$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: kUB7OKNqXJ9bzH1OMNqncnpocd7CJ4LW8Vi9sPySZTg= Subject key identifier: B4:26:63:04:BB:8F:D8:AC:CC:6C:A2:A4:39:10:CA:69:A6:07:AA:71 Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 0585 Signing time: Fri 30 May 2025 23:31:54 +0000 Manifest this update: Fri 30 May 2025 23:31:54 +0000 Manifest next update: Fri 06 Jun 2025 23:31:54 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: 5B9WH9tZ6kYrYIDbOEKuefEo6SwzIt93hcUWnD7c/Nk=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: ANHxtKugodgoKSgnFI0z3Q5CTPRRYAMndCAFyQe7v1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: May 30 23:31:54 2025 GMT Not After : Jun 6 23:31:54 2025 GMT Subject: CN=683a3fea-cb04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:39:37:b9:52:75:1b:06:9b:55:ba:8d:57: 64:46:fc:2f:d4:ea:39:85:1f:be:36:4a:49:6e:eb: e0:52:32:b4:44:d6:0f:9f:79:4e:81:51:ed:e8:e7: 3c:aa:36:ce:08:d3:b8:2a:f6:59:31:eb:35:c3:98: 93:51:24:4c:56:f5:04:87:2c:f8:ba:10:f5:1f:05: ed:e3:00:0a:d9:a3:8c:76:ce:c2:24:02:e3:59:e5: 5e:93:b5:c5:77:52:71:45:0e:57:87:73:59:d2:73: 79:8f:b4:05:9b:63:a2:2c:3b:bc:33:03:87:fe:b3: a1:6b:a1:ac:35:9d:bb:fc:fb:55:b6:dd:35:9c:fe: 90:8e:9e:6f:eb:f9:9e:cf:eb:49:8f:bf:b2:e2:8b: 30:b1:cf:73:87:97:fb:89:ac:bf:c8:5d:72:78:a3: a8:7e:09:a2:cf:3a:f5:79:7a:00:75:6c:03:2b:d2: b4:7c:fc:08:a5:ac:7c:fd:8a:c3:2f:b7:c5:25:8d: 90:f8:42:ff:28:6f:68:86:30:29:d8:a2:cf:cc:4c: 51:e6:61:b4:ef:b7:84:75:e6:93:c9:21:1d:d4:e7: b7:13:fe:01:88:0e:c0:d3:e8:92:e8:fa:04:e5:75: 6d:8b:2a:4f:a4:60:95:d4:ff:11:44:20:ec:a8:37: d0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:26:63:04:BB:8F:D8:AC:CC:6C:A2:A4:39:10:CA:69:A6:07:AA:71 X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:16:17:b1:bd:bc:0a:3e:92:31:35:1f:30:7e:13:09:d9:c8: 78:72:c1:08:3f:34:cc:50:4d:a0:bb:dc:f8:67:b2:43:91:a2: a5:29:a6:f7:34:5c:67:87:6a:a7:52:77:39:3d:4d:aa:5f:4b: c9:8f:a2:bc:54:e0:6a:4f:d0:69:12:1a:92:c4:45:fb:16:74: ed:d4:45:67:81:8f:a1:c9:c7:9b:56:51:4e:39:cf:73:6c:aa: ad:f9:f4:02:29:93:b8:a0:30:d0:e6:56:c7:ac:c3:67:65:e1: 41:b9:82:d7:65:9c:03:31:cf:0d:1f:3b:da:19:51:e9:fd:7a: 7e:ec:7b:64:8b:fc:c7:c2:4b:de:29:82:64:d3:aa:95:6a:6c: 32:83:c5:0a:57:62:e2:a7:09:d8:55:a8:f0:69:57:32:0c:86: 24:23:d3:ac:73:0f:5e:69:e7:5a:f9:37:a0:f9:20:6e:13:72: 22:37:92:a8:45:2f:9a:4f:49:e8:f7:7e:1e:f1:59:25:19:a8: 4e:e2:4f:01:a9:e4:27:58:74:65:84:9b:ba:79:fb:46:d0:25: 0c:b0:9a:33:09:9d:e1:1b:d8:74:f7:d9:37:b2:61:9a:82:b6: 84:3f:c1:f9:e8:1d:c0:6d:bc:30:4b:dd:b6:26:d4:0e:fd:6e: de:19:2d:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjUwNTMwMjMzMTU0WhcNMjUwNjA2MjMzMTU0WjAYMRYwFAYD VQQDEw02ODNhM2ZlYS1jYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/o5N7lSdRsGm1W6jVdkRvwv1Oo5hR++NkpJbuvgUjK0RNYPn3lOgVHt6Oc8 qjbOCNO4KvZZMes1w5iTUSRMVvUEhyz4uhD1HwXt4wAK2aOMds7CJALjWeVek7XF d1JxRQ5Xh3NZ0nN5j7QFm2OiLDu8MwOH/rOha6GsNZ27/PtVtt01nP6Qjp5v6/me z+tJj7+y4oswsc9zh5f7iay/yF1yeKOofgmizzr1eXoAdWwDK9K0fPwIpax8/YrD L7fFJY2Q+EL/KG9ohjAp2KLPzExR5mG077eEdeaTySEd1Oe3E/4BiA7A0+iS6PoE 5XVtiypPpGCV1P8RRCDsqDfQIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQmYwS7 j9iszGyipDkQymmmB6pxMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeFhexvbwKPpIxNR8wfhMJ2ch4csEIPzTMUE2gu9z4Z7JDkaKlKab3 NFxnh2qnUnc5PU2qX0vJj6K8VOBqT9BpEhqSxEX7FnTt1EVngY+hycebVlFOOc9z bKqt+fQCKZO4oDDQ5lbHrMNnZeFBuYLXZZwDMc8NHzvaGVHp/Xp+7Htki/zHwkve KYJk06qVamwyg8UKV2LipwnYVajwaVcyDIYkI9Oscw9eaeda+Teg+SBuE3IiN5Ko RS+aT0no934e8VklGahO4k8BqeQnWHRlhJu6eftG0CUMsJozCZ3hG9h099k3smGa graEP8H56B3AbbwwS922JtQO/W7eGS19 -----END CERTIFICATE-----Generated at Sat May 31 16:34:57 2025 by rpki-client