$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft File: 0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft (raw, json) Hash identifier: 2MlIdJFMI7h+Sgpfv6INFRSgkskM4Rom6iKlrP0bRko= Subject key identifier: 46:55:2D:44:FF:F2:0E:01:E3:10:7E:A2:C9:C5:06:18:E3:FB:F9:3A Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC Certificate serial: 189C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft Manifest number: 1836 Signing time: Fri 30 May 2025 16:43:24 +0000 Manifest this update: Fri 30 May 2025 16:43:23 +0000 Manifest next update: Fri 06 Jun 2025 16:43:23 +0000 Files and hashes: 1: 0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl (hash: bZIcahfmjri+8XAFKABlAFEi0hq5kgW+CeVswrv6OUQ=) 2: B6928054843011EAB4270B83C4F9AE02.roa (hash: AfFQg7J3TlHD2s+ga44OATb388/m/bM7kWgvzaZnkvM=) 3: A108D60CF92E11EA8946AD6AC4F9AE02.roa (hash: P+ojUz12doT6YBWDAEohI7M/ZBVLVfv2zRK1JgxRWZI=) 4: A084D2B2F92E11EA8946AD6AC4F9AE02.roa (hash: 3WTQb9InUjzjpsYZoB/tC2okIAQpQba8dHrj64ClTNk=) 5: B5629336843011EAB4270B83C4F9AE02.roa (hash: brcGrznN7YUOque7HNGJe/GAZIGkw+wWBsFfKknawHM=) 6: E3ED0E12882611EAA5182C45C4F9AE02.roa (hash: xoiu9gu24j0V9ox4CMyHbYzSi+kjbvuhulCbW4bW+zw=) 7: B728544E843011EAB4270B83C4F9AE02.roa (hash: HHabCzaN7G1jH6qYRUCZ3UjwnhtlDwTdKNnKhWcX5tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6300 (0x189c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC Validity Not Before: May 30 16:43:23 2025 GMT Not After : Jun 6 16:43:23 2025 GMT Subject: CN=6839e02b-b237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4e:3f:eb:a7:6c:bf:18:b4:ca:dd:90:dd:db: 28:d8:a4:68:fe:df:79:55:bb:d9:c4:61:91:a2:5a: 85:ae:5d:49:f9:ad:0c:82:a2:53:39:ae:7c:4e:c3: 1a:34:1c:20:2a:50:03:90:9e:a9:a3:1a:be:68:4a: 78:34:e8:5b:9f:7e:03:d8:ec:24:7f:0f:93:7e:e5: 92:4e:ee:48:36:c3:3d:0e:c6:4c:b2:72:37:98:cc: a5:d6:0f:f4:a1:24:72:28:c8:1c:28:57:06:72:89: c3:2e:ee:5b:76:c7:64:07:e2:8f:3d:ae:36:1d:de: f1:27:ea:4f:a1:7e:47:e2:5d:c8:cc:06:0c:8a:e6: 48:9a:4c:47:7c:43:a2:a6:9f:77:63:f3:ab:52:f8: 38:0b:d0:44:31:d2:46:b4:64:6b:90:53:22:2d:3b: c0:f8:70:c3:96:ef:d4:83:a3:3d:48:07:62:2b:a4: 93:03:bc:38:b4:f8:81:56:85:27:83:d5:11:e6:ce: 86:10:fa:3a:04:7a:9e:ae:a3:50:30:6b:42:dc:57: f8:54:82:1d:83:0c:63:17:c6:a6:4b:c7:7e:b4:4c: e4:9c:da:d0:e2:53:ad:2c:ef:8a:89:05:dd:f5:44: 22:51:c4:e4:3d:1a:4a:79:2f:8e:77:4d:4c:d3:84: a9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:55:2D:44:FF:F2:0E:01:E3:10:7E:A2:C9:C5:06:18:E3:FB:F9:3A X509v3 Authority Key Identifier: keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9b:25:d4:47:7a:12:25:77:45:fc:b3:91:3b:3b:14:ac:12: 29:55:29:f9:51:f3:d8:97:db:96:48:2f:ed:b0:59:61:47:d3: bf:76:20:81:a0:00:de:60:06:65:f4:16:e2:27:13:31:94:3f: dc:18:d8:07:a1:3e:dd:01:d3:bf:67:41:c5:d4:43:9c:ec:28: 5b:df:f6:4b:c7:52:4a:15:ec:13:4c:54:b6:e1:ef:b8:9d:1f: d4:11:98:7d:a0:68:bc:29:83:54:2c:c5:ca:53:31:a5:79:70: 81:6a:93:18:06:ce:8d:74:8c:bd:9e:a6:f0:6b:5c:85:e9:59: b6:57:f2:6d:71:b7:dc:2a:a7:05:d4:2b:dc:42:30:4b:fe:59: c9:9f:f0:7d:d2:be:9f:1c:aa:9d:00:8b:1c:c5:72:32:97:6e: a3:c0:b1:4b:a6:1b:7b:f8:ad:43:ab:87:1f:1f:df:aa:43:9c: 29:07:e2:b5:cc:b9:cb:c3:3b:fd:11:54:ca:11:65:7e:86:1e: 10:41:67:0d:08:af:9f:4a:f1:9e:c0:50:d1:c0:c2:c5:6c:57: 8a:c4:51:47:8c:74:17:05:e4:c9:e4:b6:2c:47:6d:88:06:57: 0f:52:77:c7:47:76:14:0d:91:5e:0c:59:23:fd:a4:74:cf:ad: 80:80:73:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzM0UxMTAvBgNVBAUTKEQwMDcyRURFQjY3RTE3NTJBQjc1MjI2M0E0RkQ5NDUw REQzQTMzRUMwHhcNMjUwNTMwMTY0MzIzWhcNMjUwNjA2MTY0MzIzWjAYMRYwFAYD VQQDEw02ODM5ZTAyYi1iMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyk4/66dsvxi0yt2Q3dso2KRo/t95VbvZxGGRolqFrl1J+a0MgqJTOa58TsMa NBwgKlADkJ6poxq+aEp4NOhbn34D2Owkfw+TfuWSTu5INsM9DsZMsnI3mMyl1g/0 oSRyKMgcKFcGconDLu5bdsdkB+KPPa42Hd7xJ+pPoX5H4l3IzAYMiuZImkxHfEOi pp93Y/OrUvg4C9BEMdJGtGRrkFMiLTvA+HDDlu/Ug6M9SAdiK6STA7w4tPiBVoUn g9UR5s6GEPo6BHqerqNQMGtC3Ff4VIIdgwxjF8amS8d+tEzknNrQ4lOtLO+KiQXd 9UQiUcTkPRpKeS+Od01M04SpJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZVLUT/ 8g4B4xB+osnFBhjj+/k6MB8GA1UdIwQYMBaAFNAHLt62fhdSq3UiY6T9lFDdOjPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMzRS8yRjY2QjU3QUI4 M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYxS3JkU0pqcFAyVVVOMDZN LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBY3UzclotRjFLcmRTSmpwUDJVVU4wNk0tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMzRS8yRjY2QjU3QUI4M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYx S3JkU0pqcFAyVVVOMDZNLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdmyXUR3oSJXdF/LOROzsUrBIpVSn5UfPYl9uWSC/tsFlhR9O/diCB oADeYAZl9BbiJxMxlD/cGNgHoT7dAdO/Z0HF1EOc7Chb3/ZLx1JKFewTTFS24e+4 nR/UEZh9oGi8KYNULMXKUzGleXCBapMYBs6NdIy9nqbwa1yF6Vm2V/JtcbfcKqcF 1CvcQjBL/lnJn/B90r6fHKqdAIscxXIyl26jwLFLpht7+K1Dq4cfH9+qQ5wpB+K1 zLnLwzv9EVTKEWV+hh4QQWcNCK+fSvGewFDRwMLFbFeKxFFHjHQXBeTJ5LYsR22I BlcPUnfHR3YUDZFeDFkj/aR0z62AgHO0 -----END CERTIFICATE-----Generated at Sat May 31 16:57:42 2025 by rpki-client