$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft File: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json) Hash identifier: Chj6cyu9XYG+tBfuSc5qd9jf4CGx/qrCbLrEqnEzqZ0= Subject key identifier: 8A:2F:AF:46:1B:0E:A3:90:4D:66:12:E2:37:68:67:E8:35:C5:97:8A Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA Certificate issuer: /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA Certificate serial: 079A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft Manifest number: 0793 Signing time: Fri 30 May 2025 21:34:32 +0000 Manifest this update: Fri 30 May 2025 21:34:32 +0000 Manifest next update: Fri 06 Jun 2025 21:34:32 +0000 Files and hashes: 1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: y88iYyUT1cllUnqKSMzyzjkFymavSSGcUSEkR2nTU1E=) 2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: elCspCf7kpxqe/1sy2Dq4/SmTn/Yog4Qi7W5Fjs7BFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1946 (0x79a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA Validity Not Before: May 30 21:34:32 2025 GMT Not After : Jun 6 21:34:32 2025 GMT Subject: CN=683a2468-0aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:03:3f:2b:8d:44:c5:74:0b:59:bb:5d:d9: d5:1d:be:07:21:d2:52:b3:ae:01:26:8e:e5:1e:c7: ef:b3:df:85:b9:21:9c:40:b3:0f:f4:de:f4:dd:e5: 54:21:11:6a:e3:ea:92:b7:4c:96:45:a7:36:85:a0: 2c:5d:4f:3a:b4:10:6b:31:ad:ef:e9:03:e7:c7:af: bd:da:cd:37:46:36:d5:19:6e:cf:78:c2:f8:6e:6a: 1d:93:90:a2:b1:ef:d2:8c:d1:d5:d7:ef:80:51:85: 84:ef:44:fb:49:e5:a6:50:62:83:96:b0:69:fb:1e: a9:60:26:d9:db:6e:82:e3:15:bc:d7:96:a5:1f:c1: 63:b6:d8:94:c8:9b:92:a3:b5:0f:01:f3:ce:48:d6: 33:8a:61:82:0f:77:15:cb:28:5c:8c:43:15:9d:e6: f2:b3:aa:cc:6d:45:c6:d6:2a:a6:69:8f:54:d0:29: 92:c7:d3:b5:23:02:c4:1f:43:a1:08:06:26:b8:1f: 37:ac:ba:7e:7a:4b:ef:ca:2f:03:3b:4a:64:41:0d: 97:8e:a5:64:02:ba:64:7a:77:ef:3a:72:fc:ce:e2: 56:09:0a:5c:91:78:ee:0b:5e:ab:a7:19:c7:51:22: 03:10:c7:ac:0e:19:1d:2e:e0:1d:d2:ce:fb:da:dc: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2F:AF:46:1B:0E:A3:90:4D:66:12:E2:37:68:67:E8:35:C5:97:8A X509v3 Authority Key Identifier: keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:47:96:1f:92:e7:01:89:55:2c:69:60:d4:c1:f5:d1:d6:ac: 58:d7:29:52:31:94:d0:d6:4a:84:d8:7d:77:6d:56:35:c7:7f: 40:9d:8b:86:7f:32:ad:dd:81:79:a2:60:b2:c0:c4:9f:ba:35: ec:4f:8f:1b:96:2e:34:ed:d8:4f:e3:e6:3a:80:9f:6e:5f:12: b7:7c:12:96:f9:f0:b5:5a:aa:4b:34:a3:32:f0:f6:69:d6:ab: 0f:0f:d7:61:e7:5f:85:9f:10:b0:64:a7:a3:55:c7:5a:d6:16: 62:4d:98:e2:fa:a2:21:1d:2b:58:a7:5e:ab:84:44:e7:88:80: 6b:6f:30:7b:c2:75:9b:f0:2c:8d:be:10:02:80:df:22:01:dc: 90:5e:95:f1:e9:45:a2:e2:d0:2e:15:3e:b2:cf:10:86:0a:17: 55:70:bb:df:52:1b:a0:c6:01:cd:96:e4:fa:c9:9b:bf:2c:94: 72:89:2d:13:89:98:83:0f:df:e5:5f:16:d2:77:64:05:41:64: 97:33:08:1d:17:18:09:33:c1:05:4e:87:d1:54:51:30:90:76: ae:99:42:80:50:a9:a8:c5:84:86:d6:51:28:45:80:d3:d5:87: 5c:51:4b:97:ec:10:cd:d8:00:fd:69:f0:21:62:00:70:c6:39: ae:64:c6:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk2ODAxMTAvBgNVBAUTKEI3NTkwOTJBNjkxOEY0NUVBQ0QwRENGREY5NzFEMEQz RkE1MDIxQUEwHhcNMjUwNTMwMjEzNDMyWhcNMjUwNjA2MjEzNDMyWjAYMRYwFAYD VQQDEw02ODNhMjQ2OC0wYWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukYDPyuNRMV0C1m7XdnVHb4HIdJSs64BJo7lHsfvs9+FuSGcQLMP9N703eVU IRFq4+qSt0yWRac2haAsXU86tBBrMa3v6QPnx6+92s03RjbVGW7PeML4bmodk5Ci se/SjNHV1++AUYWE70T7SeWmUGKDlrBp+x6pYCbZ226C4xW815alH8FjttiUyJuS o7UPAfPOSNYzimGCD3cVyyhcjEMVnebys6rMbUXG1iqmaY9U0CmSx9O1IwLEH0Oh CAYmuB83rLp+ekvvyi8DO0pkQQ2XjqVkArpkenfvOnL8zuJWCQpckXjuC16rpxnH USIDEMesDhkdLuAd0s772tzbiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIovr0Yb DqOQTWYS4jdoZ+g1xZeKMB8GA1UdIwQYMBaAFLdZCSppGPRerNDc/flx0NP6UCGq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTY4MC83NEY3QkJGQzBC QTExMUVCQjkzMjEyMUJDNEY5QUUwMi90MWtKS21rWTlGNnMwTno5LVhIUTBfcFFJ YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Qxa0pLbWtZOUY2czBOejktWEhRMF9wUUlhby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTY4MC83NEY3QkJGQzBCQTExMUVCQjkzMjEyMUJDNEY5QUUwMi90MWtKS21rWTlG NnMwTno5LVhIUTBfcFFJYW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhR5YfkucBiVUsaWDUwfXR1qxY1ylSMZTQ1kqE2H13bVY1x39AnYuG fzKt3YF5omCywMSfujXsT48bli407dhP4+Y6gJ9uXxK3fBKW+fC1WqpLNKMy8PZp 1qsPD9dh51+FnxCwZKejVcda1hZiTZji+qIhHStYp16rhETniIBrbzB7wnWb8CyN vhACgN8iAdyQXpXx6UWi4tAuFT6yzxCGChdVcLvfUhugxgHNluT6yZu/LJRyiS0T iZiDD9/lXxbSd2QFQWSXMwgdFxgJM8EFTofRVFEwkHaumUKAUKmoxYSG1lEoRYDT 1YdcUUuX7BDN2AD9afAhYgBwxjmuZMYO -----END CERTIFICATE-----Generated at Sat May 31 17:49:32 2025 by rpki-client