$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: GaovirvKOTwMjupxIBojmDxwmeVjyGvZ3pk4Saoa1qA= Subject key identifier: D9:59:2B:23:B4:5E:ED:96:46:2C:29:61:92:F2:C9:9D:69:23:2F:64 Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 0481 Signing time: Sat 31 May 2025 00:15:23 +0000 Manifest this update: Sat 31 May 2025 00:15:22 +0000 Manifest next update: Sat 07 Jun 2025 00:15:22 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: 6zNueRWma3JixF+nuluW47XNQcdUA+tFPjkbs55GvVQ=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: DFm7D2HD21ulEvvyR2LKRVZi0MMQ+cGXUer0vQ5hcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: May 31 00:15:22 2025 GMT Not After : Jun 7 00:15:22 2025 GMT Subject: CN=683a4a1a-3d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d7:de:6d:1d:85:f1:18:0b:91:1e:7f:d1:07: 92:47:53:8e:62:d7:06:da:df:9f:14:81:ee:62:ab: 2a:6f:59:13:1e:8b:5c:18:f1:91:1d:6a:f3:92:15: 50:48:d7:30:25:04:b3:a8:7b:7d:a1:3f:fa:18:29: 80:2c:d3:8d:44:94:18:76:91:d3:2c:12:b0:7c:de: 60:5b:ef:1c:32:aa:c2:af:7a:ea:b9:03:99:2b:2d: a6:0a:1e:3d:3f:45:4c:be:9c:0e:6a:33:61:3a:2f: 35:7c:bf:27:70:e9:d1:d8:5a:7b:38:0e:80:70:b3: f5:a7:4c:55:d3:88:2b:82:d0:67:b2:b0:2f:5f:d1: 1a:4f:3b:07:b4:31:3b:08:86:9b:98:3f:b1:2f:dd: f4:d5:03:a1:c0:f4:13:b4:93:7f:b7:8b:1c:b1:f5: 0c:1b:f5:63:7f:c0:d6:84:a2:65:41:db:a8:e7:1e: e5:4f:86:d8:eb:04:ea:7d:0e:fb:5e:6c:14:f7:60: 57:2d:e1:aa:92:ba:1f:a6:f0:49:58:70:8c:b8:d8: 7e:aa:eb:77:f0:60:09:53:32:0a:39:20:e0:bf:0b: 18:15:ed:a3:05:61:a4:cf:52:2d:09:52:9a:57:37: 1a:26:bb:b4:f8:76:e2:5a:cd:bc:30:3c:ca:30:bb: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:59:2B:23:B4:5E:ED:96:46:2C:29:61:92:F2:C9:9D:69:23:2F:64 X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b6:53:61:eb:89:d2:80:6c:0d:11:25:1f:f4:7a:37:2f:ca: 93:a4:d2:2b:99:67:57:32:3a:e9:ef:49:cf:ac:ab:e5:7b:bc: 9d:0c:85:66:dd:8b:0e:95:75:c2:e3:df:0d:87:8b:8a:3b:3c: d5:45:1c:14:13:24:99:94:e7:d6:03:c2:a3:6c:da:f1:18:06: 1e:2c:01:f6:b6:9c:98:2b:e6:db:8d:32:e9:5f:99:b4:ba:43: 8f:bc:a5:8d:23:1e:4a:ca:9d:70:9f:6a:06:ea:f5:70:9b:94: af:68:b9:80:9a:22:cd:b4:e8:bf:d4:1a:be:be:e1:32:65:4e: 0d:81:5e:e8:a7:ac:44:cd:f4:bb:70:93:7b:ea:82:d1:9a:d0: 35:90:15:b1:45:21:02:ad:a0:cc:d7:03:97:a1:bb:39:57:82: f9:82:65:46:40:64:5d:0c:cf:43:dc:cc:e5:a0:15:0f:12:81: 9b:d6:2f:d3:5b:4d:4f:28:20:be:30:0f:02:9f:b1:80:36:eb: a0:93:11:d6:96:b7:d5:01:cc:8f:25:14:03:61:7b:ec:0a:84: ea:71:37:81:3f:51:7f:35:fa:27:ee:8e:5a:5b:7c:c9:64:fb: d9:0a:cf:62:fa:c7:d9:bd:1c:ce:cc:41:18:b9:49:df:02:ba: 49:7a:43:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjUwNTMxMDAxNTIyWhcNMjUwNjA3MDAxNTIyWjAYMRYwFAYD VQQDEw02ODNhNGExYS0zZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dfebR2F8RgLkR5/0QeSR1OOYtcG2t+fFIHuYqsqb1kTHotcGPGRHWrzkhVQ SNcwJQSzqHt9oT/6GCmALNONRJQYdpHTLBKwfN5gW+8cMqrCr3rquQOZKy2mCh49 P0VMvpwOajNhOi81fL8ncOnR2Fp7OA6AcLP1p0xV04grgtBnsrAvX9EaTzsHtDE7 CIabmD+xL9301QOhwPQTtJN/t4scsfUMG/Vjf8DWhKJlQduo5x7lT4bY6wTqfQ77 XmwU92BXLeGqkrofpvBJWHCMuNh+qut38GAJUzIKOSDgvwsYFe2jBWGkz1ItCVKa VzcaJru0+HbiWs28MDzKMLvS0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlZKyO0 Xu2WRiwpYZLyyZ1pIy9kMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+tlNh64nSgGwNESUf9Ho3L8qTpNIrmWdXMjrp70nPrKvle7ydDIVm 3YsOlXXC498Nh4uKOzzVRRwUEySZlOfWA8KjbNrxGAYeLAH2tpyYK+bbjTLpX5m0 ukOPvKWNIx5Kyp1wn2oG6vVwm5SvaLmAmiLNtOi/1Bq+vuEyZU4NgV7op6xEzfS7 cJN76oLRmtA1kBWxRSECraDM1wOXobs5V4L5gmVGQGRdDM9D3MzloBUPEoGb1i/T W01PKCC+MA8Cn7GANuugkxHWlrfVAcyPJRQDYXvsCoTqcTeBP1F/Nfon7o5aW3zJ ZPvZCs9i+sfZvRzOzEEYuUnfArpJekM1 -----END CERTIFICATE-----Generated at Sat May 31 17:01:17 2025 by rpki-client