$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json) Hash identifier: m6zS6VyamKPpogAjb4OeBDQIawIzWXlIYYJFlaGBqYI= Subject key identifier: 35:A6:23:85:F2:B4:E6:8A:96:67:8C:28:AF:F7:A8:57:83:B1:62:77 Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft Manifest number: 0136 Signing time: Wed 07 May 2025 03:41:51 +0000 Manifest this update: Wed 07 May 2025 03:41:50 +0000 Manifest next update: Wed 14 May 2025 03:41:50 +0000 Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: 7vBrW+YcnORFv4qrjsBGnCbGbDg8qCmJLEoA+W2Vj88=) 2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=) 3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=) 4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=) 5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=) 6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: May 7 03:41:50 2025 GMT Not After : May 14 03:41:50 2025 GMT Subject: CN=681ad67f-e578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:46:fb:71:58:52:09:00:14:c7:6c:37:a3: 85:9c:36:2e:29:a6:71:82:d4:46:00:ed:12:76:15: d1:58:27:af:f7:87:91:59:54:f5:6e:3f:7d:54:11: 2f:bf:8c:6e:33:91:e8:5b:e1:8f:2c:ca:89:d8:36: 18:8e:f0:71:55:56:76:1b:4f:fa:6c:b5:fe:de:2f: ec:a8:d8:cb:23:b5:98:60:9c:76:fb:af:c0:8d:5e: e0:fd:36:ad:38:bb:13:8b:0b:ec:fe:98:e1:6b:50: 8e:d6:b3:29:db:72:10:46:d2:27:84:fa:bd:8f:d2: fa:8c:f0:45:b7:18:94:68:48:49:b3:47:18:19:05: 10:da:03:9f:88:ed:2e:16:dd:94:d6:5e:3e:08:5e: 26:f2:7f:d3:37:8c:c7:c8:5e:e0:89:d4:bc:3e:8f: 84:60:f1:74:09:5d:fd:16:c1:fa:4e:87:2b:3b:72: 22:14:a4:8e:87:d2:f8:5f:45:e2:d5:52:ac:2a:19: 27:f7:be:c4:55:d4:e1:d9:f6:56:0d:fc:4f:c4:e8: 1d:ea:ef:d2:94:c7:83:a1:40:19:b0:a4:1e:55:3e: cf:1e:aa:3c:26:26:76:84:de:fa:0b:fb:20:74:da: a1:10:04:e2:a3:4f:cb:4d:fb:81:3b:c9:ce:c4:2a: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A6:23:85:F2:B4:E6:8A:96:67:8C:28:AF:F7:A8:57:83:B1:62:77 X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:96:0f:f1:41:c7:4f:f0:c1:2e:89:c4:57:01:5d:01:16:4e: 6e:51:40:53:08:37:c8:5f:7a:21:b6:16:4e:52:39:4c:54:5e: 7b:95:df:87:23:ca:85:80:b6:c1:fc:4e:12:9a:9d:21:29:d3: 93:b0:38:2b:47:e4:27:39:75:25:b2:95:2e:8c:5b:22:c1:8f: 7a:20:78:56:31:fb:cc:18:46:82:02:c5:df:13:c4:a0:c7:8b: 4b:57:74:6a:70:c7:fa:41:a6:46:ee:2e:10:a1:39:96:3b:5a: 90:1e:05:77:f8:a3:3f:63:39:8e:77:74:b9:42:47:56:5b:0d: 5d:ea:19:23:36:7c:1b:53:98:78:a3:73:82:fb:9d:7f:d5:17: 2b:06:eb:d0:9b:5f:60:7f:2b:45:8d:5a:c5:e3:e1:82:c4:14: 15:ef:3d:61:d5:2b:63:6a:7b:c1:67:f0:c0:93:9f:72:fa:be: be:61:5f:5e:99:f8:8c:d4:86:09:81:26:1b:12:f9:4c:41:c7: 6c:22:29:22:7e:ee:1a:8d:aa:12:50:f6:aa:f6:5a:ef:ec:99: f9:b6:35:3b:a2:f0:49:22:f8:ba:39:62:ac:3c:a6:4d:a4:a1: 9c:08:5e:ec:d9:77:f9:bd:e6:cf:e1:e1:ea:e2:8f:12:06:41: 61:75:a2:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUwNTA3MDM0MTUwWhcNMjUwNTE0MDM0MTUwWjAYMRYwFAYD VQQDEw02ODFhZDY3Zi1lNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLRG+3FYUgkAFMdsN6OFnDYuKaZxgtRGAO0SdhXRWCev94eRWVT1bj99VBEv v4xuM5HoW+GPLMqJ2DYYjvBxVVZ2G0/6bLX+3i/sqNjLI7WYYJx2+6/AjV7g/Tat OLsTiwvs/pjha1CO1rMp23IQRtInhPq9j9L6jPBFtxiUaEhJs0cYGQUQ2gOfiO0u Ft2U1l4+CF4m8n/TN4zHyF7gidS8Po+EYPF0CV39FsH6TocrO3IiFKSOh9L4X0Xi 1VKsKhkn977EVdTh2fZWDfxPxOgd6u/SlMeDoUAZsKQeVT7PHqo8JiZ2hN76C/sg dNqhEATio0/LTfuBO8nOxCowEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWmI4Xy tOaKlmeMKK/3qFeDsWJ3MB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJDRS85MDA5OUM0MDU3REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1 U2QyQ3lDOS16ckNWdVFLaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFlg/xQcdP8MEuicRXAV0BFk5uUUBTCDfIX3ohthZOUjlMVF57ld+H I8qFgLbB/E4Smp0hKdOTsDgrR+QnOXUlspUujFsiwY96IHhWMfvMGEaCAsXfE8Sg x4tLV3RqcMf6QaZG7i4QoTmWO1qQHgV3+KM/YzmOd3S5QkdWWw1d6hkjNnwbU5h4 o3OC+51/1RcrBuvQm19gfytFjVrF4+GCxBQV7z1h1StjanvBZ/DAk59y+r6+YV9e mfiM1IYJgSYbEvlMQcdsIikifu4ajaoSUPaq9lrv7Jn5tjU7ovBJIvi6OWKsPKZN pKGcCF7s2Xf5vebP4eHq4o8SBkFhdaI8 -----END CERTIFICATE-----Generated at Wed May 7 16:28:48 2025 by rpki-client