$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft File: R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json) Hash identifier: /t+/fkFrvYdaVUpbkv8tubJfX0vXM7ojM9FIX5AhNBc= Subject key identifier: 38:4B:72:6B:3E:BD:68:84:BB:46:21:B5:5B:30:6F:BB:04:76:29:CD Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Certificate serial: 0630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft Manifest number: 061C Signing time: Mon 12 May 2025 22:36:42 +0000 Manifest this update: Mon 12 May 2025 22:36:41 +0000 Manifest next update: Mon 19 May 2025 22:36:41 +0000 Files and hashes: 1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: 97yR70JCETSke0QKEi5kXhCPwdxEFszBQqvQkxkh0j0=) 2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: qO/kt1cMyB8zrA4ykFY3E6NDvsrSs/t7vGIuj96fEPU=) 3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: 5VW5u5nV4cWkOhmuhHmaXAMAI+xByp0pPJ4g2dPBTqE=) 4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: l5U4Aj0G/of9H3Qhhfeqyo1Zivkl+XdCF8RMvmc+X6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1584 (0x630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Validity Not Before: May 12 22:36:41 2025 GMT Not After : May 19 22:36:41 2025 GMT Subject: CN=682277fa-e464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:69:04:83:f5:df:fb:b3:57:01:20:46:8b: a5:46:af:24:d9:62:ed:d0:d9:9f:c5:e7:51:58:bf: 78:87:a2:73:26:1b:3c:29:80:48:a1:f0:46:4d:58: ca:8f:c8:53:d1:64:5c:29:24:07:8a:9c:70:1f:6d: c0:79:6c:e4:c2:79:b3:32:8d:d2:17:ad:ca:7e:6d: 03:bd:ac:ed:e0:8b:ab:6b:28:7a:4c:10:cd:31:11: 0c:1b:80:dc:bc:50:44:f1:75:a1:c7:90:51:13:ce: 9f:aa:f7:16:47:66:cd:cf:84:5c:c7:91:5a:d7:ec: ef:00:92:80:79:f6:e5:0c:fd:b6:d4:28:d5:6a:9a: fb:64:67:2f:31:a4:cf:d2:60:f5:85:bc:69:9c:b7: aa:4d:8e:1f:f1:ed:cd:fa:67:92:2c:f5:ae:c4:c2: 41:e6:0d:c3:28:4f:46:8b:e6:e6:11:e3:90:7a:9b: f2:a3:f3:d3:70:f6:a2:ec:b3:3b:ac:11:a5:42:24: 4a:1d:ba:c2:06:d9:92:de:9c:cf:c8:39:d0:60:6d: 0c:57:74:25:14:44:e8:7f:f1:ed:60:e7:30:05:cd: 35:6f:e7:66:63:c0:b5:b6:ee:b1:0f:1f:45:e6:b9: a3:94:51:f0:ec:52:cf:6c:55:9a:52:6d:fb:e0:c8: cc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4B:72:6B:3E:BD:68:84:BB:46:21:B5:5B:30:6F:BB:04:76:29:CD X509v3 Authority Key Identifier: keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:39:25:27:d6:e4:af:81:b2:cd:75:0e:7c:9c:38:02:e0:78: ea:7f:85:05:23:f4:b0:6e:61:11:74:e1:ee:af:42:7d:39:59: 07:eb:c0:e3:1a:44:4a:6f:bb:82:52:28:b1:16:5f:8e:4e:e2: 66:ea:42:73:87:14:ed:b8:85:d4:92:67:3b:29:ec:2b:86:7f: 77:6b:c3:f3:1f:48:19:6e:59:f3:d7:c7:a6:79:04:7f:4f:4a: 00:14:61:8e:34:d8:1d:d4:27:f0:d6:e8:8f:f3:50:86:92:12: 2a:66:af:c7:24:a0:1c:6a:b6:55:95:5d:25:9f:0c:b3:c1:e7: 66:de:5b:82:5a:e5:49:d3:a0:d1:97:2c:bf:f2:ef:38:82:7f: d9:ad:21:26:b6:8c:74:f4:32:c9:08:f9:7b:ec:65:a0:59:54: e2:e2:e4:6b:b2:74:8d:3b:9e:ac:c2:0f:bb:62:b2:15:ae:a6: 70:72:74:f6:7e:c7:f4:d8:5e:cb:2d:6b:a0:56:8a:ba:c7:79: 7d:e5:46:c6:fa:8a:5a:55:c7:50:d8:1e:f5:0c:0f:a8:1c:3b: 21:f1:98:c2:90:e2:75:08:da:07:5a:57:f1:7b:a4:e6:58:05: dc:ea:04:43:3e:09:a9:78:bb:71:71:78:69:a7:5d:76:83:f3: 34:e0:75:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1 NjNBMkNFOTQwHhcNMjUwNTEyMjIzNjQxWhcNMjUwNTE5MjIzNjQxWjAYMRYwFAYD VQQDEw02ODIyNzdmYS1lNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjhpBIP13/uzVwEgRoulRq8k2WLt0NmfxedRWL94h6JzJhs8KYBIofBGTVjK j8hT0WRcKSQHipxwH23AeWzkwnmzMo3SF63Kfm0Dvazt4Iurayh6TBDNMREMG4Dc vFBE8XWhx5BRE86fqvcWR2bNz4Rcx5Fa1+zvAJKAefblDP221CjVapr7ZGcvMaTP 0mD1hbxpnLeqTY4f8e3N+meSLPWuxMJB5g3DKE9Gi+bmEeOQepvyo/PTcPai7LM7 rBGlQiRKHbrCBtmS3pzPyDnQYG0MV3QlFETof/HtYOcwBc01b+dmY8C1tu6xDx9F 5rmjlFHw7FLPbFWaUm374MjMHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhLcms+ vWiEu0YhtVswb7sEdinNMB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExRC80NTRCQ0RBNDlFOTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVW TXpNYmk4d3VtQ2xXT2l6cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUOSUn1uSvgbLNdQ58nDgC4Hjqf4UFI/SwbmERdOHur0J9OVkH68Dj GkRKb7uCUiixFl+OTuJm6kJzhxTtuIXUkmc7Kewrhn93a8PzH0gZblnz18emeQR/ T0oAFGGONNgd1Cfw1uiP81CGkhIqZq/HJKAcarZVlV0lnwyzwedm3luCWuVJ06DR lyy/8u84gn/ZrSEmtox09DLJCPl77GWgWVTi4uRrsnSNO56swg+7YrIVrqZwcnT2 fsf02F7LLWugVoq6x3l95UbG+opaVcdQ2B71DA+oHDsh8ZjCkOJ1CNoHWlfxe6Tm WAXc6gRDPgmpeLtxcXhpp112g/M04HVT -----END CERTIFICATE-----Generated at Wed May 14 10:01:44 2025 by rpki-client