$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json) Hash identifier: 2XtgcFjWydjKrpg+Qf3kl34f67p1Y/omTjItv/TC4oQ= Subject key identifier: BC:F1:69:D3:84:DD:11:C4:47:A6:6F:22:C9:AA:05:86:F4:7D:44:B2 Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft Manifest number: 013F Signing time: Tue 13 May 2025 04:05:23 +0000 Manifest this update: Tue 13 May 2025 04:05:22 +0000 Manifest next update: Tue 20 May 2025 04:05:22 +0000 Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: n14LFy6DdACju96OEfergLuKmb4mg3JfxYR/LUZXpUQ=) 2: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: 28Pcqodr/XiyCXR1rm1sG8vgE+8OCqXnMRTKbKZwlik=) 3: CEB166C0E47D11EFAFC6496FC4F9AE02.roa (hash: DZtIXQ1ghN4hCYJ+ctwT88CELrMnqgkRwXBOtM2ymVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: May 13 04:05:22 2025 GMT Not After : May 20 04:05:22 2025 GMT Subject: CN=6822c502-1956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:27:66:c7:2b:7e:cd:59:b5:04:3f:12:44: 71:e6:9d:c6:77:71:eb:ac:d5:ab:17:6e:9f:70:6e: 59:2a:59:5e:55:97:4f:e8:5e:22:83:90:8e:f2:bf: f8:81:ec:9c:45:dd:b9:5c:13:8f:46:84:c9:3d:80: 9d:bf:09:d7:90:b3:65:54:85:df:fa:95:d0:06:03: a1:8b:34:78:ad:56:b1:34:be:05:57:31:0d:55:d3: d4:a5:70:1a:7a:d3:cf:ed:4b:89:00:3b:bc:ca:93: 8e:6f:c1:ca:b0:8e:e0:fe:bb:c3:ff:b4:8d:3d:1b: 48:f7:05:66:e6:c8:35:81:a8:8a:0e:ec:ae:8b:d4: f6:1d:f3:8e:e0:91:34:0c:0b:82:02:43:7b:e8:f8: 53:5e:db:c1:85:89:36:f9:e6:90:b2:65:54:af:72: a8:82:74:ae:e9:bc:70:2c:49:51:12:ad:af:1d:1a: fd:02:4e:c7:d2:d9:ac:13:32:37:fd:38:23:88:43: 7a:dd:4a:6b:8f:a7:ab:2b:68:13:80:69:60:87:92: e3:a8:2a:5c:38:de:6b:c4:1f:8b:a4:ad:71:ad:ee: 85:0a:cf:64:6a:60:2e:d7:ed:31:57:8b:96:15:65: b2:d7:97:9c:5b:5f:d1:99:c2:75:9e:57:6a:16:f9: e4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F1:69:D3:84:DD:11:C4:47:A6:6F:22:C9:AA:05:86:F4:7D:44:B2 X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9e:ed:92:8c:87:8a:0e:37:ae:3a:2c:e4:fa:c7:2f:65:2a: ca:ad:e3:d2:e8:ba:8a:87:b8:04:76:83:fd:7f:2a:29:6e:e0: 2f:d0:77:6b:54:98:39:53:c4:ae:ab:f5:01:00:f4:61:39:23: f9:05:5f:47:a1:c2:43:19:21:01:c1:f3:5e:3d:3f:ea:db:60: fa:ce:d5:58:e8:22:f2:dc:da:81:47:58:af:12:67:d9:f3:bb: 83:ed:66:d2:bf:cc:14:80:78:ed:bd:37:0a:09:c0:7e:e9:08: e1:04:63:1a:2e:cd:a6:05:b9:12:b3:ed:65:58:d9:ad:e5:c8: 33:f0:08:b7:fd:75:8e:03:34:57:39:ae:7f:73:71:12:ee:ad: 7e:5c:8f:2a:6e:c2:d4:87:3f:9f:ae:91:e4:d5:45:bd:7f:ae: dd:06:e1:25:83:46:9f:46:16:02:a8:c2:9e:43:78:7a:89:29: bc:b4:ee:1d:d6:f2:3b:e2:c1:16:cb:ce:8f:fa:5f:d8:ab:de: 07:22:21:12:a0:52:cb:24:01:97:86:62:d7:39:13:5c:7c:12: 5d:8b:1a:ba:f5:ea:69:11:46:ca:af:d5:94:fa:e8:56:ed:7c: 92:4e:17:1f:84:e6:bf:5e:65:43:b7:8d:ca:36:e0:46:53:f7: 07:ea:45:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjUwNTEzMDQwNTIyWhcNMjUwNTIwMDQwNTIyWjAYMRYwFAYD VQQDEw02ODIyYzUwMi0xOTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZwnZscrfs1ZtQQ/EkRx5p3Gd3HrrNWrF26fcG5ZKlleVZdP6F4ig5CO8r/4 geycRd25XBOPRoTJPYCdvwnXkLNlVIXf+pXQBgOhizR4rVaxNL4FVzENVdPUpXAa etPP7UuJADu8ypOOb8HKsI7g/rvD/7SNPRtI9wVm5sg1gaiKDuyui9T2HfOO4JE0 DAuCAkN76PhTXtvBhYk2+eaQsmVUr3KognSu6bxwLElREq2vHRr9Ak7H0tmsEzI3 /TgjiEN63Uprj6erK2gTgGlgh5LjqCpcON5rxB+LpK1xre6FCs9kamAu1+0xV4uW FWWy15ecW1/RmcJ1nldqFvnksQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzxadOE 3RHER6ZvIsmqBYb0fUSyMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ TVFoQ3lWVmtCUmRUM3JBb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCanu2SjIeKDjeuOizk+scvZSrKrePS6LqKh7gEdoP9fyopbuAv0Hdr VJg5U8Suq/UBAPRhOSP5BV9HocJDGSEBwfNePT/q22D6ztVY6CLy3NqBR1ivEmfZ 87uD7WbSv8wUgHjtvTcKCcB+6QjhBGMaLs2mBbkSs+1lWNmt5cgz8Ai3/XWOAzRX Oa5/c3ES7q1+XI8qbsLUhz+frpHk1UW9f67dBuElg0afRhYCqMKeQ3h6iSm8tO4d 1vI74sEWy86P+l/Yq94HIiESoFLLJAGXhmLXORNcfBJdixq69eppEUbKr9WU+uhW 7XySThcfhOa/XmVDt43KNuBGU/cH6kXP -----END CERTIFICATE-----Generated at Tue May 13 11:43:00 2025 by rpki-client