$ rpki-client -vvf rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft File: plApCrx0GfQg5AG7s6RNCBPR8Wk.mft (raw, json) Hash identifier: 5+XeZJ79Vz9uIvmwuJ8mcjtGcYbRH/e7fViVKhnHOZc= Subject key identifier: 64:46:7F:5B:B4:C1:71:D9:FC:9D:AD:A2:EB:4C:A4:48:A4:6F:BA:77 Authority key identifier: A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69 Certificate issuer: /CN=A9180EB5/serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft Manifest number: 044E Signing time: Thu 05 Jun 2025 00:04:02 +0000 Manifest this update: Thu 05 Jun 2025 00:04:02 +0000 Manifest next update: Thu 12 Jun 2025 00:04:02 +0000 Files and hashes: 1: plApCrx0GfQg5AG7s6RNCBPR8Wk.crl (hash: dIywIsFarJDlbkpje6L0287U1P/rbM6ryInpXud9ieg=) 2: C361870855FD11EC938D1744C4F9AE02.roa (hash: SB4h4zGEtxyFJYfc5GO7YkKy69kkEfQKoUL9+jluR6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 00:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180EB5, serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169 Validity Not Before: Jun 5 00:04:02 2025 GMT Not After : Jun 12 00:04:02 2025 GMT Subject: CN=6840def2-ecfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:b6:4a:63:e3:63:f0:90:9e:99:e0:22:5b: 61:ae:e2:57:59:c3:0c:4e:6d:1b:03:60:5b:dc:ac: 51:a1:04:93:10:61:2f:3d:3e:1c:c0:f0:9d:5c:6c: 6c:2c:1b:e7:7a:ec:a2:8d:2a:54:d3:24:1e:10:9a: 97:94:c2:8d:27:e0:ff:68:06:38:02:22:8c:cf:b7: 6a:3a:ee:db:49:fd:8c:42:af:92:76:e0:9b:44:08: 18:b7:af:37:3e:5d:68:89:22:71:76:14:40:e3:3e: ad:84:71:95:01:b0:18:48:47:5e:ec:57:18:79:ef: d5:fb:55:07:30:2e:2a:f1:6a:ea:fe:34:77:54:b5: e1:71:a4:de:ab:48:a6:78:35:af:8a:2f:0f:ff:bb: ff:eb:70:24:bc:2d:21:8e:15:85:e6:1d:12:5b:16: 9b:00:e8:18:87:fe:ff:a8:b5:fc:0b:3f:79:b2:96: 02:e3:2f:1c:80:cc:87:20:cf:0f:5f:f8:15:63:5d: 8e:73:bd:98:eb:77:b6:c0:74:2b:a2:5c:b2:41:ad: ea:22:8b:db:49:5b:25:d0:e8:6f:d8:73:0d:17:99: f7:2a:c9:32:27:8c:64:35:9a:b3:d1:ea:40:38:aa: 51:fe:53:74:6f:00:dc:24:62:84:d3:49:70:bb:40: 1b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:46:7F:5B:B4:C1:71:D9:FC:9D:AD:A2:EB:4C:A4:48:A4:6F:BA:77 X509v3 Authority Key Identifier: keyid:A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:92:8b:ea:dc:d8:8d:42:0d:4a:58:23:71:1f:43:c6:94:3d: 73:3d:1a:58:cc:fb:46:e4:e1:49:7c:ad:9b:10:d3:2e:27:3d: 0b:b5:f5:34:23:32:07:a1:59:32:36:d8:98:6d:8c:73:1c:31: e7:51:3c:55:2f:83:c9:25:e7:cb:e6:3c:70:6c:f0:ac:ed:81: 60:ed:7f:ac:fa:ad:b4:79:ef:95:85:32:19:eb:43:50:1f:12: 00:79:22:fe:33:e8:40:c7:05:28:eb:25:b5:fd:a7:7b:60:32: c5:de:48:51:46:df:5a:d0:2e:25:e5:8f:14:b9:55:79:26:b8: 0f:d8:70:ee:da:1f:3f:fa:03:83:a7:fa:68:74:21:61:bf:2b: 70:d8:19:d1:26:92:b2:01:44:db:5c:77:f6:5b:f1:23:fe:19: 71:86:c4:80:28:2f:ce:06:4d:d5:f0:a5:2f:83:f0:71:dc:8c: 34:d9:d8:d9:c9:e0:5c:35:b5:31:ed:3e:bb:e2:df:0b:d2:6d: a5:4f:b3:a1:f6:8d:7b:6e:3a:f7:c0:66:02:81:e1:c8:04:2f: 00:3b:10:87:3b:38:9e:f4:87:f8:b6:84:ed:36:0d:3a:8f:56: 8c:50:91:de:96:36:20:9f:8f:d1:7c:f7:aa:9c:47:bb:38:45: 26:b1:22:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBFQjUxMTAvBgNVBAUTKEE2NTAyOTBBQkM3NDE5RjQyMEU0MDFCQkIzQTQ0RDA4 MTNEMUYxNjkwHhcNMjUwNjA1MDAwNDAyWhcNMjUwNjEyMDAwNDAyWjAYMRYwFAYD VQQDEw02ODQwZGVmMi1lY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3y2SmPjY/CQnpngIlthruJXWcMMTm0bA2Bb3KxRoQSTEGEvPT4cwPCdXGxs LBvneuyijSpU0yQeEJqXlMKNJ+D/aAY4AiKMz7dqOu7bSf2MQq+SduCbRAgYt683 Pl1oiSJxdhRA4z6thHGVAbAYSEde7FcYee/V+1UHMC4q8Wrq/jR3VLXhcaTeq0im eDWvii8P/7v/63AkvC0hjhWF5h0SWxabAOgYh/7/qLX8Cz95spYC4y8cgMyHIM8P X/gVY12Oc72Y63e2wHQrolyyQa3qIovbSVsl0Ohv2HMNF5n3KskyJ4xkNZqz0epA OKpR/lN0bwDcJGKE00lwu0AbiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRGf1u0 wXHZ/J2toutMpEikb7p3MB8GA1UdIwQYMBaAFKZQKQq8dBn0IOQBu7OkTQgT0fFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEVCNS9FNEVFOTJDRTU1 RkExMUVDQUFFODBFNDFDNEY5QUUwMi9wbEFwQ3J4MEdmUWc1QUc3czZSTkNCUFI4 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsQXBDcngwR2ZRZzVBRzdzNlJOQ0JQUjhXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEVCNS9FNEVFOTJDRTU1RkExMUVDQUFFODBFNDFDNEY5QUUwMi9wbEFwQ3J4MEdm UWc1QUc3czZSTkNCUFI4V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYkovq3NiNQg1KWCNxH0PGlD1zPRpYzPtG5OFJfK2bENMuJz0LtfU0 IzIHoVkyNtiYbYxzHDHnUTxVL4PJJefL5jxwbPCs7YFg7X+s+q20ee+VhTIZ60NQ HxIAeSL+M+hAxwUo6yW1/ad7YDLF3khRRt9a0C4l5Y8UuVV5JrgP2HDu2h8/+gOD p/podCFhvytw2BnRJpKyAUTbXHf2W/Ej/hlxhsSAKC/OBk3V8KUvg/Bx3Iw02djZ yeBcNbUx7T674t8L0m2lT7Oh9o17bjr3wGYCgeHIBC8AOxCHOzie9If4toTtNg06 j1aMUJHeljYgn4/RfPeqnEe7OEUmsSLD -----END CERTIFICATE-----Generated at Fri Jun 6 17:20:03 2025 by rpki-client