$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: zkCbmZkpJBtkSkaCFQS6QpIu33Htu9ghTE38J0dsVt4= Subject key identifier: 0F:64:21:8E:A6:9D:40:F7:18:DA:73:9C:47:1E:C4:11:AC:F8:FC:60 Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 0111 Signing time: Sat 17 May 2025 04:31:05 +0000 Manifest this update: Sat 17 May 2025 04:31:05 +0000 Manifest next update: Sat 24 May 2025 04:31:05 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: Pfnxad+5XEVLi7U/H7sgCdQgNTM7vVWnTD/HuPFsXYo=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: May 17 04:31:05 2025 GMT Not After : May 24 04:31:05 2025 GMT Subject: CN=68281109-367c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9d:53:33:5c:1f:28:c4:ec:73:0d:5b:28:3f: 8d:d3:ce:04:e5:56:5e:41:a0:d8:fc:0a:8b:64:14: d2:43:ea:e9:0c:be:27:ca:80:c1:06:8b:7c:63:91: af:4c:cd:26:b1:7c:40:6a:be:bb:12:99:98:c2:f1: 37:48:c7:45:4b:d6:12:2a:05:0e:0c:11:2d:53:14: 60:08:c4:69:68:e0:c7:92:11:10:02:99:83:16:4d: a7:8a:10:7d:df:42:0b:1a:be:13:1a:35:12:a4:51: 2c:20:cc:9c:c3:e7:78:67:1a:d4:62:90:77:31:ae: 5b:f0:1d:68:8f:94:4b:8d:c5:17:7e:ca:65:5d:aa: fc:87:2a:90:b0:58:03:b3:b3:71:bb:5b:ce:ed:0c: 9f:8c:ef:15:13:c7:6b:02:a2:7f:43:f8:71:19:37: 58:fb:e2:9a:3f:4c:a1:d8:cc:79:ea:dd:9d:2b:46: 3f:91:0f:fc:ca:77:f6:79:b3:87:20:ab:4b:ea:d1: 0f:72:5b:10:49:c1:6c:cc:b3:26:3e:11:4d:ec:6c: 5a:b4:fa:cb:1d:70:3e:75:41:35:7c:c2:f6:c6:d9: 38:02:f5:39:ab:c9:99:3c:74:a5:1b:cd:15:ff:cc: 44:06:68:d4:c3:eb:b2:89:87:6e:2e:21:ba:fd:c2: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:64:21:8E:A6:9D:40:F7:18:DA:73:9C:47:1E:C4:11:AC:F8:FC:60 X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:30:b3:98:86:2a:2c:23:cc:66:6c:e8:87:27:7e:de:96:d0: d6:3a:3c:50:1f:19:41:88:4b:fe:1e:23:cd:98:2d:45:fc:c0: 56:74:87:47:67:28:4a:43:75:61:54:50:ac:c4:16:d0:d8:94: 7f:10:fa:00:eb:a3:cd:66:ab:5e:6a:13:07:c1:29:dc:7e:df: ee:8f:d1:14:4c:24:97:73:4f:1a:f5:32:4a:2d:56:c5:23:e0: 21:35:04:37:69:50:49:d7:f7:d1:1f:3d:3b:6a:7b:8a:91:22: 0d:4a:fe:89:9f:67:9a:c7:74:ea:38:7d:cb:b1:f7:df:a5:7d: 95:cf:45:1d:64:59:a7:12:04:54:da:d1:06:41:a7:e4:23:ea: fb:34:61:31:87:4a:bb:ce:34:21:86:12:b8:b4:1a:06:e3:b6: b6:f4:ed:52:92:d1:ee:6e:92:9d:db:bb:31:0c:6c:f4:3e:9d: 9c:21:e0:6e:96:bd:d6:b1:a3:52:51:d1:c2:04:4d:0d:d3:aa: 06:4e:81:a3:6b:4c:d3:d7:d6:18:23:b3:1a:80:b7:9f:92:fa: 0f:9a:29:d4:84:fd:7a:6f:5d:b1:45:c4:72:a9:5f:60:5a:7f: ee:98:1e:c2:0a:52:df:8d:1e:df:e1:18:03:25:e8:d5:bd:6f: 20:02:fd:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjUwNTE3MDQzMTA1WhcNMjUwNTI0MDQzMTA1WjAYMRYwFAYD VQQDEw02ODI4MTEwOS0zNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA051TM1wfKMTscw1bKD+N084E5VZeQaDY/AqLZBTSQ+rpDL4nyoDBBot8Y5Gv TM0msXxAar67EpmYwvE3SMdFS9YSKgUODBEtUxRgCMRpaODHkhEQApmDFk2nihB9 30ILGr4TGjUSpFEsIMycw+d4ZxrUYpB3Ma5b8B1oj5RLjcUXfsplXar8hyqQsFgD s7Nxu1vO7QyfjO8VE8drAqJ/Q/hxGTdY++KaP0yh2Mx56t2dK0Y/kQ/8ynf2ebOH IKtL6tEPclsQScFszLMmPhFN7GxatPrLHXA+dUE1fML2xtk4AvU5q8mZPHSlG80V /8xEBmjUw+uyiYduLiG6/cKCPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9kIY6m nUD3GNpznEcexBGs+PxgMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnMLOYhiosI8xmbOiHJ37eltDWOjxQHxlBiEv+HiPNmC1F/MBWdIdH ZyhKQ3VhVFCsxBbQ2JR/EPoA66PNZqteahMHwSncft/uj9EUTCSXc08a9TJKLVbF I+AhNQQ3aVBJ1/fRHz07anuKkSINSv6Jn2eax3TqOH3LsfffpX2Vz0UdZFmnEgRU 2tEGQafkI+r7NGExh0q7zjQhhhK4tBoG47a29O1SktHubpKd27sxDGz0Pp2cIeBu lr3WsaNSUdHCBE0N06oGToGja0zT19YYI7MagLefkvoPminUhP16b12xRcRyqV9g Wn/umB7CClLfjR7f4RgDJejVvW8gAv1V -----END CERTIFICATE-----Generated at Sat May 17 14:51:21 2025 by rpki-client