$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: TmoUQV+0xKugxbFiy6jB99FWRJZZdBCk8dmNKfi/0m8= Subject key identifier: 95:7A:14:33:8B:07:40:EC:AF:46:BE:10:CC:7C:B2:20:4E:E4:0F:A1 Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: B9 Signing time: Tue 13 May 2025 05:11:43 +0000 Manifest this update: Tue 13 May 2025 05:11:43 +0000 Manifest next update: Tue 20 May 2025 05:11:43 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: IXF27VHvi3+9O2WJCoPAi0rNjYnsPoyKTbODXpsMpXA=) 2: A5DE28B4216E11EF88CCA84FC4F9AE02.roa (hash: TnSpnLe7j6/9wTqsNRxeaAfjz8zUewbXt/4PsMyvpP4=) 3: A6550254216E11EF88CCA84FC4F9AE02.roa (hash: hgy+s41tW18ZsoIITX25VfjzDwvg0uuSJ0bvy5UWIIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: May 13 05:11:43 2025 GMT Not After : May 20 05:11:43 2025 GMT Subject: CN=6822d48f-c90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:e8:94:a0:9b:49:1b:74:27:91:a1:2f:95: 3c:51:3b:14:63:91:1b:26:d9:48:a7:d7:52:3f:87: 85:16:22:65:83:03:3f:b4:12:b7:5a:97:4d:2a:0f: 42:ce:f0:42:6d:48:a9:ce:15:6f:c2:4d:b5:d1:61: 3b:2d:cd:de:c9:49:1f:33:a1:fc:09:7e:bd:f5:3b: da:cd:e2:86:3e:39:ee:04:f0:64:c2:b9:c1:f3:77: 62:1a:0b:d1:5b:6f:b6:3c:1d:ee:b8:c3:76:0a:4d: 1e:b3:8b:cf:8f:3e:88:e2:5a:00:9a:49:f2:46:ff: ba:37:9a:af:9a:81:a1:86:2a:57:b4:3c:f4:cf:7b: 19:46:0e:5f:db:6a:7d:36:78:9d:33:f0:79:c4:73: 54:ac:80:b8:2c:32:61:3d:30:0d:9c:a6:69:c3:67: 35:a3:0b:66:06:71:3f:27:80:17:73:5c:1a:18:8e: 4c:39:da:3d:44:2b:08:fd:6e:d1:74:dc:57:7e:ec: fd:2f:94:e1:b5:0d:db:d1:0b:87:61:59:a5:2d:01: c6:ce:ee:b0:0d:f6:4e:9a:45:a0:65:97:3f:e9:30: b2:5a:3d:14:91:86:6c:f0:83:c5:2c:18:f8:34:e9: 7a:26:f5:32:43:1c:bb:59:f0:cd:42:13:91:e7:5f: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7A:14:33:8B:07:40:EC:AF:46:BE:10:CC:7C:B2:20:4E:E4:0F:A1 X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fb:0a:73:21:31:00:2d:bd:28:54:db:2f:8d:6a:be:09:7b: 47:b7:94:37:11:6c:a3:92:44:76:b1:8a:e9:a2:ae:66:19:a5: 47:b8:44:bc:11:90:90:31:37:f8:0c:a2:7f:cb:75:4b:11:24: 77:5e:c4:fd:b7:0f:40:1d:57:e1:ce:08:8d:58:45:f4:b2:b8: 02:dc:74:85:e0:74:00:30:fe:bb:04:0a:df:e8:03:08:91:e9: 56:b0:f8:a8:85:bf:d2:62:88:9c:8f:21:e6:26:be:50:ed:a8: ca:91:96:19:1e:15:30:1d:8d:72:9f:4a:5f:df:af:bf:0c:ef: b2:77:51:1d:e8:25:85:d6:17:dc:41:87:bf:dd:34:f9:58:61: a4:18:70:2f:19:d2:fd:8a:95:f9:9e:eb:1e:7a:84:65:d7:a9: 26:38:16:1a:16:6f:bb:08:7d:43:f6:95:9d:1b:4d:f9:7e:7c: f5:04:31:f0:98:09:b3:f4:75:68:17:ee:86:54:7a:14:13:b5: 25:d2:6b:c4:9f:0b:47:31:f3:ec:83:75:37:7f:a7:6c:8a:30: 30:c6:47:11:80:48:da:3b:a2:21:ba:60:17:7b:36:b9:a6:91: 89:3c:80:7b:7a:50:7c:1d:5c:58:bd:f8:39:6f:e9:f2:91:c0: 91:12:17:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjUwNTEzMDUxMTQzWhcNMjUwNTIwMDUxMTQzWjAYMRYwFAYD VQQDEw02ODIyZDQ4Zi1jOTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti/olKCbSRt0J5GhL5U8UTsUY5EbJtlIp9dSP4eFFiJlgwM/tBK3WpdNKg9C zvBCbUipzhVvwk210WE7Lc3eyUkfM6H8CX699TvazeKGPjnuBPBkwrnB83diGgvR W2+2PB3uuMN2Ck0es4vPjz6I4loAmknyRv+6N5qvmoGhhipXtDz0z3sZRg5f22p9 NnidM/B5xHNUrIC4LDJhPTANnKZpw2c1owtmBnE/J4AXc1waGI5MOdo9RCsI/W7R dNxXfuz9L5ThtQ3b0QuHYVmlLQHGzu6wDfZOmkWgZZc/6TCyWj0UkYZs8IPFLBj4 NOl6JvUyQxy7WfDNQhOR51+TKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV6FDOL B0Dsr0a+EMx8siBO5A+hMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VEMy8zQzE2MUZBNjIxNkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGpr Yl9TS3R3b2RvQWFqM1BRYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx+wpzITEALb0oVNsvjWq+CXtHt5Q3EWyjkkR2sYrpoq5mGaVHuES8 EZCQMTf4DKJ/y3VLESR3XsT9tw9AHVfhzgiNWEX0srgC3HSF4HQAMP67BArf6AMI kelWsPiohb/SYoicjyHmJr5Q7ajKkZYZHhUwHY1yn0pf36+/DO+yd1Ed6CWF1hfc QYe/3TT5WGGkGHAvGdL9ipX5nuseeoRl16kmOBYaFm+7CH1D9pWdG035fnz1BDHw mAmz9HVoF+6GVHoUE7Ul0mvEnwtHMfPsg3U3f6dsijAwxkcRgEjaO6IhumAXeza5 ppGJPIB7elB8HVxYvfg5b+nykcCREhcl -----END CERTIFICATE-----Generated at Wed May 14 04:59:32 2025 by rpki-client