$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft File: rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json) Hash identifier: Oq8NcVrCYrPc9OqMENjhr+T+N5bg1KPDAzf3Iu4YlYc= Subject key identifier: CD:9E:CB:28:CD:AD:38:6B:13:FA:66:92:18:7E:CA:E8:65:39:F8:46 Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 Certificate issuer: /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft Manifest number: 92 Signing time: Tue 13 May 2025 05:35:43 +0000 Manifest this update: Tue 13 May 2025 05:35:43 +0000 Manifest next update: Tue 20 May 2025 05:35:43 +0000 Files and hashes: 1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: YfiuutnZrt6n2MKWhAPgyPGbRNFBnrNVkxo0MYD/zPk=) 2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: Zq031S+vIKwvUtyaWGsL0NF/sqhKajdnHiA3MDn79EA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Validity Not Before: May 13 05:35:43 2025 GMT Not After : May 20 05:35:43 2025 GMT Subject: CN=6822da2f-ce9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:da:00:ed:8b:0f:1f:9a:d2:8f:86:8c:d9: 32:fb:a2:84:51:d9:ef:74:4c:de:ae:92:73:a4:eb: 94:20:71:f3:04:15:5f:37:0d:c7:00:f0:88:42:31: 0e:a4:db:bf:eb:9e:28:10:40:b7:63:0d:68:e5:08: cd:82:a2:88:69:c7:89:a9:76:d8:e2:ca:bc:b5:8f: fa:52:c3:96:1b:a9:18:71:84:6b:fd:03:31:aa:c6: 73:1d:8c:7c:8c:33:57:a1:ea:9a:0f:bf:c5:e7:0a: 4b:44:7a:e2:b8:5f:02:c9:a3:49:c4:95:f8:ec:6f: 8c:c8:93:b0:42:d9:e9:66:53:39:39:71:54:89:2d: 80:1b:cf:2d:42:6d:f7:d0:37:b3:55:01:34:8d:88: 01:2a:ae:53:f0:db:bd:94:69:6b:64:2d:5d:9a:2e: 90:df:a4:c0:dc:38:88:3b:c9:40:6e:97:b5:a3:83: 13:23:db:80:eb:ab:2e:6c:7a:4d:62:e8:64:29:ec: 9b:68:d6:ae:12:4c:b4:2d:e1:51:99:83:33:d8:a4: ee:f6:2b:6f:c4:2c:0a:1b:e3:54:b4:1b:65:70:ae: 16:e7:ff:18:d6:37:91:c9:a8:9c:23:bb:99:d7:dc: f0:56:5b:79:f5:79:6f:0a:40:3c:de:3c:ce:34:93: 52:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9E:CB:28:CD:AD:38:6B:13:FA:66:92:18:7E:CA:E8:65:39:F8:46 X509v3 Authority Key Identifier: keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ea:93:cb:40:dc:ca:8f:97:f0:8b:2f:af:04:cd:66:d7:ed: f4:c3:8a:e4:bf:b2:03:be:f2:19:3e:05:90:a4:30:e5:70:0f: 4c:74:18:14:e1:c8:ea:0f:66:86:c0:60:8a:8c:fd:6e:44:90: ca:15:59:ab:32:d8:e7:7a:5a:24:c5:d2:44:00:4a:91:a0:a9: 7f:40:e2:ee:45:97:cd:29:07:67:80:77:19:75:df:1d:0d:e2: 20:a8:9d:66:16:4d:7c:49:60:6e:16:67:6e:4c:6a:5e:94:c4: 3f:29:65:ba:db:ff:e9:52:52:86:aa:16:af:5f:d3:39:b3:f5: 86:a6:19:01:0c:52:9f:dc:03:9f:9a:f0:5b:8a:96:23:e0:30: cc:b6:87:46:7d:34:c6:ca:6f:86:51:24:9a:af:89:bf:d0:c0: 03:0d:7c:a0:c3:a5:c7:78:f9:d7:fa:02:cb:0a:ea:dc:ec:3f: ca:86:6f:b8:62:ff:d5:4e:ed:f8:bf:e2:4e:35:62:c6:36:ea: 88:09:a2:47:3e:e4:d8:b3:90:d7:31:07:c0:b1:a9:93:db:2a: f4:9d:0d:7f:4d:5c:42:44:02:89:be:8d:2e:b5:a0:ab:5f:65: a5:78:2c:b6:d3:dc:d2:68:b3:3c:56:90:37:f6:8c:69:c8:08: 3b:fc:35:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE2OUExMTAvBgNVBAUTKEFFNjU4RUEzNzdFQTExODQwQjA4RUE2Qzg4RDkwOTBF OEI2QzUyMDQwHhcNMjUwNTEzMDUzNTQzWhcNMjUwNTIwMDUzNTQzWjAYMRYwFAYD VQQDEw02ODIyZGEyZi1jZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcraAO2LDx+a0o+GjNky+6KEUdnvdEzerpJzpOuUIHHzBBVfNw3HAPCIQjEO pNu/654oEEC3Yw1o5QjNgqKIaceJqXbY4sq8tY/6UsOWG6kYcYRr/QMxqsZzHYx8 jDNXoeqaD7/F5wpLRHriuF8CyaNJxJX47G+MyJOwQtnpZlM5OXFUiS2AG88tQm33 0DezVQE0jYgBKq5T8Nu9lGlrZC1dmi6Q36TA3DiIO8lAbpe1o4MTI9uA66subHpN YuhkKeybaNauEky0LeFRmYMz2KTu9itvxCwKG+NUtBtlcK4W5/8Y1jeRyaicI7uZ 19zwVlt59XlvCkA83jzONJNS3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2eyyjN rThrE/pmkhh+yuhlOfhGMB8GA1UdIwQYMBaAFK5ljqN36hGECwjqbIjZCQ6LbFIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTY5QS84QjBFNzM4MDU4 OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZUUxDT3BzaU5rSkRvdHNV Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JtV09vM2ZxRVlRTENPcHNpTmtKRG90c1VnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTY5QS84QjBFNzM4MDU4OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZ UUxDT3BzaU5rSkRvdHNVZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc6pPLQNzKj5fwiy+vBM1m1+30w4rkv7IDvvIZPgWQpDDlcA9MdBgU 4cjqD2aGwGCKjP1uRJDKFVmrMtjnelokxdJEAEqRoKl/QOLuRZfNKQdngHcZdd8d DeIgqJ1mFk18SWBuFmduTGpelMQ/KWW62//pUlKGqhavX9M5s/WGphkBDFKf3AOf mvBbipYj4DDMtodGfTTGym+GUSSar4m/0MADDXygw6XHePnX+gLLCurc7D/Khm+4 Yv/VTu34v+JONWLGNuqICaJHPuTYs5DXMQfAsamT2yr0nQ1/TVxCRAKJvo0utaCr X2WleCy209zSaLM8VpA39oxpyAg7/DUa -----END CERTIFICATE-----Generated at Wed May 14 20:41:41 2025 by rpki-client