$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: LOBR8bSXy+S9jY8Ut3Klai8GOwAaJzgIB+fb00eQfMU= Subject key identifier: C8:C2:53:0A:5B:8C:E5:DE:E9:5C:52:E8:DF:CC:79:6F:AD:E4:27:72 Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: 010B Signing time: Sat 31 May 2025 04:35:36 +0000 Manifest this update: Sat 31 May 2025 04:35:36 +0000 Manifest next update: Sat 07 Jun 2025 04:35:36 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: SaZVjpvcbLFNozy/I88riTXLeB/WuZBpI+DF2GSO2PE=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: v8vLgjK5S+JdCLTZc8YYYPXnZStqFTZMOLbog1OTRVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Validity Not Before: May 31 04:35:36 2025 GMT Not After : Jun 7 04:35:36 2025 GMT Subject: CN=683a8718-0435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4d:61:b9:07:06:fb:f5:2f:89:0d:82:e9:2e: 60:5a:7b:e0:f7:b4:10:cf:53:36:f1:5e:ea:fe:41: ac:9f:21:38:fc:4b:26:c2:22:b6:e4:cd:29:11:91: f3:f7:94:d7:3d:61:5a:bc:52:12:d9:3e:66:aa:3f: 11:df:02:bc:cd:40:fb:dc:32:78:80:86:b6:e3:e3: ac:cf:61:9b:a6:d3:9c:36:2d:04:9b:95:f7:f0:ef: 39:66:de:cb:97:08:77:60:9e:4b:e6:85:67:35:93: 8f:1d:43:6f:d4:b7:46:db:f5:37:57:bc:76:8a:e8: d9:85:3f:50:10:93:f9:1d:68:f3:c7:67:55:38:6b: 74:31:42:4e:f4:fc:05:ea:3c:7b:4a:e6:c4:30:c9: aa:4c:02:70:0e:af:79:f4:b8:57:4c:1b:27:df:44: 9d:98:a5:e6:03:ef:64:63:1c:3f:cd:05:10:b9:d1: 83:3f:00:39:6d:19:b0:a2:7a:c9:ca:3d:0d:19:99: 6f:0c:51:97:bc:e4:e8:c2:b4:93:ea:f6:37:db:02: 49:1f:2d:b7:b9:74:2c:36:16:99:2f:30:f4:7f:30: af:0a:af:58:12:3a:39:08:d8:31:3e:4f:19:b4:93: 42:9a:47:fd:12:c7:ce:8e:2d:df:c3:80:51:72:dc: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C2:53:0A:5B:8C:E5:DE:E9:5C:52:E8:DF:CC:79:6F:AD:E4:27:72 X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e2:6b:f1:ef:ed:66:aa:94:b7:a8:7b:f7:e8:ac:c1:c2:f7: d3:9f:3f:7c:81:69:e7:33:b7:6f:96:1f:fe:8d:5d:6b:08:a6: e0:32:91:e4:89:6d:2e:d9:60:ea:aa:85:f6:1e:70:e4:00:bc: 00:d9:30:65:cc:96:af:62:56:1c:78:c9:3f:96:ed:2e:2b:95: 33:95:c5:38:9d:da:37:ac:10:f7:d9:99:41:c1:a3:8b:28:26: 79:55:f0:05:63:e2:8b:3a:e1:c3:bf:75:e9:87:6f:ab:b3:07: 2a:54:d9:c1:5a:e1:38:8b:93:47:06:be:6b:d2:84:76:37:bc: 78:6f:6e:a3:de:76:03:48:40:1c:7a:f9:4b:17:74:d0:9f:ae: e3:46:71:d2:44:98:0d:a6:94:bb:1b:64:c2:1d:85:5e:24:0d: ef:ef:13:ae:6a:42:d7:7c:b8:2c:11:d2:ed:50:25:8c:04:30: 69:cf:fd:dd:fd:3c:76:a8:a9:a0:c6:48:37:2f:29:93:ac:92: 14:71:b6:01:6e:31:48:7e:50:b7:52:51:85:04:bd:cb:71:12: a1:8d:fb:b7:87:88:7d:c7:7a:50:a9:29:14:54:7e:73:14:cd: e6:9d:a4:82:8e:b4:6c:a3:50:fc:09:3b:db:5f:96:1c:88:aa: 6b:15:7c:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURDMjMxODhFMzJB QUExQjFCNDQwHhcNMjUwNTMxMDQzNTM2WhcNMjUwNjA3MDQzNTM2WjAYMRYwFAYD VQQDEw02ODNhODcxOC0wNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0k1huQcG+/UviQ2C6S5gWnvg97QQz1M28V7q/kGsnyE4/EsmwiK25M0pEZHz 95TXPWFavFIS2T5mqj8R3wK8zUD73DJ4gIa24+Osz2GbptOcNi0Em5X38O85Zt7L lwh3YJ5L5oVnNZOPHUNv1LdG2/U3V7x2iujZhT9QEJP5HWjzx2dVOGt0MUJO9PwF 6jx7SubEMMmqTAJwDq959LhXTBsn30SdmKXmA+9kYxw/zQUQudGDPwA5bRmwonrJ yj0NGZlvDFGXvOTowrST6vY32wJJHy23uXQsNhaZLzD0fzCvCq9YEjo5CNgxPk8Z tJNCmkf9EsfOji3fw4BRcty8kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjCUwpb jOXe6VxS6N/MeW+t5CdyMB8GA1UdIwQYMBaAFNBayQogf2CHzgLtwjGI4yqqGxtE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxMi80QjIzM0VFQUEy RDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJZk9BdTNDTVlqaktxb2JH MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJ Zk9BdTNDTVlqaktxb2JHMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ4mvx7+1mqpS3qHv36KzBwvfTnz98gWnnM7dvlh/+jV1rCKbgMpHk iW0u2WDqqoX2HnDkALwA2TBlzJavYlYceMk/lu0uK5UzlcU4ndo3rBD32ZlBwaOL KCZ5VfAFY+KLOuHDv3Xph2+rswcqVNnBWuE4i5NHBr5r0oR2N7x4b26j3nYDSEAc evlLF3TQn67jRnHSRJgNppS7G2TCHYVeJA3v7xOuakLXfLgsEdLtUCWMBDBpz/3d /Tx2qKmgxkg3LymTrJIUcbYBbjFIflC3UlGFBL3LcRKhjfu3h4h9x3pQqSkUVH5z FM3mnaSCjrRso1D8CTvbX5YciKprFXyU -----END CERTIFICATE-----Generated at Sat May 31 17:37:45 2025 by rpki-client