$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: V1bsOs15sZkBXoYSQ0GtAyq9u6faiqWSBxlWta8Aju4= Subject key identifier: F3:71:69:E1:6F:D8:CC:1B:18:41:2B:9D:15:8A:18:3A:6B:17:DD:94 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0CAB Signing time: Fri 30 May 2025 18:24:12 +0000 Manifest this update: Fri 30 May 2025 18:24:12 +0000 Manifest next update: Fri 06 Jun 2025 18:24:12 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: BwoUXjs+MXpWFduFWq8z5YJrI3EBXEgLcDHdcAKzi54=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: wRhoUuLabNYzTY9DDaSK06ADTxBJOvjSTEtu7/sVqes=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: oryogDp90ntm5yVUpzztlYtF7rrid4whBN5vK7HfINE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: May 30 18:24:12 2025 GMT Not After : Jun 6 18:24:12 2025 GMT Subject: CN=6839f7cc-4a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:88:6e:e9:ec:ee:46:01:7c:55:ad:08:50: 62:e8:f3:31:23:1f:d3:73:d6:d6:5a:f6:32:16:2f: eb:57:4c:dc:67:d6:9c:ab:1f:8d:35:7b:79:00:fc: 84:95:fb:98:bd:a4:a5:14:fa:3f:35:64:a2:21:9a: 57:ba:cb:42:1d:90:d0:59:0d:5c:af:87:74:33:f5: 2a:5c:21:4a:32:63:2b:cb:3b:bd:ac:ab:77:fc:be: 34:be:f0:bd:7d:05:20:8b:76:71:37:9d:3a:b5:70: 50:c4:44:e0:97:75:02:ca:64:c4:02:9e:d6:33:bf: 24:1e:34:e9:d5:a6:9e:76:fa:a9:95:b7:6b:9a:72: ab:ac:3d:64:c7:d6:08:9c:37:f4:8c:e1:9f:d0:b5: 4d:66:a7:6d:06:03:12:42:1f:67:78:a6:c3:3b:e9: bb:28:98:22:90:17:cd:b8:0c:30:cc:64:2e:cb:05: 60:a6:40:03:2a:2c:8d:3f:29:46:35:b6:2b:76:30: 58:0e:2b:76:84:ef:a6:79:2c:86:3e:92:da:81:60: 62:8f:fc:c4:97:16:fb:ed:ec:84:84:42:3a:61:57: f4:f7:36:ed:0f:27:02:ec:1a:95:14:01:56:93:6d: 53:ae:a8:1b:25:c4:36:a4:32:07:b1:9e:72:3f:19: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:71:69:E1:6F:D8:CC:1B:18:41:2B:9D:15:8A:18:3A:6B:17:DD:94 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:ae:75:3e:d2:b3:37:e1:00:6a:2b:ea:20:26:c8:0b:d7:e8: fc:12:9b:4f:d0:11:10:6e:b2:b9:20:70:32:dd:51:ff:ed:b2: 39:27:14:c5:d0:9e:e5:92:ac:c4:c1:d8:ca:ab:61:27:98:1d: 01:7a:9d:c2:7f:fd:93:8d:d4:5f:7b:c3:82:5d:ea:68:14:1a: 71:79:34:e1:4f:2d:e7:d0:17:17:c5:b6:28:6a:f5:55:15:8a: d8:ce:e4:e5:74:2f:05:7c:c3:f2:5a:6f:85:42:98:23:88:0a: 52:34:e0:a6:a7:e9:64:9b:65:a1:d0:58:e8:1f:a7:b3:c8:44: 4a:a0:ac:e1:ad:3e:13:3b:b6:e1:ab:5b:f7:88:74:58:40:6e: d8:ae:fe:5c:45:92:71:12:e9:27:18:ff:52:18:81:ad:a5:0d: e6:9c:53:f6:97:d1:4d:8e:b5:79:91:9b:cb:80:50:fd:16:f1: 42:2c:e7:08:f9:73:42:39:4d:b8:75:6b:e5:b3:fb:d7:30:0b: 93:20:b0:22:d8:1a:fc:7a:17:ef:00:35:ed:ae:c4:a5:4f:6c: bd:7b:1a:bb:bf:22:d6:2b:1f:d5:d3:1c:cb:1e:da:5f:77:c8: 2c:a8:82:e5:45:1b:a9:ef:25:4d:0d:97:f5:df:70:de:37:ff: 42:06:e7:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUwNTMwMTgyNDEyWhcNMjUwNjA2MTgyNDEyWjAYMRYwFAYD VQQDEw02ODM5ZjdjYy00YTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TCIbuns7kYBfFWtCFBi6PMxIx/Tc9bWWvYyFi/rV0zcZ9acqx+NNXt5APyE lfuYvaSlFPo/NWSiIZpXustCHZDQWQ1cr4d0M/UqXCFKMmMryzu9rKt3/L40vvC9 fQUgi3ZxN506tXBQxETgl3UCymTEAp7WM78kHjTp1aaedvqplbdrmnKrrD1kx9YI nDf0jOGf0LVNZqdtBgMSQh9neKbDO+m7KJgikBfNuAwwzGQuywVgpkADKiyNPylG NbYrdjBYDit2hO+meSyGPpLagWBij/zElxb77eyEhEI6YVf09zbtDycC7BqVFAFW k21TrqgbJcQ2pDIHsZ5yPxmALQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNxaeFv 2MwbGEErnRWKGDprF92UMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKrnU+0rM34QBqK+ogJsgL1+j8EptP0BEQbrK5IHAy3VH/7bI5JxTF 0J7lkqzEwdjKq2EnmB0Bep3Cf/2TjdRfe8OCXepoFBpxeTThTy3n0BcXxbYoavVV FYrYzuTldC8FfMPyWm+FQpgjiApSNOCmp+lkm2Wh0FjoH6ezyERKoKzhrT4TO7bh q1v3iHRYQG7Yrv5cRZJxEuknGP9SGIGtpQ3mnFP2l9FNjrV5kZvLgFD9FvFCLOcI +XNCOU24dWvls/vXMAuTILAi2Br8ehfvADXtrsSlT2y9exq7vyLWKx/V0xzLHtpf d8gsqILlRRup7yVNDZf133DeN/9CBuda -----END CERTIFICATE-----Generated at Sat May 31 16:38:54 2025 by rpki-client