$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json) Hash identifier: g2VXz0r/MKj5WJhSVJYoujHcUgGn0VG8UDYlzoaqC14= Subject key identifier: 89:32:09:E3:92:82:9F:0B:D3:4F:DD:D8:49:4F:D1:4E:8A:05:1A:E5 Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft Manifest number: 0280 Signing time: Sat 31 May 2025 01:50:08 +0000 Manifest this update: Sat 31 May 2025 01:50:07 +0000 Manifest next update: Sat 07 Jun 2025 01:50:07 +0000 Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: GYiLJhjve++hSdbcYUMWxk9CurgHLiIrkgvi4+fyuPc=) 2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: aPI8mVL7Dstx7y3IRo2S4CN1FA4wN8FwOnV7yts7LdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Validity Not Before: May 31 01:50:07 2025 GMT Not After : Jun 7 01:50:07 2025 GMT Subject: CN=683a6050-a50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:e3:31:b4:5a:8d:e2:d6:13:35:36:26:28: 4e:fb:ef:12:f8:10:4d:80:91:47:36:9f:9f:0a:ff: 5d:2e:a4:7f:a9:46:f5:95:b1:90:20:11:27:bd:60: 73:a6:20:48:07:58:fe:f2:cc:06:5b:e7:b8:bc:f4: 88:1a:a6:93:0d:79:eb:85:bd:ed:ac:f7:7d:a3:83: 8a:67:4d:fd:4a:58:a3:3b:a3:9b:0b:7c:3a:9c:cb: 3b:1c:be:4f:30:13:90:7c:62:54:01:f7:de:bd:d1: 13:8e:bd:ee:36:02:dc:f4:19:15:33:fa:db:54:67: 91:c0:56:46:45:c0:fc:11:89:53:6b:e8:d1:84:5e: 31:55:d5:a9:53:86:67:a2:2f:43:28:0c:31:fb:3b: d2:73:13:6e:61:d6:bc:1e:5a:02:88:a8:18:61:fb: 4c:c7:4f:ce:d6:54:2d:9c:4d:27:ca:4a:bf:45:94: cd:f7:e1:e0:01:1d:d2:c4:33:66:70:a0:af:1b:fb: a0:cb:a4:01:64:fb:fc:41:f9:e2:a8:47:b4:49:67: 05:2b:ed:1a:12:dd:37:ab:5a:f3:26:c2:0c:17:ce: d2:20:7e:56:ff:c9:f4:55:58:f3:0c:86:75:1a:b7: 99:37:de:95:5f:fd:36:32:65:6f:51:89:c3:ef:89: 92:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:32:09:E3:92:82:9F:0B:D3:4F:DD:D8:49:4F:D1:4E:8A:05:1A:E5 X509v3 Authority Key Identifier: keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:11:45:f0:31:fe:eb:55:d7:8c:72:1a:ed:7a:07:e6:92:81: ae:15:32:43:fd:ef:ba:af:fd:7e:67:e6:8b:27:cd:ac:3a:1c: f3:05:76:37:37:b0:79:37:76:9b:a5:0e:df:e1:88:99:e6:e7: 06:6a:8e:7b:58:45:16:c4:92:ed:a0:ee:92:c4:7b:d8:7e:5c: 78:5e:49:93:85:bc:1d:8b:79:28:1d:5d:d5:a1:e7:39:37:73: a2:83:3e:95:cd:89:c1:67:62:93:a6:46:fc:a3:e3:79:b3:16: 1c:09:8e:86:c1:7d:4b:49:d5:15:06:f0:f5:90:ed:92:22:7e: 95:f8:2e:1e:17:3b:be:cd:a5:2a:e9:78:fb:bb:42:d2:4e:f6: ff:c9:2f:ee:87:d9:13:19:22:ac:1c:68:ac:09:5a:37:de:2d: c0:da:55:49:ec:e6:ca:d6:26:f9:cd:67:d2:73:9e:d3:57:8b: 32:c8:53:01:91:a8:43:70:9b:03:ce:53:76:06:d2:0a:dd:06: 2b:75:ae:8b:51:23:21:30:df:9d:55:9f:92:12:ad:39:11:84: ae:8d:c8:28:60:60:7a:9e:fd:81:f0:8a:60:fa:d4:d3:1c:0e: 41:4b:a0:d2:86:ee:ca:1b:ae:15:bf:51:c9:52:21:f3:c8:58: 3e:3e:8b:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1ODYxMTAvBgNVBAUTKEFDMjNGNTREMzAxNTBCNDYwMDlDMUEwMjlFNUVFQ0RC NkUwNTU2NTYwHhcNMjUwNTMxMDE1MDA3WhcNMjUwNjA3MDE1MDA3WjAYMRYwFAYD VQQDEw02ODNhNjA1MC1hNTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpfjMbRajeLWEzU2JihO++8S+BBNgJFHNp+fCv9dLqR/qUb1lbGQIBEnvWBz piBIB1j+8swGW+e4vPSIGqaTDXnrhb3trPd9o4OKZ039SlijO6ObC3w6nMs7HL5P MBOQfGJUAffevdETjr3uNgLc9BkVM/rbVGeRwFZGRcD8EYlTa+jRhF4xVdWpU4Zn oi9DKAwx+zvScxNuYda8HloCiKgYYftMx0/O1lQtnE0nykq/RZTN9+HgAR3SxDNm cKCvG/ugy6QBZPv8QfniqEe0SWcFK+0aEt03q1rzJsIMF87SIH5W/8n0VVjzDIZ1 GreZN96VX/02MmVvUYnD74mSZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkyCeOS gp8L00/d2ElP0U6KBRrlMB8GA1UdIwQYMBaAFKwj9U0wFQtGAJwaAp5e7NtuBVZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTU4Ni8wRDYxOTE2ODA5 OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMwWUFuQm9Dbmw3czIyNEZW bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDUDFUVEFWQzBZQW5Cb0NubDdzMjI0RlZsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTU4Ni8wRDYxOTE2ODA5OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMw WUFuQm9Dbmw3czIyNEZWbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKEUXwMf7rVdeMchrtegfmkoGuFTJD/e+6r/1+Z+aLJ82sOhzzBXY3 N7B5N3abpQ7f4YiZ5ucGao57WEUWxJLtoO6SxHvYflx4XkmThbwdi3koHV3Voec5 N3Oigz6VzYnBZ2KTpkb8o+N5sxYcCY6GwX1LSdUVBvD1kO2SIn6V+C4eFzu+zaUq 6Xj7u0LSTvb/yS/uh9kTGSKsHGisCVo33i3A2lVJ7ObK1ib5zWfSc57TV4syyFMB kahDcJsDzlN2BtIK3QYrda6LUSMhMN+dVZ+SEq05EYSujcgoYGB6nv2B8Ipg+tTT HA5BS6DShu7KG64Vv1HJUiHzyFg+Poun -----END CERTIFICATE-----Generated at Sat May 31 16:57:51 2025 by rpki-client