$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json) Hash identifier: qk9XgzmNoLNJx2H6ZxIoR23dc3SZTCpO+4N2doQqG/0= Subject key identifier: A0:0F:FE:28:ED:A4:0B:76:5C:72:BF:EB:1D:12:E1:FB:9A:C4:06:5F Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft Manifest number: 03FC Signing time: Thu 15 May 2025 00:52:23 +0000 Manifest this update: Thu 15 May 2025 00:52:23 +0000 Manifest next update: Thu 22 May 2025 00:52:23 +0000 Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: CzupZKckk7cIvAB96NHvfSTZnragCxrCklW3LmpuZpU=) 2: 905CF618B08F11EF8E3C4F2FC4F9AE02.roa (hash: iYnobuL6uewbC9DQWWzy41MFmhxRv2c8V9Juso3I4gI=) 3: 75CD74841CC611EEAD8F6969C4F9AE02.roa (hash: NN12ijjN6eHiIP1fgGNt8W/SjYLPT878HAPA443nXjw=) 4: 8ED9161EB08F11EF8E3C4F2FC4F9AE02.roa (hash: CH8GchMto/uPRqPYkKGBpICTR9Zi45Sn6IDLqaBYXYk=) 5: ACFCE162DAFB11EE902F6539C4F9AE02.roa (hash: xJ7KzUAv8j9M+W6KCeCK63jNH2dqcmPqZTR8VHBvDCE=) 6: 0A6FBB5C152811EE8E31B969C4F9AE02.roa (hash: 8P9fQsyTCuiC83nyFEWreUG4FXx+RrwZOmDW3liswnE=) 7: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: z8WFNNSCDShP5sJws5ME7jFozduDfbcnSPakTQjuffM=) 8: 6806A9D07B4111EF87D2E951C4F9AE02.roa (hash: /KHhv0wFN+iPlsJ858r8JVJtCaymXIBJ4SFRGoaj2DM=) 9: 73FCC4481CAD11EEA46B151DC4F9AE02.roa (hash: xLAp8SL1FdY9rdr5UWy+ApLo8i+9DkxfF4xI/C+ZcI0=) 10: 8F9F0B1CB08F11EF8E3C4F2FC4F9AE02.roa (hash: /YjY7P9L0E8WjaWx4AfDlm8Dw/xWaWys/adkujHGYsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1139 (0x473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: May 15 00:52:23 2025 GMT Not After : May 22 00:52:23 2025 GMT Subject: CN=68253ac7-e523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:3b:5b:e8:5b:c7:a4:c6:8a:d3:23:49:ee: 64:cb:95:16:93:a8:47:4c:a6:7b:ad:ea:01:ed:6c: ff:3a:f2:74:4a:8b:47:81:b2:8a:f7:22:31:ce:28: b1:73:02:cf:d2:e1:ce:51:24:ce:b8:84:69:10:a6: 35:71:e2:00:54:1c:e7:df:7a:37:9b:2e:9e:51:9e: b7:25:11:3d:51:48:91:2c:b9:0e:76:f5:bf:a9:0e: 4f:0f:7c:68:d9:12:b3:74:e4:15:f1:38:ba:bb:20: b9:b3:64:5b:40:a8:cb:48:a4:bc:05:f3:d3:ac:15: 64:f7:81:00:ef:5b:a8:b9:8f:2e:b7:3a:0b:b3:89: 9f:50:9c:e1:0b:4c:c5:46:ac:d8:7f:3c:b7:4e:72: 79:e6:e2:09:a4:6c:f2:0c:d0:d2:f4:e3:24:d0:48: af:73:60:5c:76:1b:82:a5:f0:10:a2:7d:28:3f:a4: 43:97:71:e7:e6:ae:5b:08:ab:5b:21:fc:a8:b4:e9: e5:cc:15:be:93:4f:b9:a2:e6:7e:50:2d:92:4c:df: c3:78:5a:99:77:11:fe:a1:0f:82:6b:b6:04:9a:46: 44:50:2d:8d:a1:c2:e3:9f:02:37:16:b3:84:e6:ed: 20:3d:7c:aa:ae:4f:66:0c:23:9f:02:2f:2d:86:33: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0F:FE:28:ED:A4:0B:76:5C:72:BF:EB:1D:12:E1:FB:9A:C4:06:5F X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f5:f3:58:e5:fb:bc:e4:6d:8b:9d:eb:8b:98:3b:19:8d:38: ce:82:63:71:b1:37:cc:61:dc:7c:61:15:77:38:87:51:ee:e4: 32:af:ea:f0:f7:24:27:18:3b:f9:bc:33:44:c5:b7:b4:81:f9: ba:d5:a9:f0:51:b4:f0:e0:40:5e:f3:2a:03:97:8c:12:0c:67: 96:de:91:10:d7:8e:a4:ef:ea:38:f5:ca:9d:b3:c4:80:b3:a5: 59:56:0b:58:8e:cb:b7:5b:e8:d2:e4:07:21:86:84:23:7e:fd: 2f:a2:d6:9d:b7:09:bc:3c:c5:3f:e4:bf:de:81:bf:d7:06:ef: ec:23:38:e7:50:55:a0:86:bf:52:8c:62:1c:c7:9e:33:58:7f: 21:b9:2f:78:37:14:9e:d6:49:48:77:a9:34:c7:0b:1f:ad:dd: 4a:6c:14:c5:ab:26:37:a9:92:e2:22:64:99:1f:5d:a3:03:0a: c1:49:11:54:24:62:f8:51:cf:db:80:5b:1d:38:7f:27:c5:f4: 91:4b:6e:14:53:b6:de:1c:f2:9b:7f:18:4a:a3:05:16:68:ac: 22:09:6e:67:83:4f:16:0a:7e:a0:5d:b1:6a:68:56:e6:8d:18: b7:13:16:0e:ed:af:a3:89:64:ae:1e:d4:06:36:1f:8c:9d:96: eb:7f:9a:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUwNTE1MDA1MjIzWhcNMjUwNTIyMDA1MjIzWjAYMRYwFAYD VQQDEw02ODI1M2FjNy1lNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmF07W+hbx6TGitMjSe5ky5UWk6hHTKZ7reoB7Wz/OvJ0SotHgbKK9yIxziix cwLP0uHOUSTOuIRpEKY1ceIAVBzn33o3my6eUZ63JRE9UUiRLLkOdvW/qQ5PD3xo 2RKzdOQV8Ti6uyC5s2RbQKjLSKS8BfPTrBVk94EA71uouY8utzoLs4mfUJzhC0zF RqzYfzy3TnJ55uIJpGzyDNDS9OMk0Eivc2BcdhuCpfAQon0oP6RDl3Hn5q5bCKtb IfyotOnlzBW+k0+5ouZ+UC2STN/DeFqZdxH+oQ+Ca7YEmkZEUC2NocLjnwI3FrOE 5u0gPXyqrk9mDCOfAi8thjNhjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAP/ijt pAt2XHK/6x0S4fuaxAZfMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS czFKZHBWM1VySlhPLXZXcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA99fNY5fu85G2LneuLmDsZjTjOgmNxsTfMYdx8YRV3OIdR7uQyr+rw 9yQnGDv5vDNExbe0gfm61anwUbTw4EBe8yoDl4wSDGeW3pEQ146k7+o49cqds8SA s6VZVgtYjsu3W+jS5AchhoQjfv0votadtwm8PMU/5L/egb/XBu/sIzjnUFWghr9S jGIcx54zWH8huS94NxSe1klId6k0xwsfrd1KbBTFqyY3qZLiImSZH12jAwrBSRFU JGL4Uc/bgFsdOH8nxfSRS24UU7beHPKbfxhKowUWaKwiCW5ng08WCn6gXbFqaFbm jRi3ExYO7a+jiWSuHtQGNh+MnZbrf5oK -----END CERTIFICATE-----Generated at Fri May 16 18:05:52 2025 by rpki-client