$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json) Hash identifier: PbojmmQJlhgT+j62MOBbk+TuE0r6+12LN+fiZObtzCI= Subject key identifier: 52:C2:44:F4:74:A3:C7:88:82:D8:6C:DA:05:BA:9C:CA:0E:1C:7B:A5 Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft Manifest number: 18DF Signing time: Mon 12 May 2025 17:13:37 +0000 Manifest this update: Mon 12 May 2025 17:13:36 +0000 Manifest next update: Mon 19 May 2025 17:13:36 +0000 Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: 7XuuyF7HjgqW+tnbIbKUaM+Pi2NzFF8u6xG3BtIWKDs=) 2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: Fb8k8+AedY7WXxvThRoDU2Yv91zXaAiC2+Ql7v0J/eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Validity Not Before: May 12 17:13:36 2025 GMT Not After : May 19 17:13:36 2025 GMT Subject: CN=68222c40-8ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:ac:30:b3:de:a6:42:26:36:37:4b:77:aa: 6b:56:f5:1d:b0:75:e9:8c:1a:cb:22:8e:ca:0c:05: 80:ab:f7:9f:d8:f9:db:70:9b:17:1c:b6:76:cd:fe: c6:d5:2e:90:20:ff:63:ae:ab:77:f0:e0:ae:a6:5a: c2:16:3f:ee:ba:2d:24:8b:2f:81:54:c7:e6:e2:40: 09:78:3f:c0:17:98:5a:47:22:78:72:23:85:55:61: a1:6c:00:9d:c2:05:26:d4:59:d7:37:55:37:23:3a: 80:29:f0:a8:de:25:8c:6a:bd:2b:81:de:38:75:6f: 4c:92:bb:5a:96:a6:fe:b6:46:c3:bf:47:6f:5f:fe: 08:66:41:57:f9:27:84:af:5e:43:fd:8b:46:fd:37: 38:bc:fb:70:3f:36:b0:ee:57:64:9c:20:6f:f1:6f: 43:eb:d0:ba:ae:f7:e5:3e:4f:2c:04:c0:ea:0c:9f: ec:35:c1:c1:e9:05:e7:45:e6:60:27:6a:f5:12:87: a9:67:53:1b:12:79:7a:7b:72:3a:75:b0:a6:b3:12: 10:97:41:37:27:53:b6:c8:cd:b4:ac:dc:9f:c7:4e: 62:fd:9c:0e:de:b5:b1:35:7e:85:6d:76:0f:df:2b: 5f:13:3b:15:e8:f5:47:54:7e:18:70:36:bc:55:27: 1a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C2:44:F4:74:A3:C7:88:82:D8:6C:DA:05:BA:9C:CA:0E:1C:7B:A5 X509v3 Authority Key Identifier: keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:3e:a6:72:ca:5a:33:c3:64:23:a1:82:d7:cd:24:cc:e1:6a: ad:8d:4c:92:d5:91:04:53:f5:99:fc:d8:96:6c:b3:62:f9:9a: 79:40:84:fc:1c:f9:03:09:c4:94:18:83:57:0c:aa:d2:e3:70: 64:53:2c:3e:8c:c6:6c:d2:a0:df:cd:d4:4a:66:a2:cd:0f:df: 83:e5:8e:0a:15:7c:dd:e6:0d:6b:8c:bf:d2:75:c5:ff:f8:5b: 23:dd:f4:a2:75:0d:c4:ef:bb:8b:4a:a8:10:c6:2d:9d:bd:77: 52:0f:8b:ed:a6:44:2b:f4:b3:f2:ff:bc:61:c8:89:19:7c:1a: fc:58:8b:b7:5b:04:69:43:1a:60:6d:27:ab:f4:02:d3:84:cc: 35:43:67:08:85:b2:5f:5d:81:02:10:7d:75:c3:82:c2:c6:36: 36:60:f7:cf:6a:3d:3f:b2:e7:f5:61:ab:9c:77:de:67:29:e8: 6b:24:91:73:bf:74:7b:b2:0d:52:37:3c:eb:84:07:22:4b:f9: f6:3c:72:b0:e5:a3:ac:75:fe:0e:ad:06:fd:7c:a6:ee:2b:a9: 41:fd:68:de:48:08:f4:aa:cb:21:a5:8f:83:3e:02:2c:b5:50: ad:5f:92:b4:42:fd:13:70:59:29:27:0b:4b:fb:42:cc:89:bb: 76:88:8d:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz QjkyNTk1RTEwHhcNMjUwNTEyMTcxMzM2WhcNMjUwNTE5MTcxMzM2WjAYMRYwFAYD VQQDEw02ODIyMmM0MC04YWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0OsMLPepkImNjdLd6prVvUdsHXpjBrLIo7KDAWAq/ef2PnbcJsXHLZ2zf7G 1S6QIP9jrqt38OCuplrCFj/uui0kiy+BVMfm4kAJeD/AF5haRyJ4ciOFVWGhbACd wgUm1FnXN1U3IzqAKfCo3iWMar0rgd44dW9Mkrtalqb+tkbDv0dvX/4IZkFX+SeE r15D/YtG/Tc4vPtwPzaw7ldknCBv8W9D69C6rvflPk8sBMDqDJ/sNcHB6QXnReZg J2r1EoepZ1MbEnl6e3I6dbCmsxIQl0E3J1O2yM20rNyfx05i/ZwO3rWxNX6FbXYP 3ytfEzsV6PVHVH4YcDa8VScagQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLCRPR0 o8eIgths2gW6nMoOHHulMB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMz RzVtRVk3T3VWb1E3a2xsZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1PqZyylozw2QjoYLXzSTM4WqtjUyS1ZEEU/WZ/NiWbLNi+Zp5QIT8 HPkDCcSUGINXDKrS43BkUyw+jMZs0qDfzdRKZqLND9+D5Y4KFXzd5g1rjL/SdcX/ +Fsj3fSidQ3E77uLSqgQxi2dvXdSD4vtpkQr9LPy/7xhyIkZfBr8WIu3WwRpQxpg bSer9ALThMw1Q2cIhbJfXYECEH11w4LCxjY2YPfPaj0/suf1Yaucd95nKehrJJFz v3R7sg1SNzzrhAciS/n2PHKw5aOsdf4OrQb9fKbuK6lB/WjeSAj0qsshpY+DPgIs tVCtX5K0Qv0TcFkpJwtL+0LMibt2iI2f -----END CERTIFICATE-----Generated at Tue May 13 01:40:46 2025 by rpki-client