WxkGd9UOnTPAnrCjzq87Q1FV 5zz1Vnxw0A8wbcvzVbS4uoUFHcRgiSL1+a/0Vg66BArPEXwzrGkqdaKlkL3+MZlA +eeB2hA9ObKtt2A8q2yIB0LesLdY2PoM -----END CERTIFICATE-----Generated at Sat May 31 17:06:30 2025 by rpki-client