$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft File: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft (raw, json) Hash identifier: 6tp/bdd9DP6467tgrDMXsTOnuJ2DB2xjvXJehBPVM2w= Subject key identifier: 7D:EB:7E:B9:23:6D:6E:9A:AA:5E:7A:EC:99:47:05:4C:16:B1:57:90 Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 Certificate issuer: /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft Manifest number: 01BC Signing time: Thu 15 May 2025 02:37:43 +0000 Manifest this update: Thu 15 May 2025 02:37:42 +0000 Manifest next update: Thu 22 May 2025 02:37:42 +0000 Files and hashes: 1: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl (hash: iBAOHx1nN5llvPnQW0IwkftKI+YgJ4MjO/Sa8ipQEPk=) 2: 56D1860A97D411ED801D7E41C4F9AE02.roa (hash: C5xmuiW1qdvlYmxgBJhQt0Eam4dFMifTqr76aJr0Pzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA48, serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Validity Not Before: May 15 02:37:42 2025 GMT Not After : May 22 02:37:42 2025 GMT Subject: CN=68255376-a8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:f9:77:96:6e:d8:65:72:c9:a3:a2:7f:18: b5:42:c5:3c:46:e4:10:3e:99:06:04:ab:16:a3:3e: 62:16:dc:16:7d:ab:e3:33:73:40:8d:98:31:17:66: cf:23:f6:8c:c1:82:00:c7:ea:08:fd:6c:51:50:f3: 0b:2f:5b:1a:c6:6c:05:2c:e5:38:57:de:e1:2a:ae: 54:d0:2c:c5:0c:00:38:79:07:6f:34:2e:cb:9a:c7: 59:35:2a:3f:3b:93:75:b5:37:de:27:b6:64:d6:a0: ea:2d:19:12:44:f0:e7:ae:29:17:6f:d4:58:09:5d: c4:bb:c7:97:08:75:db:d7:d7:07:35:e2:6f:e1:c3: 13:f7:07:7a:64:d2:79:ea:5e:11:0a:e3:2e:20:16: d5:55:d2:71:34:c6:65:2c:d3:3e:da:d1:6d:c9:e5: 63:e7:18:1a:82:51:ce:49:d4:2c:0b:22:5e:a5:5b: 0c:e4:b8:77:22:8b:56:8f:28:4a:e8:82:b9:8c:db: e5:ca:76:62:d2:65:5f:d4:40:4e:fb:bf:1a:6b:83: b7:d8:e1:a6:2d:be:e3:ea:22:82:84:f1:21:90:9a: c4:b0:e8:06:45:6d:6b:6e:03:f5:b5:60:b4:6e:e6: 24:9b:44:d8:40:c1:78:73:21:3a:b7:00:92:80:49: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EB:7E:B9:23:6D:6E:9A:AA:5E:7A:EC:99:47:05:4C:16:B1:57:90 X509v3 Authority Key Identifier: keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:82:3a:b8:12:f2:56:9e:28:e4:16:b6:1b:37:6f:2b:68:33: 41:ae:4c:95:4c:fb:25:49:2f:a6:e6:92:81:7c:d5:cf:b0:50: 39:4c:a9:0b:f2:df:e1:27:a6:fc:5f:23:17:56:c0:95:fb:61: 25:39:de:39:97:05:b6:94:52:7f:83:df:49:4e:14:66:da:6e: a1:6d:14:b9:80:44:a5:eb:c9:cf:17:eb:df:8c:b3:22:5f:9d: 6d:86:e9:97:e6:26:85:f1:ec:32:aa:a8:90:42:47:e7:4f:f0: 1b:78:90:64:0a:a6:49:76:44:c2:de:65:ab:d8:b5:37:4f:2b: 52:92:48:c3:67:82:07:9e:07:0e:50:80:cc:33:61:6d:e9:fd: 16:d2:0b:eb:ee:fc:9a:ae:dc:90:cf:80:b7:78:d9:4b:17:4a: 1f:04:e2:27:00:0e:52:90:5a:24:5e:49:8b:f7:56:f1:04:f8: 7e:db:1f:b4:63:31:7f:01:11:15:19:5f:91:53:ed:bd:25:b3: 9c:10:f0:3d:2a:d4:ae:15:ca:3a:2a:72:58:71:f7:84:9b:f1: 7a:39:0a:48:0f:21:79:d9:87:cd:21:21:5e:0c:18:ca:e2:30: cc:fe:86:6b:11:9d:2d:7e:61:8b:a4:27:ea:25:31:f9:4c:4b: 0f:82:50:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBNDgxMTAvBgNVBAUTKEY1RkQyNzRBRjI3Q0U5NUY2OTJEQjgwQkU4RUY2N0Mz MjQ2MDJCNDgwHhcNMjUwNTE1MDIzNzQyWhcNMjUwNTIyMDIzNzQyWjAYMRYwFAYD VQQDEw02ODI1NTM3Ni1hOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppv5d5Zu2GVyyaOifxi1QsU8RuQQPpkGBKsWoz5iFtwWfavjM3NAjZgxF2bP I/aMwYIAx+oI/WxRUPMLL1saxmwFLOU4V97hKq5U0CzFDAA4eQdvNC7LmsdZNSo/ O5N1tTfeJ7Zk1qDqLRkSRPDnrikXb9RYCV3Eu8eXCHXb19cHNeJv4cMT9wd6ZNJ5 6l4RCuMuIBbVVdJxNMZlLNM+2tFtyeVj5xgaglHOSdQsCyJepVsM5Lh3IotWjyhK 6IK5jNvlynZi0mVf1EBO+78aa4O32OGmLb7j6iKChPEhkJrEsOgGRW1rbgP1tWC0 buYkm0TYQMF4cyE6twCSgEkSbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3rfrkj bW6aql567JlHBUwWsVeQMB8GA1UdIwQYMBaAFPX9J0ryfOlfaS24C+jvZ8MkYCtI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkE0OC9GNzM3MTNGNjk3 RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZWOXBMYmdMNk85bnd5UmdL MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmMG5Tdko4NlY5cExiZ0w2Tzlud3lSZ0swZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkE0OC9GNzM3MTNGNjk3RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZW OXBMYmdMNk85bnd5UmdLMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBugjq4EvJWnijkFrYbN28raDNBrkyVTPslSS+m5pKBfNXPsFA5TKkL 8t/hJ6b8XyMXVsCV+2ElOd45lwW2lFJ/g99JThRm2m6hbRS5gESl68nPF+vfjLMi X51thumX5iaF8ewyqqiQQkfnT/AbeJBkCqZJdkTC3mWr2LU3TytSkkjDZ4IHngcO UIDMM2Ft6f0W0gvr7vyartyQz4C3eNlLF0ofBOInAA5SkFokXkmL91bxBPh+2x+0 YzF/AREVGV+RU+29JbOcEPA9KtSuFco6KnJYcfeEm/F6OQpIDyF52YfNISFeDBjK 4jDM/oZrEZ0tfmGLpCfqJTH5TEsPglAU -----END CERTIFICATE-----Generated at Thu May 15 22:54:51 2025 by rpki-client