$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft File: v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json) Hash identifier: 38zuBM7eI+zXOlEGG5pwCARCb44cuutXZ7jTuIjAqrE= Subject key identifier: 5A:BF:94:74:7B:3F:BA:59:22:59:A0:25:F8:0C:46:B1:92:5C:BB:86 Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft Manifest number: 3495 Signing time: Sat 10 May 2025 14:27:32 +0000 Manifest this update: Sat 10 May 2025 14:27:32 +0000 Manifest next update: Sat 17 May 2025 14:27:32 +0000 Files and hashes: 1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: Y2CxqV2pxNKUraqJiBp8CoOzPkL2ot8JISxF8vyv7Sg=) 2: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: awbho/uZ6QmNOlz47rfC29uNcbM+u0ajdUiQ48qQdes=) 3: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: OiDTuOtU2sr+4kSXlrCpirnD6tpZhdVqcG76Sqtu1lo=) 4: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: 3EtrP079py1XOOa3Ek7irmapcKEfNhwqmeBlfZT1l7s=) 5: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: G+KGkA6ntZoSU6izS9Aco3EHQif4B2SP1cehoseXxzY=) 6: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: nKSePsS9MPGNfom4Rnz59tSXOtuz0jzrRs8gfUCXxws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Validity Not Before: May 10 14:27:32 2025 GMT Not After : May 17 14:27:32 2025 GMT Subject: CN=681f6254-ae40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:53:c7:d5:2d:0e:4b:9a:87:3f:31:3c:04: f0:67:27:56:55:a5:5b:cb:b0:60:c5:ed:db:85:76: 5b:5b:e8:da:18:6d:43:01:9f:ac:9d:e7:b8:ff:3e: a3:b4:87:13:21:06:65:bd:f1:0d:b4:0d:51:0f:48: 8b:44:73:c8:b7:1f:c0:e2:35:30:2a:48:10:5e:c0: 33:07:91:cc:dc:22:c1:5b:97:f9:ae:f9:c4:c0:d8: f6:c8:1e:a1:2d:38:7f:a4:45:05:4f:33:06:9d:6f: 50:0f:b1:de:32:3f:df:c3:38:d8:2c:aa:a7:aa:03: 0b:59:ae:38:d1:9c:03:09:0c:84:9a:b3:22:ef:31: 5b:9c:7a:3d:dc:62:0e:e5:bb:e9:00:21:fb:39:b2: b5:79:4c:1d:34:44:1d:1d:91:d9:5f:66:c9:41:f2: c0:a8:dc:9b:a9:3c:65:d2:b4:12:d6:2f:9e:9f:52: 67:ac:be:f4:d1:af:8b:8d:d6:00:0d:d6:1f:15:0e: 41:e9:3d:4c:2f:54:0e:cb:6b:9e:52:bb:f8:ea:d3: 5d:eb:f6:8a:d3:fc:a7:88:f7:c6:ae:2d:6b:66:93: 28:fc:d5:0f:8a:a0:fa:53:69:c7:9b:82:e7:79:9c: 1d:f1:c7:5d:23:2f:64:ef:ab:fc:0c:fc:09:4f:a6: 5b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BF:94:74:7B:3F:BA:59:22:59:A0:25:F8:0C:46:B1:92:5C:BB:86 X509v3 Authority Key Identifier: keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ae:ef:63:1f:c4:7c:1f:0e:cb:0c:db:d0:3a:9a:f2:3a:a9: 14:2c:69:0b:17:af:35:c5:b9:9e:c2:f1:74:98:99:dd:c0:55: 7e:51:4d:58:61:e4:81:26:d2:ca:c5:6e:ad:9b:ba:f9:cc:4b: 8a:b5:fe:eb:eb:1e:68:37:66:d5:0c:6d:0a:c3:52:7a:28:a5: 07:34:45:e4:ad:19:af:9f:0b:b4:11:5a:32:c4:ae:98:f7:3c: 83:88:bf:a3:90:70:1e:6b:17:41:5c:58:3f:15:de:80:f3:bf: 76:4b:54:7a:82:a9:e0:d0:0a:d6:4f:bf:21:93:34:37:44:c6: 6f:77:98:e2:e3:27:0a:ec:ed:83:33:cb:33:85:47:3f:09:fc: d6:a5:a9:4f:3a:0d:e7:0b:40:1a:86:6f:c0:b1:e2:d3:c5:2d: 0c:1f:80:ca:4d:c6:28:86:8f:65:eb:d8:ae:e4:8f:85:5a:99: 6f:ba:27:45:cf:8a:38:f2:ab:34:c4:27:b5:b8:ce:e4:a3:b8: 06:98:bf:01:69:6e:46:2b:82:fb:3e:24:db:43:f9:a8:ee:06: 22:e0:14:15:a1:02:27:16:69:09:5f:ca:33:6d:a9:ab:6d:b5: b3:fa:ed:d9:4d:79:1c:bb:40:62:aa:f8:d5:d2:27:73:7c:43: 54:11:78:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEJGNTgzRkYwN0RBMzU2RkRFMjgyODE5RjQ3QkNFRTI0 NzUxMzExOUEwHhcNMjUwNTEwMTQyNzMyWhcNMjUwNTE3MTQyNzMyWjAYMRYwFAYD VQQDEw02ODFmNjI1NC1hZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBVTx9UtDkuahz8xPATwZydWVaVby7Bgxe3bhXZbW+jaGG1DAZ+snee4/z6j tIcTIQZlvfENtA1RD0iLRHPItx/A4jUwKkgQXsAzB5HM3CLBW5f5rvnEwNj2yB6h LTh/pEUFTzMGnW9QD7HeMj/fwzjYLKqnqgMLWa440ZwDCQyEmrMi7zFbnHo93GIO 5bvpACH7ObK1eUwdNEQdHZHZX2bJQfLAqNybqTxl0rQS1i+en1JnrL700a+LjdYA DdYfFQ5B6T1ML1QOy2ueUrv46tNd6/aK0/yniPfGri1rZpMo/NUPiqD6U2nHm4Ln eZwd8cddIy9k76v8DPwJT6ZbcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFq/lHR7 P7pZIlmgJfgMRrGSXLuGMB8GA1UdIwQYMBaAFL9YP/B9o1b94oKBn0e87iR1ExGa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yMEIzN0NGRTFE ODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2M2lnb0dmUjd6dUpIVVRF Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxZ184SDJqVnYzaWdvR2ZSN3p1SkhVVEVaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yMEIzN0NGRTFEODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2 M2lnb0dmUjd6dUpIVVRFWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJru9jH8R8Hw7LDNvQOpryOqkULGkLF681xbmewvF0mJndwFV+UU1Y YeSBJtLKxW6tm7r5zEuKtf7r6x5oN2bVDG0Kw1J6KKUHNEXkrRmvnwu0EVoyxK6Y 9zyDiL+jkHAeaxdBXFg/Fd6A8792S1R6gqng0ArWT78hkzQ3RMZvd5ji4ycK7O2D M8szhUc/CfzWpalPOg3nC0Aahm/AseLTxS0MH4DKTcYoho9l69iu5I+FWplvuidF z4o48qs0xCe1uM7ko7gGmL8BaW5GK4L7PiTbQ/mo7gYi4BQVoQInFmkJX8ozbamr bbWz+u3ZTXkcu0BiqvjV0idzfENUEXhi -----END CERTIFICATE-----Generated at Sun May 11 05:09:44 2025 by rpki-client