$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft File: mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json) Hash identifier: p+29lwbw79AD9BgN2V6oI6mvAehqrs0+X7oAwliSt6A= Subject key identifier: D0:E5:B1:4D:77:DD:C1:F0:C4:2E:69:8C:61:62:AF:09:6F:38:1F:9C Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft Manifest number: 03CD Signing time: Sat 31 May 2025 00:48:35 +0000 Manifest this update: Sat 31 May 2025 00:48:34 +0000 Manifest next update: Sat 07 Jun 2025 00:48:34 +0000 Files and hashes: 1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: L7bbnsGvSjg5FbhcCkdDRNHqk3rb7NVtsppY3meRCBA=) 2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Validity Not Before: May 31 00:48:34 2025 GMT Not After : Jun 7 00:48:34 2025 GMT Subject: CN=683a51e2-29ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:12:e6:ca:c8:95:73:05:4f:8d:32:37:7f: 9e:8e:f6:0b:de:d2:52:25:cd:a7:a9:44:41:3b:1a: 9c:c5:0f:bd:30:d8:94:8c:bd:a9:7a:16:7e:d7:fc: 16:bc:04:00:62:59:de:e4:9f:56:52:87:0e:fe:c8: 19:39:c5:2d:41:c1:8b:73:b4:ab:d8:f3:7f:1d:c0: 19:77:41:92:b6:b1:45:58:d7:ed:9d:ff:f6:5b:e2: bb:21:c7:6f:a3:48:95:dd:bc:26:3e:9a:08:c4:00: 51:43:be:d6:38:29:46:09:e0:5d:f3:90:17:aa:6c: 05:fa:96:92:ed:53:0f:31:77:35:61:65:b1:70:61: 60:f6:a7:5e:8c:06:32:45:35:3d:b7:c4:e5:69:61: c9:0d:7f:45:82:18:25:77:5e:bc:a3:9b:58:2f:f5: fa:ef:97:f0:df:6d:ad:f6:dd:ce:d3:34:19:e5:80: 53:9f:f6:e2:d0:c9:08:30:6a:d3:7f:4a:35:8e:8d: b8:87:ee:16:9c:99:b8:26:01:ba:7a:73:c8:7b:6f: 31:80:c8:26:76:ca:ac:94:89:e1:e0:52:51:aa:35: d5:8b:88:76:c0:05:69:70:e1:c3:e7:c8:60:ae:b2: dc:8f:de:52:57:4a:e8:fc:c9:41:c5:c8:bd:ac:d0: 90:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E5:B1:4D:77:DD:C1:F0:C4:2E:69:8C:61:62:AF:09:6F:38:1F:9C X509v3 Authority Key Identifier: keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:88:96:3c:c0:11:63:61:ed:f0:ec:85:79:63:28:15:f4:31: 46:bf:6a:a1:f0:d8:2b:8a:9a:92:a9:2b:59:78:4f:53:8b:4e: 7a:33:e7:2f:b4:91:b6:01:9f:2d:1b:dd:a2:f7:f2:d9:16:0d: 8a:f7:8a:11:a2:bb:6b:d4:b9:d8:d0:e8:bd:ac:93:a4:28:65: 23:46:ea:42:46:32:61:d9:22:ae:b6:e0:2d:aa:6b:71:c5:19: 04:fc:cc:ec:4e:4f:67:9b:c5:b2:73:c6:e2:5e:5f:26:14:d9: 0b:a9:61:af:3d:5b:f3:9f:98:dc:68:18:76:29:90:dd:ce:d1: e0:9b:c8:21:fc:85:c0:f8:d8:b4:db:6b:76:79:f0:b6:8e:8c: 6c:c9:e4:cb:12:23:9d:17:9c:17:85:cc:c4:51:dd:37:bf:e6: 2f:4b:84:b6:ae:56:24:1f:37:d4:1f:43:d3:16:f1:01:bf:f5: 64:ee:22:7a:fa:bb:1e:81:65:67:ae:aa:58:2f:91:48:8f:0e: 5c:06:3f:ff:f5:38:a1:d9:71:ff:63:fd:0a:c4:81:02:14:b7: 9e:41:9a:2b:ec:b4:44:40:ce:1b:55:75:d0:68:b3:20:df:2e: 48:02:68:03:d8:d0:72:57:af:50:ff:39:9a:32:73:d7:3d:c9: aa:b4:0a:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1 NkU3NUM1NDMwHhcNMjUwNTMxMDA0ODM0WhcNMjUwNjA3MDA0ODM0WjAYMRYwFAYD VQQDEw02ODNhNTFlMi0yOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvroS5srIlXMFT40yN3+ejvYL3tJSJc2nqURBOxqcxQ+9MNiUjL2pehZ+1/wW vAQAYlne5J9WUocO/sgZOcUtQcGLc7Sr2PN/HcAZd0GStrFFWNftnf/2W+K7Icdv o0iV3bwmPpoIxABRQ77WOClGCeBd85AXqmwF+paS7VMPMXc1YWWxcGFg9qdejAYy RTU9t8TlaWHJDX9Fghgld168o5tYL/X675fw322t9t3O0zQZ5YBTn/bi0MkIMGrT f0o1jo24h+4WnJm4JgG6enPIe28xgMgmdsqslInh4FJRqjXVi4h2wAVpcOHD58hg rrLcj95SV0ro/MlBxci9rNCQYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDlsU13 3cHwxC5pjGFirwlvOB+cMB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3 REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKiJY8wBFjYe3w7IV5YygV9DFGv2qh8NgripqSqStZeE9Ti056M+cv tJG2AZ8tG92i9/LZFg2K94oRortr1LnY0Oi9rJOkKGUjRupCRjJh2SKutuAtqmtx xRkE/MzsTk9nm8Wyc8biXl8mFNkLqWGvPVvzn5jcaBh2KZDdztHgm8gh/IXA+Ni0 22t2efC2joxsyeTLEiOdF5wXhczEUd03v+YvS4S2rlYkHzfUH0PTFvEBv/Vk7iJ6 +rsegWVnrqpYL5FIjw5cBj//9Tih2XH/Y/0KxIECFLeeQZor7LREQM4bVXXQaLMg 3y5IAmgD2NByV69Q/zmaMnPXPcmqtAps -----END CERTIFICATE-----Generated at Sat May 31 17:18:54 2025 by rpki-client