$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json) Hash identifier: ihmIn+QOm8hPPqq/kcxqelEWvwEpCz8hfMKeMTYGyec= Subject key identifier: 6A:28:2A:39:3B:E5:30:AE:13:C7:DF:EA:BA:90:1E:DF:B5:10:0B:9F Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39 Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft Manifest number: 0138 Signing time: Sat 31 May 2025 04:09:36 +0000 Manifest this update: Sat 31 May 2025 04:09:35 +0000 Manifest next update: Sat 07 Jun 2025 04:09:35 +0000 Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: sv8whn5I2BsNoc/XcQXf19ubns0w57GsfwFejXmP71M=) 2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: YwXGuIwLbAOZzPiPRemoc11a6IYzMpgzJQrMI7kN5fw=) 3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: NFu6vOIdrlQETQmdi2ziHOwoF9spOq/YA6DUc9jHTPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39 Validity Not Before: May 31 04:09:35 2025 GMT Not After : Jun 7 04:09:35 2025 GMT Subject: CN=683a8100-9fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:6e:e7:c7:fd:03:29:7b:05:48:45:28:88: 8a:a1:ad:b3:b9:0d:46:b9:c6:d7:ed:7d:88:a2:48: c8:60:42:94:12:0a:15:d5:81:38:43:45:d9:2a:5f: c7:5b:f9:ac:8c:a5:5d:77:e4:34:19:f6:4c:b9:cc: b4:2f:b8:02:1a:21:15:59:2e:6d:7b:11:c6:59:09: 7d:c8:ba:eb:26:44:0f:3d:19:9d:72:dc:94:27:fb: 0a:03:63:95:7c:26:02:a1:6c:ac:9e:ab:7e:d7:17: 35:f2:e5:d9:2a:fb:34:1e:d4:a6:03:a5:42:d4:e7: 36:10:3b:49:88:f0:f7:88:b4:03:73:05:d7:b0:c3: e3:85:cc:b7:57:84:be:42:84:46:20:77:75:64:0e: 2f:f5:14:2e:63:89:7c:71:92:17:8b:0f:be:9b:e2: 6a:d7:e9:05:fc:ca:a3:48:f8:61:2d:4e:ca:f3:c1: 67:2e:72:40:04:1a:22:5c:d7:ac:06:76:87:7e:bc: 05:8d:8c:e4:f0:36:0a:1b:ac:48:df:14:98:c4:08: e3:5a:b2:92:fb:4a:78:dc:4e:d1:3b:12:da:ac:89: e7:f1:c6:a6:24:5f:e3:c2:e0:64:09:85:e1:85:17: a3:56:46:a2:d2:aa:15:bc:1b:80:69:99:0d:dc:73: c5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:28:2A:39:3B:E5:30:AE:13:C7:DF:EA:BA:90:1E:DF:B5:10:0B:9F X509v3 Authority Key Identifier: keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:12:5e:8c:b5:79:d8:67:d8:5d:44:08:93:60:ae:aa:b5:5e: c7:b0:52:0d:d1:0b:f5:28:0a:59:be:37:27:0e:bb:1d:00:3a: 6f:89:16:55:09:a7:f5:62:0f:5f:29:5a:d5:88:0b:5e:ba:57: 87:92:e3:57:8e:c5:2d:9d:a5:88:ac:ce:a9:6f:c2:60:d3:26: 2e:d2:f9:82:b0:9d:42:ca:8f:93:63:03:58:26:6c:a9:e3:5a: f6:eb:e2:d5:7a:4b:64:5c:42:d3:4d:d2:28:be:83:c4:cf:52: 03:94:43:77:2a:cb:7a:08:a2:c0:0b:3a:07:a1:11:cb:55:56: ba:f8:a1:af:a3:5a:45:51:25:13:f4:5d:cf:86:5f:22:60:bd: fb:f3:94:e1:44:f1:19:35:51:d0:73:d1:a7:e0:29:5a:45:8e: 28:4c:f6:8e:52:0a:73:b3:87:d7:32:54:87:33:e7:01:18:76: fe:e0:53:bc:f0:f4:e4:3d:b9:b2:b6:6e:4e:1c:7a:9d:bc:3c: 8e:c9:92:13:28:49:e5:4e:55:5f:27:41:82:1a:9b:9a:91:1c: 97:46:94:d2:a5:43:b4:f8:f6:35:f5:d7:5d:97:20:5f:45:a8: 59:55:98:01:68:ef:a7:32:6f:22:1f:b6:c9:3f:9c:c3:1f:90: e7:e5:07:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVEOTMxMTAvBgNVBAUTKDcyRUYzMkRBRjRFODNGOTAxOTI5NjMyMDg3NEUzQjQ0 NTAwOEVDMzkwHhcNMjUwNTMxMDQwOTM1WhcNMjUwNjA3MDQwOTM1WjAYMRYwFAYD VQQDEw02ODNhODEwMC05ZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbZu58f9Ayl7BUhFKIiKoa2zuQ1GucbX7X2IokjIYEKUEgoV1YE4Q0XZKl/H W/msjKVdd+Q0GfZMucy0L7gCGiEVWS5texHGWQl9yLrrJkQPPRmdctyUJ/sKA2OV fCYCoWysnqt+1xc18uXZKvs0HtSmA6VC1Oc2EDtJiPD3iLQDcwXXsMPjhcy3V4S+ QoRGIHd1ZA4v9RQuY4l8cZIXiw++m+Jq1+kF/MqjSPhhLU7K88FnLnJABBoiXNes BnaHfrwFjYzk8DYKG6xI3xSYxAjjWrKS+0p43E7ROxLarInn8camJF/jwuBkCYXh hRejVkai0qoVvBuAaZkN3HPFEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGooKjk7 5TCuE8ff6rqQHt+1EAufMB8GA1UdIwQYMBaAFHLvMtr06D+QGSljIIdOO0RQCOw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUQ5My9BMzZDNjhGNDY4 QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1QVpLV01naDA0N1JGQUk3 RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N1OHkydlRvUDVBWktXTWdoMDQ3UkZBSTdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUQ5My9BMzZDNjhGNDY4QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1 QVpLV01naDA0N1JGQUk3RGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpEl6MtXnYZ9hdRAiTYK6qtV7HsFIN0Qv1KApZvjcnDrsdADpviRZV Caf1Yg9fKVrViAteuleHkuNXjsUtnaWIrM6pb8Jg0yYu0vmCsJ1Cyo+TYwNYJmyp 41r26+LVektkXELTTdIovoPEz1IDlEN3Kst6CKLACzoHoRHLVVa6+KGvo1pFUSUT 9F3Phl8iYL3785ThRPEZNVHQc9Gn4ClaRY4oTPaOUgpzs4fXMlSHM+cBGHb+4FO8 8PTkPbmytm5OHHqdvDyOyZITKEnlTlVfJ0GCGpuakRyXRpTSpUO0+PY19dddlyBf RahZVZgBaO+nMm8iH7bJP5zDH5Dn5Qfs -----END CERTIFICATE-----Generated at Sat May 31 14:59:33 2025 by rpki-client