$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft File: cV0939fSp5kTexOT1KjPorHU02Q.mft (raw, json) Hash identifier: Zti9Adzrmpw+gsiG5eTcjlbpjxEwanFUKgujiclDguA= Subject key identifier: 2C:46:A2:7B:DB:CF:63:32:23:85:99:6B:98:2C:70:64:FA:80:19:5C Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64 Certificate issuer: /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft Manifest number: 8B Signing time: Sat 31 May 2025 06:04:31 +0000 Manifest this update: Sat 31 May 2025 06:04:31 +0000 Manifest next update: Sat 07 Jun 2025 06:04:31 +0000 Files and hashes: 1: cV0939fSp5kTexOT1KjPorHU02Q.crl (hash: Qv3ayfUq3DQSzDyDnO9GFFmvynlmbUIHGc2W4lijdcc=) 2: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (hash: ho9e+hBvfRrUv61HQybAcXR0qZ4hUME6WoyxclRolHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364 Validity Not Before: May 31 06:04:31 2025 GMT Not After : Jun 7 06:04:31 2025 GMT Subject: CN=683a9bef-1559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:40:f4:5b:91:35:0e:85:00:46:33:e5:e8: 31:8c:79:f1:7d:61:b2:10:d2:14:6a:3a:5d:81:74: f2:c5:c2:90:50:b0:ab:a1:b6:e6:56:23:55:15:28: eb:d3:3c:d0:62:9b:a5:ab:20:db:ed:af:72:c7:97: 3d:01:50:20:69:c5:9e:31:9f:3c:b4:3e:ed:12:9b: 8b:d4:dc:fc:81:0d:d4:9b:8e:6e:88:90:72:a6:f3: b8:58:6b:a7:2a:97:f2:63:d7:61:2c:a5:74:19:0d: c5:e9:a7:e2:49:87:34:80:a3:3f:39:48:3d:ba:e1: a8:db:1a:b1:07:c0:5f:18:69:1c:fc:96:f4:c2:68: d4:1d:aa:77:df:60:48:76:6d:16:e4:a0:a0:4e:f8: 2a:82:df:e7:4d:c3:87:47:83:6f:7c:b5:ea:a9:d0: 25:fd:f3:7e:55:d8:74:48:0b:d9:99:1a:ff:71:c5: e9:88:c4:f1:79:30:8b:7b:bf:d5:af:1c:30:53:1a: e2:d4:41:b4:e7:b7:cc:7e:eb:26:5f:a7:30:4a:4e: ad:91:b5:a7:9d:f6:b6:3c:2f:69:c5:46:de:b7:b0: 74:49:0e:53:bf:e4:22:22:2b:df:b4:dd:eb:eb:5d: b3:21:9d:93:4b:8e:60:8d:5b:40:6b:d1:ae:92:5e: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:46:A2:7B:DB:CF:63:32:23:85:99:6B:98:2C:70:64:FA:80:19:5C X509v3 Authority Key Identifier: keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:39:d6:27:0d:72:98:13:a5:96:20:06:f1:5a:ed:79:5d:7c: 99:ba:25:82:3f:39:1f:9f:bc:65:0d:4e:3a:91:69:64:a8:18: fc:e7:06:d4:29:f1:54:79:6c:98:1a:35:cc:11:08:cd:19:d9: f7:8a:01:b4:0d:8a:7e:61:23:f5:96:42:34:1a:55:55:90:58: 92:74:26:9b:9c:c8:d8:45:ae:5c:24:bb:00:91:04:1d:ba:94: c9:0c:08:6a:3f:02:fe:d3:88:b0:a0:2b:db:5f:48:8e:62:3a: d0:b2:76:f2:37:9b:8c:c6:60:9c:cc:1b:54:34:24:f5:60:a2: 54:6b:29:0c:ff:bb:11:bd:91:df:e0:32:90:09:a4:8c:18:ce: 34:80:8a:fc:e6:21:07:a9:51:23:8c:5b:4e:47:90:d4:84:df: 18:2d:cf:b9:05:b2:21:07:33:86:94:3d:09:ff:34:cd:a2:51: 26:46:67:2b:f0:1b:2c:96:77:95:36:bb:0d:53:2f:e7:32:5a: 64:31:04:dd:80:88:4a:34:39:b0:c7:7b:c1:0a:f6:19:48:78: f2:5b:da:60:96:ec:05:75:68:56:e5:12:3d:48:e3:6d:4a:e8: 6d:d3:7e:ec:ca:84:91:18:59:32:53:a9:a0:5f:1e:5e:1e:bf: 3a:4e:41:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2OTUxMTAvBgNVBAUTKDcxNUQzRERGRDdEMkE3OTkxMzdCMTM5M0Q0QThDRkEy QjFENEQzNjQwHhcNMjUwNTMxMDYwNDMxWhcNMjUwNjA3MDYwNDMxWjAYMRYwFAYD VQQDEw02ODNhOWJlZi0xNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzypA9FuRNQ6FAEYz5egxjHnxfWGyENIUajpdgXTyxcKQULCrobbmViNVFSjr 0zzQYpulqyDb7a9yx5c9AVAgacWeMZ88tD7tEpuL1Nz8gQ3Um45uiJBypvO4WGun KpfyY9dhLKV0GQ3F6afiSYc0gKM/OUg9uuGo2xqxB8BfGGkc/Jb0wmjUHap332BI dm0W5KCgTvgqgt/nTcOHR4NvfLXqqdAl/fN+Vdh0SAvZmRr/ccXpiMTxeTCLe7/V rxwwUxri1EG057fMfusmX6cwSk6tkbWnnfa2PC9pxUbet7B0SQ5Tv+QiIivftN3r 612zIZ2TS45gjVtAa9Gukl5kTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxGonvb z2MyI4WZa5gscGT6gBlcMB8GA1UdIwQYMBaAFHFdPd/X0qeZE3sTk9Soz6Kx1NNk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS85NkJERjM0QTY5 MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1a1RleE9UMUtqUG9ySFUw MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWMDkzOWZTcDVrVGV4T1QxS2pQb3JIVTAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTY5NS85NkJERjM0QTY5MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1 a1RleE9UMUtqUG9ySFUwMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANOdYnDXKYE6WWIAbxWu15XXyZuiWCPzkfn7xlDU46kWlkqBj85wbU KfFUeWyYGjXMEQjNGdn3igG0DYp+YSP1lkI0GlVVkFiSdCabnMjYRa5cJLsAkQQd upTJDAhqPwL+04iwoCvbX0iOYjrQsnbyN5uMxmCczBtUNCT1YKJUaykM/7sRvZHf 4DKQCaSMGM40gIr85iEHqVEjjFtOR5DUhN8YLc+5BbIhBzOGlD0J/zTNolEmRmcr 8BsslneVNrsNUy/nMlpkMQTdgIhKNDmwx3vBCvYZSHjyW9pgluwFdWhW5RI9SONt Suht037syoSRGFkyU6mgXx5eHr86TkGX -----END CERTIFICATE-----Generated at Sat May 31 16:56:09 2025 by rpki-client