$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: 8MsrdqXfHblhauVNq9Ysc7RXzonXTu03jebaca6/HV8= Subject key identifier: C8:67:F1:D5:87:5E:3F:02:7C:29:A3:C4:64:C4:52:4A:5E:43:51:83 Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: 94 Signing time: Sat 31 May 2025 05:58:25 +0000 Manifest this update: Sat 31 May 2025 05:58:24 +0000 Manifest next update: Sat 07 Jun 2025 05:58:24 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: TyKyeJA3mEzbf6lmAcieUJaPit4j8iuUoqBBdV2YYxc=) 2: 53287AF45DDF11EF9B31E965C4F9AE02.roa (hash: l9NwgF2p4gRADdXEDeNTklsFvOfiw2xnBPOYK8nZgtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: May 31 05:58:24 2025 GMT Not After : Jun 7 05:58:24 2025 GMT Subject: CN=683a9a81-14a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:5f:25:50:d4:c6:dc:a0:a0:6c:9d:32:30: f9:bc:45:3c:f9:e3:81:27:cf:ed:2b:89:5d:b7:6b: bc:54:0e:56:4f:a2:c9:a6:cd:46:9b:ae:76:4e:93: 00:d8:ac:0f:f1:e3:ed:39:0a:09:92:05:e9:ff:0f: 72:5e:cf:26:f6:c3:57:26:92:59:66:75:fc:94:7e: 3d:f1:3c:28:68:96:91:2a:17:64:70:86:b4:f5:c4: 87:e9:b0:88:38:aa:c1:2e:13:08:f2:29:8c:d1:a6: 13:33:49:34:51:85:1d:aa:08:21:6c:ec:21:a1:5a: 85:d3:3d:ea:5c:13:06:58:15:0c:6b:88:e6:68:aa: e2:df:da:fa:43:e4:30:cf:15:ab:f4:cd:82:8d:1c: 97:d7:77:26:40:0c:0f:d0:83:69:1a:0a:f9:03:f3: 9d:9d:f2:b0:0a:f3:52:fe:39:3e:8b:62:59:dc:f5: 54:31:68:ea:af:07:d6:6c:94:df:1e:41:c7:89:94: ce:8d:6e:09:12:49:20:6b:95:30:69:0c:e0:67:10: 13:59:16:1c:6f:30:28:44:9f:a3:e5:6b:91:d1:3f: d0:bb:bd:df:6c:88:e7:37:47:43:a5:70:36:27:de: a6:20:d2:ae:cb:97:47:ae:54:99:84:8f:5a:94:a2: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:67:F1:D5:87:5E:3F:02:7C:29:A3:C4:64:C4:52:4A:5E:43:51:83 X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:96:93:34:62:55:86:14:7f:3d:dc:24:16:53:8f:78:f1:90: a3:57:85:be:c5:16:1f:78:ec:55:be:b1:d8:b6:fe:12:cb:12: 24:89:92:25:77:a8:42:f0:19:1e:5c:33:aa:7d:05:64:fe:c3: 56:d4:da:8b:f5:e2:53:7c:75:5e:5e:4f:41:c1:e9:a7:e7:7b: b0:84:b1:5d:f3:a8:23:ff:d1:5d:71:2e:b8:f0:7b:a0:e7:8c: bc:22:b6:bf:04:c1:16:cd:71:98:f0:de:ad:34:df:de:67:80: 36:f9:b9:5d:72:05:3a:3a:9a:4e:79:9b:6c:01:a6:87:cc:29: 10:41:53:61:99:a6:38:ca:13:c2:73:94:ce:22:10:0a:31:30: e6:23:8c:12:aa:e1:78:59:f6:1a:c9:27:8e:e6:06:4f:18:96: 00:8a:d8:d3:cf:43:8e:50:ad:56:1e:96:c6:9d:d7:a1:79:88: 38:44:8f:9a:26:f7:fd:f0:2f:a8:aa:6a:72:5f:b1:59:3e:7e: 77:df:86:f6:25:36:92:65:d7:6a:02:1c:44:2f:ca:dc:0c:95: da:6b:f4:f3:28:aa:fd:c8:7c:35:c2:44:25:5c:2b:8c:47:d5: c7:ed:e1:e4:fd:ea:ec:d1:4a:7b:63:63:ee:cd:85:3f:f0:66: 16:d6:93:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC Mjk3QkI4MDEwHhcNMjUwNTMxMDU1ODI0WhcNMjUwNjA3MDU1ODI0WjAYMRYwFAYD VQQDEw02ODNhOWE4MS0xNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuZfJVDUxtygoGydMjD5vEU8+eOBJ8/tK4ldt2u8VA5WT6LJps1Gm652TpMA 2KwP8ePtOQoJkgXp/w9yXs8m9sNXJpJZZnX8lH498TwoaJaRKhdkcIa09cSH6bCI OKrBLhMI8imM0aYTM0k0UYUdqgghbOwhoVqF0z3qXBMGWBUMa4jmaKri39r6Q+Qw zxWr9M2CjRyX13cmQAwP0INpGgr5A/OdnfKwCvNS/jk+i2JZ3PVUMWjqrwfWbJTf HkHHiZTOjW4JEkkga5UwaQzgZxATWRYcbzAoRJ+j5WuR0T/Qu73fbIjnN0dDpXA2 J96mINKuy5dHrlSZhI9alKLe4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhn8dWH Xj8CfCmjxGTEUkpeQ1GDMB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAblpM0YlWGFH893CQWU4948ZCjV4W+xRYfeOxVvrHYtv4SyxIkiZIl d6hC8BkeXDOqfQVk/sNW1NqL9eJTfHVeXk9Bwemn53uwhLFd86gj/9FdcS648Hug 54y8Ira/BMEWzXGY8N6tNN/eZ4A2+bldcgU6OppOeZtsAaaHzCkQQVNhmaY4yhPC c5TOIhAKMTDmI4wSquF4WfYaySeO5gZPGJYAitjTz0OOUK1WHpbGndeheYg4RI+a Jvf98C+oqmpyX7FZPn5334b2JTaSZddqAhxEL8rcDJXaa/TzKKr9yHw1wkQlXCuM R9XH7eHk/ers0Up7Y2PuzYU/8GYW1pO/ -----END CERTIFICATE-----Generated at Sat May 31 16:57:46 2025 by rpki-client