$ rpki-client -vvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft File: mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json) Hash identifier: GjzOqw168em/b2AudGJuUjLQao8w5ILBK9YE4/8f7no= Subject key identifier: 94:9F:54:9E:D6:53:5E:6F:5A:7C:7B:B7:E1:3B:46:8D:3B:9D:2A:CA Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1 Certificate issuer: /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft Manifest number: 0189 Signing time: Sat 31 May 2025 03:14:52 +0000 Manifest this update: Sat 31 May 2025 03:14:51 +0000 Manifest next update: Sat 07 Jun 2025 03:14:51 +0000 Files and hashes: 1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: 5x8elp3Y5vCdO7ibxvzF8mEASeP6o+xs7OVtkJhN0zc=) 2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: FcVq7MapsG0tiRr/INQ1mEf1XPC8HnzEbnMHkTHPq4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184359, serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1 Validity Not Before: May 31 03:14:51 2025 GMT Not After : Jun 7 03:14:51 2025 GMT Subject: CN=683a742b-3c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6a:b7:78:0b:3b:71:99:f3:41:51:56:3b:d3: d4:e8:af:03:e3:89:66:cf:98:27:19:85:05:63:11: 71:22:88:db:fc:e5:15:fb:de:ac:29:1a:99:83:e1: c1:ad:d0:12:ac:e5:e6:de:dc:df:97:17:34:1d:16: 3a:e4:77:36:4b:19:e1:9d:32:c8:94:56:87:0b:ae: 57:c8:a0:7d:a0:b2:21:9b:d4:ba:8c:28:b4:64:04: 16:68:96:2b:25:dd:8a:16:9c:99:0a:93:a1:e3:d5: 01:6c:f2:a7:56:0c:3b:bb:10:89:f2:fd:b5:e1:94: ba:be:b5:ec:e1:22:0c:3e:b1:61:f9:60:cf:4c:9a: 54:7c:de:79:bb:a4:8b:12:ff:8f:27:a1:fd:06:38: 6c:06:64:5c:90:32:35:6d:81:d8:c1:58:c4:a2:02: f7:d5:69:83:ae:f4:4f:05:bc:70:49:28:0d:4c:23: cb:19:dd:82:26:20:2c:e9:d6:dc:08:fa:3c:b6:e2: 10:f8:e2:93:1b:f6:99:73:5f:74:74:21:79:79:c7: 3a:71:8e:35:36:84:b1:cc:72:c7:cd:c4:c1:92:db: 5e:4c:2e:18:fa:3b:69:b6:86:e5:2f:53:11:c7:c2: 10:dd:d8:28:ee:da:7b:e0:67:11:6f:c9:c1:27:8b: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9F:54:9E:D6:53:5E:6F:5A:7C:7B:B7:E1:3B:46:8D:3B:9D:2A:CA X509v3 Authority Key Identifier: keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:53:00:49:69:a5:39:de:44:d6:dc:09:74:e2:4d:25:d0:4a: 4b:6c:e5:4e:7c:c3:2c:db:40:c8:52:ea:e4:f4:6c:5c:68:f6: 7e:f5:01:f4:2e:30:2e:87:3c:70:1c:42:9e:e5:b5:c7:93:bd: d8:1a:2b:d6:8c:2a:0d:c4:e5:85:f2:cf:28:59:ce:64:d3:a9: c7:f2:76:3c:b1:96:f6:d3:99:26:77:d7:6b:cc:11:81:0b:42: 6e:93:a1:c5:51:03:9a:2b:44:f8:90:61:26:1a:a9:09:34:29: 4e:94:54:13:ff:11:4e:65:f6:3c:18:0c:60:d1:65:57:a2:f8: c8:f9:73:db:54:3a:94:23:25:b4:9b:2a:6b:e5:3f:79:29:01: c2:61:ab:30:87:d9:fa:d5:f9:84:76:ef:b1:0e:4a:51:72:26: ce:de:bb:fe:df:08:22:62:49:c0:2f:0f:f1:78:78:f9:8a:f9: 66:8d:95:c1:c3:e3:e1:f8:46:64:9c:21:0b:a3:31:42:8b:56: a0:d7:39:6e:40:d6:da:14:40:1b:ad:f1:c6:ad:3f:cd:06:0e: c8:f6:f9:bb:29:3c:93:1b:ab:72:e1:d5:04:b6:8f:b3:3b:85: ed:c7:d3:04:0e:4d:cf:5f:e0:30:bf:e0:2b:c5:a4:51:fc:fc: 1f:82:90:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzNTkxMTAvBgNVBAUTKDk5OUJBMzc0MTEwMjhBNjJGQjUxNURDRjAyOENEQTJE QzlBQkM5RDEwHhcNMjUwNTMxMDMxNDUxWhcNMjUwNjA3MDMxNDUxWjAYMRYwFAYD VQQDEw02ODNhNzQyYi0zYzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGq3eAs7cZnzQVFWO9PU6K8D44lmz5gnGYUFYxFxIojb/OUV+96sKRqZg+HB rdASrOXm3tzflxc0HRY65Hc2SxnhnTLIlFaHC65XyKB9oLIhm9S6jCi0ZAQWaJYr Jd2KFpyZCpOh49UBbPKnVgw7uxCJ8v214ZS6vrXs4SIMPrFh+WDPTJpUfN55u6SL Ev+PJ6H9BjhsBmRckDI1bYHYwVjEogL31WmDrvRPBbxwSSgNTCPLGd2CJiAs6dbc CPo8tuIQ+OKTG/aZc190dCF5ecc6cY41NoSxzHLHzcTBktteTC4Y+jtptoblL1MR x8IQ3dgo7tp74GcRb8nBJ4sNKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSfVJ7W U15vWnx7t+E7Ro07nSrKMB8GA1UdIwQYMBaAFJmbo3QRAopi+1FdzwKM2i3Jq8nR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDM1OS8zMzVFNjU2MkU0 QzgxMUVEQkFBQkM1NUNDNEY5QUUwMi9tWnVqZEJFQ2ltTDdVVjNQQW96YUxjbXJ5 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21adWpkQkVDaW1MN1VWM1BBb3phTGNtcnlkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDM1OS8zMzVFNjU2MkU0QzgxMUVEQkFBQkM1NUNDNEY5QUUwMi9tWnVqZEJFQ2lt TDdVVjNQQW96YUxjbXJ5ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdUwBJaaU53kTW3Al04k0l0EpLbOVOfMMs20DIUurk9GxcaPZ+9QH0 LjAuhzxwHEKe5bXHk73YGivWjCoNxOWF8s8oWc5k06nH8nY8sZb205kmd9drzBGB C0Juk6HFUQOaK0T4kGEmGqkJNClOlFQT/xFOZfY8GAxg0WVXovjI+XPbVDqUIyW0 mypr5T95KQHCYaswh9n61fmEdu+xDkpRcibO3rv+3wgiYknALw/xeHj5ivlmjZXB w+Ph+EZknCELozFCi1ag1zluQNbaFEAbrfHGrT/NBg7I9vm7KTyTG6ty4dUEto+z O4Xtx9MEDk3PX+Awv+ArxaRR/PwfgpD5 -----END CERTIFICATE-----Generated at Sat May 31 17:07:36 2025 by rpki-client