$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft File: fd08hfmnH2JfzMEMqDHld3CbTz8.mft (raw, json) Hash identifier: q9ZPOAn4J93wfrbvPduAuvJpJSJCfpbjNQpqo4wwVZ8= Subject key identifier: 58:A8:9D:1A:47:80:5F:A9:5C:C2:C8:D5:52:87:4A:DB:D3:8C:00:2C Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Certificate serial: 02F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft Manifest number: 02EF Signing time: Sat 31 May 2025 01:47:38 +0000 Manifest this update: Sat 31 May 2025 01:47:38 +0000 Manifest next update: Sat 07 Jun 2025 01:47:38 +0000 Files and hashes: 1: fd08hfmnH2JfzMEMqDHld3CbTz8.crl (hash: 0tzODyom6bAu2YEaKTPrItY5ampO+4h2MkG10PUTiCA=) 2: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (hash: Cq6mdfvGMSMUVVy722vXaVlEzZ5zjpH7LRI1e0MUF1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Validity Not Before: May 31 01:47:38 2025 GMT Not After : Jun 7 01:47:38 2025 GMT Subject: CN=683a5fba-5ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:59:06:ff:94:8d:38:f7:c6:b9:df:0c:9f: 64:2b:9c:98:b4:ad:bc:2b:e7:0d:ba:68:0e:7e:cc: c1:d0:13:07:74:9b:28:44:b6:b3:cc:7e:70:ec:0b: 84:5f:a4:b1:c2:c2:e1:59:dd:db:22:56:e1:ee:9d: 7a:52:8e:dd:09:83:cb:1c:ab:c3:2b:0c:c0:99:4c: 47:27:e7:da:2c:86:dc:d9:87:4a:f3:c7:9b:11:11: 80:89:a7:32:9e:65:fa:f9:66:95:03:bd:e7:65:ad: 04:c9:d0:87:9b:b9:d3:e0:3e:11:e5:a2:84:37:dd: 6d:30:dd:91:8c:e8:f7:fd:01:d2:c7:e0:3d:64:e0: 85:ec:60:45:01:54:eb:a8:26:b8:9a:b5:43:c0:85: d1:de:d6:a5:8b:bb:47:2b:49:42:d0:00:fe:60:96: 5d:5c:e1:71:f6:b1:ba:7d:60:73:cc:dc:49:69:ce: 41:6c:c2:ee:69:2d:66:7b:b7:95:86:81:71:de:a3: 0e:c8:5d:9c:1d:a0:83:c0:fc:26:b5:df:03:8f:d4: 65:40:2c:48:ec:81:53:f7:52:07:3b:82:48:46:fb: dc:41:33:fe:d0:e8:a2:7d:19:31:6d:af:f8:14:d2: 5c:f0:34:41:95:8f:c3:45:5e:46:d4:4b:10:54:bf: 1a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A8:9D:1A:47:80:5F:A9:5C:C2:C8:D5:52:87:4A:DB:D3:8C:00:2C X509v3 Authority Key Identifier: keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4a:4c:b8:e4:18:d6:d9:ad:7b:b7:63:c6:f9:26:d5:12:e4: f0:af:a2:3d:84:b6:b7:e7:7c:9a:15:17:a2:8a:90:63:39:39: c2:b8:f6:d6:2b:b0:8c:f4:a5:0d:b2:74:05:ad:54:a8:f7:1c: e2:bb:20:85:13:f4:64:d0:8b:6a:bf:53:84:3f:80:33:96:50: 6b:aa:ce:28:39:39:4d:b4:58:99:6b:f0:f3:09:7b:b9:c3:21: 0b:36:80:3e:23:fa:48:98:b4:d6:01:54:68:a0:c9:bc:2f:03: 94:2a:39:fb:f3:65:47:54:e6:a6:04:cb:c1:9f:24:50:75:de: 47:24:9d:74:42:34:6d:99:92:7d:22:d2:15:8e:a1:d8:45:1e: d0:bd:a9:59:77:60:81:1b:58:7e:6c:82:60:ab:ec:26:78:a5: b4:42:98:03:42:24:bd:45:ac:e1:73:21:c1:01:82:51:5c:8c: 84:c0:59:18:88:67:4a:ee:d5:80:6f:a3:47:8b:74:8d:09:d6: cc:8b:01:61:10:5a:90:d4:48:4f:a0:29:99:32:8b:3b:79:57: d6:9d:2c:65:87:43:30:43:a4:63:4e:a5:75:80:bc:83:58:31: 76:19:02:e0:5b:a8:8e:df:ff:48:2e:30:c8:96:fa:11:48:ff: 4a:ef:79:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNDExMTAvBgNVBAUTKDdEREQzQzg1RjlBNzFGNjI1RkNDQzEwQ0E4MzFFNTc3 NzA5QjRGM0YwHhcNMjUwNTMxMDE0NzM4WhcNMjUwNjA3MDE0NzM4WjAYMRYwFAYD VQQDEw02ODNhNWZiYS01ZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs69ZBv+UjTj3xrnfDJ9kK5yYtK28K+cNumgOfszB0BMHdJsoRLazzH5w7AuE X6SxwsLhWd3bIlbh7p16Uo7dCYPLHKvDKwzAmUxHJ+faLIbc2YdK88ebERGAiacy nmX6+WaVA73nZa0EydCHm7nT4D4R5aKEN91tMN2RjOj3/QHSx+A9ZOCF7GBFAVTr qCa4mrVDwIXR3tali7tHK0lC0AD+YJZdXOFx9rG6fWBzzNxJac5BbMLuaS1me7eV hoFx3qMOyF2cHaCDwPwmtd8Dj9RlQCxI7IFT91IHO4JIRvvcQTP+0OiifRkxba/4 FNJc8DRBlY/DRV5G1EsQVL8aVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFionRpH gF+pXMLI1VKHStvTjAAsMB8GA1UdIwQYMBaAFH3dPIX5px9iX8zBDKgx5Xdwm08/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I0MS9FNzkwRjlBQURG MzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgySmZ6TUVNcURIbGQzQ2JU ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMDhoZm1uSDJKZnpNRU1xREhsZDNDYlR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I0MS9FNzkwRjlBQURGMzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgy SmZ6TUVNcURIbGQzQ2JUejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtSky45BjW2a17t2PG+SbVEuTwr6I9hLa353yaFReiipBjOTnCuPbW K7CM9KUNsnQFrVSo9xziuyCFE/Rk0Itqv1OEP4AzllBrqs4oOTlNtFiZa/DzCXu5 wyELNoA+I/pImLTWAVRooMm8LwOUKjn782VHVOamBMvBnyRQdd5HJJ10QjRtmZJ9 ItIVjqHYRR7QvalZd2CBG1h+bIJgq+wmeKW0QpgDQiS9RazhcyHBAYJRXIyEwFkY iGdK7tWAb6NHi3SNCdbMiwFhEFqQ1EhPoCmZMos7eVfWnSxlh0MwQ6RjTqV1gLyD WDF2GQLgW6iO3/9ILjDIlvoRSP9K73n4 -----END CERTIFICATE-----Generated at Sat May 31 17:00:16 2025 by rpki-client