$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft File: 9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json) Hash identifier: DXz97aMY2CJ/FB7qtfDKhAgbqmuIl6WrQ5qDJjmK7NI= Subject key identifier: 04:10:47:52:6C:F1:82:F9:E0:F3:AD:F3:DC:68:71:6F:88:F5:70:08 Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB Certificate issuer: /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft Manifest number: 0645 Signing time: Sat 31 May 2025 23:47:22 +0000 Manifest this update: Sat 31 May 2025 23:47:21 +0000 Manifest next update: Sat 07 Jun 2025 23:47:21 +0000 Files and hashes: 1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: N90NhlMsZfTkps+2PUFVAKy9CANlEVn09iL5SxUh9jY=) 2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: fvo1aPGM+n05nvJm6qW9Z2hmGhNw4J6QEIdDkjbjrFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Validity Not Before: May 31 23:47:21 2025 GMT Not After : Jun 7 23:47:21 2025 GMT Subject: CN=683b950a-cecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:f3:4d:92:dc:53:53:46:58:f7:de:49:81: 82:ea:98:47:4e:8f:79:61:08:08:b2:ae:60:7b:66: a2:5e:a9:dc:cd:d2:30:b3:17:28:00:7a:69:f4:ef: 3c:c1:74:df:ae:a0:be:c3:7b:3b:b6:02:b5:4d:ac: ca:8e:9b:cd:9a:ed:83:04:33:1d:ee:07:46:01:fa: eb:07:16:35:06:67:c1:72:29:fc:79:d3:a5:d6:21: 84:2a:a1:74:af:9f:33:93:af:68:01:3a:9a:4c:cb: ff:9e:dd:cb:5c:89:aa:38:8e:6a:cd:1c:b0:6d:f0: 6d:b4:40:b5:1c:a5:33:73:da:5a:3e:35:68:f0:80: 8f:8a:38:f8:56:dc:c9:07:c2:01:48:bd:29:7d:3e: 61:df:85:80:2c:ea:a5:50:94:8f:a7:d6:63:5e:8e: 2e:5c:ab:8e:a1:c8:70:fb:e1:d4:85:c9:e4:d6:30: 67:0a:44:c8:a2:c8:37:7b:b6:ef:8c:f9:39:46:85: 8f:52:61:c5:fb:0b:4e:15:3d:ad:f9:c0:b6:3f:04: 50:f1:31:70:7f:f0:d5:cb:a2:20:da:af:28:21:4e: ad:b0:63:c0:62:d9:d7:3d:bb:13:5b:ad:cd:5f:75: ec:55:2e:e2:3b:be:30:75:9b:92:d6:ba:42:13:0c: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:10:47:52:6C:F1:82:F9:E0:F3:AD:F3:DC:68:71:6F:88:F5:70:08 X509v3 Authority Key Identifier: keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:2e:58:3d:dd:e6:e2:7e:e2:40:0e:d1:29:a1:4e:58:5d:dd: bd:3a:35:e1:64:f7:18:e8:cc:35:12:43:49:a9:62:61:83:53: d3:d2:fc:cb:99:61:32:0f:0c:d4:29:a4:1a:77:14:d3:1c:2f: db:6a:d3:41:da:75:ce:d3:d9:ba:e9:a0:98:1d:db:09:4b:42: e5:2c:ba:5a:56:13:aa:9a:17:af:4f:e3:51:55:f8:7f:03:30: c4:8f:c9:d9:40:d5:7a:bc:e0:a4:66:57:ee:5c:e6:78:6c:47: e3:13:80:46:40:a3:76:a2:20:aa:30:fc:06:0c:02:b9:60:e9: 2d:07:bd:18:00:a5:1d:a5:20:11:67:54:2d:5c:cd:9f:01:58: 5e:6b:25:8e:74:04:14:a2:f4:64:df:f8:09:9b:d8:12:4c:34: 2b:d7:db:b7:aa:5a:51:08:60:64:96:9f:8c:44:7f:46:c7:65: eb:0d:1a:d7:e6:04:84:70:78:14:bc:5d:8c:2a:50:d2:70:2c: 1e:65:b9:a8:12:89:3f:00:2f:ba:d0:7a:b4:89:db:bf:d5:e3: 42:cd:87:a9:e3:33:6c:c8:fa:ac:da:0d:c6:fb:44:9b:52:e0: 5c:bd:44:83:3e:28:06:34:ba:bd:3e:56:3d:eb:bd:12:48:14: f1:b4:6e:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVGMjExMTAvBgNVBAUTKEY0QzA2NDEzNzQ5NzVBNThCNTRFQzAyQzEwNDk3MzJF QzhBNzBBQ0IwHhcNMjUwNTMxMjM0NzIxWhcNMjUwNjA3MjM0NzIxWjAYMRYwFAYD VQQDEw02ODNiOTUwYS1jZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA007zTZLcU1NGWPfeSYGC6phHTo95YQgIsq5ge2aiXqnczdIwsxcoAHpp9O88 wXTfrqC+w3s7tgK1TazKjpvNmu2DBDMd7gdGAfrrBxY1BmfBcin8edOl1iGEKqF0 r58zk69oATqaTMv/nt3LXImqOI5qzRywbfBttEC1HKUzc9paPjVo8ICPijj4VtzJ B8IBSL0pfT5h34WALOqlUJSPp9ZjXo4uXKuOochw++HUhcnk1jBnCkTIosg3e7bv jPk5RoWPUmHF+wtOFT2t+cC2PwRQ8TFwf/DVy6Ig2q8oIU6tsGPAYtnXPbsTW63N X3XsVS7iO74wdZuS1rpCEwx0+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQQR1Js 8YL54POt89xocW+I9XAIMB8GA1UdIwQYMBaAFPTAZBN0l1pYtU7ALBBJcy7IpwrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUYyMS9FQURCQjQxMjAx ODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFdsaTFUc0FzRUVsekxzaW5D c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNQmtFM1NYV2xpMVRzQXNFRWx6THNpbkNzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUYyMS9FQURCQjQxMjAxODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFds aTFUc0FzRUVsekxzaW5Dc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5Llg93ebifuJADtEpoU5YXd29OjXhZPcY6Mw1EkNJqWJhg1PT0vzL mWEyDwzUKaQadxTTHC/batNB2nXO09m66aCYHdsJS0LlLLpaVhOqmhevT+NRVfh/ AzDEj8nZQNV6vOCkZlfuXOZ4bEfjE4BGQKN2oiCqMPwGDAK5YOktB70YAKUdpSAR Z1QtXM2fAVheayWOdAQUovRk3/gJm9gSTDQr19u3qlpRCGBklp+MRH9Gx2XrDRrX 5gSEcHgUvF2MKlDScCweZbmoEok/AC+60Hq0idu/1eNCzYep4zNsyPqs2g3G+0Sb UuBcvUSDPigGNLq9PlY9670SSBTxtG7e -----END CERTIFICATE-----Generated at Mon Jun 2 06:35:13 2025 by rpki-client