$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json) Hash identifier: YGmY6N1GMrjw3tN+n71dOHGDH2IarBTbwg2gDNT7OPk= Subject key identifier: 1A:8C:8D:68:40:6C:02:C9:E4:4B:6C:AD:B6:E4:44:18:D1:58:6D:DF Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft Manifest number: 016A Signing time: Sat 31 May 2025 03:35:45 +0000 Manifest this update: Sat 31 May 2025 03:35:45 +0000 Manifest next update: Sat 07 Jun 2025 03:35:45 +0000 Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: tbrcCSwF6t4Gh9HYqZw3fz0vraxdMlUnmnl0pLOchQE=) 2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: LI8+/YvVoONLxst6n4BQuIP1sskVexKZgRmcFhR/Qps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Validity Not Before: May 31 03:35:45 2025 GMT Not After : Jun 7 03:35:45 2025 GMT Subject: CN=683a7911-1281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:af:6a:62:74:f4:53:06:19:41:b5:b2:15:3b: a3:ed:a5:3f:8c:06:40:e4:1e:c0:61:6c:75:da:0d: 60:30:03:af:0b:5d:43:22:ed:9c:78:27:fb:99:ee: 87:35:0d:fe:28:81:dc:2a:30:9f:51:40:33:1d:9e: 5a:00:53:54:79:41:65:88:d9:4c:8f:ba:00:ba:d6: 1a:7e:7f:10:b6:bf:fc:d5:39:57:10:97:62:5e:51: 48:22:62:e8:4c:e8:ee:5b:5b:d2:69:ba:51:4c:14: ee:64:aa:31:ca:c3:8c:c2:24:d3:b0:eb:da:5c:17: a5:72:ea:4e:4f:ab:dd:de:2b:d2:a7:a4:20:f9:8b: b5:36:2b:a3:a5:42:9a:1f:79:93:32:a9:48:5a:cf: 7c:12:1d:73:ea:14:8a:fe:e3:18:5b:17:1a:c4:e1: 4b:8c:f9:71:ee:2b:de:90:99:c5:8d:13:45:c3:5d: 8a:86:e7:27:bb:fa:46:3a:43:cf:0c:c5:ca:1d:39: 8f:ae:71:17:e7:72:51:23:18:b3:c0:a8:05:22:ba: 02:13:90:01:47:cf:73:c8:06:9a:11:31:d2:07:6a: 5e:f9:0b:49:c8:49:3c:c3:32:b1:98:35:7d:92:72: 65:67:b4:30:fb:9b:5b:a4:76:6c:cd:43:c9:8f:70: 2b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8C:8D:68:40:6C:02:C9:E4:4B:6C:AD:B6:E4:44:18:D1:58:6D:DF X509v3 Authority Key Identifier: keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:85:2e:d6:31:c9:cb:b8:b8:37:f3:f7:37:a4:2d:f5:db:96: 42:3d:40:3d:4f:c4:c2:71:61:0a:02:d8:cc:c5:9a:31:04:44: df:31:ee:88:73:1e:2a:6e:75:e7:e4:ea:2a:d7:43:13:4a:93: eb:87:d3:4f:5e:99:fb:6f:b9:f0:f3:d6:f6:5f:94:a6:88:92: 12:28:fd:fe:f7:64:fc:d6:0d:86:98:b0:2a:ef:99:7c:30:ed: 37:ea:f6:60:45:9b:73:ca:23:36:17:38:a9:5e:02:a9:b9:02: 29:79:4f:61:9e:15:df:45:2b:4b:4b:6b:6d:d0:94:90:5e:66: 9b:e9:9a:de:87:18:00:d5:e6:70:95:0b:14:aa:78:b7:f8:c2: ae:88:0f:e2:e6:cc:20:28:b5:13:46:63:f2:f9:11:90:81:45: 94:84:cf:b8:c1:30:eb:6f:38:3c:d4:c1:db:65:24:ae:ed:7c: b7:70:ea:da:8a:7e:ad:b5:67:87:c7:a8:0e:9e:97:18:2a:73: 11:c7:0d:b8:05:8e:27:16:34:0a:d2:d9:7e:d5:28:e2:6c:49: 93:69:e5:30:2f:0c:d0:b3:a2:25:04:08:4c:9d:c4:6b:05:dd: 6d:cb:82:c5:a2:6a:16:7d:1e:bd:7f:eb:d1:bc:9e:e8:07:c5: 0d:fb:03:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyMDgxMTAvBgNVBAUTKDE2MTQ0QzgyMzVCNDUxOUY1MEVERDU1NTM2ODExODg0 NEQxNzExQTUwHhcNMjUwNTMxMDMzNTQ1WhcNMjUwNjA3MDMzNTQ1WjAYMRYwFAYD VQQDEw02ODNhNzkxMS0xMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2q9qYnT0UwYZQbWyFTuj7aU/jAZA5B7AYWx12g1gMAOvC11DIu2ceCf7me6H NQ3+KIHcKjCfUUAzHZ5aAFNUeUFliNlMj7oAutYafn8Qtr/81TlXEJdiXlFIImLo TOjuW1vSabpRTBTuZKoxysOMwiTTsOvaXBelcupOT6vd3ivSp6Qg+Yu1NiujpUKa H3mTMqlIWs98Eh1z6hSK/uMYWxcaxOFLjPlx7ivekJnFjRNFw12Khucnu/pGOkPP DMXKHTmPrnEX53JRIxizwKgFIroCE5ABR89zyAaaETHSB2pe+QtJyEk8wzKxmDV9 knJlZ7Qw+5tbpHZszUPJj3ArmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqMjWhA bALJ5EtsrbbkRBjRWG3fMB8GA1UdIwQYMBaAFBYUTII1tFGfUO3VVTaBGIRNFxGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzIwOC9DNkQ5NkQ5RTFB MTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVaOVE3ZFZWTm9FWWhFMFhF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzIwOC9DNkQ5NkQ5RTFBMTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVa OVE3ZFZWTm9FWWhFMFhFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJhS7WMcnLuLg38/c3pC3125ZCPUA9T8TCcWEKAtjMxZoxBETfMe6I cx4qbnXn5Ooq10MTSpPrh9NPXpn7b7nw89b2X5SmiJISKP3+92T81g2GmLAq75l8 MO036vZgRZtzyiM2FzipXgKpuQIpeU9hnhXfRStLS2tt0JSQXmab6ZrehxgA1eZw lQsUqni3+MKuiA/i5swgKLUTRmPy+RGQgUWUhM+4wTDrbzg81MHbZSSu7Xy3cOra in6ttWeHx6gOnpcYKnMRxw24BY4nFjQK0tl+1SjibEmTaeUwLwzQs6IlBAhMncRr Bd1ty4LFomoWfR69f+vRvJ7oB8UN+wPb -----END CERTIFICATE-----Generated at Sat May 31 17:53:15 2025 by rpki-client