$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: B2aEV/osNRggdeoa5SMOtoYID/vjYJZyHJzyjQhGTGo= Subject key identifier: 9F:C3:12:DD:C3:D7:0F:D5:59:91:77:40:71:1D:1C:7D:3B:00:49:6E Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 3503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 34C3 Signing time: Sat 10 May 2025 14:44:30 +0000 Manifest this update: Sat 10 May 2025 14:44:29 +0000 Manifest next update: Sat 17 May 2025 14:44:29 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: wxM849rYnkpuQjidK+sSHzbo6w8uaixKb7/vXUsIOGs=) 2: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: yiAnHDFzUwZD8NgEs572n3xyr3663E+/9a3ArADXBpc=) 3: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: WlVHKhM+QwijE+SR8uQjozWScXJjKVRCH43Kmj5ogqo=) 4: 9E6876BCE2C911EF9C706014C4F9AE02.roa (hash: HpL5s0fx/k48lcKkhw5hAynAHc+E2GbcH0xb8v2hOgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13571 (0x3503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: May 10 14:44:29 2025 GMT Not After : May 17 14:44:29 2025 GMT Subject: CN=681f664d-c07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b4:d7:6d:e8:d1:fa:e8:cb:00:7d:06:8a:da: 77:30:6a:cc:00:0b:71:70:3c:f1:13:35:aa:80:1c: f0:f2:01:5d:28:ec:a3:5b:da:47:ea:1e:1d:e3:76: b4:0f:85:a7:33:4a:21:32:2e:84:9b:35:09:3d:a8: e1:f0:b6:75:57:f8:fd:cb:8e:b8:17:1e:e5:78:87: ef:84:67:cc:76:32:52:6e:4f:50:82:b7:bb:aa:ac: e0:db:db:3a:81:61:e3:ab:90:79:a7:dc:c1:92:79: 3e:a3:6f:39:ec:25:d4:50:c2:47:3b:32:f4:32:80: 56:df:51:22:77:50:95:67:50:03:57:f3:01:75:b7: f8:48:79:78:59:54:61:b8:47:bb:6b:9b:ef:33:f8: bd:41:57:35:69:71:60:0d:29:2c:62:0b:66:27:9f: 61:5f:ca:6a:e6:33:c3:ae:ad:c4:39:ce:5d:6e:7f: b2:39:4b:c5:1c:0b:0a:4e:6c:e7:a8:70:4f:3a:ef: 42:2f:47:86:b4:a7:09:81:fe:dd:c6:72:b0:e0:c9: 6c:87:cc:70:fb:e1:c2:ea:7b:f2:d2:fb:69:33:00: ed:d0:9e:ce:fe:6c:31:0f:b0:80:46:64:ef:42:69: b5:82:ac:53:8a:4d:d9:7e:19:2b:2b:23:4a:f9:cf: e7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C3:12:DD:C3:D7:0F:D5:59:91:77:40:71:1D:1C:7D:3B:00:49:6E X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:63:e1:f8:67:9c:12:e9:fd:85:73:2f:cb:14:fa:7f:49:a0: 78:ba:d0:51:a9:0b:fd:2d:ab:37:7d:9b:a7:a5:f3:a4:1e:82: 66:39:11:0c:aa:55:c0:d5:88:89:5e:39:4c:da:7a:93:4d:5e: 21:0b:ae:47:46:2b:9f:d4:a9:0d:7b:44:52:bc:02:df:9e:9d: 37:fb:a5:4e:b8:25:04:a9:79:af:48:68:e2:e8:54:f4:3f:5b: af:5d:cc:36:5a:8e:5e:fb:6f:09:12:51:a5:5a:2b:6b:e0:ae: 7e:69:5b:d0:16:e6:ed:00:97:4e:d3:c0:27:fe:51:c0:56:30: ff:dc:4c:60:47:4b:76:af:72:b6:9e:2a:19:30:98:14:76:39: 89:a7:05:3f:87:f5:4f:f1:3c:5c:fc:88:22:cc:57:4f:c1:d2: 41:ef:79:ec:42:0a:82:ac:f4:3a:f4:f1:8a:f4:ab:bf:d7:d1: 8f:cf:6a:c1:7e:c5:ca:ee:0d:56:64:60:7b:42:83:bb:b4:92: 8e:68:b2:50:11:76:58:6e:c2:58:0a:08:13:9d:6b:98:c0:15: e4:e2:01:f1:02:65:7a:52:9e:e5:8e:1e:a2:e1:34:6a:45:91: df:72:ee:0f:c0:9a:bf:33:89:3d:89:8c:22:99:82:4d:b6:ad: 99:ab:b6:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjUwNTEwMTQ0NDI5WhcNMjUwNTE3MTQ0NDI5WjAYMRYwFAYD VQQDEw02ODFmNjY0ZC1jMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47TXbejR+ujLAH0Gitp3MGrMAAtxcDzxEzWqgBzw8gFdKOyjW9pH6h4d43a0 D4WnM0ohMi6EmzUJPajh8LZ1V/j9y464Fx7leIfvhGfMdjJSbk9Qgre7qqzg29s6 gWHjq5B5p9zBknk+o2857CXUUMJHOzL0MoBW31Eid1CVZ1ADV/MBdbf4SHl4WVRh uEe7a5vvM/i9QVc1aXFgDSksYgtmJ59hX8pq5jPDrq3EOc5dbn+yOUvFHAsKTmzn qHBPOu9CL0eGtKcJgf7dxnKw4Mlsh8xw++HC6nvy0vtpMwDt0J7O/mwxD7CARmTv Qmm1gqxTik3ZfhkrKyNK+c/n7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/DEt3D 1w/VWZF3QHEdHH07AEluMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARY+H4Z5wS6f2Fcy/LFPp/SaB4utBRqQv9Las3fZunpfOkHoJmOREM qlXA1YiJXjlM2nqTTV4hC65HRiuf1KkNe0RSvALfnp03+6VOuCUEqXmvSGji6FT0 P1uvXcw2Wo5e+28JElGlWitr4K5+aVvQFubtAJdO08An/lHAVjD/3ExgR0t2r3K2 nioZMJgUdjmJpwU/h/VP8Txc/IgizFdPwdJB73nsQgqCrPQ69PGK9Ku/19GPz2rB fsXK7g1WZGB7QoO7tJKOaLJQEXZYbsJYCggTnWuYwBXk4gHxAmV6Up7ljh6i4TRq RZHfcu4PwJq/M4k9iYwimYJNtq2Zq7an -----END CERTIFICATE-----Generated at Sun May 11 22:32:46 2025 by rpki-client