$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json) Hash identifier: QRYqcFE8gc/w8ejyObcnVSs+zC+OQRTIq3T5YgSm+oY= Subject key identifier: A5:E9:D6:2A:2E:AD:86:A2:00:58:2F:4D:C2:29:F7:02:62:30:1E:D3 Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft Manifest number: 0135 Signing time: Sat 17 May 2025 04:06:20 +0000 Manifest this update: Sat 17 May 2025 04:06:19 +0000 Manifest next update: Sat 24 May 2025 04:06:19 +0000 Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: 8V9uC4f+Ino3/yyy7QYbuZ5G9BOEzea/Vo9OOx5ALKA=) 2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Validity Not Before: May 17 04:06:19 2025 GMT Not After : May 24 04:06:19 2025 GMT Subject: CN=68280b3c-f921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:b5:6c:08:4f:97:d0:11:8a:43:21:35:67: 60:1b:d5:fd:da:ee:fc:74:2e:c1:ad:66:ad:b3:86: f7:61:17:3a:c8:bc:11:12:8b:74:5e:86:c0:c3:06: 0a:ee:58:52:06:2f:f1:2c:39:09:8b:50:bf:c1:72: 64:0d:bc:af:06:3c:45:3d:78:9e:ba:e0:39:4e:8f: 01:5d:9a:59:4f:4c:10:70:96:91:41:e9:d6:5a:ef: fc:cb:f6:19:ef:76:c2:58:59:09:bf:d6:38:24:48: 06:8a:2e:53:90:be:4f:a5:e9:f0:6f:0f:b4:ab:1b: 25:80:49:c1:c8:95:34:db:20:27:53:5f:cc:75:1d: 87:5f:11:45:e7:8c:53:3e:84:b2:68:ca:da:f2:59: bf:fb:cf:e4:f3:ee:1a:26:81:76:c6:74:43:1f:8a: a2:46:34:ee:30:40:52:ef:d9:ff:3e:5d:5a:01:7f: cb:2b:22:97:be:07:02:22:ac:fc:9e:69:a0:25:f2: 9b:5a:89:12:ec:7d:02:7c:50:65:16:0b:42:29:a0: 52:42:95:8c:1a:0a:cf:6d:95:0c:8f:74:9d:74:7d: 3d:b0:ca:7e:63:4d:6a:40:4c:0c:04:b1:4d:9a:83: 32:4b:47:86:48:e1:b8:ae:07:a4:f7:8f:94:a4:cd: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E9:D6:2A:2E:AD:86:A2:00:58:2F:4D:C2:29:F7:02:62:30:1E:D3 X509v3 Authority Key Identifier: keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:60:a8:6a:b1:b4:64:f0:7d:be:84:48:b5:44:dc:65:bd:93: 59:20:06:ff:c1:5e:81:de:67:2e:ad:b3:63:8c:5c:15:0e:a5: d5:cc:4b:55:c7:7a:17:31:bc:ae:67:9b:a7:62:33:16:84:a4: d8:b3:ec:dc:89:7f:ca:05:d6:d8:98:3f:2a:32:05:34:22:bf: c7:77:fa:5b:eb:d4:fd:3d:33:00:e3:37:d9:55:86:80:67:ab: 38:44:6f:70:47:bc:ee:56:ae:27:b5:95:b8:eb:97:14:3a:af: 46:16:e6:97:5d:b5:40:e9:c9:c7:39:1a:72:24:d2:73:f3:d2: 5a:3e:32:9c:17:be:7f:a7:f5:47:66:2c:b4:d7:66:0c:8a:20: b9:7c:2a:95:d8:ad:ef:07:7e:92:e1:c6:09:0b:3e:41:51:f6: a3:b2:21:71:cc:0f:08:a6:6c:e2:cb:9c:4d:45:6c:68:58:6a: 3d:97:c4:9b:eb:57:a1:14:c8:e9:d2:85:c6:f8:4a:b6:fe:5d: a7:22:a1:87:91:f8:c2:7f:06:9b:db:dc:5f:8f:e4:10:9a:9a: 54:22:0a:e4:b4:de:20:eb:99:5f:48:6f:28:f9:07:e1:e0:bf: 7d:79:93:c9:32:02:f3:94:d5:7f:5e:4e:55:64:b8:82:66:15: 71:96:e4:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxRjkxMTAvBgNVBAUTKEY1MUMxQkNEMERCQzEzNUE2RDlCQzQ1QUIwNTlFNkRF MjdFOTNCMDMwHhcNMjUwNTE3MDQwNjE5WhcNMjUwNTI0MDQwNjE5WjAYMRYwFAYD VQQDEw02ODI4MGIzYy1mOTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HW1bAhPl9ARikMhNWdgG9X92u78dC7BrWats4b3YRc6yLwREot0XobAwwYK 7lhSBi/xLDkJi1C/wXJkDbyvBjxFPXieuuA5To8BXZpZT0wQcJaRQenWWu/8y/YZ 73bCWFkJv9Y4JEgGii5TkL5Ppenwbw+0qxslgEnByJU02yAnU1/MdR2HXxFF54xT PoSyaMra8lm/+8/k8+4aJoF2xnRDH4qiRjTuMEBS79n/Pl1aAX/LKyKXvgcCIqz8 nmmgJfKbWokS7H0CfFBlFgtCKaBSQpWMGgrPbZUMj3SddH09sMp+Y01qQEwMBLFN moMyS0eGSOG4rgek94+UpM0rNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXp1iou rYaiAFgvTcIp9wJiMB7TMB8GA1UdIwQYMBaAFPUcG80NvBNabZvEWrBZ5t4n6TsD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFGOS83RTQzN0QwNjVE M0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUxcHRtOFJhc0ZubTNpZnBP d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFGOS83RTQzN0QwNjVEM0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUx cHRtOFJhc0ZubTNpZnBPd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhYKhqsbRk8H2+hEi1RNxlvZNZIAb/wV6B3mcurbNjjFwVDqXVzEtV x3oXMbyuZ5unYjMWhKTYs+zciX/KBdbYmD8qMgU0Ir/Hd/pb69T9PTMA4zfZVYaA Z6s4RG9wR7zuVq4ntZW465cUOq9GFuaXXbVA6cnHORpyJNJz89JaPjKcF75/p/VH Ziy012YMiiC5fCqV2K3vB36S4cYJCz5BUfajsiFxzA8Ipmziy5xNRWxoWGo9l8Sb 61ehFMjp0oXG+Eq2/l2nIqGHkfjCfwab29xfj+QQmppUIgrktN4g65lfSG8o+Qfh 4L99eZPJMgLzlNV/Xk5VZLiCZhVxluSP -----END CERTIFICATE-----Generated at Sat May 17 18:26:46 2025 by rpki-client