$ rpki-client -vvf rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft File: cFeff18bId_J3mZ8azwh8W-H1XI.mft (raw, json) Hash identifier: zbn0953szeXj9xYSa0Cx9SbIxz6otWIYzJMa0r7QmOc= Subject key identifier: A1:FD:CD:EA:E0:51:DC:A0:3E:28:D3:98:CA:5C:7E:E5:A9:63:13:58 Authority key identifier: 70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72 Certificate issuer: /CN=A9136655/serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572 Certificate serial: 0C36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft Manifest number: 0C26 Signing time: Mon 12 May 2025 18:27:49 +0000 Manifest this update: Mon 12 May 2025 18:27:48 +0000 Manifest next update: Mon 19 May 2025 18:27:48 +0000 Files and hashes: 1: cFeff18bId_J3mZ8azwh8W-H1XI.crl (hash: 82xy0dj9O3JqTrUTPTMjgvA6NS8kB7J+8JZjSFrvXyI=) 2: DEABC3F619C411EFA1A8677DC4F9AE02.roa (hash: W7K6VRN1QzgBc/gpj+6wHuV7YMhiZeiqUU+WpyRDJ4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136655, serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572 Validity Not Before: May 12 18:27:48 2025 GMT Not After : May 19 18:27:48 2025 GMT Subject: CN=68223da5-ad97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:8c:59:cf:3e:fd:95:41:9f:a3:76:29:52: 9d:fb:92:c3:7b:4f:da:23:ae:2e:47:93:d7:5f:cf: 6d:1d:0f:01:7e:bc:4d:f8:c9:fe:ce:23:d6:a6:0e: 17:8f:bc:89:d6:e7:3e:07:7a:e5:31:2c:cf:c0:15: f2:03:4f:52:55:77:68:d5:53:4a:5f:f8:14:ee:85: 55:b7:de:99:ff:aa:d4:6c:01:75:c2:23:d0:e7:74: 84:8d:bc:e2:a3:9c:61:59:b5:53:b2:62:72:85:a9: a0:b5:23:d8:19:d4:68:8d:ad:9a:3d:0f:40:50:b8: 35:d0:44:6c:f8:43:09:94:13:bc:c4:e8:06:98:96: be:7c:21:f2:8f:d1:24:ee:8a:dc:3a:c2:4c:12:49: a4:c0:b6:3b:c4:77:05:28:aa:46:30:bc:03:51:11: 5d:0b:71:cb:36:d8:a1:e0:b6:24:bb:46:28:f6:e7: 22:6a:d5:5f:43:cd:4f:d1:b2:57:19:ed:1b:22:d3: b7:88:1e:ef:b5:ed:69:b5:06:af:f7:52:4f:eb:45: 11:78:dc:62:d6:39:07:83:95:95:e6:4e:92:8c:8f: 41:40:07:9f:b1:67:90:ab:5f:77:a8:f2:f3:04:ed: 79:f8:cb:47:b1:ea:e6:26:69:69:60:45:16:8f:28: 20:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FD:CD:EA:E0:51:DC:A0:3E:28:D3:98:CA:5C:7E:E5:A9:63:13:58 X509v3 Authority Key Identifier: keyid:70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:8e:5c:37:29:a5:56:2e:da:85:95:48:16:b8:7a:4d:54:ec: a2:a1:28:99:31:af:4f:3e:4a:91:cd:10:3c:25:55:86:36:ff: f2:d1:1d:27:e2:92:96:80:13:0b:ef:76:41:62:07:31:dc:7d: 2d:7f:8c:7e:69:da:a9:7c:78:42:ad:14:7f:33:d7:9b:e3:e8: df:6c:88:86:e5:4a:fc:b4:ee:0e:f5:d7:69:fc:49:5b:f8:a1: cb:42:ae:f5:04:9e:6e:1d:9b:a8:3f:54:5d:c3:59:f2:2b:7f: 0c:4e:69:ba:87:12:58:fb:78:fe:aa:7a:2f:ff:65:6e:83:8b: 57:22:1b:86:84:55:8e:a5:8f:5d:80:ac:c4:5f:26:1c:c9:11: 42:8c:68:be:d9:59:c2:93:d1:cd:e9:27:48:97:89:52:f9:b1: 08:f4:2e:92:7d:77:a4:e7:93:4f:e4:49:2d:9e:ff:e8:73:79: 3e:01:ca:46:03:06:68:b0:6f:bc:f8:8c:bd:8d:d1:f2:12:ba: 54:04:5e:62:fd:e4:c6:c9:62:63:0f:5f:c5:de:ab:ae:3c:3b: 2c:17:4d:4d:0c:37:ea:e8:6e:95:3a:e7:50:8e:7c:87:42:cb: 30:5d:20:8d:19:44:ac:03:b2:1e:3c:35:d0:44:08:e4:0d:8c: 8a:d0:8a:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NTUxMTAvBgNVBAUTKDcwNTc5RjdGNUYxQjIxREZDOURFNjY3QzZCM0MyMUYx NkY4N0Q1NzIwHhcNMjUwNTEyMTgyNzQ4WhcNMjUwNTE5MTgyNzQ4WjAYMRYwFAYD VQQDEw02ODIyM2RhNS1hZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxx+MWc8+/ZVBn6N2KVKd+5LDe0/aI64uR5PXX89tHQ8BfrxN+Mn+ziPWpg4X j7yJ1uc+B3rlMSzPwBXyA09SVXdo1VNKX/gU7oVVt96Z/6rUbAF1wiPQ53SEjbzi o5xhWbVTsmJyhamgtSPYGdRoja2aPQ9AULg10ERs+EMJlBO8xOgGmJa+fCHyj9Ek 7orcOsJMEkmkwLY7xHcFKKpGMLwDURFdC3HLNtih4LYku0Yo9uciatVfQ81P0bJX Ge0bItO3iB7vte1ptQav91JP60UReNxi1jkHg5WV5k6SjI9BQAefsWeQq193qPLz BO15+MtHsermJmlpYEUWjyggJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKH9zerg UdygPijTmMpcfuWpYxNYMB8GA1UdIwQYMBaAFHBXn39fGyHfyd5mfGs8IfFvh9Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY1NS9GNzA3RjQ2NDBB OTgxMUVBQkRDQUExN0NDNEY5QUUwMi9jRmVmZjE4YklkX0ozbVo4YXp3aDhXLUgx WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGZWZmMThiSWRfSjNtWjhhendoOFctSDFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjY1NS9GNzA3RjQ2NDBBOTgxMUVBQkRDQUExN0NDNEY5QUUwMi9jRmVmZjE4Yklk X0ozbVo4YXp3aDhXLUgxWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2jlw3KaVWLtqFlUgWuHpNVOyioSiZMa9PPkqRzRA8JVWGNv/y0R0n 4pKWgBML73ZBYgcx3H0tf4x+adqpfHhCrRR/M9eb4+jfbIiG5Ur8tO4O9ddp/Elb +KHLQq71BJ5uHZuoP1Rdw1nyK38MTmm6hxJY+3j+qnov/2Vug4tXIhuGhFWOpY9d gKzEXyYcyRFCjGi+2VnCk9HN6SdIl4lS+bEI9C6SfXek55NP5Ektnv/oc3k+AcpG AwZosG+8+Iy9jdHyErpUBF5i/eTGyWJjD1/F3quuPDssF01NDDfq6G6VOudQjnyH QsswXSCNGUSsA7IePDXQRAjkDYyK0IpI -----END CERTIFICATE-----Generated at Tue May 13 17:37:17 2025 by rpki-client