$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json) Hash identifier: FT54xROSC2WJM+W0wB2wQ8ZCG0rYppZkmMToTs03Z44= Subject key identifier: CA:CF:6D:4D:97:29:B5:FB:91:63:21:61:81:CC:0E:D0:99:4B:F8:28 Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Certificate serial: 0C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft Manifest number: 0C3C Signing time: Fri 16 May 2025 18:52:41 +0000 Manifest this update: Fri 16 May 2025 18:52:41 +0000 Manifest next update: Fri 23 May 2025 18:52:41 +0000 Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: +6sS3jKaJ/rjqhgSUCkScIxdpIxV5q1MO74f90M0klg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Validity Not Before: May 16 18:52:41 2025 GMT Not After : May 23 18:52:41 2025 GMT Subject: CN=68278979-09be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:ca:90:f0:96:3e:3f:bc:38:7b:69:35:5d: 9f:a5:6a:da:84:7c:2c:87:fa:a6:df:cf:fb:49:71: b0:91:c5:49:e0:29:39:05:6d:d9:54:38:31:8b:ac: 5e:ff:ed:b0:9d:91:84:fa:f7:dd:65:64:d2:65:a0: d2:26:01:cd:dd:f5:85:1d:f0:a3:5b:15:8a:11:cf: d7:73:ad:36:35:03:17:ea:84:77:39:5b:a0:9d:8d: 19:5b:f3:82:46:11:0a:fb:6b:ed:64:54:0a:d1:a1: fa:ef:ff:1f:a1:02:44:ba:d3:6d:6c:5c:32:29:08: 02:29:b4:0f:a5:4c:3e:81:4d:9a:bb:a2:1b:ad:2f: ec:3b:e8:fc:29:8b:e9:0c:52:3a:03:fa:f8:b0:e6: f9:5b:35:21:b7:2f:57:73:3b:72:62:74:0c:ac:85: 17:c0:e1:7e:d2:28:a0:31:4a:0b:f2:02:9f:3d:0e: fd:e0:11:01:6c:36:d3:e5:86:66:c9:cb:d6:01:07: eb:76:a7:8f:b5:99:29:21:ed:93:f7:19:19:93:90: 3e:a3:e6:11:ef:a7:c2:4b:c1:7a:f5:bb:9d:7c:26: 0a:21:f6:a5:11:3c:e1:d0:f0:35:05:68:85:03:61: bc:6e:36:3e:3f:5e:c4:52:cd:51:3c:f9:f6:4f:44: a2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CF:6D:4D:97:29:B5:FB:91:63:21:61:81:CC:0E:D0:99:4B:F8:28 X509v3 Authority Key Identifier: keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b8:30:03:89:74:7f:93:56:dd:67:33:9c:17:f7:1e:5c:c9: 03:58:0b:d9:30:73:e6:38:cb:75:e3:ed:02:d5:de:6d:12:e4: 85:8d:7c:d3:27:fb:4b:00:4e:44:69:c8:9b:1c:3d:51:a6:45: 1e:7e:ab:9a:2d:8d:a7:58:97:0f:b0:da:28:f4:13:ea:de:8e: 2c:03:fc:46:74:6d:18:f9:5d:c5:a7:91:a7:86:51:88:ed:57: 99:ad:63:72:64:5b:b2:da:fc:d2:f8:94:1e:af:82:5f:d4:2d: 60:ec:c6:63:36:5a:20:f2:20:f6:ff:70:47:99:ec:5d:15:15: 67:0e:15:9e:ff:f3:a0:46:b2:1c:8e:89:3e:e7:30:61:1b:c0: 1b:d3:18:42:5c:a1:16:fb:7d:79:da:fc:ad:c8:73:ea:73:14: dc:91:6f:7b:a7:b7:f2:9f:8c:18:2c:17:60:43:a4:72:4b:39: 02:1d:57:59:1d:83:10:85:d7:3b:5c:b9:c6:63:3a:4d:0a:37: 3f:40:84:40:f3:0f:04:fc:f8:76:27:be:d1:7f:a0:44:63:43: cc:89:4c:d7:99:c0:53:58:e9:73:88:28:90:f2:10:7a:0e:e2: 13:44:cb:19:23:1d:89:89:ba:fc:8f:6a:e1:b7:46:0a:ea:26: f1:af:13:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMTAxMTAvBgNVBAUTKDZDMDVFRUFGM0Y2ODcwNDFENTlBNDlCQTE3MDlCODMw MzJCNzRDREMwHhcNMjUwNTE2MTg1MjQxWhcNMjUwNTIzMTg1MjQxWjAYMRYwFAYD VQQDEw02ODI3ODk3OS0wOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdTKkPCWPj+8OHtpNV2fpWrahHwsh/qm38/7SXGwkcVJ4Ck5BW3ZVDgxi6xe /+2wnZGE+vfdZWTSZaDSJgHN3fWFHfCjWxWKEc/Xc602NQMX6oR3OVugnY0ZW/OC RhEK+2vtZFQK0aH67/8foQJEutNtbFwyKQgCKbQPpUw+gU2au6IbrS/sO+j8KYvp DFI6A/r4sOb5WzUhty9XcztyYnQMrIUXwOF+0iigMUoL8gKfPQ794BEBbDbT5YZm ycvWAQfrdqePtZkpIe2T9xkZk5A+o+YR76fCS8F69budfCYKIfalETzh0PA1BWiF A2G8bjY+P17EUs1RPPn2T0SiqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrPbU2X KbX7kWMhYYHMDtCZS/goMB8GA1UdIwQYMBaAFGwF7q8/aHBB1ZpJuhcJuDAyt0zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAxMC82QTdFOTQwQTBD M0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NFSFZta202RndtNE1ESzNU TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBWHVyejlvY0VIVm1rbTZGd200TURLM1ROdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAxMC82QTdFOTQwQTBDM0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NF SFZta202RndtNE1ESzNUTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDuDADiXR/k1bdZzOcF/ceXMkDWAvZMHPmOMt14+0C1d5tEuSFjXzT J/tLAE5EacibHD1RpkUefquaLY2nWJcPsNoo9BPq3o4sA/xGdG0Y+V3Fp5GnhlGI 7VeZrWNyZFuy2vzS+JQer4Jf1C1g7MZjNlog8iD2/3BHmexdFRVnDhWe//OgRrIc jok+5zBhG8Ab0xhCXKEW+3152vytyHPqcxTckW97p7fyn4wYLBdgQ6RySzkCHVdZ HYMQhdc7XLnGYzpNCjc/QIRA8w8E/Ph2J77Rf6BEY0PMiUzXmcBTWOlziCiQ8hB6 DuITRMsZIx2Jibr8j2rht0YK6ibxrxNW -----END CERTIFICATE-----Generated at Sat May 17 07:10:39 2025 by rpki-client