$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: AIySLsrjJ40ZLdRNoBDj4YaGcB3VKxRZ2enxK2jjinE= Subject key identifier: 81:0B:68:D2:13:AA:AB:67:9B:01:6B:2E:C4:C0:8F:B8:51:27:BE:D6 Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 0387 Signing time: Tue 13 May 2025 00:38:26 +0000 Manifest this update: Tue 13 May 2025 00:38:26 +0000 Manifest next update: Tue 20 May 2025 00:38:26 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: zSxLECmPEh8qTT1QbHSKoXQ2FjkQFc2cAKgRjeRtDG8=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: RNcRlm2wXA2LTmrbU4YLnCSJL/XH7jtpKjrey/Lilq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: May 13 00:38:26 2025 GMT Not After : May 20 00:38:26 2025 GMT Subject: CN=68229482-3719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:20:2b:dc:69:8d:5e:a4:8d:de:08:57:de:7e: cf:90:3d:67:b4:6f:e6:b9:c6:32:d5:44:e4:64:53: 39:a5:62:48:f5:3a:ae:52:20:92:2b:cf:b9:d7:2b: 52:77:fd:3e:08:e9:86:d2:4b:2e:dc:22:45:ea:dc: da:26:5b:b9:b5:98:b9:20:61:4e:a2:63:c3:7c:ac: 10:92:11:96:46:c5:bf:11:e7:84:b9:2a:b9:dc:44: a4:4a:71:f1:ba:a9:fb:c4:0f:d0:8b:80:ea:34:5b: 0e:37:6f:87:58:f1:35:88:28:10:b4:5a:14:86:42: 3b:00:00:31:97:d3:85:0b:a5:0b:74:9e:1c:12:a8: 33:6f:58:ef:25:86:65:75:b7:21:f4:b1:96:b4:f1: dc:1d:75:34:2e:40:17:de:2a:95:7b:31:c9:1d:7a: 42:a6:57:1a:88:f9:4e:6f:e1:34:56:ba:93:1d:0d: 9b:84:e8:54:fb:24:fe:74:7a:57:ac:e3:07:ca:33: 2a:52:55:cc:b5:c0:20:1a:17:16:f6:61:35:36:0a: 30:dc:09:6d:1c:69:7f:a9:98:e8:94:50:b8:26:e2: a1:34:8c:6f:35:00:11:c6:74:23:bc:d6:86:96:2b: 87:75:30:b6:9e:65:df:af:79:e7:9f:40:c5:40:11: 99:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0B:68:D2:13:AA:AB:67:9B:01:6B:2E:C4:C0:8F:B8:51:27:BE:D6 X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:2e:f1:9b:7a:37:01:81:dc:bf:03:d5:27:c2:e9:3b:e0:8f: ab:d6:26:19:16:7f:dd:68:b9:d0:8d:88:3f:48:45:4f:de:a9: 10:d4:e2:92:90:65:2b:90:99:84:48:5f:2b:24:50:0c:5b:d9: a2:e4:f0:8b:12:af:ca:05:ec:96:40:f9:33:f4:99:c7:18:38: 1c:20:df:6f:36:b5:42:8e:51:4f:28:89:e0:f2:0f:ac:8b:f3: 0b:ab:ed:e3:1e:e5:2e:0d:00:cc:b0:21:d1:7f:68:d3:ed:6c: 5e:0c:72:6e:b1:ab:18:8a:48:99:9d:56:a6:ab:bd:46:75:13: 35:e5:7b:f4:62:f2:3f:76:06:3f:af:10:15:a7:7a:a5:9b:4d: c6:7e:5a:6f:95:e8:f7:1b:5b:27:37:e6:d0:ea:5e:e2:38:ef: 54:0e:f7:2a:b3:44:dc:14:24:de:6d:24:89:dd:79:f1:a0:00: ce:9a:7e:70:b4:a6:9d:18:65:b7:ce:92:43:a4:0c:37:e7:74: 7f:1f:ee:44:b2:c4:8d:3e:53:01:68:4c:2c:0a:ef:6e:ba:42: a6:ac:2b:e3:97:a9:5b:cb:5e:bc:df:af:01:9b:78:e0:b8:32: 13:98:22:18:8d:ff:37:7b:90:0c:64:79:53:30:aa:a4:20:01: 79:21:e6:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjUwNTEzMDAzODI2WhcNMjUwNTIwMDAzODI2WjAYMRYwFAYD VQQDEw02ODIyOTQ4Mi0zNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSAr3GmNXqSN3ghX3n7PkD1ntG/mucYy1UTkZFM5pWJI9TquUiCSK8+51ytS d/0+COmG0ksu3CJF6tzaJlu5tZi5IGFOomPDfKwQkhGWRsW/EeeEuSq53ESkSnHx uqn7xA/Qi4DqNFsON2+HWPE1iCgQtFoUhkI7AAAxl9OFC6ULdJ4cEqgzb1jvJYZl dbch9LGWtPHcHXU0LkAX3iqVezHJHXpCplcaiPlOb+E0VrqTHQ2bhOhU+yT+dHpX rOMHyjMqUlXMtcAgGhcW9mE1Ngow3AltHGl/qZjolFC4JuKhNIxvNQARxnQjvNaG liuHdTC2nmXfr3nnn0DFQBGZ0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIELaNIT qqtnmwFrLsTAj7hRJ77WMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCELvGbejcBgdy/A9Unwuk74I+r1iYZFn/daLnQjYg/SEVP3qkQ1OKS kGUrkJmESF8rJFAMW9mi5PCLEq/KBeyWQPkz9JnHGDgcIN9vNrVCjlFPKIng8g+s i/MLq+3jHuUuDQDMsCHRf2jT7WxeDHJusasYikiZnVamq71GdRM15Xv0YvI/dgY/ rxAVp3qlm03Gflpvlej3G1snN+bQ6l7iOO9UDvcqs0TcFCTebSSJ3XnxoADOmn5w tKadGGW3zpJDpAw353R/H+5EssSNPlMBaEwsCu9uukKmrCvjl6lby168368Bm3jg uDITmCIYjf83e5AMZHlTMKqkIAF5Ieby -----END CERTIFICATE-----Generated at Tue May 13 05:47:40 2025 by rpki-client