$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft File: -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json) Hash identifier: 6bpeDxw+6UMPFMITDRMWujXDlHiu5kDSgYxvnOeChVw= Subject key identifier: 8A:46:62:7A:42:B1:86:5A:2A:F1:FC:59:CB:DB:86:EC:14:24:3B:E2 Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft Manifest number: 3F Signing time: Thu 15 May 2025 06:48:14 +0000 Manifest this update: Thu 15 May 2025 06:48:13 +0000 Manifest next update: Thu 22 May 2025 06:48:13 +0000 Files and hashes: 1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: aDr2EDb8/fJPpcSE41djAYnXDJvb8Ip+XqbzQIfK1Eg=) 2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: Q8ipP3E5cVxqpK+wwh4P32pECYgAwVU6B1+eB8QC8yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB Validity Not Before: May 15 06:48:13 2025 GMT Not After : May 22 06:48:13 2025 GMT Subject: CN=68258e2d-8cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:0b:88:e8:ca:4e:cb:69:38:79:dc:9a:fa: 69:cf:63:ab:14:a5:8d:4f:be:d4:7a:bc:69:db:d3: 88:66:fd:ef:6b:c8:65:c2:42:0c:bd:ef:9b:a1:42: 50:58:14:48:8d:fb:44:b5:70:78:d5:01:7b:b9:59: 94:04:54:d8:c2:bc:34:2a:ae:93:05:b8:f8:ce:ce: 44:ec:53:0a:90:c7:dc:e7:ec:a3:a3:e3:5b:63:02: 2c:ee:3e:a9:30:7a:a6:09:77:1c:de:ac:41:0c:52: ed:45:85:f4:ca:95:12:33:03:bd:2f:a7:e1:5d:18: 21:26:dc:6f:8c:a4:60:19:43:17:d2:38:a1:9d:97: 56:60:76:6e:90:a3:9f:f3:c6:51:be:64:07:92:28: 13:06:b0:d6:ad:5d:12:0d:21:9c:bf:d3:5e:b2:60: 96:a2:46:34:9f:fa:99:e6:05:da:09:27:6c:47:a5: 90:52:99:85:a3:80:44:2b:28:24:ba:a0:55:e3:01: 13:78:bf:28:2e:ce:2e:71:e2:f5:7f:c9:d7:c8:c0: 10:ea:8f:40:99:78:55:66:9e:a6:cc:82:07:ec:6c: df:bf:3f:bf:71:6f:b9:65:02:e1:c8:1d:d4:e2:4e: 56:d1:71:f3:00:cb:a0:67:2b:d0:bd:b2:34:9c:8e: c6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:46:62:7A:42:B1:86:5A:2A:F1:FC:59:CB:DB:86:EC:14:24:3B:E2 X509v3 Authority Key Identifier: keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:aa:94:4d:08:56:6d:31:2a:45:69:32:82:67:0c:90:68:79: e1:a2:e6:bf:d1:45:86:e3:3d:da:52:eb:ac:82:45:0f:7a:f2: 89:47:74:44:6a:a1:00:89:a8:84:01:5a:a7:90:60:50:d0:82: c8:a3:88:8b:02:9b:2a:ee:da:24:8b:7b:3f:11:d3:11:7e:7f: 80:6c:e8:f8:a8:3d:19:5a:6b:53:d7:e3:a9:47:f4:b1:67:de: 9d:4b:b0:ba:52:f7:79:0e:e0:9b:c7:c3:e2:09:cf:44:cc:f8: d5:04:09:cb:7b:9a:44:4b:9d:cc:b8:60:8a:8d:c6:f4:f8:fe: 08:87:8d:69:ee:7e:88:12:16:e1:83:06:80:75:35:42:fb:9b: 54:6a:3a:7c:0d:00:0a:d0:5a:72:a8:8c:11:4d:e5:df:a7:5e: 1e:6c:66:d9:d7:0f:15:84:cf:1d:6a:ba:df:ff:a5:13:cb:49: b1:fc:83:e8:a5:d9:6b:20:f8:58:e4:f0:18:6b:89:b5:95:9b: 81:91:14:9c:c6:95:8c:9a:62:dc:21:23:6b:9a:75:ae:de:99: 58:c0:02:69:3e:d1:63:2f:f5:e9:45:d7:a3:f8:69:54:c3:8d: 87:f8:b6:08:7a:2b:4e:30:64:4e:87:fc:d6:0d:60:fe:cf:43: 97:be:6a:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDU5RDExMC8GA1UEBRMoRkI0ODg1NjhFNzUyMEJDNzgyQTExOTg5NzYyOTAzMEVE MDY5NUNEQjAeFw0yNTA1MTUwNjQ4MTNaFw0yNTA1MjIwNjQ4MTNaMBgxFjAUBgNV BAMTDTY4MjU4ZTJkLThjZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEQguI6MpOy2k4edya+mnPY6sUpY1PvtR6vGnb04hm/e9ryGXCQgy975uhQlBY FEiN+0S1cHjVAXu5WZQEVNjCvDQqrpMFuPjOzkTsUwqQx9zn7KOj41tjAizuPqkw eqYJdxzerEEMUu1FhfTKlRIzA70vp+FdGCEm3G+MpGAZQxfSOKGdl1Zgdm6Qo5/z xlG+ZAeSKBMGsNatXRINIZy/016yYJaiRjSf+pnmBdoJJ2xHpZBSmYWjgEQrKCS6 oFXjARN4vyguzi5x4vV/ydfIwBDqj0CZeFVmnqbMggfsbN+/P79xb7llAuHIHdTi TlbRcfMAy6BnK9C9sjScjsYTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUikZiekKx hloq8fxZy9uG7BQkO+IwHwYDVR0jBBgwFoAU+0iFaOdSC8eCoRmJdikDDtBpXNsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0NTlELzBCM0Y2NjVBRDYw RjExRUZCMEZBNTMzRkM0RjlBRTAyLy0waUZhT2RTQzhlQ29SbUpkaWtERHRCcFhO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTBpRmFPZFNDOGVDb1JtSmRpa0REdEJwWE5zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 NTlELzBCM0Y2NjVBRDYwRjExRUZCMEZBNTMzRkM0RjlBRTAyLy0waUZhT2RTQzhl Q29SbUpkaWtERHRCcFhOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMSqlE0IVm0xKkVpMoJnDJBoeeGi5r/RRYbjPdpS66yCRQ968olHdERq oQCJqIQBWqeQYFDQgsijiIsCmyru2iSLez8R0xF+f4Bs6PioPRlaa1PX46lH9LFn 3p1LsLpS93kO4JvHw+IJz0TM+NUECct7mkRLncy4YIqNxvT4/giHjWnufogSFuGD BoB1NUL7m1RqOnwNAArQWnKojBFN5d+nXh5sZtnXDxWEzx1qut//pRPLSbH8g+il 2Wsg+Fjk8BhribWVm4GRFJzGlYyaYtwhI2uada7emVjAAmk+0WMv9elF16P4aVTD jYf4tgh6K04wZE6H/NYNYP7PQ5e+aiU= -----END CERTIFICATE-----Generated at Sat May 17 00:16:58 2025 by rpki-client