$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft File: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json) Hash identifier: b9CcqiKv13TMAeAkyey3DizcwI0L3IIO/aZ1OakppCs= Subject key identifier: D9:AF:28:46:93:25:41:28:6E:F9:05:EF:00:B5:46:7F:7C:A4:94:B5 Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft Manifest number: 3C Signing time: Tue 13 May 2025 06:44:53 +0000 Manifest this update: Tue 13 May 2025 06:44:53 +0000 Manifest next update: Tue 20 May 2025 06:44:53 +0000 Files and hashes: 1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: zJiVWN796pVjLOlBM5PwQ7tdOndL7qHtIvyaxaSDBV4=) 2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: +D4BVGFKWyg9Pr75Q40/ty5hMk4DuavCG4i3TGDDyg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Validity Not Before: May 13 06:44:53 2025 GMT Not After : May 20 06:44:53 2025 GMT Subject: CN=6822ea65-318c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:04:aa:43:36:68:de:bd:a3:f9:20:56:c1: c4:86:6f:d7:d2:07:ad:de:81:61:9c:ec:75:d5:61: dd:c3:14:09:8c:d0:df:d2:30:eb:5f:65:ca:bb:e3: 33:8d:8e:c3:81:9c:2b:c7:f2:8d:f9:ff:ec:d4:a0: 1a:4b:1f:bf:82:02:c6:19:57:d0:2a:7e:b6:8e:c3: 47:b2:18:37:bf:65:5c:41:61:e3:a6:93:f5:64:e8: 17:00:01:ea:46:b2:e9:10:0c:62:58:ad:bb:c7:0a: 19:59:87:db:8c:2b:ec:df:e1:13:a5:c1:37:96:b8: ff:a5:4b:16:47:c1:85:c4:75:5e:bc:d6:46:01:32: 7c:0c:4f:b2:02:8e:60:39:a7:ed:a8:fd:98:f1:90: 7c:e6:26:a6:6e:b9:d3:4f:51:3d:6a:03:83:83:93: 04:29:36:7c:be:67:f0:eb:bb:9b:af:d7:4b:6c:9c: c2:02:7e:28:6b:0f:b4:6b:98:73:de:57:dc:f7:0b: c3:0b:12:1a:d0:b5:da:ee:cb:14:e5:88:df:ff:2f: 05:f5:f0:18:6b:2d:f5:bd:a4:f2:2d:c3:16:bf:78: ba:0d:e5:3d:3b:24:5b:97:ca:2d:bd:b4:73:e7:4e: 7d:ff:4c:53:dd:bb:b9:c2:1c:aa:47:c3:fb:66:4c: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AF:28:46:93:25:41:28:6E:F9:05:EF:00:B5:46:7F:7C:A4:94:B5 X509v3 Authority Key Identifier: keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e3:d7:e8:8b:d9:f5:20:18:30:26:fe:e5:a8:35:af:d7:23: 49:da:72:96:52:c4:e1:0e:b8:e0:85:a5:f4:88:ed:51:c9:1a: ed:c1:90:b6:f0:e3:65:43:b0:62:dc:b4:43:d6:90:b0:f4:11: c3:63:9a:40:ed:27:17:4f:05:dc:05:2c:2a:7b:9b:66:2c:cc: 37:36:b9:df:ba:1b:03:2d:c9:03:be:10:4f:f7:d5:31:36:8f: ee:96:fb:8d:e6:e0:bb:d3:98:18:5d:53:49:f0:a8:32:94:be: 70:7d:ff:6a:8d:ce:50:2a:c9:70:69:fe:57:85:75:a2:aa:dc: c5:b8:7b:82:d1:c2:d7:5b:55:07:10:6f:4c:f9:35:5c:91:99: f2:07:df:33:68:16:df:c2:81:77:4a:bc:67:47:ad:bb:fd:64: 74:9e:97:43:c3:bd:14:d1:30:7e:4e:14:98:fc:81:87:04:9b: a9:1b:ec:57:7d:c1:63:a7:6e:d4:65:77:c7:51:bc:c8:5e:20: e1:6e:87:bf:d6:65:f2:ca:e9:49:6b:88:0d:01:c0:5d:f4:ad: 7e:e7:88:a6:00:83:ee:3a:d3:97:9f:cc:84:c1:42:ec:9b:09: 37:24:4b:fe:7c:72:d1:6e:08:c3:8d:8f:a8:af:fc:08:b4:9f: c7:07:c1:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NCRTExMC8GA1UEBRMoOUExNjI0RjQ2MDgyRjU0QUM1Nzc4ODU5RTIyNkJEM0JB NjkwMjNGNDAeFw0yNTA1MTMwNjQ0NTNaFw0yNTA1MjAwNjQ0NTNaMBgxFjAUBgNV BAMTDTY4MjJlYTY1LTMxOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyyQSqQzZo3r2j+SBWwcSGb9fSB63egWGc7HXVYd3DFAmM0N/SMOtfZcq74zON jsOBnCvH8o35/+zUoBpLH7+CAsYZV9AqfraOw0eyGDe/ZVxBYeOmk/Vk6BcAAepG sukQDGJYrbvHChlZh9uMK+zf4ROlwTeWuP+lSxZHwYXEdV681kYBMnwMT7ICjmA5 p+2o/ZjxkHzmJqZuudNPUT1qA4ODkwQpNny+Z/Dru5uv10tsnMICfihrD7RrmHPe V9z3C8MLEhrQtdruyxTliN//LwX18BhrLfW9pPItwxa/eLoN5T07JFuXyi29tHPn Tn3/TFPdu7nCHKpHw/tmTB3pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2a8oRpMl QShu+QXvALVGf3yklLUwHwYDVR0jBBgwFoAUmhYk9GCC9UrFd4hZ4ia9O6aQI/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0JFLzgzQkE4N0FFRDdD MjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVyRmQ0aFo0aWE5TzZhUUlf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWhZazlHQ0M5VXJGZDRoWjRpYTlPNmFRSV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0JFLzgzQkE4N0FFRDdDMjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVy RmQ0aFo0aWE5TzZhUUlfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFfj1+iL2fUgGDAm/uWoNa/XI0nacpZSxOEOuOCFpfSI7VHJGu3BkLbw 42VDsGLctEPWkLD0EcNjmkDtJxdPBdwFLCp7m2YszDc2ud+6GwMtyQO+EE/31TE2 j+6W+43m4LvTmBhdU0nwqDKUvnB9/2qNzlAqyXBp/leFdaKq3MW4e4LRwtdbVQcQ b0z5NVyRmfIH3zNoFt/CgXdKvGdHrbv9ZHSel0PDvRTRMH5OFJj8gYcEm6kb7Fd9 wWOnbtRld8dRvMheIOFuh7/WZfLK6UlriA0BwF30rX7niKYAg+4605efzITBQuyb CTckS/58ctFuCMONj6iv/Ai0n8cHwU0= -----END CERTIFICATE-----Generated at Wed May 14 19:44:31 2025 by rpki-client