$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft File: -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json) Hash identifier: o52meU8x34soQTVChDtkdqPdOem7aSQ8QbuB+YA5PrE= Subject key identifier: 48:62:EF:A2:4B:6D:6A:B3:4C:BA:33:32:93:51:57:26:2E:21:3B:7D Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 Certificate issuer: /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft Manifest number: 0131 Signing time: Thu 15 May 2025 03:55:58 +0000 Manifest this update: Thu 15 May 2025 03:55:58 +0000 Manifest next update: Thu 22 May 2025 03:55:57 +0000 Files and hashes: 1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: azOcQThUgDDaiNxaF+7ipCIkaTqgAvVRAQ3J+tRsWwU=) 2: 98647190660511EE9F741151C4F9AE02.roa (hash: e+txXDDxOVgsnDumxQz73KTXT5VsRCiU70K17gULEyo=) 3: B0EBC1C862D111EEB797E270C4F9AE02.roa (hash: uhWuVXhTDAjPShdJrXnZxr0ARCm+SFwovWX+zDp8Oy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1 Validity Not Before: May 15 03:55:58 2025 GMT Not After : May 22 03:55:57 2025 GMT Subject: CN=682565ce-3e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:49:37:ac:e5:8b:f3:8b:32:e8:69:f6:fa: 46:0d:20:d0:42:59:3c:e5:22:a2:c2:a8:f7:09:0c: f8:52:85:1c:d9:fc:72:ee:c8:3c:2c:5a:ef:af:58: e3:2b:ae:02:47:99:fe:ea:83:69:1b:8f:e4:cf:f7: 97:a9:eb:e2:0c:2b:7d:4d:c4:00:f2:86:e8:67:4b: 25:cd:92:3c:0d:bd:f5:c6:34:8c:c3:53:8c:f6:66: 60:6a:22:21:3b:26:69:f7:55:ac:b9:58:e3:cb:d4: 42:9a:14:d9:b4:8f:05:58:8f:a7:df:d5:5a:23:5a: 14:82:d3:50:93:33:c9:56:f1:c9:7f:cb:cd:8d:84: e3:1a:1d:50:c2:03:a9:f6:1d:02:46:54:ad:d2:ed: cd:f3:01:9b:96:e7:59:f3:20:aa:7c:4f:37:d8:3d: 66:c1:30:b3:fe:63:68:18:06:11:3a:7a:03:0e:fe: 23:ee:ac:11:50:f9:2f:e7:27:95:6e:e7:24:50:98: b7:2b:c2:e5:49:15:01:44:a4:2e:ff:71:b3:30:e2: 80:47:0a:ea:0e:1f:eb:e1:2e:4f:19:8b:31:b8:0b: 72:01:5a:b2:63:31:7b:06:8f:64:76:21:bc:42:0c: 9a:3d:6f:5b:ce:0f:4c:14:b9:1c:04:e6:90:35:44: 7f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:62:EF:A2:4B:6D:6A:B3:4C:BA:33:32:93:51:57:26:2E:21:3B:7D X509v3 Authority Key Identifier: keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:9a:5d:3a:6a:84:a7:85:ea:93:94:1d:e3:d3:a0:db:40:04: 05:af:70:4c:86:cd:6c:8a:e3:8f:23:23:32:9a:b1:52:a2:4e: dc:8b:ae:78:da:02:be:2c:5c:0c:34:a7:3d:ed:a7:70:5e:4c: 91:2a:56:70:cd:51:39:bd:ce:b8:94:15:14:3b:74:83:1a:99: bc:44:27:81:42:50:ec:34:05:1d:d9:d6:ca:a4:78:57:1f:e1: 02:75:22:52:bc:fc:62:dc:33:fb:42:3d:8b:5c:46:91:87:85: 68:84:d3:43:52:fd:22:b4:f8:03:5f:38:b9:24:b1:66:40:68: b0:58:ba:8a:4f:c9:96:2b:5b:58:bb:b8:dc:3d:7b:7f:25:97: 98:01:11:31:61:b1:6e:14:ba:5b:f5:65:92:96:30:f5:36:25: 85:f4:2e:5f:e6:74:5e:f7:e1:49:65:3a:8e:45:18:0c:c5:5c: c8:cb:fb:fc:42:6f:6a:1e:a9:de:92:88:46:97:73:47:c8:4f: 7a:1f:93:82:2d:66:3b:6c:96:e8:70:0e:16:fd:03:8a:e1:e2: 8c:13:9e:6b:50:2c:4e:97:1c:00:13:2e:68:47:82:49:4c:86: cb:91:a7:9e:4b:30:ed:40:bb:c8:b7:9e:a7:4e:44:e9:ce:09: ca:43:ca:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M2OEIxMTAvBgNVBAUTKEY5OEREQzM0MkY3RTI3QjY4Q0EwOEQzRDQ3QzdBNjlC MjY5NTVFQTEwHhcNMjUwNTE1MDM1NTU4WhcNMjUwNTIyMDM1NTU3WjAYMRYwFAYD VQQDEw02ODI1NjVjZS0zZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnZJN6zli/OLMuhp9vpGDSDQQlk85SKiwqj3CQz4UoUc2fxy7sg8LFrvr1jj K64CR5n+6oNpG4/kz/eXqeviDCt9TcQA8oboZ0slzZI8Db31xjSMw1OM9mZgaiIh OyZp91WsuVjjy9RCmhTZtI8FWI+n39VaI1oUgtNQkzPJVvHJf8vNjYTjGh1QwgOp 9h0CRlSt0u3N8wGbludZ8yCqfE832D1mwTCz/mNoGAYROnoDDv4j7qwRUPkv5yeV buckUJi3K8LlSRUBRKQu/3GzMOKARwrqDh/r4S5PGYsxuAtyAVqyYzF7Bo9kdiG8 QgyaPW9bzg9MFLkcBOaQNUR/yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhi76JL bWqzTLozMpNRVyYuITt9MB8GA1UdIwQYMBaAFPmN3DQvfie2jKCNPUfHppsmlV6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzY4Qi80RTlDMUY5MDYy RDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3YU1vSTA5UjhlbW15YVZY cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZM2NOQzktSjdhTW9JMDlSOGVtbXlhVlhxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzY4Qi80RTlDMUY5MDYyRDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3 YU1vSTA5UjhlbW15YVZYcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkml06aoSnheqTlB3j06DbQAQFr3BMhs1siuOPIyMymrFSok7ci654 2gK+LFwMNKc97adwXkyRKlZwzVE5vc64lBUUO3SDGpm8RCeBQlDsNAUd2dbKpHhX H+ECdSJSvPxi3DP7Qj2LXEaRh4VohNNDUv0itPgDXzi5JLFmQGiwWLqKT8mWK1tY u7jcPXt/JZeYARExYbFuFLpb9WWSljD1NiWF9C5f5nRe9+FJZTqORRgMxVzIy/v8 Qm9qHqnekohGl3NHyE96H5OCLWY7bJbocA4W/QOK4eKME55rUCxOlxwAEy5oR4JJ TIbLkaeeSzDtQLvIt56nTkTpzgnKQ8oH -----END CERTIFICATE-----Generated at Fri May 16 03:15:53 2025 by rpki-client