$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json) Hash identifier: Tm5k+KH26fK8p8aUrfMfySDZeW1jaA8IDM4BvktY94E= Subject key identifier: AD:77:86:CC:40:02:0E:C5:EA:A2:CD:8F:A7:9D:FB:69:77:92:17:CD Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Certificate serial: 045E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft Manifest number: 0459 Signing time: Sat 31 May 2025 00:23:19 +0000 Manifest this update: Sat 31 May 2025 00:23:19 +0000 Manifest next update: Sat 07 Jun 2025 00:23:19 +0000 Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: suIuG22QrAHHUBAJpJW71hurd//th0Tok9NjSQaSLSI=) 2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: HeEMxWbEp596Nl2YyjBu7WmXC2Fx4dfVT+MEH+2m8Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Validity Not Before: May 31 00:23:19 2025 GMT Not After : Jun 7 00:23:19 2025 GMT Subject: CN=683a4bf7-a7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:77:92:09:09:62:86:67:bb:c2:35:a9:b2: 2d:e2:35:73:ce:06:2c:72:0a:70:99:f7:bc:d5:23: ad:ed:e5:11:d0:dc:1e:d8:6b:b6:46:1a:76:0e:02: e6:44:0b:64:ec:74:53:e9:18:f1:d1:27:dd:24:b8: 99:95:d8:35:7f:fd:1b:f7:3b:41:5c:91:0f:ff:52: 44:5c:bf:9f:d3:da:c9:2d:47:da:8e:97:ba:ab:5f: 8d:cd:39:14:29:2a:12:6f:cd:6e:63:3b:fc:7a:99: d0:19:28:cc:24:c5:8d:58:67:5f:17:45:c7:6b:04: c5:44:b8:ac:3b:fb:43:80:36:cc:64:cf:32:43:17: 3f:d5:c7:19:41:56:c5:51:9e:89:59:d1:74:2b:64: cc:e2:26:0b:0d:eb:52:67:54:ac:3a:44:9b:c4:b6: 23:30:65:a4:dc:d8:e0:1e:dc:cc:a2:1d:0c:d2:ac: 37:66:60:d8:2e:ff:16:ae:47:ca:3e:14:22:67:b9: 51:6a:89:b8:e4:4f:ae:2a:c9:2e:1c:60:9a:2f:45: 39:f0:40:25:cc:97:08:9f:7b:af:5d:2b:a3:f9:9f: 8c:fa:92:05:81:86:a3:2b:2e:2f:cb:57:29:58:f9: 76:67:d3:72:1c:ba:64:57:0d:c4:2e:50:3f:c8:e4: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:77:86:CC:40:02:0E:C5:EA:A2:CD:8F:A7:9D:FB:69:77:92:17:CD X509v3 Authority Key Identifier: keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:66:ee:02:8f:5d:bf:65:b1:c2:44:68:7a:e2:b7:e2:69:4d: ce:9a:d8:cd:61:0f:b4:61:2f:57:95:68:d5:20:ca:7e:ef:47: 29:f9:b9:ad:83:6a:0c:b1:ba:67:d3:e2:74:2c:06:0f:34:0a: a8:13:0e:60:e5:b4:a5:23:92:8c:30:da:ee:64:e5:a3:af:24: 53:da:3f:19:6a:bc:27:f9:70:60:91:79:8a:0a:5b:d4:f1:16: 53:95:9a:30:8c:57:30:13:ba:79:d6:5e:a5:50:a6:a4:3f:47: de:50:8d:25:ef:ef:5d:e9:b4:84:ad:00:f1:c9:ea:70:fc:87: 46:19:34:08:08:13:da:67:bb:76:3e:97:a1:0b:f1:0a:66:05: e0:93:18:89:ed:2d:6f:f4:a3:8a:c0:31:e1:a8:ac:48:24:f8: a0:a1:45:cc:08:c2:40:8d:59:42:1a:fa:b8:23:ad:b2:af:4d: 4b:f2:41:cf:38:8c:cf:97:88:35:cd:2d:4f:b5:0c:37:18:5e: de:26:91:01:2e:a8:fe:7b:5d:e8:26:65:48:a4:10:7a:b4:d9: f6:f6:be:10:e6:fe:eb:b5:25:c7:d6:84:e4:6f:5f:8d:cb:b8: 16:4e:ca:44:05:1a:2e:1e:bb:fa:d0:f2:7a:a9:18:63:3e:87: 4b:d2:18:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC NjNBMzhBMUUwHhcNMjUwNTMxMDAyMzE5WhcNMjUwNjA3MDAyMzE5WjAYMRYwFAYD VQQDEw02ODNhNGJmNy1hN2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBd3kgkJYoZnu8I1qbIt4jVzzgYscgpwmfe81SOt7eUR0Nwe2Gu2Rhp2DgLm RAtk7HRT6Rjx0SfdJLiZldg1f/0b9ztBXJEP/1JEXL+f09rJLUfajpe6q1+NzTkU KSoSb81uYzv8epnQGSjMJMWNWGdfF0XHawTFRLisO/tDgDbMZM8yQxc/1ccZQVbF UZ6JWdF0K2TM4iYLDetSZ1SsOkSbxLYjMGWk3NjgHtzMoh0M0qw3ZmDYLv8WrkfK PhQiZ7lRaom45E+uKskuHGCaL0U58EAlzJcIn3uvXSuj+Z+M+pIFgYajKy4vy1cp WPl2Z9NyHLpkVw3ELlA/yOSYAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK13hsxA Ag7F6qLNj6ed+2l3khfNMB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJZu4Cj12/ZbHCRGh64rfiaU3OmtjNYQ+0YS9XlWjVIMp+70cp+bmt g2oMsbpn0+J0LAYPNAqoEw5g5bSlI5KMMNruZOWjryRT2j8Zarwn+XBgkXmKClvU 8RZTlZowjFcwE7p51l6lUKakP0feUI0l7+9d6bSErQDxyepw/IdGGTQICBPaZ7t2 PpehC/EKZgXgkxiJ7S1v9KOKwDHhqKxIJPigoUXMCMJAjVlCGvq4I62yr01L8kHP OIzPl4g1zS1PtQw3GF7eJpEBLqj+e13oJmVIpBB6tNn29r4Q5v7rtSXH1oTkb1+N y7gWTspEBRouHrv60PJ6qRhjPodL0hjG -----END CERTIFICATE-----Generated at Sat May 31 16:55:04 2025 by rpki-client