$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft File: McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json) Hash identifier: 3Bm0gJVBau1q6uJY8rRZLAvtp2nLe3hjXbQCBymTnYU= Subject key identifier: 11:2B:9D:BB:B7:7B:A4:AF:34:BF:0F:16:02:BA:BB:B0:53:9D:34:A7 Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E Certificate serial: 08F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft Manifest number: 08EC Signing time: Mon 12 May 2025 20:15:23 +0000 Manifest this update: Mon 12 May 2025 20:15:23 +0000 Manifest next update: Mon 19 May 2025 20:15:23 +0000 Files and hashes: 1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: BkJ7HhyRv5OiaH6LStXaafzxwZerxnDKlY4Qdu+cu1o=) 2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Lf+OpNRolRnNyf7s3LctxABHJRYGwAmVNkJb5Q4x0vo=) 3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: GurqPE7vf79zU82Gehwj1ctZametXlaKlIqkpoDGL9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E Validity Not Before: May 12 20:15:23 2025 GMT Not After : May 19 20:15:23 2025 GMT Subject: CN=682256db-db8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:cd:9e:d2:c3:ea:7e:d1:2f:a4:58:0d:ca: 2c:a4:1c:ff:b4:f3:08:08:c2:92:ba:34:da:d9:1e: b2:2c:a0:0e:78:2e:46:c4:64:e4:12:44:4a:b4:a5: 95:93:f1:6d:c8:a9:31:78:c8:18:f5:f1:65:c7:0f: a1:69:1f:36:21:82:13:e8:88:15:65:74:10:cb:59: 38:9b:2b:7e:a7:0d:19:fb:0f:1d:23:22:94:fa:20: b4:ab:70:a8:7b:c9:46:06:34:96:b5:08:a4:03:b8: 2d:63:4b:02:b6:31:5c:a0:74:4c:ab:b2:39:46:5f: 1f:c1:40:f5:87:e4:7e:79:f9:07:83:77:53:45:7d: 81:db:cd:49:bb:5b:e9:83:a0:cb:a0:ec:a9:cd:86: d7:1b:15:2e:41:0f:1c:a7:48:1d:d9:6a:44:e0:ef: df:37:13:ec:01:02:05:31:3d:db:e6:3f:36:32:17: 36:74:66:19:52:67:79:12:f0:37:e6:96:aa:6f:52: 75:6f:7c:5f:ab:c5:7c:57:55:bc:1c:5b:e9:6f:ea: 7e:56:65:41:7b:be:54:52:b6:c7:fc:40:23:b5:5c: 5f:8d:80:2f:9b:9c:1b:8b:63:4f:e5:6d:7d:c4:c1: 8c:2e:82:f7:2f:86:39:2e:9f:60:3b:2e:53:96:66: 37:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2B:9D:BB:B7:7B:A4:AF:34:BF:0F:16:02:BA:BB:B0:53:9D:34:A7 X509v3 Authority Key Identifier: keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:89:64:85:9e:49:f2:91:6d:c0:7a:a6:eb:03:ca:d9:8d:ab: 84:71:ec:69:7f:21:5a:b6:75:f2:d0:98:41:38:07:9b:8d:a0: 70:ea:16:61:d5:61:29:e8:2f:d9:27:50:5c:d7:04:2d:b7:8d: 2c:47:7c:55:f7:c7:ff:e9:33:30:ad:a4:57:e3:fd:94:3e:d6: 83:4e:8c:00:3d:b1:c0:a5:08:10:ad:16:55:d4:df:1f:85:dd: 7a:cb:63:68:24:64:41:d5:49:40:dc:58:e4:69:ac:14:70:17: e4:73:bd:27:18:12:50:c2:63:1a:af:e6:1b:f9:ce:14:87:5a: e6:f2:f3:b6:8e:f2:6e:79:62:af:e5:4f:b8:21:48:3f:cb:c9: b7:0b:f4:a9:77:62:7c:ff:2b:3a:25:4e:c0:8a:1e:4e:ec:99: 82:97:8b:2e:af:53:e9:b8:58:e2:59:5f:fc:33:db:56:ea:94: 25:53:3f:23:70:ac:d7:71:e6:d8:14:eb:c2:22:66:c5:83:79: 4d:a8:c3:50:ff:06:b6:15:c1:ce:5e:3f:97:b0:03:5c:1b:83: bc:01:40:eb:9e:11:6d:0e:99:6c:b9:af:02:e5:ee:06:db:95: d1:93:2f:54:96:b9:d1:9f:28:ec:93:76:e6:9e:9f:33:3e:8e: e4:03:d9:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDMxQzRGOTA2NEY4OUU1NkIxOTRFQjg4NDkyRTkwMjFD MTUyREVCM0UwHhcNMjUwNTEyMjAxNTIzWhcNMjUwNTE5MjAxNTIzWjAYMRYwFAYD VQQDEw02ODIyNTZkYi1kYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9jNntLD6n7RL6RYDcospBz/tPMICMKSujTa2R6yLKAOeC5GxGTkEkRKtKWV k/FtyKkxeMgY9fFlxw+haR82IYIT6IgVZXQQy1k4myt+pw0Z+w8dIyKU+iC0q3Co e8lGBjSWtQikA7gtY0sCtjFcoHRMq7I5Rl8fwUD1h+R+efkHg3dTRX2B281Ju1vp g6DLoOypzYbXGxUuQQ8cp0gd2WpE4O/fNxPsAQIFMT3b5j82Mhc2dGYZUmd5EvA3 5paqb1J1b3xfq8V8V1W8HFvpb+p+VmVBe75UUrbH/EAjtVxfjYAvm5wbi2NP5W19 xMGMLoL3L4Y5Lp9gOy5TlmY3pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBErnbu3 e6SvNL8PFgK6u7BTnTSnMB8GA1UdIwQYMBaAFDHE+QZPieVrGU64hJLpAhwVLes+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9EQzU0RDlBNkFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVXc1pUcmlFa3VrQ0hCVXQ2 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01jVDVCay1KNVdzWlRyaUVrdWtDSEJVdDZ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9EQzU0RDlBNkFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVX c1pUcmlFa3VrQ0hCVXQ2ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6iWSFnknykW3AeqbrA8rZjauEcexpfyFatnXy0JhBOAebjaBw6hZh 1WEp6C/ZJ1Bc1wQtt40sR3xV98f/6TMwraRX4/2UPtaDTowAPbHApQgQrRZV1N8f hd16y2NoJGRB1UlA3FjkaawUcBfkc70nGBJQwmMar+Yb+c4Uh1rm8vO2jvJueWKv 5U+4IUg/y8m3C/Spd2J8/ys6JU7Aih5O7JmCl4sur1PpuFjiWV/8M9tW6pQlUz8j cKzXcebYFOvCImbFg3lNqMNQ/wa2FcHOXj+XsANcG4O8AUDrnhFtDplsua8C5e4G 25XRky9UlrnRnyjsk3bmnp8zPo7kA9nT -----END CERTIFICATE-----Generated at Tue May 13 07:47:54 2025 by rpki-client