$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: ZDn1N9zK8Sw2fcZxgqLtmmzzjA5OqXwJwi6M/xvIvAM= Subject key identifier: 75:D0:3E:C5:C6:62:56:9C:33:AC:8E:FA:69:3D:25:AA:AA:98:D3:0E Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 0276 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 0274 Signing time: Sat 31 May 2025 01:53:26 +0000 Manifest this update: Sat 31 May 2025 01:53:25 +0000 Manifest next update: Sat 07 Jun 2025 01:53:25 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: w+vzqgXjqFUOELL5uflfQw9pg6XiQyPUQygKmM9SXX4=) 2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: mDNZv224II9doQ1iNCGuKTRk+eFwgECKzo+AWal5Fq0=) 3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: AgK/4KQKRm1k0cfVPX0Zdc5eL/A0KNuVFO4G4wksfbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 630 (0x276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: May 31 01:53:25 2025 GMT Not After : Jun 7 01:53:25 2025 GMT Subject: CN=683a6115-9d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:ee:0c:d7:dc:b5:10:b5:f0:8a:ac:46:f4: c0:77:cb:b8:14:fb:0e:8f:18:e6:bc:e7:99:8f:3e: 47:2d:85:52:ee:f3:1f:84:71:40:04:dd:69:65:93: 6e:86:99:a1:b7:9c:d0:30:48:89:fe:49:f1:59:0e: 79:7b:77:9c:06:03:47:39:ed:95:e9:73:a0:b6:df: c6:5c:e4:5c:1e:f4:8f:6e:43:26:00:44:b4:41:a1: 76:af:f5:2f:4b:f4:0d:18:d2:2b:dc:c8:d6:ae:33: 43:f1:7b:d9:af:21:4a:ad:c3:e9:ff:b0:73:c2:9a: 7b:be:05:80:f5:e8:ae:b1:af:58:5c:4c:98:d2:7c: 9f:cb:43:40:ac:14:5b:69:3e:a2:ac:46:37:bd:a8: d6:c6:b3:41:bf:fb:3c:83:59:73:df:7f:35:cd:a4: 28:22:b6:f2:d0:42:b4:c1:a4:cf:e9:a4:ed:db:7a: 66:e2:74:19:c6:7c:25:54:07:aa:63:d2:7e:48:bd: a5:5e:c7:1c:33:13:2b:da:2c:1b:cf:0d:4a:b4:74: 0b:9f:e1:9b:38:1a:8d:86:b0:4f:87:00:1f:bc:61: b6:d6:79:89:4d:fc:da:d6:de:89:e6:fb:f6:89:9f: f2:b0:b4:05:92:2c:dc:f3:aa:d0:d0:2f:38:2e:d3: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D0:3E:C5:C6:62:56:9C:33:AC:8E:FA:69:3D:25:AA:AA:98:D3:0E X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:04:d1:39:02:52:8d:3a:80:49:46:12:13:03:be:96:8e:3d: ca:0e:b6:9d:6c:4c:21:ad:47:08:03:7e:4b:39:14:ed:ac:6c: 31:5b:20:d3:7c:90:69:0c:16:d5:1d:7d:8d:54:82:25:4a:5c: 3b:b8:12:49:36:3b:fd:6e:2a:4e:0f:93:73:0b:61:ed:6b:fa: 97:fa:7b:37:b8:39:2d:83:6e:be:da:a4:bc:06:6a:19:e5:65: 3f:cf:c0:ae:b1:9f:28:1f:c6:d9:d1:5a:d3:49:5a:48:19:ea: 8d:f6:3d:21:8a:48:b4:7a:dd:30:92:24:1d:d5:c3:ea:e4:6c: e2:13:49:4d:aa:ef:47:26:87:b3:b8:ad:59:8c:4d:58:64:29: 23:98:ea:4d:b6:79:04:1e:de:c8:40:c5:55:6e:ac:7f:cc:24: 0c:11:9c:ef:4e:c8:27:17:b2:a8:ac:11:09:dd:0b:d1:81:4b: 8a:3a:ef:59:d5:0a:79:91:ac:50:af:a7:4a:b5:37:f8:00:81: 40:b4:b1:aa:a3:2f:82:ca:30:0a:55:25:35:8f:3a:16:a7:3c: 1f:e8:fa:75:03:21:0e:37:1c:56:2d:c8:22:c7:b9:f6:be:80: b2:66:8d:6f:cd:0e:2b:9f:ee:3e:11:51:22:f5:6d:b8:5e:aa: 7e:2a:a6:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjUwNTMxMDE1MzI1WhcNMjUwNjA3MDE1MzI1WjAYMRYwFAYD VQQDEw02ODNhNjExNS05ZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtt3uDNfctRC18IqsRvTAd8u4FPsOjxjmvOeZjz5HLYVS7vMfhHFABN1pZZNu hpmht5zQMEiJ/knxWQ55e3ecBgNHOe2V6XOgtt/GXORcHvSPbkMmAES0QaF2r/Uv S/QNGNIr3MjWrjND8XvZryFKrcPp/7Bzwpp7vgWA9eiusa9YXEyY0nyfy0NArBRb aT6irEY3vajWxrNBv/s8g1lz3381zaQoIrby0EK0waTP6aTt23pm4nQZxnwlVAeq Y9J+SL2lXsccMxMr2iwbzw1KtHQLn+GbOBqNhrBPhwAfvGG21nmJTfza1t6J5vv2 iZ/ysLQFkizc86rQ0C84LtOWlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXQPsXG YlacM6yO+mk9JaqqmNMOMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoBNE5AlKNOoBJRhITA76Wjj3KDradbEwhrUcIA35LORTtrGwxWyDT fJBpDBbVHX2NVIIlSlw7uBJJNjv9bipOD5NzC2Hta/qX+ns3uDktg26+2qS8BmoZ 5WU/z8CusZ8oH8bZ0VrTSVpIGeqN9j0hiki0et0wkiQd1cPq5GziE0lNqu9HJoez uK1ZjE1YZCkjmOpNtnkEHt7IQMVVbqx/zCQMEZzvTsgnF7KorBEJ3QvRgUuKOu9Z 1Qp5kaxQr6dKtTf4AIFAtLGqoy+CyjAKVSU1jzoWpzwf6Pp1AyEONxxWLcgix7n2 voCyZo1vzQ4rn+4+EVEi9W24Xqp+Kqat -----END CERTIFICATE-----Generated at Sat May 31 15:56:47 2025 by rpki-client