$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json) Hash identifier: fWMxZCsMMGNKmj4/k3G0Ymag0fPch4NaCvhCruYIzOQ= Subject key identifier: FC:E4:5E:1A:45:F4:A8:55:BD:9D:3F:69:CE:77:E3:C8:E2:38:5A:A4 Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft Manifest number: C4 Signing time: Sat 31 May 2025 05:28:58 +0000 Manifest this update: Sat 31 May 2025 05:28:58 +0000 Manifest next update: Sat 07 Jun 2025 05:28:57 +0000 Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: 3tu9U22t0dhqmW8e3f5m+O5QNQ4g3q3B1Lt9JNRV1ng=) 2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: Ie9Y5pCGNtZspU9t66mnmp1QTKLtQUg0jtZnjasjHa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Validity Not Before: May 31 05:28:58 2025 GMT Not After : Jun 7 05:28:57 2025 GMT Subject: CN=683a939a-a126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:ec:63:75:2e:dd:14:1d:3a:75:ed:56:31: ea:08:4a:9f:54:bd:9f:cf:0e:c9:19:20:90:b5:78: 33:ec:9e:93:b8:cf:fc:8e:24:e4:5f:58:89:46:25: 9c:45:ac:3b:ae:f3:7c:89:9b:3c:70:fa:60:06:ea: fa:a6:d4:a9:de:13:3b:c4:8e:c4:da:eb:65:7f:a0: 0f:72:a3:c2:d4:07:bf:25:eb:17:a8:f6:85:b9:1b: d3:a0:fb:13:e3:0b:84:94:1c:14:9b:f3:58:f0:c1: 55:f6:58:df:19:a3:66:52:b9:4e:04:28:3b:f1:fe: 4f:1b:a6:f4:74:53:41:a6:1e:42:f7:af:a7:07:ac: d0:be:0b:d1:eb:62:b7:80:c5:bf:c5:0f:30:b1:ea: 4b:98:1a:18:32:3e:de:cf:99:61:48:f0:57:b1:34: 0c:07:7c:a6:46:aa:81:4a:21:a0:99:02:0a:7a:dd: 99:93:fe:40:18:a7:bf:4c:49:dd:df:86:9c:7f:56: a8:42:5e:5a:1b:e1:40:2c:95:b4:0d:dc:a1:98:51: 53:e4:93:ab:30:b6:ee:12:52:10:2c:e4:1c:10:a6: 57:21:f1:73:04:40:09:59:8b:70:b3:ab:ed:ef:d4: 19:f7:40:8b:f7:05:e5:37:85:7d:ba:b7:d8:b2:64: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:5E:1A:45:F4:A8:55:BD:9D:3F:69:CE:77:E3:C8:E2:38:5A:A4 X509v3 Authority Key Identifier: keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:99:de:8c:ef:6e:b9:4a:f4:4b:a2:b3:14:91:27:95:d3:b7: 13:34:c5:db:1d:05:1e:2f:80:50:75:7c:62:6c:be:bf:76:ce: 0c:e3:02:cf:ac:b6:78:30:1c:cf:cd:5a:eb:88:f3:27:e5:69: c8:ad:ca:44:4d:e1:fe:dc:cf:63:c1:04:3e:ce:f2:8c:d5:e4: 80:25:2d:59:7d:87:ed:5b:a9:41:99:95:16:f6:a7:60:28:fe: 85:39:ae:69:9f:97:09:e3:8d:76:ad:d6:14:a9:7b:f7:6e:b1: 6d:c3:c3:11:07:c4:2d:db:c5:e6:2d:d6:9d:0f:a1:cf:fc:04: 71:76:03:4e:b3:ae:6b:a7:1f:46:40:45:d0:9f:b8:6f:c5:25: 6a:ff:23:0a:9c:f9:bf:a5:8a:5d:c3:55:5d:cd:9a:e3:2a:13: c8:7c:f0:9d:1d:b1:cf:09:3c:70:9b:1f:bc:79:3f:61:26:e5: 34:28:82:ca:10:43:84:5d:30:f2:12:90:92:4c:df:05:9c:62: 44:18:96:6a:f6:ae:bd:d5:d4:96:36:bf:cd:2a:27:0d:37:ef: 57:44:68:65:89:cf:be:3e:b5:aa:97:d0:e7:fc:76:b1:df:b2: 66:ed:d9:16:9f:d2:0d:09:08:a3:b0:a6:67:ee:d5:13:26:e3: 1d:98:b5:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw QTYxRUU4NkQwHhcNMjUwNTMxMDUyODU4WhcNMjUwNjA3MDUyODU3WjAYMRYwFAYD VQQDEw02ODNhOTM5YS1hMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGDsY3Uu3RQdOnXtVjHqCEqfVL2fzw7JGSCQtXgz7J6TuM/8jiTkX1iJRiWc Raw7rvN8iZs8cPpgBur6ptSp3hM7xI7E2utlf6APcqPC1Ae/JesXqPaFuRvToPsT 4wuElBwUm/NY8MFV9ljfGaNmUrlOBCg78f5PG6b0dFNBph5C96+nB6zQvgvR62K3 gMW/xQ8wsepLmBoYMj7ez5lhSPBXsTQMB3ymRqqBSiGgmQIKet2Zk/5AGKe/TEnd 34acf1aoQl5aG+FALJW0DdyhmFFT5JOrMLbuElIQLOQcEKZXIfFzBEAJWYtws6vt 79QZ90CL9wXlN4V9urfYsmR2UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzkXhpF 9KhVvZ0/ac5348jiOFqkMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2 RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgmd6M7265SvRLorMUkSeV07cTNMXbHQUeL4BQdXxibL6/ds4M4wLP rLZ4MBzPzVrriPMn5WnIrcpETeH+3M9jwQQ+zvKM1eSAJS1ZfYftW6lBmZUW9qdg KP6FOa5pn5cJ4412rdYUqXv3brFtw8MRB8Qt28XmLdadD6HP/ARxdgNOs65rpx9G QEXQn7hvxSVq/yMKnPm/pYpdw1VdzZrjKhPIfPCdHbHPCTxwmx+8eT9hJuU0KILK EEOEXTDyEpCSTN8FnGJEGJZq9q691dSWNr/NKicNN+9XRGhlic++PrWql9Dn/Hax 37Jm7dkWn9INCQijsKZn7tUTJuMdmLUT -----END CERTIFICATE-----Generated at Sat May 31 17:42:44 2025 by rpki-client