$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json) Hash identifier: zqLiuILBP0KlGZdrzA0j2OfAq4mZ47u4+Y0/3joP5cQ= Subject key identifier: 61:9E:48:22:38:C1:3D:B7:F4:3B:16:3D:BE:86:4D:19:F7:83:F6:07 Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Certificate serial: 3481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft Manifest number: 3480 Signing time: Mon 12 May 2025 14:53:53 +0000 Manifest this update: Mon 12 May 2025 14:53:52 +0000 Manifest next update: Mon 19 May 2025 14:53:52 +0000 Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: Dq5N/tOsseanc+6KAaQcx6uVbQ2DnOZQ/OY/nlNGKuc=) 2: AA15744E2B0111F09CD4A96AC4F9AE02.roa (hash: 45hnvJuRb+v92htfdvjwOgRNSDtIXR5oDwj0w/Xa5e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Validity Not Before: May 12 14:53:52 2025 GMT Not After : May 19 14:53:52 2025 GMT Subject: CN=68220b80-0bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:71:72:71:26:2b:71:6f:d2:04:70:9f:71:e2: 38:42:21:2f:4f:30:30:6f:e8:0e:53:e6:49:60:75: b0:a8:67:5b:1a:ff:85:ff:8e:f9:5e:63:59:1f:c9: 6d:2f:3c:d7:bb:de:48:b7:dd:52:50:a4:00:3f:04: 89:7c:a7:b0:46:1a:83:f2:85:59:99:af:ae:0e:dc: ad:06:72:9d:08:76:0c:2a:d3:ba:26:d8:df:e4:b2: 06:96:af:af:32:b3:46:d3:13:9e:ef:3c:87:87:cc: 99:5c:58:90:c7:68:63:5a:bc:c6:ee:48:03:45:f1: e1:de:ab:3d:95:89:bf:25:df:bb:dc:6f:d7:24:9a: a5:43:aa:17:6c:00:3f:32:da:5a:4d:bf:fb:16:18: 7f:d8:e6:69:c7:c6:07:ca:1d:c1:b1:d6:7c:72:66: 27:c7:64:b5:ef:3a:c0:fb:1c:97:cb:29:8a:b6:d0: 33:60:5f:c3:72:e4:0c:d9:7d:12:fd:41:d9:6b:87: 30:a0:fb:62:2d:2f:d3:a5:56:2d:21:47:2d:80:ab: bf:e5:a2:fe:e4:76:1b:d4:f8:df:d5:ba:59:01:b9: 89:84:31:25:db:c8:ee:ce:e5:db:38:56:a0:75:42: 94:33:65:2d:26:8b:db:bc:b0:b1:92:a1:95:b8:3e: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9E:48:22:38:C1:3D:B7:F4:3B:16:3D:BE:86:4D:19:F7:83:F6:07 X509v3 Authority Key Identifier: keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3c:ce:13:84:d8:14:fa:39:80:ab:19:8c:f7:1b:6f:f3:d2: e7:38:d0:5d:a9:55:e0:b8:b6:e8:91:bb:25:cd:27:70:bc:ff: c3:0f:20:19:03:e2:4e:63:6d:bc:2e:1d:ab:6d:ac:8b:a9:f3: 7f:d3:35:70:c1:25:45:10:00:20:e8:93:46:a2:6b:22:75:16: fa:c9:4f:22:54:ca:1c:22:dc:8a:4e:ea:44:1d:83:13:65:6f: 03:46:f7:4b:f6:39:e8:e8:23:79:0d:0a:0d:7c:f3:6a:52:17: af:86:73:5b:97:8c:b7:85:af:c8:79:7b:cf:fb:52:23:3a:9a: a0:03:05:2a:fd:e9:14:14:25:e9:b4:0e:3d:b7:03:bc:13:b6: 85:4b:13:1e:56:75:5a:8b:7e:e5:e9:4d:82:4d:13:2b:ac:95: 3b:cc:39:7d:64:eb:8e:ac:bb:86:aa:8c:af:29:df:11:8b:4b: d2:fe:90:6d:e2:60:40:55:d2:6f:b7:a5:a3:ff:c9:ea:9f:da: 21:90:94:62:14:cf:35:28:8d:c4:b2:75:a0:c4:57:8a:71:86: 92:62:19:84:39:f3:49:8d:80:49:34:d2:9b:d3:6a:74:e5:06: 23:d8:83:c7:66:a2:4e:6a:82:63:9d:0b:29:8c:5a:52:ff:61: 87:3e:61:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNjQxMTAvBgNVBAUTKDlBNTY2QTEyRTFCQzQ2MzUzMjZGNUUwMkFFRTlEQjcx ODFERDNCREUwHhcNMjUwNTEyMTQ1MzUyWhcNMjUwNTE5MTQ1MzUyWjAYMRYwFAYD VQQDEw02ODIyMGI4MC0wYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nFycSYrcW/SBHCfceI4QiEvTzAwb+gOU+ZJYHWwqGdbGv+F/475XmNZH8lt LzzXu95It91SUKQAPwSJfKewRhqD8oVZma+uDtytBnKdCHYMKtO6Jtjf5LIGlq+v MrNG0xOe7zyHh8yZXFiQx2hjWrzG7kgDRfHh3qs9lYm/Jd+73G/XJJqlQ6oXbAA/ MtpaTb/7Fhh/2OZpx8YHyh3BsdZ8cmYnx2S17zrA+xyXyymKttAzYF/DcuQM2X0S /UHZa4cwoPtiLS/TpVYtIUctgKu/5aL+5HYb1Pjf1bpZAbmJhDEl28juzuXbOFag dUKUM2UtJovbvLCxkqGVuD4TpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGeSCI4 wT239DsWPb6GTRn3g/YHMB8GA1UdIwQYMBaAFJpWahLhvEY1Mm9eAq7p23GB3Tve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI2NC9FQTU5QTg1QTFE OTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJqVXliMTRDcnVuYmNZSGRP OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sWnFFdUc4UmpVeWIxNENydW5iY1lIZE85NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI2NC9FQTU5QTg1QTFEOTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJq VXliMTRDcnVuYmNZSGRPOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOPM4ThNgU+jmAqxmM9xtv89LnONBdqVXguLbokbslzSdwvP/DDyAZ A+JOY228Lh2rbayLqfN/0zVwwSVFEAAg6JNGomsidRb6yU8iVMocItyKTupEHYMT ZW8DRvdL9jno6CN5DQoNfPNqUhevhnNbl4y3ha/IeXvP+1IjOpqgAwUq/ekUFCXp tA49twO8E7aFSxMeVnVai37l6U2CTRMrrJU7zDl9ZOuOrLuGqoyvKd8Ri0vS/pBt 4mBAVdJvt6Wj/8nqn9ohkJRiFM81KI3EsnWgxFeKcYaSYhmEOfNJjYBJNNKb02p0 5QYj2IPHZqJOaoJjnQspjFpS/2GHPmE/ -----END CERTIFICATE-----Generated at Tue May 13 05:01:58 2025 by rpki-client