$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: zpLqVGnMNkjWursa6QzWy5IYLxpYnuoh+M0AjMH61zs= Subject key identifier: AB:5A:F9:A9:BF:2C:E3:CC:A9:0D:B9:2B:03:EC:88:5D:0C:1A:9B:97 Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 02D0 Signing time: Sat 31 May 2025 01:36:11 +0000 Manifest this update: Sat 31 May 2025 01:36:11 +0000 Manifest next update: Sat 07 Jun 2025 01:36:11 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: PMxcsdQFgH0AK87wbl+uLdGXcm7Qf2DSTE0C7ASsA3k=) 2: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: E8vwAczjvQJXB4RuH83+id/dNjBD9Eo3yf3KRRas1Z8=) 3: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: WQFtk3qXnJIT7imtWpujgi7DyXBepTQ3l980J2HR9zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: May 31 01:36:11 2025 GMT Not After : Jun 7 01:36:11 2025 GMT Subject: CN=683a5d0b-62bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:c4:06:41:42:cb:66:23:32:70:c2:17:47: 31:5c:ab:4d:b8:33:96:90:fe:f4:48:76:1e:0e:36: 7d:c5:6e:ad:73:9d:fb:78:b2:0a:ad:da:7d:b2:a2: 2f:2e:56:23:e2:56:c3:8f:50:10:a1:2b:fb:c9:c9: c8:68:12:a9:fd:25:53:ea:e3:9a:22:f5:99:84:53: 63:44:6b:ab:20:dd:bd:66:82:f8:97:45:4e:08:35: af:5d:6f:c0:82:8a:2d:5f:0c:08:a9:f9:da:87:75: 13:b8:fa:a8:8b:83:eb:2f:32:f5:8e:14:4a:d1:e4: 22:0c:41:43:ae:77:b2:77:c4:f4:22:3a:80:d4:1e: 1d:2e:c9:87:3e:d0:76:01:c9:fd:3d:b8:0f:80:a8: e6:dc:d6:2c:85:65:89:70:c8:fa:7c:cc:05:7b:eb: e9:43:e4:b3:4d:0b:8b:69:85:fc:da:a6:ed:8e:89: 03:90:3e:f9:6e:72:d6:97:d4:e3:31:66:70:6c:5b: 47:0d:4d:51:26:6c:08:20:81:60:ae:98:a0:ab:7a: 47:f5:aa:df:94:5e:09:6e:3d:48:84:c1:21:6b:53: 42:29:65:79:2c:fb:c3:f0:ee:69:b5:57:10:05:13: e7:fc:d2:6f:64:44:f2:48:92:61:9d:73:bd:99:7a: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5A:F9:A9:BF:2C:E3:CC:A9:0D:B9:2B:03:EC:88:5D:0C:1A:9B:97 X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:95:6e:19:ce:82:6f:02:d9:e2:ed:ed:0e:be:5b:f7:73:68: 93:f7:ce:4a:a5:a6:25:ce:85:d2:41:12:2b:15:e3:ec:e1:7b: dd:2a:21:bb:61:7c:0f:21:52:84:34:31:d0:22:8f:79:3b:bb: a7:dd:9e:9a:96:d7:b0:18:aa:98:e5:97:31:34:33:fd:d6:af: 13:df:08:ad:c0:45:a9:a1:0f:81:ab:b2:6b:94:a4:a1:8b:d3: 1c:68:d3:07:4e:b9:3f:1a:13:55:44:f7:4b:a5:44:80:4c:8f: 9c:4e:3d:35:fa:11:a4:3d:3c:24:1c:22:67:3c:05:0c:70:62: ea:94:7c:be:ed:30:25:cf:be:33:f8:7e:82:34:a5:80:de:5b: 4a:cb:3a:46:db:ca:56:47:28:e2:6c:3b:24:9e:df:b2:c1:82: 83:f1:96:c6:f1:e2:09:14:7a:4e:53:7a:4c:d4:84:80:75:7a: c2:07:da:ae:d8:f5:06:29:df:b0:3b:b3:22:6a:99:47:3a:c1: 84:0b:d9:74:00:97:55:81:23:66:f0:0d:50:c0:ac:10:8e:bb: d5:ad:aa:35:d9:da:a4:3a:b4:89:5b:4f:33:65:c7:5e:06:8d: d9:55:9f:37:a5:8d:6b:21:e2:92:3e:53:a9:1a:ab:18:46:7b: 1d:28:78:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjUwNTMxMDEzNjExWhcNMjUwNjA3MDEzNjExWjAYMRYwFAYD VQQDEw02ODNhNWQwYi02MmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGTEBkFCy2YjMnDCF0cxXKtNuDOWkP70SHYeDjZ9xW6tc537eLIKrdp9sqIv LlYj4lbDj1AQoSv7ycnIaBKp/SVT6uOaIvWZhFNjRGurIN29ZoL4l0VOCDWvXW/A gootXwwIqfnah3UTuPqoi4PrLzL1jhRK0eQiDEFDrneyd8T0IjqA1B4dLsmHPtB2 Acn9PbgPgKjm3NYshWWJcMj6fMwFe+vpQ+SzTQuLaYX82qbtjokDkD75bnLWl9Tj MWZwbFtHDU1RJmwIIIFgrpigq3pH9arflF4Jbj1IhMEha1NCKWV5LPvD8O5ptVcQ BRPn/NJvZETySJJhnXO9mXrItwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKta+am/ LOPMqQ25KwPsiF0MGpuXMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHlW4ZzoJvAtni7e0Ovlv3c2iT985KpaYlzoXSQRIrFePs4XvdKiG7 YXwPIVKENDHQIo95O7un3Z6altewGKqY5ZcxNDP91q8T3witwEWpoQ+Bq7JrlKSh i9McaNMHTrk/GhNVRPdLpUSATI+cTj01+hGkPTwkHCJnPAUMcGLqlHy+7TAlz74z +H6CNKWA3ltKyzpG28pWRyjibDsknt+ywYKD8ZbG8eIJFHpOU3pM1ISAdXrCB9qu 2PUGKd+wO7MiaplHOsGEC9l0AJdVgSNm8A1QwKwQjrvVrao12dqkOrSJW08zZcde Bo3ZVZ83pY1rIeKSPlOpGqsYRnsdKHgD -----END CERTIFICATE-----Generated at Sat May 31 17:24:42 2025 by rpki-client