$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json) Hash identifier: Xj0MWhbi9K/qvgv5zBsam4ikkp+uep+0Q/R+ognupV0= Subject key identifier: A0:7F:24:3F:BA:90:69:B6:31:99:F2:BE:4C:79:B2:4B:44:38:9B:E5 Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft Manifest number: 0293 Signing time: Sun 11 May 2025 01:08:30 +0000 Manifest this update: Sun 11 May 2025 01:08:30 +0000 Manifest next update: Sun 18 May 2025 01:08:30 +0000 Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: kGFdk0yxeADk5yDg8rGc9EfLfp6NWLV3/YgpNDsC1tA=) 2: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: 7v3zrNq+442jAdZuC2gsCpXpLV0fHPfa8xoCxBp0rBk=) 3: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: NDIUMNLgNwlA3XdorfdGi7go+NI9mRVzxQ8Xlow0T8g=) 4: C0E4A11270EF11EFA9113E35C4F9AE02.roa (hash: k2jDGgw0hTyDnG6jZ/sprB9v2BeaWDhxyzOEdYPYfHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Validity Not Before: May 11 01:08:30 2025 GMT Not After : May 18 01:08:30 2025 GMT Subject: CN=681ff88e-63cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:fb:55:f5:79:1d:a5:2d:60:e9:e9:ec:01:69: b7:6a:b9:45:bc:ea:0e:c5:99:2a:89:94:dd:f3:d7: 8f:62:9a:4f:94:09:8c:6a:0d:e4:9d:23:e0:10:74: 59:87:c0:e0:51:17:0c:25:3d:df:06:50:eb:78:d3: 52:98:88:9e:c8:e1:9a:9a:64:6e:6c:a3:08:54:0f: 3a:87:a1:87:64:ba:d3:78:a9:11:bf:b2:e0:5c:2a: 44:cf:b5:42:b2:a4:7a:1f:28:e4:6e:9b:a1:24:6d: de:87:62:8b:d8:67:44:b3:1e:c7:1f:0e:a4:96:d2: 44:0f:6c:88:2a:a4:68:9a:c3:df:5a:e7:fe:93:0b: e5:b2:c8:a4:09:8c:78:b6:7e:e0:24:da:31:3d:30: c6:b0:2b:20:eb:fe:19:fe:84:c6:43:2b:15:bd:00: 79:e0:32:17:04:1d:a9:6a:de:7d:ed:84:f7:ac:69: db:5a:1d:17:92:e8:cf:0a:c9:92:fd:53:64:68:bd: 9b:97:ab:b3:2d:62:81:04:c4:c9:70:45:11:e2:bf: 26:c4:61:d2:f7:23:a3:07:31:d6:ca:0a:dc:a9:a9: 9b:56:bf:f9:32:e3:8c:df:2f:af:da:7b:d8:86:5f: b5:ff:48:be:0d:61:ed:da:a5:79:5b:bf:6e:d8:f1: 81:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7F:24:3F:BA:90:69:B6:31:99:F2:BE:4C:79:B2:4B:44:38:9B:E5 X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:2a:17:fb:2c:7d:5b:89:bb:e6:c4:3f:00:08:c1:e6:5e:4d: 2c:b2:d9:d5:94:78:4a:28:27:1e:2b:88:26:40:e2:5b:86:d8: 9c:e1:b5:b6:6c:a5:74:02:ed:ce:e3:7c:cc:64:64:60:11:e8: af:aa:e2:6a:e6:63:8d:28:9c:ef:aa:a6:1e:9c:93:58:27:3e: fe:66:97:94:d0:6e:06:80:ae:2b:e2:b3:86:13:5d:96:19:1c: b7:6d:d8:4f:35:de:70:ff:9c:08:c7:ba:76:48:3d:ac:58:57: 15:48:f7:42:1f:77:04:e2:d0:0b:d9:ca:bf:1e:0d:3f:e5:fd: aa:1b:91:c6:1d:18:a6:f4:7d:d8:b0:bf:74:98:d2:ee:34:e3: f7:39:ac:bb:62:2c:6f:23:49:9b:a4:ae:28:77:1f:f7:b5:93: aa:73:c8:5d:d0:09:2c:79:aa:ca:6f:22:28:bd:b9:f5:21:19: 55:6c:7e:b5:0a:60:16:c6:78:40:16:b5:0a:23:2a:bb:e8:54: e9:26:4c:44:b2:f4:e1:6c:65:b2:ec:b0:30:6b:e8:2d:4c:cc: 2f:60:00:77:2c:e7:27:a6:0a:b4:ff:b8:89:02:43:89:89:49: 8e:cc:df:00:8f:f5:d4:04:20:26:63:1d:55:ec:6c:91:75:9a: d1:da:fb:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjUwNTExMDEwODMwWhcNMjUwNTE4MDEwODMwWjAYMRYwFAYD VQQDEw02ODFmZjg4ZS02M2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ftV9XkdpS1g6ensAWm3arlFvOoOxZkqiZTd89ePYppPlAmMag3knSPgEHRZ h8DgURcMJT3fBlDreNNSmIieyOGammRubKMIVA86h6GHZLrTeKkRv7LgXCpEz7VC sqR6HyjkbpuhJG3eh2KL2GdEsx7HHw6kltJED2yIKqRomsPfWuf+kwvlssikCYx4 tn7gJNoxPTDGsCsg6/4Z/oTGQysVvQB54DIXBB2pat597YT3rGnbWh0XkujPCsmS /VNkaL2bl6uzLWKBBMTJcEUR4r8mxGHS9yOjBzHWygrcqambVr/5MuOM3y+v2nvY hl+1/0i+DWHt2qV5W79u2PGBFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKB/JD+6 kGm2MZnyvkx5sktEOJvlMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1 WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSKhf7LH1bibvmxD8ACMHmXk0sstnVlHhKKCceK4gmQOJbhtic4bW2 bKV0Au3O43zMZGRgEeivquJq5mONKJzvqqYenJNYJz7+ZpeU0G4GgK4r4rOGE12W GRy3bdhPNd5w/5wIx7p2SD2sWFcVSPdCH3cE4tAL2cq/Hg0/5f2qG5HGHRim9H3Y sL90mNLuNOP3Oay7YixvI0mbpK4odx/3tZOqc8hd0AksearKbyIovbn1IRlVbH61 CmAWxnhAFrUKIyq76FTpJkxEsvThbGWy7LAwa+gtTMwvYAB3LOcnpgq0/7iJAkOJ iUmOzN8Aj/XUBCAmYx1V7GyRdZrR2vsi -----END CERTIFICATE-----Generated at Mon May 12 08:11:33 2025 by rpki-client