$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: mnErBPTD127PAp2//KWSQ3OY3UmwiYgJtx8XBzfu2ME= Subject key identifier: 2E:2D:94:47:2D:DF:B1:37:43:37:BF:81:F2:14:B1:F6:36:E0:35:37 Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: 0122 Signing time: Tue 13 May 2025 03:57:16 +0000 Manifest this update: Tue 13 May 2025 03:57:15 +0000 Manifest next update: Tue 20 May 2025 03:57:15 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: t8kwb7Tc0MpM9G9nJrO0CWK9aMDC19UIwqXpGUYwGqs=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: SUwPdVpyD78LluiuQbCbX3WP+GiH5YDeeAZtixdrMe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: May 13 03:57:15 2025 GMT Not After : May 20 03:57:15 2025 GMT Subject: CN=6822c31c-f7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:bf:9c:a8:97:c5:b8:31:02:fd:66:4d:01: 33:31:97:f4:a5:a6:cd:0c:66:7e:4c:44:11:87:dc: 85:22:82:84:f4:ba:c2:4c:38:14:df:3e:ba:a2:96: 89:fb:7e:9e:6c:09:dc:cd:86:3c:6c:1e:c7:bd:69: d3:24:90:58:77:3d:15:f7:70:46:de:d1:82:fa:6f: 46:8b:98:21:7d:ad:d8:31:d7:8f:88:be:04:58:6f: e4:52:9a:02:db:06:e9:ce:d5:cd:04:23:dc:f4:28: 6a:2b:7b:1f:d1:9d:7f:e0:88:32:f3:dd:7d:c6:2e: 79:c2:64:29:27:d1:92:5e:b4:8f:33:00:dc:bb:75: 1d:5b:14:e6:ef:2d:0b:73:2f:c4:ff:bf:2b:1f:bc: 8b:a8:72:f0:7b:2e:ea:d7:ef:00:9c:ca:c2:8c:25: a9:d9:33:18:7c:44:9a:3e:22:29:92:38:e2:f6:df: 4a:6a:9d:24:ca:b0:ae:24:11:15:1c:9d:0f:d5:22: e1:31:00:5a:26:b5:38:96:ea:37:71:21:f9:74:02: 81:9c:6a:93:e5:ed:ee:31:49:48:bd:2f:48:9f:b9: 40:79:c7:1c:1b:c5:6f:50:25:c2:b4:09:59:ab:c7: 0c:0b:d2:b9:a1:f2:b2:b7:69:50:60:04:8c:a2:b3: b6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2D:94:47:2D:DF:B1:37:43:37:BF:81:F2:14:B1:F6:36:E0:35:37 X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:56:6b:be:bb:f7:8f:e8:79:75:94:a4:9e:cf:83:17:75:23: f3:25:37:f6:fa:54:26:53:62:6f:69:8f:87:be:1a:b6:14:e5: 10:ec:ee:90:0d:c6:ee:3f:e5:3e:b8:04:54:3b:ec:81:db:0f: 71:d3:17:b0:0b:04:82:ed:c3:19:d5:a1:be:6b:80:c4:f3:93: 07:fa:ce:d9:9a:7b:55:9f:0d:9f:49:30:0a:1e:bc:68:f5:60: 16:5d:88:78:22:96:d5:aa:95:b5:55:32:f9:f0:f1:a7:cc:87: 58:7e:aa:c3:47:99:2b:f8:05:ed:9c:3d:52:d4:b8:09:54:53: 10:d0:04:b4:ea:2b:96:c4:c8:82:d4:da:5c:9c:4b:39:4f:0d: 9d:f8:08:f3:18:6d:7f:27:e3:87:d4:07:d5:eb:d3:c8:55:5e: 05:4b:71:12:67:b5:df:72:1a:6f:b0:73:f2:45:54:8e:29:62: 36:d2:f8:9a:09:1d:7b:c5:25:29:60:fb:3f:0f:f9:47:90:b6: 18:fb:5a:27:2f:58:1c:01:26:b6:b3:7f:0b:2e:a6:b8:58:06: 36:41:87:2d:9a:ec:ab:de:27:87:ba:2b:ff:29:28:4f:ae:0f: 3f:6f:f4:87:62:d0:7c:ce:21:e4:2c:6b:55:b8:c7:f6:07:c3: 81:93:e2:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2 MUFFNjcxQzkwHhcNMjUwNTEzMDM1NzE1WhcNMjUwNTIwMDM1NzE1WjAYMRYwFAYD VQQDEw02ODIyYzMxYy1mN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg+/nKiXxbgxAv1mTQEzMZf0pabNDGZ+TEQRh9yFIoKE9LrCTDgU3z66opaJ +36ebAnczYY8bB7HvWnTJJBYdz0V93BG3tGC+m9Gi5ghfa3YMdePiL4EWG/kUpoC 2wbpztXNBCPc9ChqK3sf0Z1/4Igy8919xi55wmQpJ9GSXrSPMwDcu3UdWxTm7y0L cy/E/78rH7yLqHLwey7q1+8AnMrCjCWp2TMYfESaPiIpkjji9t9Kap0kyrCuJBEV HJ0P1SLhMQBaJrU4luo3cSH5dAKBnGqT5e3uMUlIvS9In7lAecccG8VvUCXCtAlZ q8cMC9K5ofKyt2lQYASMorO2ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4tlEct 37E3Qze/gfIUsfY24DU3MB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5 N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB eVRCRGRPNkI5ZUpocm1jY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQVmu+u/eP6Hl1lKSez4MXdSPzJTf2+lQmU2JvaY+Hvhq2FOUQ7O6Q DcbuP+U+uARUO+yB2w9x0xewCwSC7cMZ1aG+a4DE85MH+s7ZmntVnw2fSTAKHrxo 9WAWXYh4IpbVqpW1VTL58PGnzIdYfqrDR5kr+AXtnD1S1LgJVFMQ0AS06iuWxMiC 1NpcnEs5Tw2d+AjzGG1/J+OH1AfV69PIVV4FS3ESZ7XfchpvsHPyRVSOKWI20via CR17xSUpYPs/D/lHkLYY+1onL1gcASa2s38LLqa4WAY2QYctmuyr3ieHuiv/KShP rg8/b/SHYtB8ziHkLGtVuMf2B8OBk+Ib -----END CERTIFICATE-----Generated at Wed May 14 11:30:48 2025 by rpki-client