$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft File: cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json) Hash identifier: jb7estLk5ui9wxCEUNZAXvgujAPZNalcg1Ae0IaNwP0= Subject key identifier: 1F:51:9F:90:B1:26:A9:7C:3E:64:AB:3B:BC:72:E9:F5:BD:7B:91:51 Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B Certificate issuer: /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft Manifest number: 0292 Signing time: Sat 31 May 2025 01:46:22 +0000 Manifest this update: Sat 31 May 2025 01:46:22 +0000 Manifest next update: Sat 07 Jun 2025 01:46:22 +0000 Files and hashes: 1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: vzTcQgI4QRbErCe4PK1wmzc13qn3fnusAyYoGC3IAXE=) 2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: 5D+EMadPUYOYtPY3WxKsOuXfJZW+RJaKdKnGQtm9R6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F338, serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B Validity Not Before: May 31 01:46:22 2025 GMT Not After : Jun 7 01:46:22 2025 GMT Subject: CN=683a5f6e-0158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d7:22:53:09:c5:69:bb:26:68:80:3c:ee:b3: 70:6e:9a:4a:15:13:1f:c8:58:29:62:af:18:74:a2: 20:c4:e4:ba:02:14:b4:1e:ba:34:ca:38:cf:2d:03: a1:15:01:ea:dd:04:fa:aa:06:a2:12:bb:8c:42:5f: 7a:d5:01:0e:ed:bb:50:c2:e2:86:e2:18:95:7f:e1: 1a:4f:b8:f7:60:18:27:2c:7d:6d:4d:fc:1a:20:b0: 26:ce:7e:36:4a:4f:ef:4b:fe:dd:84:b3:06:1a:31: a3:38:6c:97:82:8d:cf:06:e7:d4:ef:55:4b:4a:ad: dd:0b:21:80:16:b3:45:f8:15:10:d1:39:3e:05:11: ff:69:0a:1c:99:30:59:1a:5b:38:8c:29:a3:cb:ab: 1c:f8:2b:98:d6:e8:21:be:71:33:c9:ea:83:85:97: f2:79:d6:0a:19:61:84:1f:51:ee:d3:7a:b4:36:55: f9:4d:a3:bf:f8:52:01:d1:54:93:29:af:cd:40:95: fb:a1:64:df:f0:70:a1:68:8d:f7:ea:a0:93:ae:a8: 30:ef:f9:09:30:21:12:0b:9d:99:0d:79:0e:bd:fb: 36:23:b9:c3:63:63:07:a9:31:25:39:6d:f7:53:af: 67:d9:d0:81:60:f6:e8:77:1d:88:f1:59:b2:32:3b: 93:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:51:9F:90:B1:26:A9:7C:3E:64:AB:3B:BC:72:E9:F5:BD:7B:91:51 X509v3 Authority Key Identifier: keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:71:ed:4d:13:31:e7:36:28:90:9b:d5:f8:91:b9:60:0f:1c: 49:8d:29:3d:b7:70:e3:5c:7d:0f:68:1e:30:42:90:7b:6d:cb: 43:29:64:82:03:89:8a:8b:2b:f6:92:ec:1b:49:ca:77:b8:79: c3:5b:e5:e3:26:95:84:b3:0e:c8:9a:28:67:88:c9:9e:70:c8: d1:0f:20:ba:88:03:60:93:3d:e3:9b:75:6f:51:38:84:2e:02: 66:df:5a:e9:9f:84:ae:69:a9:24:5a:c1:3d:8b:e9:09:21:f7: de:f5:fd:f6:00:52:72:03:af:04:ca:73:d1:9d:d0:e1:2f:ea: 45:03:c5:56:a2:0c:b6:dc:a2:2e:85:d6:d5:f7:3b:f3:f4:5c: 23:19:f3:84:18:c4:ac:80:23:9d:f4:6c:82:5a:a5:5b:4b:64: ee:eb:ca:f3:cf:e7:d8:22:84:63:27:fb:3c:d7:5c:8b:bc:d9: a1:f6:c2:f4:38:02:ae:28:dd:58:57:55:40:06:92:bc:c3:3d: ba:94:15:7c:5d:9d:e9:86:4d:6c:51:84:d7:77:c6:a7:6d:9e: 84:41:e0:28:62:26:ec:68:35:08:25:95:ec:10:f1:0e:65:6b: 12:ce:17:2b:4f:08:a3:64:8c:73:b1:43:96:aa:1a:b3:d9:ec: 1d:c0:15:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYzMzgxMTAvBgNVBAUTKDcwQ0Q0Q0QxM0UyRTM3N0U1RTVDMzdBQkJDNzk3RUVE RTZCNjYyMUIwHhcNMjUwNTMxMDE0NjIyWhcNMjUwNjA3MDE0NjIyWjAYMRYwFAYD VQQDEw02ODNhNWY2ZS0wMTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NciUwnFabsmaIA87rNwbppKFRMfyFgpYq8YdKIgxOS6AhS0Hro0yjjPLQOh FQHq3QT6qgaiEruMQl961QEO7btQwuKG4hiVf+EaT7j3YBgnLH1tTfwaILAmzn42 Sk/vS/7dhLMGGjGjOGyXgo3PBufU71VLSq3dCyGAFrNF+BUQ0Tk+BRH/aQocmTBZ Gls4jCmjy6sc+CuY1ughvnEzyeqDhZfyedYKGWGEH1Hu03q0NlX5TaO/+FIB0VST Ka/NQJX7oWTf8HChaI336qCTrqgw7/kJMCESC52ZDXkOvfs2I7nDY2MHqTElOW33 U69n2dCBYPbodx2I8VmyMjuTHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9Rn5Cx Jql8PmSrO7xy6fW9e5FRMB8GA1UdIwQYMBaAFHDNTNE+Ljd+Xlw3q7x5fu3mtmIb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjMzOC9EMjExMTdEQzA0 M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4zNWVYRGVydkhsLTdlYTJZ aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMU0wVDR1TjM1ZVhEZXJ2SGwtN2VhMllocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjMzOC9EMjExMTdEQzA0M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4z NWVYRGVydkhsLTdlYTJZaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkce1NEzHnNiiQm9X4kblgDxxJjSk9t3DjXH0PaB4wQpB7bctDKWSC A4mKiyv2kuwbScp3uHnDW+XjJpWEsw7ImihniMmecMjRDyC6iANgkz3jm3VvUTiE LgJm31rpn4SuaakkWsE9i+kJIffe9f32AFJyA68EynPRndDhL+pFA8VWogy23KIu hdbV9zvz9FwjGfOEGMSsgCOd9GyCWqVbS2Tu68rzz+fYIoRjJ/s811yLvNmh9sL0 OAKuKN1YV1VABpK8wz26lBV8XZ3phk1sUYTXd8anbZ6EQeAoYibsaDUIJZXsEPEO ZWsSzhcrTwijZIxzsUOWqhqz2ewdwBXw -----END CERTIFICATE-----Generated at Sat May 31 15:42:06 2025 by rpki-client