$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft File: p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json) Hash identifier: oQfRiwM6ffX45BMFtrGmZfVSQZuHmVv0SKp8B9Pm/Ck= Subject key identifier: 49:16:1C:B9:6D:D3:F3:C3:3A:6F:C0:53:F0:7C:B6:20:03:60:DB:FA Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 Certificate issuer: /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft Manifest number: 01A0 Signing time: Thu 15 May 2025 02:45:43 +0000 Manifest this update: Thu 15 May 2025 02:45:42 +0000 Manifest next update: Thu 22 May 2025 02:45:42 +0000 Files and hashes: 1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: wf/rOxdqYdDEWksHAzcpJqlkbfv6wTTP8D5iX5kvV1s=) 2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 5g7RrFvBwgNiKlK3rQGnarO7ApLyrSM6Xg9ERGMGz5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Validity Not Before: May 15 02:45:42 2025 GMT Not After : May 22 02:45:42 2025 GMT Subject: CN=68255557-166b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:c1:28:59:6a:f2:f4:92:c8:e6:b5:ea:d5: 75:36:a5:3a:78:9c:6f:03:4a:fd:17:72:ec:d6:7b: 32:47:d6:6e:d0:e3:a5:90:17:b5:a7:98:0f:71:3f: 4b:45:7c:01:f5:ea:b7:e0:36:85:1f:93:99:89:e2: 76:0c:18:0a:48:bf:69:55:91:87:8f:b4:a9:b8:0d: 7d:64:55:27:4b:d2:c0:68:d6:66:9d:62:c8:09:77: b2:9e:60:55:25:af:56:6f:90:5d:9a:cb:46:d3:cd: c1:d3:14:95:93:de:9b:b1:1e:3b:81:42:be:6d:e9: ab:d9:76:97:5a:69:08:38:df:bc:62:5b:41:14:80: 93:3f:29:24:a5:cf:db:64:ae:e9:f5:95:01:1b:6f: 6a:79:16:ff:9d:9e:9e:4f:06:cf:2d:fd:9b:8e:d9: e7:f6:1f:69:05:2d:05:87:33:c9:0c:a5:ea:10:06: c7:54:9a:d0:4a:dd:9d:dc:db:ec:39:13:6c:5e:64: cb:f9:1f:e1:81:22:34:f0:f4:f7:a3:95:47:af:ef: 00:db:52:f8:ca:ee:f1:18:da:dd:0b:21:c6:71:7f: a1:e1:b8:41:46:c9:81:f9:14:22:3e:ad:06:15:be: b5:6c:58:82:ee:e7:81:5e:bc:c0:cf:0c:1c:75:f1: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:16:1C:B9:6D:D3:F3:C3:3A:6F:C0:53:F0:7C:B6:20:03:60:DB:FA X509v3 Authority Key Identifier: keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f3:71:6b:12:c6:62:39:3c:5b:1b:3f:06:7f:ba:c6:c3:b3: 41:a2:c4:7a:fe:3c:ef:12:b1:5c:28:4d:48:91:45:47:84:a2: 9f:b4:1c:7c:97:66:b3:7d:46:1d:28:17:7e:18:78:0b:e9:f4: 14:ce:55:16:df:46:09:93:c7:3c:ee:56:61:8f:53:3e:d3:54: 34:27:9c:1c:03:b7:a6:fd:92:98:c8:53:5f:50:fc:9b:ee:a8: d7:e2:54:bc:71:10:24:cc:47:02:82:33:65:16:48:07:33:97: 01:ab:de:7b:5f:c4:3c:f7:fa:f1:bb:67:56:22:cc:6b:bb:de: b6:eb:0f:1f:d2:e5:99:44:ba:3a:8b:2e:a0:da:c1:c6:d6:71: 5d:a4:5d:bf:8a:dd:c5:26:44:f6:78:94:09:c5:d5:1a:e5:43: be:af:7d:27:e9:1e:c4:cd:24:4a:e8:e5:9a:94:bc:20:40:48: 93:6c:3a:b3:d7:fc:cd:fb:be:41:90:53:7a:14:b3:f5:a6:d7: a1:dc:49:b1:7f:73:80:2f:b5:2f:6c:a9:a0:bd:33:7e:6a:e6: 9f:f6:ca:c4:05:31:88:78:8d:f0:14:30:60:35:fe:84:37:2e: e5:e8:a0:13:74:00:69:98:8d:c8:70:22:4b:35:bb:f7:81:c7: 20:d0:dd:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDNjQxMTAvBgNVBAUTKEE3QzE4MkNCMEM1NkVDQzY4RDc0OTFBMjkxNDE0NEI0 Nzc0Rjc3MzIwHhcNMjUwNTE1MDI0NTQyWhcNMjUwNTIyMDI0NTQyWjAYMRYwFAYD VQQDEw02ODI1NTU1Ny0xNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxbBKFlq8vSSyOa16tV1NqU6eJxvA0r9F3Ls1nsyR9Zu0OOlkBe1p5gPcT9L RXwB9eq34DaFH5OZieJ2DBgKSL9pVZGHj7SpuA19ZFUnS9LAaNZmnWLICXeynmBV Ja9Wb5BdmstG083B0xSVk96bsR47gUK+bemr2XaXWmkION+8YltBFICTPykkpc/b ZK7p9ZUBG29qeRb/nZ6eTwbPLf2bjtnn9h9pBS0FhzPJDKXqEAbHVJrQSt2d3Nvs ORNsXmTL+R/hgSI08PT3o5VHr+8A21L4yu7xGNrdCyHGcX+h4bhBRsmB+RQiPq0G Fb61bFiC7ueBXrzAzwwcdfHaXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkWHLlt 0/PDOm/AU/B8tiADYNv6MB8GA1UdIwQYMBaAFKfBgssMVuzGjXSRopFBRLR3T3cy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0M2NC9BNkRFRjFFRUIz MEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdNYU5kSkdpa1VGRXRIZFBk ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4R0N5d3hXN01hTmRKR2lrVUZFdEhkUGR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0M2NC9BNkRFRjFFRUIzMEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdN YU5kSkdpa1VGRXRIZFBkekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf83FrEsZiOTxbGz8Gf7rGw7NBosR6/jzvErFcKE1IkUVHhKKftBx8 l2azfUYdKBd+GHgL6fQUzlUW30YJk8c87lZhj1M+01Q0J5wcA7em/ZKYyFNfUPyb 7qjX4lS8cRAkzEcCgjNlFkgHM5cBq957X8Q89/rxu2dWIsxru9626w8f0uWZRLo6 iy6g2sHG1nFdpF2/it3FJkT2eJQJxdUa5UO+r30n6R7EzSRK6OWalLwgQEiTbDqz 1/zN+75BkFN6FLP1pteh3Emxf3OAL7UvbKmgvTN+auaf9srEBTGIeI3wFDBgNf6E Ny7l6KATdABpmI3IcCJLNbv3gccg0N0j -----END CERTIFICATE-----Generated at Thu May 15 22:41:52 2025 by rpki-client