$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json) Hash identifier: Aew6aadJAxMCbK0A9Y2yMKqunqB+B8t/xzhaqFlYh6k= Subject key identifier: 69:A4:A2:18:9D:16:12:18:0A:48:3C:CB:74:5B:24:69:EC:3E:E3:B3 Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft Manifest number: 07B1 Signing time: Sun 04 May 2025 21:00:18 +0000 Manifest this update: Sun 04 May 2025 21:00:17 +0000 Manifest next update: Sun 11 May 2025 21:00:17 +0000 Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: 3PM+iB9Mw568RTj0JQpiLrqALpgsViRyCacFYAGqfms=) 2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: LwB2LqDOhHIBTqs2GBEUbqXjt3VBU4kWjANTbQ1spqo=) 3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: +6R7bMqMqpzAOMYELOdkWclWKRtU/auj18n3CAr0V2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Validity Not Before: May 4 21:00:17 2025 GMT Not After : May 11 21:00:17 2025 GMT Subject: CN=6817d561-7a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:24:b3:ef:7b:c8:d2:e4:93:4d:13:9f:8b:27: 8f:51:b7:8e:fb:f0:d8:94:97:57:5a:70:d1:02:87: 0d:c9:55:cd:1b:b5:e0:7d:c5:86:8d:52:8e:78:b2: eb:49:bc:5a:0e:e1:58:98:5d:ec:fd:98:2b:e3:6c: cd:93:43:72:9b:ab:a6:6e:4b:df:19:a7:b7:c7:d0: c8:a7:6e:bd:00:ff:6b:4e:ed:17:98:49:e0:8d:4a: c4:4c:f5:c3:49:53:a1:d6:b2:73:dc:12:28:80:ac: 60:17:74:11:b0:b6:e0:ed:2a:0f:bb:c3:25:17:56: 6c:05:73:7f:e1:2c:37:e9:e0:67:e5:07:b2:98:e6: ab:3b:7c:03:df:78:f6:b7:7a:80:cc:e2:0a:8f:ee: b7:15:01:2d:46:d5:5e:40:4b:bb:d4:fc:60:52:42: f3:73:9f:e0:e5:8b:ec:d5:ab:ca:c2:4a:6f:ed:28: 1d:c9:76:11:66:ea:2a:6b:ec:2b:26:27:07:2e:80: a2:f0:59:c9:e6:c4:be:97:d4:e3:c9:41:1c:7e:57: ff:79:54:b4:02:a1:b4:4d:1a:af:1c:70:82:90:2f: 62:48:d8:75:1f:eb:ee:35:d2:23:40:8c:4c:10:7f: 0c:71:c5:bb:46:f1:87:b9:6e:32:45:60:23:89:60: 6f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A4:A2:18:9D:16:12:18:0A:48:3C:CB:74:5B:24:69:EC:3E:E3:B3 X509v3 Authority Key Identifier: keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:cb:79:07:3b:d5:4b:a9:bb:4a:79:ca:2f:46:08:e7:69:6c: cf:8e:b0:83:a3:62:47:14:a9:ac:70:36:13:a8:5c:c6:fc:df: 9f:ae:41:4f:ca:1f:c7:0f:a5:56:e2:78:d4:df:a5:68:86:8e: 55:11:c5:2a:99:16:2f:c7:04:a2:bf:0e:7c:e7:d1:ab:a7:e7: 3f:6c:a3:fe:05:b3:65:ab:7b:54:b5:25:cc:4f:5c:0b:c5:cf: a9:6a:45:02:aa:ac:8e:e5:28:bf:01:92:71:65:5c:42:ff:d2: 30:5a:10:63:81:7b:ff:97:25:77:37:59:cd:26:40:27:a7:76: f1:76:85:f5:c9:c5:93:5d:f5:2b:08:f4:62:70:a7:a4:34:5a: a3:e6:eb:7a:4b:fc:d4:cb:78:8e:12:c1:fe:ba:3b:94:f3:4e: b7:18:ed:c1:8a:43:83:5f:48:87:64:43:a1:e9:5d:27:59:1a: 05:2a:d5:ae:c6:13:93:59:68:e1:35:af:dd:a0:03:c3:9c:93: 85:81:ad:86:9a:bf:a7:00:dd:9c:6f:ad:a4:d9:89:b4:e5:75: 57:bc:f9:03:a1:80:8b:f4:94:20:5e:a0:f2:71:54:f4:62:74: da:00:c2:d0:cf:bf:83:04:d6:e3:2a:92:95:ea:13:cc:d3:c4: ee:5b:96:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKDMyNDJCQUUwMEJBOUYwREY0RTlFREE2RkU1QzA4RjEy OUY5MTY4ODEwHhcNMjUwNTA0MjEwMDE3WhcNMjUwNTExMjEwMDE3WjAYMRYwFAYD VQQDEw02ODE3ZDU2MS03YTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ySz73vI0uSTTROfiyePUbeO+/DYlJdXWnDRAocNyVXNG7XgfcWGjVKOeLLr SbxaDuFYmF3s/Zgr42zNk0Nym6umbkvfGae3x9DIp269AP9rTu0XmEngjUrETPXD SVOh1rJz3BIogKxgF3QRsLbg7SoPu8MlF1ZsBXN/4Sw36eBn5QeymOarO3wD33j2 t3qAzOIKj+63FQEtRtVeQEu71PxgUkLzc5/g5Yvs1avKwkpv7SgdyXYRZuoqa+wr JicHLoCi8FnJ5sS+l9TjyUEcflf/eVS0AqG0TRqvHHCCkC9iSNh1H+vuNdIjQIxM EH8MccW7RvGHuW4yRWAjiWBv0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmkohid FhIYCkg8y3RbJGnsPuOzMB8GA1UdIwQYMBaAFDJCuuALqfDfTp7ab+XAjxKfkWiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy83NTQ1NDVCQzAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhOOU9udHB2NWNDUEVwLVJh SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rSzY0QXVwOE45T250cHY1Y0NQRXAtUmFJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy83NTQ1NDVCQzAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhO OU9udHB2NWNDUEVwLVJhSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNy3kHO9VLqbtKecovRgjnaWzPjrCDo2JHFKmscDYTqFzG/N+frkFP yh/HD6VW4njU36Voho5VEcUqmRYvxwSivw5859Grp+c/bKP+BbNlq3tUtSXMT1wL xc+pakUCqqyO5Si/AZJxZVxC/9IwWhBjgXv/lyV3N1nNJkAnp3bxdoX1ycWTXfUr CPRicKekNFqj5ut6S/zUy3iOEsH+ujuU8063GO3BikODX0iHZEOh6V0nWRoFKtWu xhOTWWjhNa/doAPDnJOFga2Gmr+nAN2cb62k2Ym05XVXvPkDoYCL9JQgXqDycVT0 YnTaAMLQz7+DBNbjKpKV6hPM08TuW5Z1 -----END CERTIFICATE-----Generated at Mon May 5 03:23:47 2025 by rpki-client