$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json) Hash identifier: INfqGAOBm5+hoGuuuCruVC3FDNz9FFyAppvbHjHFpuk= Subject key identifier: F6:B2:D4:25:0E:17:6A:84:FC:ED:50:D1:55:8A:51:8D:F9:AF:97:23 Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft Manifest number: 0309 Signing time: Sun 11 May 2025 00:47:53 +0000 Manifest this update: Sun 11 May 2025 00:47:53 +0000 Manifest next update: Sun 18 May 2025 00:47:53 +0000 Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: zDfRnUrcsG7VagqhOgVoQBuae9q1kF2kDX/M45MM7uU=) 2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: Dao3wjzPku/52BEDR9fs3d2J0BLa408frm3MMRpd2w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Validity Not Before: May 11 00:47:53 2025 GMT Not After : May 18 00:47:53 2025 GMT Subject: CN=681ff3b9-05ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:7a:0c:5a:d3:a4:8f:99:0d:4d:9a:41:dc:72: 15:47:a6:6e:f8:ce:f1:8c:dd:e0:d6:ce:26:57:e5: 13:f0:9b:1f:9a:90:64:99:5f:b5:75:8f:11:04:6b: 01:3e:f7:41:c0:ec:8e:f5:39:77:b6:6c:dc:63:4d: f4:48:45:37:22:9d:b1:61:b2:2d:1c:84:6f:0d:f3: 5f:5f:c0:cb:29:63:70:5e:59:45:6e:8f:a7:9e:8f: 30:fb:40:81:6b:d6:56:f8:e5:1a:55:40:0a:30:17: 45:72:48:a5:a2:cc:d8:c9:d1:e4:7c:b8:0a:64:1e: 7e:9a:4e:c7:35:0d:0d:e3:4e:cd:37:3e:0b:34:71: 63:84:56:ec:56:ff:7a:c3:1b:35:7a:ed:fe:ba:ab: 45:92:0a:39:74:b0:c2:f5:a4:61:a7:3c:27:a9:4a: 25:90:b8:61:22:63:b8:2e:6d:c5:40:15:ec:00:5e: 6b:4d:d3:ed:5e:35:86:91:b0:1f:c2:1c:dd:5d:4f: 6e:a6:ed:4f:12:6b:f5:1e:79:20:6d:07:45:f2:5e: 31:d8:3e:2b:c7:8f:f7:43:cb:0d:6d:fd:e2:5b:8e: 3d:15:5e:8f:82:a3:af:e9:e9:81:5c:97:57:92:53: dd:a5:62:ec:12:1c:6f:d4:fe:0b:d1:3c:cb:66:d6: 72:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B2:D4:25:0E:17:6A:84:FC:ED:50:D1:55:8A:51:8D:F9:AF:97:23 X509v3 Authority Key Identifier: keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d4:bf:05:5a:bf:47:a6:55:31:b7:20:11:2a:3d:99:2a:5f: cc:9e:ba:ef:39:22:c3:68:ef:c6:d4:cb:16:0d:fc:51:26:4e: 6d:86:e0:0b:92:72:93:69:72:cd:c7:e6:65:48:cf:33:af:06: 48:1e:65:81:6e:28:3a:c4:89:46:9e:02:27:cc:25:cd:bb:af: 27:a3:3e:9b:7f:df:77:c3:bd:aa:4c:9c:e6:b7:55:65:7c:85: e0:5c:ca:f6:62:29:d3:6c:95:c2:40:45:fa:36:a0:1f:da:76: c0:ea:37:88:2c:43:d0:38:a6:42:ce:27:9e:cd:db:25:59:d8: 0c:b8:52:c1:ef:c3:8d:7b:80:a9:11:c7:f9:53:0f:0b:e3:31: 18:f7:a4:65:de:3f:18:99:8f:60:27:a3:91:a4:f2:b1:d9:16: 25:5c:0a:7b:d7:63:a7:e5:5a:7b:6c:1c:ac:e9:5b:d1:79:ff: a7:2d:18:86:2e:f6:8d:53:f1:b0:f4:8f:88:ad:88:b6:0c:ad: d6:6e:16:35:60:54:21:22:04:4e:af:45:c5:3f:17:a1:a5:e5: 03:aa:77:0f:8a:6d:a6:b1:1b:ec:76:5a:95:1e:76:2d:dc:bf: 76:55:b1:63:9d:21:a5:4d:cf:90:39:46:58:c0:36:8f:42:5b: 62:10:02:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERjUxMTAvBgNVBAUTKEE1NzBGMzcwRDU0RUQwMjQ1NEM1N0Y4M0VFQzNFNEY0 NEE3QThCNzYwHhcNMjUwNTExMDA0NzUzWhcNMjUwNTE4MDA0NzUzWjAYMRYwFAYD VQQDEw02ODFmZjNiOS0wNWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+noMWtOkj5kNTZpB3HIVR6Zu+M7xjN3g1s4mV+UT8JsfmpBkmV+1dY8RBGsB PvdBwOyO9Tl3tmzcY030SEU3Ip2xYbItHIRvDfNfX8DLKWNwXllFbo+nno8w+0CB a9ZW+OUaVUAKMBdFckiloszYydHkfLgKZB5+mk7HNQ0N407NNz4LNHFjhFbsVv96 wxs1eu3+uqtFkgo5dLDC9aRhpzwnqUolkLhhImO4Lm3FQBXsAF5rTdPtXjWGkbAf whzdXU9upu1PEmv1HnkgbQdF8l4x2D4rx4/3Q8sNbf3iW449FV6PgqOv6emBXJdX klPdpWLsEhxv1P4L0TzLZtZyvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPay1CUO F2qE/O1Q0VWKUY35r5cjMB8GA1UdIwQYMBaAFKVw83DVTtAkVMV/g+7D5PRKeot2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURGNS9DMjQwQjc5NEQx NDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBDUlV4WC1EN3NQazlFcDZp M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYRHpjTlZPMENSVXhYLUQ3c1BrOUVwNmkzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURGNS9DMjQwQjc5NEQxNDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBD UlV4WC1EN3NQazlFcDZpM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp1L8FWr9HplUxtyARKj2ZKl/MnrrvOSLDaO/G1MsWDfxRJk5thuAL knKTaXLNx+ZlSM8zrwZIHmWBbig6xIlGngInzCXNu68noz6bf993w72qTJzmt1Vl fIXgXMr2YinTbJXCQEX6NqAf2nbA6jeILEPQOKZCzieezdslWdgMuFLB78ONe4Cp Ecf5Uw8L4zEY96Rl3j8YmY9gJ6ORpPKx2RYlXAp712On5Vp7bBys6VvRef+nLRiG LvaNU/Gw9I+IrYi2DK3WbhY1YFQhIgROr0XFPxehpeUDqncPim2msRvsdlqVHnYt 3L92VbFjnSGlTc+QOUZYwDaPQltiEAL2 -----END CERTIFICATE-----Generated at Mon May 12 12:33:26 2025 by rpki-client