$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft File: ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json) Hash identifier: 51M1rdtkHW7meKq8Nn8U0ST0m9tHjc7voKPv9RlkDyQ= Subject key identifier: 99:10:16:05:E1:B9:F3:35:DF:27:B1:97:9E:9E:B8:6B:62:01:80:76 Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft Manifest number: 0C05 Signing time: Fri 30 May 2025 18:55:47 +0000 Manifest this update: Fri 30 May 2025 18:55:46 +0000 Manifest next update: Fri 06 Jun 2025 18:55:46 +0000 Files and hashes: 1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: 2XXQujfUIA/mgC+zim+MDaOTrb/EMB9TqWQQD1Uoa/Q=) 2: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: dn3kZoWooSddDB41uptssOk+YJNXq/e4qX48GOTMtT4=) 3: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: 8Ead/6roCcIWAO/F6fTJ08XA18GUuGo77XaTq8IG4j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Validity Not Before: May 30 18:55:46 2025 GMT Not After : Jun 6 18:55:46 2025 GMT Subject: CN=6839ff32-00fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:43:78:50:b4:e0:f6:48:bd:c4:e7:1d:6d:94: 5d:7f:8c:b5:36:f4:1c:ee:55:b9:5a:40:ba:30:c0: 45:df:c4:09:ef:66:bc:30:74:4d:ab:ab:ab:08:25: 27:4c:af:b7:b6:be:65:16:0e:a9:a1:34:71:e0:cb: 17:a3:bb:6b:63:8b:a6:36:8f:9a:24:07:74:ee:03: 53:11:94:97:0f:76:e0:36:ea:25:fb:67:50:32:2e: dd:2e:f6:00:20:f0:04:73:56:2c:04:af:04:c2:32: de:11:63:2a:48:54:e9:a6:c5:31:d9:6e:52:95:19: e0:9b:bc:38:21:07:ab:79:de:19:fd:66:10:e0:89: 34:1e:58:78:50:db:03:16:e6:c0:a1:2e:e3:f6:ec: 5c:92:ed:f0:0f:98:08:84:d5:a9:31:3f:a5:d2:4c: 77:3f:d9:ff:86:61:1e:7c:cb:b6:ac:57:c9:97:e1: 0e:7c:a3:c8:df:a1:51:c4:a8:ba:de:c3:dd:fd:29: 87:18:a7:fc:12:8e:74:d8:68:63:d0:24:7d:e5:c8: d1:f9:a4:01:be:f3:6d:05:93:18:2d:4e:8e:c7:e6: 1d:2c:e9:9d:a7:07:50:f8:55:bc:fb:b0:c0:c7:46: cd:44:af:5e:82:7a:1a:3f:30:06:cb:ad:9f:21:83: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:10:16:05:E1:B9:F3:35:DF:27:B1:97:9E:9E:B8:6B:62:01:80:76 X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e4:a6:54:c0:e3:02:d8:71:ea:36:01:78:db:be:7a:2b:ca: 3c:77:97:af:62:a4:ab:b9:1e:1d:5f:2e:87:c4:87:cb:5d:0e: 6e:82:08:18:06:d2:c8:e2:42:84:d8:27:df:29:da:7d:a0:65: d5:a7:3c:39:c3:1c:4e:aa:0f:b0:da:96:04:07:9b:a8:89:cc: 64:13:cc:20:49:cb:58:f8:62:11:2f:04:75:85:2d:c9:77:31: f8:10:d4:b2:5b:97:23:51:be:44:1c:6e:e8:f4:c9:33:93:fb: 80:69:b9:d6:64:c6:fd:0f:91:8b:67:43:e4:16:2b:8f:0b:fd: 90:b7:22:b0:96:fe:ce:2b:42:6a:b4:d3:b9:9c:b5:1f:85:4d: fd:a5:79:6b:01:08:9c:63:11:d0:6f:7a:84:41:49:d4:f6:3f: 4f:15:b9:ac:57:30:1a:4f:37:6e:c7:f4:b9:97:e1:4e:65:cf: 36:ca:b5:9f:46:74:20:d7:b3:17:c8:f9:12:e9:4b:f2:a5:2e: dc:f1:74:0a:eb:c9:69:1b:b1:42:c0:c8:8b:a0:ae:e1:d2:9c: 40:34:2c:bb:ad:77:f9:87:24:45:00:9a:8b:c7:ec:a4:1f:02: b4:eb:4b:87:8c:d8:2f:85:ce:42:b4:06:9e:e2:4c:dc:98:97: 57:a8:d6:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjUwNTMwMTg1NTQ2WhcNMjUwNjA2MTg1NTQ2WjAYMRYwFAYD VQQDEw02ODM5ZmYzMi0wMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUN4ULTg9ki9xOcdbZRdf4y1NvQc7lW5WkC6MMBF38QJ72a8MHRNq6urCCUn TK+3tr5lFg6poTRx4MsXo7trY4umNo+aJAd07gNTEZSXD3bgNuol+2dQMi7dLvYA IPAEc1YsBK8EwjLeEWMqSFTppsUx2W5SlRngm7w4IQered4Z/WYQ4Ik0Hlh4UNsD FubAoS7j9uxcku3wD5gIhNWpMT+l0kx3P9n/hmEefMu2rFfJl+EOfKPI36FRxKi6 3sPd/SmHGKf8Eo502Ghj0CR95cjR+aQBvvNtBZMYLU6Ox+YdLOmdpwdQ+FW8+7DA x0bNRK9egnoaPzAGy62fIYM+LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkQFgXh ufM13yexl56euGtiAYB2MB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0JDOS9DNUM4M0NBRTEzQTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlX WkN3djBEc2NEeDVSOTdaTlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA5KZUwOMC2HHqNgF42756K8o8d5evYqSruR4dXy6HxIfLXQ5ugggY BtLI4kKE2CffKdp9oGXVpzw5wxxOqg+w2pYEB5uoicxkE8wgSctY+GIRLwR1hS3J dzH4ENSyW5cjUb5EHG7o9Mkzk/uAabnWZMb9D5GLZ0PkFiuPC/2QtyKwlv7OK0Jq tNO5nLUfhU39pXlrAQicYxHQb3qEQUnU9j9PFbmsVzAaTzdux/S5l+FOZc82yrWf RnQg17MXyPkS6UvypS7c8XQK68lpG7FCwMiLoK7h0pxANCy7rXf5hyRFAJqLx+yk HwK060uHjNgvhc5CtAae4kzcmJdXqNbM -----END CERTIFICATE-----Generated at Sat May 31 17:45:04 2025 by rpki-client