$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft File: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft (raw, json) Hash identifier: HiZ+KPq2rNyvUtceBkWrSxOvtZgq+zZs8/WXQV1Mx5E= Subject key identifier: 12:FE:AA:37:55:78:D6:D7:5A:8A:C3:00:E2:50:49:45:12:7F:27:04 Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC Certificate issuer: /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Certificate serial: 0724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft Manifest number: 0718 Signing time: Wed 14 May 2025 21:56:59 +0000 Manifest this update: Wed 14 May 2025 21:56:58 +0000 Manifest next update: Wed 21 May 2025 21:56:58 +0000 Files and hashes: 1: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl (hash: 43F2Ethksquw3yfZEO/Q2dpJ8aGkC2B61SVwd3ucB+8=) 2: 7AD47B2234EE11EE927E9F6AC4F9AE02.roa (hash: Mt4tb4VC4mD0Nqt0BXFmGgw6RIVVzrPQVbsXvi8D500=) 3: 1D4A72B2350811EE96CD9F16C4F9AE02.roa (hash: aL7cUy872ECZEAqqjrWWrqFvQPWZOr2k97DKB+JwHf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828 (0x724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128077, serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Validity Not Before: May 14 21:56:58 2025 GMT Not After : May 21 21:56:58 2025 GMT Subject: CN=682511ab-03b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:c5:a4:da:51:c0:b8:46:d1:39:51:62:13: 99:5d:70:4c:00:6c:9f:71:df:3e:c3:3b:da:bf:a3: d7:c4:52:c0:ca:f7:62:22:1d:eb:ff:8d:6a:e5:97: 55:90:7e:98:a0:4c:3b:b8:55:f2:da:9e:fa:fc:97: d2:c4:42:5a:ad:8c:e4:af:0d:06:19:bf:6b:37:ee: 56:87:83:c0:33:e2:e1:ce:de:c3:29:9a:8e:de:6b: 03:e8:02:b9:57:fe:be:ff:96:92:54:44:36:f7:eb: 62:80:01:a5:7c:fa:59:8c:f7:95:d2:f5:df:7c:28: 25:2e:68:6b:9a:36:43:99:e1:10:e5:30:d4:f1:50: ae:d6:fa:0a:89:05:cb:e6:a0:49:d8:54:54:44:fc: 66:79:ad:ba:e2:95:56:cd:88:6a:d9:0a:8f:4f:d8: aa:27:5c:55:be:e7:19:d4:e8:ba:4c:15:ae:28:eb: 54:4d:d5:fe:3b:e1:2e:f9:01:41:a5:15:59:d7:3a: 70:20:ff:2e:2b:63:0e:19:af:22:53:31:13:5b:94: 52:28:7a:8f:46:83:2b:79:c7:4c:c9:5f:a9:b8:aa: 7c:d4:c9:aa:d5:49:39:6b:87:72:96:21:2a:54:a2: 06:aa:ce:9c:18:9b:d0:28:22:4f:f9:9e:d1:97:42: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:AA:37:55:78:D6:D7:5A:8A:C3:00:E2:50:49:45:12:7F:27:04 X509v3 Authority Key Identifier: keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:e4:c5:c0:1e:ba:99:18:e1:90:1c:5e:55:fd:08:6c:04:1f: e5:a0:55:55:28:9d:dc:ad:b8:17:96:91:d5:4b:dd:83:18:9a: 88:e1:cf:20:2a:93:86:f0:0f:45:4e:bd:92:c2:0f:1e:cb:ee: da:58:ae:d8:4a:9b:c3:48:8a:fc:8b:19:d2:2f:a9:cc:4d:f2: 90:9a:b0:41:79:6b:ef:ef:70:9c:53:aa:18:e1:2b:3f:b9:8c: 8c:df:fc:b8:10:dc:dc:97:13:64:61:fd:54:73:c7:12:f5:d2: 67:d0:69:86:06:de:fa:23:e3:54:80:83:c9:1a:43:62:cf:57: 46:ed:38:8f:41:73:ac:64:1c:bc:0d:bd:15:ce:b3:de:ae:ec: 20:b9:0d:c0:01:85:db:11:d7:4f:a9:2a:78:48:54:2c:bf:ea: 53:7e:6e:7b:de:af:81:bd:6f:cb:67:c8:bc:16:d6:4b:81:35: 24:7f:d6:bc:cd:7f:62:28:76:82:28:97:c5:c9:aa:41:b2:5b: e1:70:fc:9d:73:6a:3d:e6:68:45:0e:46:37:17:03:7b:fc:9b: 4d:5e:71:34:52:e9:91:f1:96:f3:c4:5f:73:ae:c8:1d:65:bb: 9a:9a:c3:ee:ef:ee:e9:7d:86:13:16:37:73:85:67:a7:7d:2a: 05:4a:33:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx RjcxNjVDREMwHhcNMjUwNTE0MjE1NjU4WhcNMjUwNTIxMjE1NjU4WjAYMRYwFAYD VQQDEw02ODI1MTFhYi0wM2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDzFpNpRwLhG0TlRYhOZXXBMAGyfcd8+wzvav6PXxFLAyvdiIh3r/41q5ZdV kH6YoEw7uFXy2p76/JfSxEJarYzkrw0GGb9rN+5Wh4PAM+Lhzt7DKZqO3msD6AK5 V/6+/5aSVEQ29+tigAGlfPpZjPeV0vXffCglLmhrmjZDmeEQ5TDU8VCu1voKiQXL 5qBJ2FRURPxmea264pVWzYhq2QqPT9iqJ1xVvucZ1Oi6TBWuKOtUTdX+O+Eu+QFB pRVZ1zpwIP8uK2MOGa8iUzETW5RSKHqPRoMrecdMyV+puKp81Mmq1Uk5a4dyliEq VKIGqs6cGJvQKCJP+Z7Rl0I2IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBL+qjdV eNbXWorDAOJQSUUSfycEMB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA3Ny85ODBDQThGRTNBRDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFa Zy1pelhGRjdaUmNmY1dYTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy5MXAHrqZGOGQHF5V/QhsBB/loFVVKJ3crbgXlpHVS92DGJqI4c8g KpOG8A9FTr2Swg8ey+7aWK7YSpvDSIr8ixnSL6nMTfKQmrBBeWvv73CcU6oY4Ss/ uYyM3/y4ENzclxNkYf1Uc8cS9dJn0GmGBt76I+NUgIPJGkNiz1dG7TiPQXOsZBy8 Db0VzrPeruwguQ3AAYXbEddPqSp4SFQsv+pTfm573q+BvW/LZ8i8FtZLgTUkf9a8 zX9iKHaCKJfFyapBslvhcPydc2o95mhFDkY3FwN7/JtNXnE0UumR8ZbzxF9zrsgd ZbuamsPu7+7pfYYTFjdzhWenfSoFSjM5 -----END CERTIFICATE-----Generated at Fri May 16 18:12:51 2025 by rpki-client