$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json) Hash identifier: IrHAAI9gpWtzA9IYXBjas8+ZlmFYVYZ18k6nQhK7Hbc= Subject key identifier: 44:D9:69:D4:4E:89:8D:6D:C3:D7:43:73:BA:76:93:E0:A8:10:CA:3C Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft Manifest number: 0158 Signing time: Tue 13 May 2025 03:19:43 +0000 Manifest this update: Tue 13 May 2025 03:19:43 +0000 Manifest next update: Tue 20 May 2025 03:19:43 +0000 Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: MDujml8DDpIefTW3RVa7Cj1FlYnEjEftwQ3v7NmNSco=) 2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: dKoEMXA8fRTWxjeYqmYYgyMSw9H1lwIw8Fa9EYm/xNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Validity Not Before: May 13 03:19:43 2025 GMT Not After : May 20 03:19:43 2025 GMT Subject: CN=6822ba4f-8885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:55:75:22:65:3c:b1:e6:75:ef:35:51:71: d2:84:20:1e:23:75:6e:4c:1d:78:e8:b2:61:29:51: a1:64:fe:36:f8:91:c3:3f:e7:7b:1a:43:b3:33:5a: db:2e:3b:30:7c:8c:43:02:e5:c7:c5:a4:60:ac:a5: b4:a7:0a:4e:3c:29:09:dc:90:2d:13:16:38:49:9d: 12:e0:24:99:fa:73:68:1e:8f:05:53:96:2a:66:0f: 6c:2f:bd:d2:56:bf:a8:10:28:4b:31:44:14:d7:92: 2b:66:af:8e:d9:67:5f:94:7f:bf:06:71:9e:ab:72: 4d:0b:e3:83:ec:54:ed:42:76:bc:d6:45:69:76:9e: aa:30:8e:23:a7:80:f2:ae:71:da:18:ac:3c:2a:ae: a8:4a:16:7e:b4:ea:c2:35:32:8b:86:32:56:d3:9e: 15:7b:c3:6d:c5:f8:44:c2:35:02:f8:1b:b3:92:dd: fc:e7:f7:c3:2f:08:43:72:3c:ac:0a:30:38:ff:04: 07:8d:a3:eb:02:98:9c:4c:5c:74:a3:3e:22:09:c5: 8d:08:62:c2:4b:94:94:4a:55:02:f0:9a:58:05:67: c0:ea:84:08:35:ab:d9:00:64:61:80:3c:c6:76:03: 71:5d:15:4f:f2:b1:bc:f6:64:40:59:28:e1:91:38: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D9:69:D4:4E:89:8D:6D:C3:D7:43:73:BA:76:93:E0:A8:10:CA:3C X509v3 Authority Key Identifier: keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:4d:f1:d8:3d:b8:ee:14:e4:4c:88:e5:50:02:3e:88:15:33: e2:10:82:d0:c6:65:f7:5a:ac:4b:6c:63:37:39:13:df:73:96: 31:97:2c:67:27:82:bd:c2:85:25:66:fe:fc:4f:d9:11:f5:11: 8b:51:9d:8c:54:4e:5e:35:cb:36:6f:27:6a:57:5a:f3:b5:d3: 4f:ea:51:07:ee:4b:7c:1c:25:7a:52:a1:f7:b2:49:3b:15:3a: 0f:7f:1a:c3:8c:14:8f:07:d6:fb:55:d6:ce:83:26:b0:02:a8: 4f:70:83:f5:a8:f3:31:a0:c3:a3:90:37:91:c2:91:e6:64:e5: 3a:e5:b3:fb:59:46:0e:0f:62:26:38:d3:f9:45:50:97:3c:d0: c6:7b:61:ae:98:cc:60:e9:0f:f3:19:90:89:e9:bc:d9:eb:44: 92:c5:46:20:5c:94:38:61:95:6b:74:1f:58:f9:2e:0d:90:81: 9c:19:df:3a:e5:6d:c3:a5:fc:a8:86:6c:30:72:4f:dc:25:57: 1b:3f:78:d7:2a:73:d3:44:50:f1:2b:c7:ca:1e:66:99:16:cd: 3e:44:46:fb:f6:7a:65:b9:9e:49:83:63:eb:74:da:b5:39:2f: 28:03:93:52:1c:f9:85:f0:80:dc:81:24:49:05:4a:90:87:dc: bb:e2:5b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QTIxMTAvBgNVBAUTKEY2OERDRUQyRTYwMkY0NDY1Njc0MTA5OTRBOEU4QzAy MTAwOUVEODkwHhcNMjUwNTEzMDMxOTQzWhcNMjUwNTIwMDMxOTQzWjAYMRYwFAYD VQQDEw02ODIyYmE0Zi04ODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA9VdSJlPLHmde81UXHShCAeI3VuTB146LJhKVGhZP42+JHDP+d7GkOzM1rb LjswfIxDAuXHxaRgrKW0pwpOPCkJ3JAtExY4SZ0S4CSZ+nNoHo8FU5YqZg9sL73S Vr+oEChLMUQU15IrZq+O2WdflH+/BnGeq3JNC+OD7FTtQna81kVpdp6qMI4jp4Dy rnHaGKw8Kq6oShZ+tOrCNTKLhjJW054Ve8NtxfhEwjUC+Buzkt385/fDLwhDcjys CjA4/wQHjaPrApicTFx0oz4iCcWNCGLCS5SUSlUC8JpYBWfA6oQINavZAGRhgDzG dgNxXRVP8rG89mRAWSjhkTiCMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETZadRO iY1tw9dDc7p2k+CoEMo8MB8GA1UdIwQYMBaAFPaNztLmAvRGVnQQmUqOjAIQCe2J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdBMi80MDZCNjEwMDI2 QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlFWldkQkNaU282TUFoQUo3 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvM08wdVlDOUVaV2RCQ1pTbzZNQWhBSjdZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdBMi80MDZCNjEwMDI2QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlF WldkQkNaU282TUFoQUo3WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYTfHYPbjuFORMiOVQAj6IFTPiEILQxmX3WqxLbGM3ORPfc5Yxlyxn J4K9woUlZv78T9kR9RGLUZ2MVE5eNcs2bydqV1rztdNP6lEH7kt8HCV6UqH3skk7 FToPfxrDjBSPB9b7VdbOgyawAqhPcIP1qPMxoMOjkDeRwpHmZOU65bP7WUYOD2Im ONP5RVCXPNDGe2GumMxg6Q/zGZCJ6bzZ60SSxUYgXJQ4YZVrdB9Y+S4NkIGcGd86 5W3Dpfyohmwwck/cJVcbP3jXKnPTRFDxK8fKHmaZFs0+REb79npluZ5Jg2PrdNq1 OS8oA5NSHPmF8IDcgSRJBUqQh9y74lts -----END CERTIFICATE-----Generated at Tue May 13 14:55:29 2025 by rpki-client