$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft File: 05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json) Hash identifier: BxwvIoVuH1Ms9bo6S2+2MM4Hbov46Cx8S5R4Pm+oKE8= Subject key identifier: 01:05:74:08:63:7B:AA:4C:68:63:3A:21:84:28:4A:97:56:35:2B:BE Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE Certificate issuer: /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft Manifest number: 0151 Signing time: Tue 01 Jul 2025 04:36:44 +0000 Manifest this update: Tue 01 Jul 2025 04:36:43 +0000 Manifest next update: Tue 08 Jul 2025 04:36:43 +0000 Files and hashes: 1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: bI6OUb7wCpO+81DJB29sZpFV4cEBhLMWl6dRiv2I2mU=) 2: A4FC1E34519311EE85CE2811C4F9AE02.roa (hash: qeJWAX6cW8g+xhKRaW5Fw41h91VMY7XDGYvJyjy3HwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BE2, serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Validity Not Before: Jul 1 04:36:43 2025 GMT Not After : Jul 8 04:36:43 2025 GMT Subject: CN=686365dc-44aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:54:df:f5:fd:75:9c:ee:ef:a2:7b:8c:2e: 4f:70:76:50:0d:31:4b:32:dd:d2:00:9c:4c:bb:1c: cf:df:fe:ea:b9:2c:c1:dd:9b:1b:2a:05:9f:63:9a: 4d:7c:9c:d9:60:54:ff:32:44:35:17:3f:38:2c:03: f1:b2:a9:28:8b:67:94:16:5c:22:be:1d:66:4c:94: 10:2d:ea:b0:9d:a7:f6:42:58:33:6a:76:f4:e8:db: 6a:e7:a8:17:38:3d:2f:d7:f5:82:7e:80:2c:84:22: 1a:0c:7d:e1:90:4f:2f:bc:27:6e:01:ba:f5:ee:8b: b8:f6:eb:ad:9f:0f:bd:9d:a4:41:25:ab:e4:3e:6b: 14:ee:c0:dd:55:80:31:e5:c5:50:81:17:a1:a6:ef: 74:95:56:39:d2:a2:c8:a6:81:35:b1:a5:0e:1a:ce: b0:62:43:67:20:32:72:2d:55:2d:df:05:43:dc:f8: c2:82:3b:ac:3c:3d:3c:11:0f:a6:ad:55:5d:49:e2: 7f:bc:42:c1:cf:57:bd:27:3c:8b:4a:f0:41:9d:47: 38:71:91:21:b6:08:72:46:04:25:e4:2d:b5:a1:a2: 63:f6:5e:2f:e5:aa:91:c4:1c:21:1f:3b:b3:88:1c: 37:4c:c4:58:f2:d9:2f:24:73:da:2d:72:5c:e0:73: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:05:74:08:63:7B:AA:4C:68:63:3A:21:84:28:4A:97:56:35:2B:BE X509v3 Authority Key Identifier: keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a6:c9:b4:63:dd:9a:73:5f:7d:ad:3d:70:8f:6a:8d:87:53: b0:b8:ff:ef:ba:56:c0:ae:83:ef:be:e9:ce:a3:d9:62:b6:2a: 17:7a:d5:df:0e:93:a8:63:50:2c:2f:6a:8c:32:05:f2:d4:cd: ae:fd:28:62:06:50:35:0f:fb:39:af:93:ab:8a:42:8f:45:04: ff:d0:66:30:cc:33:a6:c8:ff:41:e6:d6:5e:e7:91:e8:4c:bf: b1:2f:27:4c:02:7d:fb:6b:c8:f1:6a:82:71:c7:90:34:17:56: 6c:fa:da:8b:8c:07:3f:1d:49:41:ac:36:b1:7d:a6:6e:3c:87: 50:95:7f:78:35:b4:79:dc:1b:de:6a:35:bb:ed:22:5f:9f:5b: 4c:2d:19:e6:7d:ec:2c:b6:dd:43:dc:bb:c6:b9:b3:d8:18:60: 91:f1:65:6b:d1:70:0c:8d:b9:7e:53:62:23:1e:dc:4d:d1:5f: 4f:02:1b:13:e1:d3:37:dd:9c:26:89:a0:07:a6:d1:92:cc:96: 55:8f:ab:63:5b:aa:76:12:34:e6:b4:45:78:39:b8:90:d7:4f: 82:e2:fd:f9:07:db:e0:85:e5:04:58:5b:71:2a:17:fe:eb:8a: bb:6e:ea:41:97:ca:5b:f6:8c:68:6a:6c:1c:2e:df:64:df:ba: 3b:fd:c7:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCRTIxMTAvBgNVBAUTKEQzOUExMEU2MUE4Q0E5NTA0RURCMTU0ODY5MzZCMzc3 NDNBMjREQ0UwHhcNMjUwNzAxMDQzNjQzWhcNMjUwNzA4MDQzNjQzWjAYMRYwFAYD VQQDEw02ODYzNjVkYy00NGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTVU3/X9dZzu76J7jC5PcHZQDTFLMt3SAJxMuxzP3/7quSzB3ZsbKgWfY5pN fJzZYFT/MkQ1Fz84LAPxsqkoi2eUFlwivh1mTJQQLeqwnaf2Qlgzanb06Ntq56gX OD0v1/WCfoAshCIaDH3hkE8vvCduAbr17ou49uutnw+9naRBJavkPmsU7sDdVYAx 5cVQgRehpu90lVY50qLIpoE1saUOGs6wYkNnIDJyLVUt3wVD3PjCgjusPD08EQ+m rVVdSeJ/vELBz1e9JzyLSvBBnUc4cZEhtghyRgQl5C21oaJj9l4v5aqRxBwhHzuz iBw3TMRY8tkvJHPaLXJc4HMxaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEFdAhj e6pMaGM6IYQoSpdWNSu+MB8GA1UdIwQYMBaAFNOaEOYajKlQTtsVSGk2s3dDok3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJFMi82Q0I5QTk2NjUx OTIxMUVFQjkwQTMzMEJDNEY5QUUwMi8wNW9RNWhxTXFWQk8yeFZJYVRhemQwT2lU YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1b1E1aHFNcVZCTzJ4VklhVGF6ZDBPaVRjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJFMi82Q0I5QTk2NjUxOTIxMUVFQjkwQTMzMEJDNEY5QUUwMi8wNW9RNWhxTXFW Qk8yeFZJYVRhemQwT2lUYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMpsm0Y92ac199rT1wj2qNh1OwuP/vulbAroPvvunOo9litioXetXf DpOoY1AsL2qMMgXy1M2u/ShiBlA1D/s5r5OrikKPRQT/0GYwzDOmyP9B5tZe55Ho TL+xLydMAn37a8jxaoJxx5A0F1Zs+tqLjAc/HUlBrDaxfaZuPIdQlX94NbR53Bve ajW77SJfn1tMLRnmfewstt1D3LvGubPYGGCR8WVr0XAMjbl+U2IjHtxN0V9PAhsT 4dM33ZwmiaAHptGSzJZVj6tjW6p2EjTmtEV4ObiQ10+C4v35B9vgheUEWFtxKhf+ 64q7bupBl8pb9oxoamwcLt9k37o7/cdh -----END CERTIFICATE-----Generated at Thu Jul 3 01:07:54 2025 by rpki-client